Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
File:                     mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json)
Hash identifier:          EHlsFcgarApnGisI5uXxJf0ntMtxAiiK4mp5IQNH94E=
Subject key identifier:   AF:8F:D3:5D:F2:AC:9E:50:D5:40:54:93:30:C9:12:5C:45:AC:11:2A
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       019A4D3D2F18B566E49C2CE6CFFB420CC341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
Manifest number:          146B
Signing time:             Tue 04 Nov 2025 05:00:46 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:46 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:46 +0000
Files and hashes:         1: H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa (hash: dsjF1p38BaFKD263jEWfJjaYNNkjDPWbd8s7iYfLKf0=)
                          2: JcHfeJjlV--266gVunBono2FBL8.roa (hash: 2aTzeGR10hHIdC8F6ToLHNpA36FVSTfHDmf74LWIj/E=)
                          3: cDHrUcS9iBRAhgzIa-0oojwM6x8.roa (hash: a6MRkFy47YCdZj55gPSM8dAPHE9bL49pr9pcP+5WZCo=)
                          4: gQFR0ws8EpADtXwJYL1_rKqtUCU.roa (hash: O/ujjDYhXza5+3b/lt0kt/wL12KlNYtlZgn4DDp272Q=)
                          5: ipnQ83UpKa8sWrTXie04nVeOWrE.roa (hash: LCyjANuJcWqupF1L+w0MaO/qngWjk1y0gHyBxfWyWgs=)
                          6: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: djdi+/q7Ny4SxVNcTnlg4xBUryMvWl2iVpfuMpfiTgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:2f:18:b5:66:e4:9c:2c:e6:cf:fb:42:0c:c3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Nov  4 05:00:46 2025 GMT
            Not After : Nov  5 05:00:46 2025 GMT
        Subject: CN=af8fd35df2ac9e50d540549330c9125c45ac112a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:16:67:de:7f:30:9e:3c:d4:98:5f:a7:6b:
                    54:9b:54:9d:fc:a8:37:91:ac:4f:cd:22:c7:ac:21:
                    8d:76:ca:5b:05:5b:e6:83:90:46:c7:f6:36:22:98:
                    e4:0c:99:b7:d4:78:ab:54:4e:34:86:af:41:c1:74:
                    5a:8b:48:af:67:ab:a8:d4:4b:1f:29:ce:df:59:2c:
                    5a:f7:62:1b:a3:5a:e1:f5:bd:ac:64:23:16:f0:eb:
                    b0:79:4d:a3:e8:9a:9b:a5:50:31:bd:cb:80:84:f8:
                    32:aa:df:2d:1e:85:7e:f1:71:e0:80:58:f9:db:0f:
                    c0:ee:4c:7f:3d:89:48:35:09:9b:8c:12:3d:86:a6:
                    1c:33:91:18:12:b1:2e:b3:62:88:c3:7a:24:80:67:
                    66:c0:78:0e:84:15:c2:f5:af:88:2e:cf:1e:42:4d:
                    ff:a3:4b:1c:51:15:e0:ab:93:5e:9e:f4:35:62:5e:
                    f1:61:59:da:a2:44:d1:18:74:81:eb:a2:cd:a1:57:
                    ab:0f:76:fa:67:3f:6d:14:65:ed:92:5a:1f:3c:f9:
                    82:6f:d3:83:be:65:0e:6b:ed:01:0b:75:98:26:9b:
