Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File:                     FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier:          eaAXkKQuqseHK8Zq+1EoC7ODK7iCxOjSJ//0fy0Hc9o=
Subject key identifier:   92:B9:C9:D5:14:BD:AC:D7:D4:A5:DA:B2:0B:64:91:04:8E:63:28:03
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer:       /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial:       019A5262EE7C732F2319F1F24B6C92D6FFF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number:          0892
Signing time:             Wed 05 Nov 2025 05:00:06 +0000
Manifest this update:     Wed 05 Nov 2025 05:00:06 +0000
Manifest next update:     Thu 06 Nov 2025 05:00:06 +0000
Files and hashes:         1: 2MEo2jMoegCH1A6pe5270kRxVBU.roa (hash: YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=)
                          2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: Z0+TPR/sR8ncrOpBRCNxfuoZM8eamX0GkFJOKUAFqSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:62:ee:7c:73:2f:23:19:f1:f2:4b:6c:92:d6:ff:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
        Validity
            Not Before: Nov  5 05:00:06 2025 GMT
            Not After : Nov  6 05:00:06 2025 GMT
        Subject: CN=92b9c9d514bdacd7d4a5dab20b6491048e632803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:8a:a3:e1:c6:61:74:2b:24:ba:89:e2:2a:
                    18:41:34:8b:e7:f5:68:05:ff:8b:3a:2f:27:ec:2b:
                    51:17:f2:b8:10:69:2f:b7:a9:6b:53:66:6c:e8:c4:
                    03:a3:d8:6b:73:34:4d:0a:9d:90:a7:3b:7e:68:ca:
                    69:e5:a5:5d:19:9b:e6:f3:bb:72:be:97:fe:b8:8f:
                    e6:5b:44:da:0c:91:db:11:9a:dd:55:00:0c:1f:bf:
                    37:57:c4:00:70:99:8c:e6:51:5a:a6:c4:8e:49:3c:
                    6d:12:ae:50:86:83:02:ef:b0:6c:ea:ba:46:c1:6d:
                    92:7d:5b:c2:c6:fe:14:6f:95:b1:7e:be:4e:35:bd:
                    7c:a1:32:ae:d8:28:0b:e7:86:24:28:2d:83:e3:a0:
                    41:32:59:eb:05:0e:bf:af:f0:36:ce:64:b2:93:cd:
                    d3:73:33:f2:96:f7:e8:d9:a5:91:87:c7:cd:6b:1d:
                    95:5a:2d:4f:3f:f8:d6:08:7e:bd:8f:53:9b:66:a7:
                    89:6f:01:cb:a6:7c:96:03:52:a0:7c:d6:5e:cf:cf:
                    d4:9a:c2:71:a4:c4:a3:90:87:3c:ec:06:74:99:79:
                    ce:b5:a2:8d:eb:d8:cb:bb:c3:15:90:94:89:73:7d:
                    b8:a9:6e:eb:56:90:18:7a:42:84:2d:f7:b4:18:fe:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B9:C9:D5:14:BD:AC:D7:D4:A5:DA:B2:0B:64:91:04:8E:63:28:03
            X509v3 Authority Key Identifier:
                keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:46:c9:9e:d5:99:59:76:59:22:1c:99:55:36:81:55:3b:9c:
         1e:d8:4d:92:35:be:a1:dc:ad:78:03:89:e0:6e:de:5a:e7:b3:
         b2:90:83:c5:83:38:a5:7f:50:c5:7a:71:40:15:8c:f6:46:3a:
         65:d5:12:5d:74:12:ab:6a:9b:f2:4b:53:52:9e:de:95:21:9f:
         ee:9d:5f:32:50:59:c3:79:cd:e1:80:aa:50:8e:81:38:0d:bf:
         9d:87:58:a1:84:d8:d4:62:58:b5:13:a0:19:5c:db:fd:77:ea:
         dc:c9:82:8f:dd:62:99:b2:cf:04:a2:d8:46:0e:08:fb:84:53:
         95:aa:9c:58:f4:ef:72:59:74:a8:3a:1e:bc:4b:49:8f:8c:dd:
         70:c3:17:f4:cd:46:0f:d9:4c:ae:8b:12:e4:a1:39:6f:3e:0e:
         42:d4:ec:07:a2:bf:e3:69:28:d2:f3:32:b8:44:cc:74:74:61:
         93:74:19:43:48:cc:56:4f:82:95:1d:1b:b7:c1:2d:c8:7c:40:
         e0:95:ee:b7:99:32:3f:32:b7:0f:c5:ee:29:5f:75:85:3f:f4:
         d3:a2:3b:6c:e5:82:3c:ce:cc:91:06:a8:de:21:90:8f:c1:c9:
         94:07:5c:57:b2:57:67:f9:c1:b1:ea:ae:f1:3e:68:27:5c:0d:
         25:db:a8:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYu58cy8jGfHyS2yS1v/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4
YmMwNWQwHhcNMjUxMTA1MDUwMDA2WhcNMjUxMTA2MDUwMDA2WjAzMTEwLwYDVQQD
Eyg5MmI5YzlkNTE0YmRhY2Q3ZDRhNWRhYjIwYjY0OTEwNDhlNjMyODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA016Ko+HGYXQrJLqJ4ioYQTSL5/Vo
Bf+LOi8n7CtRF/K4EGkvt6lrU2Zs6MQDo9hrczRNCp2Qpzt+aMpp5aVdGZvm87ty
vpf+uI/mW0TaDJHbEZrdVQAMH783V8QAcJmM5lFapsSOSTxtEq5QhoMC77Bs6rpG
wW2SfVvCxv4Ub5Wxfr5ONb18oTKu2CgL54YkKC2D46BBMlnrBQ6/r/A2zmSyk83T
czPylvfo2aWRh8fNax2VWi1PP/jWCH69j1ObZqeJbwHLpnyWA1KgfNZez8/UmsJx
pMSjkIc87AZ0mXnOtaKN69jLu8MVkJSJc324qW7rVpAYekKELfe0GP7H1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJK5ydUUvazX1KXasgtkkQSOYygDMB8GA1UdIwQY
MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt
Mzg1NDRjMmE4N2JiLzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji
LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkbJntWZ
WXZZIhyZVTaBVTucHthNkjW+odyteAOJ4G7eWuezspCDxYM4pX9QxXpxQBWM9kY6
ZdUSXXQSq2qb8ktTUp7elSGf7p1fMlBZw3nN4YCqUI6BOA2/nYdYoYTY1GJYtROg
GVzb/Xfq3MmCj91imbLPBKLYRg4I+4RTlaqcWPTvcll0qDoevEtJj4zdcMMX9M1G
D9lMrosS5KE5bz4OQtTsB6K/42ko0vMyuETMdHRhk3QZQ0jMVk+ClR0bt8EtyHxA
4JXut5kyPzK3D8XuKV91hT/006I7bOWCPM7MkQao3iGQj8HJlAdcV7JXZ/nBsequ
8T5oJ1wNJduopA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:00:59 2025 by rpki-client