Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          zERAcO0M+rEHtyncrZTLMNtIK4pBDHc6DXQdNisi7ao=
Subject key identifier:   5F:5B:CC:67:BF:B4:E6:80:F9:35:2E:6D:26:2A:1A:A0:81:C2:69:0D
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       019A4EF5677C662C21CB8758E7954BB4B6BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          092D
Signing time:             Tue 04 Nov 2025 13:01:36 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:36 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:36 +0000
Files and hashes:         1: JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa (hash: lyg6mL7hgbTWMhjKowvZCwiOw1BkDLdd336Z4BXH0aw=)
                          2: PY2GKalpJxh0rVeN3SNnaDuGcN8.roa (hash: SriQyHP0WB/8fwiUvKAdnNLXQ0snarIjG0cxw/V7C/w=)
                          3: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: iAmZrvTyJTeAzvNiWRf7Z7hR0Qc6SpNQ7QYi91QC140=)
                          4: numbWnJewpdlWjFsofSPwm7IG3g.roa (hash: 14YqjZz0f+0ogH+Jj76bMz/1yDXbVz5uWlMR4KVjJRU=)
                          5: psQBUc0pobHwdrhlOUZzj_GPEto.roa (hash: qru8ysHHH3C4jCMlszx1z613KVN+O1eNTXPzB5PAv+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:67:7c:66:2c:21:cb:87:58:e7:95:4b:b4:b6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Nov  4 13:01:36 2025 GMT
            Not After : Nov  5 13:01:36 2025 GMT
        Subject: CN=5f5bcc67bfb4e680f9352e6d262a1aa081c2690d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:fa:d6:0e:2d:ac:f2:47:79:b2:5b:23:eb:
                    ae:5d:ea:39:f0:3b:e5:7b:d4:2b:11:d1:17:3f:69:
                    cf:c2:5d:b7:29:a4:6c:86:f1:b8:4d:f1:d2:22:49:
                    5a:d4:db:6c:32:c8:43:14:a9:9e:fa:61:52:fd:de:
                    db:c6:77:04:15:76:09:1c:55:65:62:0c:ea:cb:cd:
                    09:bc:5a:00:24:ec:09:60:e5:8f:cc:7d:09:57:9a:
                    b7:4d:df:e2:d6:83:ab:da:49:8b:22:e3:19:74:ee:
                    96:80:cf:92:b7:ee:26:dd:42:ce:d0:d1:a6:87:49:
                    19:4e:ad:5f:e4:58:14:e9:79:ba:5f:7d:ed:ce:74:
                    6f:74:44:bb:a5:4d:28:c9:ce:e5:c3:10:e3:c3:7a:
                    09:f1:3c:1f:dd:ed:08:91:9b:76:ed:9e:0c:f0:bc:
                    5a:f3:07:de:b7:1a:8d:9d:82:ad:54:52:46:20:88:
                    31:fe:15:09:7f:58:df:43:f1:cc:ef:6b:77:4c:ca:
                    89:82:ec:27:9e:b0:50:84:08:33:2a:f5:fa:0f:1d:
                    01:24:94:d8:7e:40:61:da:a9:f4:af:8c:37:c1:b5:
                    36:f9:53:f0:db:33:cc:59:e4:44:7e:f6:dc:be:d8:
                    3b:93:89:5b:91:a6:22:a8:45:ba:00:8d:e9:44:56:
                    80:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5B:CC:67:BF:B4:E6:80:F9:35:2E:6D:26:2A:1A:A0:81:C2:69:0D
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:44:13:ed:11:0a:06:c4:79:69:c0:f9:c5:8b:99:88:40:7f:
         f1:3d:ee:7f:50:54:09:d8:97:08:db:a6:50:cb:c7:c6:99:6d:
         e0:60:f3:06:1f:c0:58:6e:6c:fb:2b:00:cb:0a:ea:b4:39:6d:
         9d:82:2c:24:78:92:89:a3:be:f0:07:13:c8:43:d2:e7:55:6b:
         93:80:86:2e:18:b1:cb:c9:9f:6c:90:07:6f:43:0f:a9:b2:32:
         c9:fb:40:a6:ee:34:e7:a4:0e:56:42:a4:e6:ae:02:21:f5:19:
         4d:02:da:a6:c2:dc:b9:1e:b9:4b:db:44:d7:8d:76:37:42:1b:
         bd:5f:e8:1f:70:b9:60:8f:05:fa:24:fa:bb:32:a1:32:98:e6:
         6b:3f:cf:8d:81:35:3b:0d:be:4e:0f:d6:1d:53:3d:19:88:03:
         64:48:e5:95:ce:86:4b:f1:cd:89:be:e8:d9:c5:58:6a:3a:d6:
         69:58:ef:a9:64:4c:a8:41:a4:3d:4c:5f:12:aa:4c:23:81:86:
         23:c2:ab:6f:ba:33:00:02:4b:e6:e9:bf:2b:de:c6:9f:15:94:
         6e:d9:dc:56:5d:b1:1c:4e:62:c5:be:19:27:93:d0:89:54:25:
         0c:2a:da:46:5b:b4:6a:b6:0f:44:a7:07:ed:b6:6c:80:42:7c:
         35:c8:88:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Wd8Ziwhy4dY55VLtLa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGUwZGE0ZjkxMDA3YjIyNDc2OGFjYjRkMTMxZjEyNTE3
ZDJiN2EwHhcNMjUxMTA0MTMwMTM2WhcNMjUxMTA1MTMwMTM2WjAzMTEwLwYDVQQD
Eyg1ZjViY2M2N2JmYjRlNjgwZjkzNTJlNmQyNjJhMWFhMDgxYzI2OTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08P61g4trPJHebJbI+uuXeo58Dvl
e9QrEdEXP2nPwl23KaRshvG4TfHSIkla1NtsMshDFKme+mFS/d7bxncEFXYJHFVl
Ygzqy80JvFoAJOwJYOWPzH0JV5q3Td/i1oOr2kmLIuMZdO6WgM+St+4m3ULO0NGm
h0kZTq1f5FgU6Xm6X33tznRvdES7pU0oyc7lwxDjw3oJ8Twf3e0IkZt27Z4M8Lxa
8wfetxqNnYKtVFJGIIgx/hUJf1jfQ/HM72t3TMqJguwnnrBQhAgzKvX6Dx0BJJTY
fkBh2qn0r4w3wbU2+VPw2zPMWeREfvbcvtg7k4lbkaYiqEW6AI3pRFaA6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9bzGe/tOaA+TUubSYqGqCBwmkNMB8GA1UdIwQY
MBaAFHmODaT5EAeyJHaKy00THxJRfSt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUt
NGZiNGVmOTFhODJmLzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUtNGZiNGVmOTFhODJm
LzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkQT7REK
BsR5acD5xYuZiEB/8T3uf1BUCdiXCNumUMvHxplt4GDzBh/AWG5s+ysAywrqtDlt
nYIsJHiSiaO+8AcTyEPS51Vrk4CGLhixy8mfbJAHb0MPqbIyyftApu4056QOVkKk
5q4CIfUZTQLapsLcuR65S9tE1412N0IbvV/oH3C5YI8F+iT6uzKhMpjmaz/PjYE1
Ow2+Tg/WHVM9GYgDZEjllc6GS/HNib7o2cVYajrWaVjvqWRMqEGkPUxfEqpMI4GG
I8Krb7ozAAJL5um/K97GnxWUbtncVl2xHE5ixb4ZJ5PQiVQlDCraRlu0arYPRKcH
7bZsgEJ8NciIgQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:35 2025 by rpki-client