                    95:86:77:dc:0f:a6:da:bc:a5:b4:5f:61:b5:89:db:
                    53:a1:f1:28:8d:78:f3:eb:bf:0a:03:df:a5:94:fa:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8F:D3:5D:F2:AC:9E:50:D5:40:54:93:30:C9:12:5C:45:AC:11:2A
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:8e:3c:0a:fa:e6:2a:b1:5e:91:8d:d2:f9:00:85:a7:3c:
         eb:5e:10:25:5b:39:17:d5:7e:47:97:62:a2:95:72:90:94:91:
         36:a8:32:7a:51:eb:a8:cc:d6:67:06:39:f6:d3:0a:01:f1:58:
         36:46:85:f5:4c:ed:6c:26:83:5c:fc:7c:3b:70:81:6d:e2:9d:
         09:ee:34:23:c4:41:f2:e0:ad:ac:dd:92:14:3b:a8:44:2d:c0:
         7f:19:88:75:6c:6d:76:ff:81:e1:71:42:71:c5:d3:41:23:9f:
         a4:28:39:09:a3:52:64:d7:e5:1f:c8:9f:36:df:e4:45:e9:69:
         46:7f:a6:26:34:61:a8:0c:95:1c:a3:0e:94:d1:33:7b:69:1d:
         90:01:f8:79:25:7b:8d:46:b3:f2:14:67:ef:67:3b:2c:12:3c:
         57:5e:64:39:f7:7d:4c:f1:0d:c0:7c:29:ea:ce:5d:bb:24:00:
         41:9e:44:2d:1e:75:5f:26:da:49:33:6c:0e:26:c4:8c:d1:ed:
         4d:b2:ed:e8:3c:64:31:aa:87:02:21:d4:3d:e4:90:28:77:0d:
         8e:67:ad:33:e9:0f:4d:10:c7:6e:ad:aa:af:c5:d7:7a:34:d1:
         9e:a0:af:f2:3c:c2:2a:ab:3e:6c:4b:7a:f3:f6:48:d6:f0:31:
         6a:c6:03:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPS8YtWbknCzmz/tCDMNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTJlNDkxYWFhNjU1YjYzMjRkYmNjMGNmZjAwYThkNjMx
OTEwNzYwHhcNMjUxMTA0MDUwMDQ2WhcNMjUxMTA1MDUwMDQ2WjAzMTEwLwYDVQQD
EyhhZjhmZDM1ZGYyYWM5ZTUwZDU0MDU0OTMzMGM5MTI1YzQ1YWMxMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+AWZ95/MJ481Jhfp2tUm1Sd/Kg3
kaxPzSLHrCGNdspbBVvmg5BGx/Y2IpjkDJm31HirVE40hq9BwXRai0ivZ6uo1Esf
Kc7fWSxa92Ibo1rh9b2sZCMW8OuweU2j6JqbpVAxvcuAhPgyqt8tHoV+8XHggFj5
2w/A7kx/PYlINQmbjBI9hqYcM5EYErEus2KIw3okgGdmwHgOhBXC9a+ILs8eQk3/
o0scURXgq5NenvQ1Yl7xYVnaokTRGHSB66LNoVerD3b6Zz9tFGXtklofPPmCb9OD
vmUOa+0BC3WYJpuVhnfcD6bavKW0X2G1idtTofEojXjz678KA9+llPoX2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+P013yrJ5Q1UBUkzDJElxFrBEqMB8GA1UdIwQY
MBaAFJgS5JGqplW2Mk28wM/wCo1jGRB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUt
ZGZmZTE3ZjNkYjU0LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8wZTdlZDMtNDhjYi00YWZlLThkMTUtZGZmZTE3ZjNkYjU0
LzEvbUJMa2thcW1WYll5VGJ6QXpfQUtqV01aRUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5+OPAr6
5iqxXpGN0vkAhac8614QJVs5F9V+R5diopVykJSRNqgyelHrqMzWZwY59tMKAfFY
NkaF9UztbCaDXPx8O3CBbeKdCe40I8RB8uCtrN2SFDuoRC3AfxmIdWxtdv+B4XFC
ccXTQSOfpCg5CaNSZNflH8ifNt/kRelpRn+mJjRhqAyVHKMOlNEze2kdkAH4eSV7
jUaz8hRn72c7LBI8V15kOfd9TPENwHwp6s5duyQAQZ5ELR51XybaSTNsDibEjNHt
TbLt6DxkMaqHAiHUPeSQKHcNjmetM+kPTRDHbq2qr8XXejTRnqCv8jzCKqs+bEt6
8/ZI1vAxasYDiQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:15 2025 by rpki-client