Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          DCjzSyuqr+1+F1cKOXhz7KjWezc5VyzL+67uqlsL64Y=
Subject key identifier:   80:09:6B:19:DE:C5:92:87:2B:76:39:CD:C1:68:B5:DE:19:FC:C3:42
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       019A522C58B74F06467CD05150BFEBB01B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          1712
Signing time:             Wed 05 Nov 2025 04:00:29 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:29 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:29 +0000
Files and hashes:         1: ZYQH8Odgs6j1zgDGSFJsI2Ck79M.roa (hash: kZC3BUi9IJGxujxTtEudY5sD/lL78MLQwa1Gtt8Q7zA=)
                          2: ejmalSfr1tk53rbyCCEzLQB9ZzM.roa (hash: g7L2imx6UGUuOAuG6UHNk4qxo7a783+bs7b/1OA2UdA=)
                          3: l0wAbULeVazPwYlU9T-Fs3m4VN0.roa (hash: DZ6o3hO1cP2UGjoUI60lf4xxGDkyAXhO8s2og9CadCc=)
                          4: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: 6kQH4/ff/U0wmVzoZnYTUdg+1AhBUz+mZIKldXMl9yA=)
                          5: wk5e4hIcd56Z58a_bsc7eOFpvEo.roa (hash: rW3zDMHLagp1fBqXsKbxwNvVG019sDcCbQQDsBMyiNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:58:b7:4f:06:46:7c:d0:51:50:bf:eb:b0:1b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Nov  5 04:00:29 2025 GMT
            Not After : Nov  6 04:00:29 2025 GMT
        Subject: CN=80096b19dec592872b7639cdc168b5de19fcc342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:83:a5:63:f1:be:41:19:fa:47:5f:0b:bc:
                    ba:00:16:0f:e7:9c:ea:8c:8f:e4:58:31:34:b3:a5:
                    9d:d8:53:09:dd:f1:7b:ac:d8:d3:8d:2e:e2:e2:80:
                    81:6d:20:38:f2:b6:51:52:3a:fa:77:77:98:9e:e3:
                    27:fb:15:22:e0:30:2d:08:61:86:55:67:2d:73:47:
                    05:6c:c6:39:30:e7:3a:55:12:57:37:4f:36:84:b2:
                    93:62:07:72:d4:a9:bd:66:31:8f:1b:8c:f3:ce:11:
                    9d:ab:56:ba:8b:59:9e:b2:25:ab:c3:77:7d:9c:9c:
                    cd:4d:59:ba:65:6b:e0:b2:29:31:c6:29:38:3e:fe:
                    2e:b1:0c:cd:5e:e1:de:7c:76:35:99:21:47:7a:bf:
                    22:e0:b4:5a:49:41:08:c2:6a:36:5d:a9:5c:77:b0:
                    20:79:cf:81:72:1f:c2:35:6c:3f:6f:9d:0e:11:64:
                    73:db:14:1c:e4:c2:0a:42:57:5e:36:fe:f0:f7:72:
                    89:ec:bf:3b:f1:5a:3b:04:48:a5:49:7f:e7:5d:c2:
                    0a:f6:77:72:98:cc:4e:c0:32:ae:80:92:54:6a:8b:
                    3c:f0:e2:71:05:16:a3:fb:42:fa:f8:84:fe:44:ba:
