Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
File:                     gHcJ57DvuhJwJcg-XTGUxxukKMM.mft (raw, json)
Hash identifier:          gS4pG0QYVc5bVBAX459FUbGqgGe6JrBgztsUA6kfgcY=
Subject key identifier:   DD:57:B6:19:C1:42:0A:DE:3C:73:1C:82:DE:F4:11:C5:F4:DD:B1:4E
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Certificate issuer:       /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial:       019A4FD035988BE30CD398C945B9F1797582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
Manifest number:          1715
Signing time:             Tue 04 Nov 2025 17:00:36 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:36 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:36 +0000
Files and hashes:         1: DurIZqoPKpw9LYGIPBrHPFq3LHw.roa (hash: zhg8WLRUrYe0q7NH9Wz8ueiA39mg7KprcnCZzHNNbsw=)
                          2: PnB8IMDITEDpen2OPTOxZTtueZw.roa (hash: qeR+1XSa8d/i/SIsn+15UPdwoIkYRW0OqLmRrfqzRas=)
                          3: gHcJ57DvuhJwJcg-XTGUxxukKMM.crl (hash: Tdpx83oJtZfA2cX6fM8l4j/GuyXARlArrRksE7qDsJQ=)
                          4: n307rGiwYsk1vOiGMRbS2fV0BSk.roa (hash: tlfldYKCmk1Ckto3uCUJi3f86MeyWZSU+wFP+RVK1Ew=)
                          5: vTNM4m6CbUwbrvUjHBwBVw0_vYs.roa (hash: 7BbpPre0ZtLQJ0mFYOMZGVaoQeJskvISu8hLB2sHUnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:d0:35:98:8b:e3:0c:d3:98:c9:45:b9:f1:79:75:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
        Validity
            Not Before: Nov  4 17:00:36 2025 GMT
            Not After : Nov  5 17:00:36 2025 GMT
        Subject: CN=dd57b619c1420ade3c731c82def411c5f4ddb14e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:99:92:8e:99:0e:b3:c4:40:b5:c5:9b:23:
                    65:b8:58:05:18:6d:80:e3:cd:0a:ed:24:1b:14:01:
                    ef:56:1b:da:ae:7d:27:41:e7:7f:2c:66:6c:fd:2f:
                    a9:ab:c7:bf:da:94:51:75:6a:29:17:26:5b:1e:13:
                    d6:43:36:d7:bf:16:01:af:62:de:93:b5:1e:ef:91:
                    83:5d:31:ab:e4:15:4f:60:02:32:af:61:eb:8b:c4:
                    6c:8b:80:3d:c1:d3:a5:a6:e4:d0:90:c2:df:35:c4:
                    91:22:18:15:c7:8a:37:76:50:43:cb:2a:d5:f4:6f:
                    f8:2b:f2:d7:ba:02:8d:f4:9e:fa:e5:65:d4:86:1e:
                    b2:a7:05:08:98:d2:32:2f:3f:2f:15:c9:9d:c0:ad:
                    27:32:a8:e3:11:a4:e6:ea:9a:b3:4c:28:44:46:f8:
                    73:4c:21:75:fd:73:e0:cf:75:4e:2a:49:49:7a:00:
                    5b:38:ba:04:d9:46:6f:b7:9c:f7:60:05:0c:8d:ec:
                    16:09:b5:cf:71:2e:45:24:be:4b:f8:c1:89:20:9e:
                    f6:96:93:2e:6a:e3:d0:76:03:1d:5a:41:c9:a9:6c:
                    b7:66:46:dd:08:04:1a:51:b9:0b:af:77:ed:17:e8:
                    6d:24:c2:21:ed:a2:6b:eb:98:84:8c:94:cd:64:de:
                    d2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:57:B6:19:C1:42:0A:DE:3C:73:1C:82:DE:F4:11:C5:F4:DD:B1:4E
            X509v3 Authority Key Identifier:
                keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f8:af:c6:b6:88:bf:5b:0e:37:99:bf:98:c5:21:2f:31:f2:
         b9:46:88:4c:a6:96:07:f7:3e:54:da:80:fc:fd:b3:9f:90:fd:
         00:6c:c1:63:a7:be:8c:dd:07:10:19:b1:4d:9a:2d:62:23:8d:
         98:d5:56:ae:f3:a4:bf:4f:d4:58:df:fc:45:fa:db:8d:13:7b:
         26:c5:fa:4f:f4:62:ca:8f:8d:b7:4b:0c:7a:18:6c:36:28:84:
         59:96:d3:51:47:9b:fa:74:fd:a0:32:0d:96:90:f0:69:7d:b4:
         e9:51:4c:18:f3:ff:e8:e4:04:52:c9:a3:29:82:67:08:cc:e9:
         1d:a3:40:ed:bb:73:0e:9b:f8:21:c8:8c:18:01:a4:b9:3b:81:
         06:ab:bc:14:74:d9:15:ef:35:ae:69:65:36:78:57:14:03:56:
         b4:f9:a9:57:6b:c2:0c:c7:ad:39:7c:63:a5:02:84:f9:01:43:
         98:a8:b5:01:b5:06:05:41:e5:a1:0f:a0:37:d7:58:71:4c:35:
         e9:a4:35:09:f3:f8:97:90:8f:40:fb:cc:60:47:59:d5:15:c6:
         3d:01:a9:88:47:60:c2:92:c3:5d:36:17:37:fd:8d:48:7f:57:
         cd:39:6f:4a:8a:e0:4e:22:fc:d5:20:25:b6:dc:4d:8d:49:b2:
         21:be:eb:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0DWYi+MM05jJRbnxeXWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNzcwOWU3YjBlZmJhMTI3MDI1YzgzZTVkMzE5NGM3MWJh
NDI4YzMwHhcNMjUxMTA0MTcwMDM2WhcNMjUxMTA1MTcwMDM2WjAzMTEwLwYDVQQD
EyhkZDU3YjYxOWMxNDIwYWRlM2M3MzFjODJkZWY0MTFjNWY0ZGRiMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG6Zko6ZDrPEQLXFmyNluFgFGG2A
480K7SQbFAHvVhvarn0nQed/LGZs/S+pq8e/2pRRdWopFyZbHhPWQzbXvxYBr2Le
k7Ue75GDXTGr5BVPYAIyr2Hri8Rsi4A9wdOlpuTQkMLfNcSRIhgVx4o3dlBDyyrV
9G/4K/LXugKN9J765WXUhh6ypwUImNIyLz8vFcmdwK0nMqjjEaTm6pqzTChERvhz
TCF1/XPgz3VOKklJegBbOLoE2UZvt5z3YAUMjewWCbXPcS5FJL5L+MGJIJ72lpMu
auPQdgMdWkHJqWy3ZkbdCAQaUbkLr3ftF+htJMIh7aJr65iEjJTNZN7SrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1XthnBQgrePHMcgt70EcX03bFOMB8GA1UdIwQY
MBaAFIB3Ceew77oScCXIPl0xlMcbpCjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgt
YmU5YWQyYmY3MjVmLzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgtYmU5YWQyYmY3MjVm
LzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovivxraI
v1sON5m/mMUhLzHyuUaITKaWB/c+VNqA/P2zn5D9AGzBY6e+jN0HEBmxTZotYiON
mNVWrvOkv0/UWN/8RfrbjRN7JsX6T/Riyo+Nt0sMehhsNiiEWZbTUUeb+nT9oDIN
lpDwaX206VFMGPP/6OQEUsmjKYJnCMzpHaNA7btzDpv4IciMGAGkuTuBBqu8FHTZ
Fe81rmllNnhXFANWtPmpV2vCDMetOXxjpQKE+QFDmKi1AbUGBUHloQ+gN9dYcUw1
6aQ1CfP4l5CPQPvMYEdZ1RXGPQGpiEdgwpLDXTYXN/2NSH9XzTlvSorgTiL81SAl
ttxNjUmyIb7rtA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:33 2025 by rpki-client