                    c6:94:68:e5:10:17:f4:2d:eb:06:26:46:2b:0a:4a:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:09:6B:19:DE:C5:92:87:2B:76:39:CD:C1:68:B5:DE:19:FC:C3:42
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:55:e6:73:18:86:f0:08:b1:8e:c9:eb:d0:d6:e1:b0:2a:6b:
         49:95:06:0c:65:de:66:96:7e:1c:a8:87:02:92:8d:09:90:aa:
         df:13:92:0a:6e:c6:48:ed:47:9d:e0:04:d6:70:23:f3:eb:a6:
         5a:25:23:0b:54:25:a6:fd:bd:2b:b8:41:b4:d2:da:6a:39:50:
         b8:03:54:78:a8:11:73:db:78:f6:2d:9c:ad:38:75:70:2f:4d:
         6e:ab:e2:10:85:f6:24:06:20:bf:ca:04:bb:5b:ed:18:df:95:
         f0:5b:93:c9:8e:5a:be:00:f2:8b:8a:fe:7d:a3:f1:8b:10:c8:
         35:ac:bc:eb:43:59:c7:ca:53:0c:73:93:c0:0b:54:4d:f8:84:
         2d:b1:ec:01:07:74:0f:a7:3a:96:5b:d5:de:4d:b5:15:5f:20:
         d1:f4:d8:ff:e4:1f:e7:8c:f1:d8:12:14:85:88:dc:0d:be:b0:
         09:32:76:d9:50:a2:f6:44:3c:cb:e4:20:5e:09:77:cf:a8:b4:
         b7:9c:03:f8:fc:54:b2:a3:aa:82:69:24:dd:7e:49:7d:17:b0:
         c4:ba:a0:29:9d:9d:a8:86:fb:86:f5:4d:4c:3e:d8:6e:b3:30:
         a3:7b:d0:c7:a0:30:c7:1c:05:da:d5:34:02:05:e8:bb:30:61:
         86:e4:01:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLFi3TwZGfNBRUL/rsBsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliN2QyNDQxNmFhOGE0NzhiM2VkMzZlMmU2NTg1NWQ0MjI1
OWQ5ZWUwHhcNMjUxMTA1MDQwMDI5WhcNMjUxMTA2MDQwMDI5WjAzMTEwLwYDVQQD
Eyg4MDA5NmIxOWRlYzU5Mjg3MmI3NjM5Y2RjMTY4YjVkZTE5ZmNjMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuWDpWPxvkEZ+kdfC7y6ABYP55zq
jI/kWDE0s6Wd2FMJ3fF7rNjTjS7i4oCBbSA48rZRUjr6d3eYnuMn+xUi4DAtCGGG
VWctc0cFbMY5MOc6VRJXN082hLKTYgdy1Km9ZjGPG4zzzhGdq1a6i1mesiWrw3d9
nJzNTVm6ZWvgsikxxik4Pv4usQzNXuHefHY1mSFHer8i4LRaSUEIwmo2Xalcd7Ag
ec+Bch/CNWw/b50OEWRz2xQc5MIKQldeNv7w93KJ7L878Vo7BEilSX/nXcIK9ndy
mMxOwDKugJJUaos88OJxBRaj+0L6+IT+RLrGlGjlEBf0LesGJkYrCkolJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAJaxnexZKHK3Y5zcFotd4Z/MNCMB8GA1UdIwQY
MBaAFJt9JEFqqKR4s+024uZYVdQiWdnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYt
ZWYzYmJiMDU2NTVlLzEvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYjhmMmEtMGFiZC00ZmZiLTgyZjYtZWYzYmJiMDU2NTVl
LzEvbTMwa1FXcW9wSGl6N1RiaTVsaFYxQ0paMmU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVXmcxiG
8Aixjsnr0NbhsCprSZUGDGXeZpZ+HKiHApKNCZCq3xOSCm7GSO1HneAE1nAj8+um
WiUjC1Qlpv29K7hBtNLaajlQuANUeKgRc9t49i2crTh1cC9NbqviEIX2JAYgv8oE
u1vtGN+V8FuTyY5avgDyi4r+faPxixDINay860NZx8pTDHOTwAtUTfiELbHsAQd0
D6c6llvV3k21FV8g0fTY/+Qf54zx2BIUhYjcDb6wCTJ22VCi9kQ8y+QgXgl3z6i0
t5wD+PxUsqOqgmkk3X5JfRewxLqgKZ2dqIb7hvVNTD7YbrMwo3vQx6AwxxwF2tU0
AgXouzBhhuQBNg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:52:49 2025 by rpki-client