Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
File:                     egXqWYBflL4YUoIDm7ri-oqSU_U.mft (raw, json)
Hash identifier:          FQPkYXkNxVgoLdW0DfZYs2Y3/W5GyZ8kcCJK3L6hYDw=
Subject key identifier:   FA:BC:19:5A:07:B0:62:22:49:24:32:60:F3:4E:B0:01:00:89:2B:15
Authority key identifier: 7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5
Certificate issuer:       /CN=7a05ea59805f94be185282039bbae2fa8a9253f5
Certificate serial:       019A51BE20E0BFEC50E7532580D523228F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
Manifest number:          171B
Signing time:             Wed 05 Nov 2025 02:00:05 +0000
Manifest this update:     Wed 05 Nov 2025 02:00:05 +0000
Manifest next update:     Thu 06 Nov 2025 02:00:05 +0000
Files and hashes:         1: IfT3mv-srwgc4CQ7fQArEzebBBA.roa (hash: 95gb7vVhebJAmqOzG0YfdjEqberXj+/78wM2EUtK1Cc=)
                          2: M7L8Od19i3zBt1lIltsTIc1xDpY.roa (hash: Kdrd9VSOIQRz2qDd3ciFqvoijJdSk3rHZS6hc9xgTio=)
                          3: egXqWYBflL4YUoIDm7ri-oqSU_U.crl (hash: N8XMnge1Q01OHGRVIOZ2AoMqjTDMikDAx4kQIQKO28U=)
                          4: xlKFZ-V2mwLdduwCkt0hVKuSeMc.roa (hash: ZuaV3q0OgmaLrqgLObSDoZ2eNoEB+XGTiCr0RvXHj+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:20:e0:bf:ec:50:e7:53:25:80:d5:23:22:8f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a05ea59805f94be185282039bbae2fa8a9253f5
        Validity
            Not Before: Nov  5 02:00:05 2025 GMT
            Not After : Nov  6 02:00:05 2025 GMT
        Subject: CN=fabc195a07b0622249243260f34eb00100892b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:14:4e:b4:58:47:c6:c0:a7:9b:6d:4f:04:8b:
                    c8:1c:66:a3:02:3d:d1:19:58:4b:61:a1:df:2b:56:
                    45:ff:ee:d9:bd:bc:43:64:51:9e:6c:ec:b6:55:09:
                    11:b7:6d:a6:d6:0b:16:8e:67:65:0e:35:4a:a8:1a:
                    35:e5:3b:21:3d:3a:72:f2:c5:de:38:7e:12:ba:90:
                    c1:e2:47:b7:4f:8d:9a:41:58:84:0e:b8:fe:7e:79:
                    62:bc:d5:d6:b2:dc:80:12:8d:d2:a8:2e:ae:53:4c:
                    e3:35:b6:1d:67:a7:a5:aa:7b:1d:a5:70:7c:e4:a4:
                    22:1a:30:eb:4a:24:54:70:b6:2d:3e:ce:e1:02:b5:
                    09:99:70:cf:91:b4:07:a9:c2:b4:34:db:9d:a4:ee:
                    90:64:68:0b:4b:f5:7c:52:8c:eb:3e:85:5f:06:5c:
                    89:2b:b1:72:c4:84:b8:5a:3d:64:3d:17:18:df:a0:
                    a8:66:19:29:a4:48:46:59:ad:c3:2f:21:b4:7b:51:
                    79:da:a3:43:b1:85:02:ec:c2:c4:55:e6:6b:6e:89:
                    3d:15:c8:1c:e7:a2:25:27:88:94:57:91:c6:f6:16:
                    d5:b7:39:d3:db:f1:0b:42:1a:1d:e7:f5:20:cc:79:
                    78:23:c6:12:66:91:09:7c:7e:07:5c:de:14:1b:59:
                    57:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BC:19:5A:07:B0:62:22:49:24:32:60:F3:4E:B0:01:00:89:2B:15
            X509v3 Authority Key Identifier:
                keyid:7A:05:EA:59:80:5F:94:BE:18:52:82:03:9B:BA:E2:FA:8A:92:53:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egXqWYBflL4YUoIDm7ri-oqSU_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/egXqWYBflL4YUoIDm7ri-oqSU_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:1a:5f:46:aa:9a:7b:85:27:8e:8e:14:62:cd:84:19:d6:e2:
         42:31:a4:7b:2b:6d:03:3f:0a:1f:45:24:34:08:2b:40:2f:89:
         39:87:f9:23:1e:6d:44:7d:a6:c9:dd:41:08:68:fc:84:0b:65:
         9a:96:96:6f:ac:6d:0f:4a:c4:a5:9b:59:ca:93:61:cc:40:04:
         7d:53:8d:d7:15:97:ae:aa:f1:5f:30:2b:8f:7b:e1:2f:74:4b:
         32:f2:e0:8f:89:be:16:09:c6:ba:27:b5:a7:f3:8e:7d:87:a8:
         ed:ef:a1:62:7d:bd:87:b8:67:43:7b:87:de:41:be:84:c6:58:
         58:da:89:67:f4:c2:9b:cf:e7:51:fe:eb:a9:b1:ba:cb:25:3a:
         ab:3e:42:ab:36:50:9f:df:0c:c6:a3:dd:1b:69:61:5c:8b:25:
         42:27:f6:7f:2b:64:f5:e9:e1:94:46:3c:23:d3:01:27:f7:a1:
         29:3d:f5:76:15:2a:02:55:1b:a5:ff:d9:35:0c:6b:41:f4:2e:
         7b:82:fd:d4:82:d6:0c:12:f7:fe:bd:1e:dc:47:87:7c:6f:06:
         55:d0:06:17:3a:50:8f:67:0d:4e:6d:65:84:67:d3:a0:73:d0:
         81:a3:f3:b6:48:b3:cc:88:9b:80:da:af:7b:f8:80:ad:a1:cf:
         01:b1:75:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRviDgv+xQ51MlgNUjIo86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMDVlYTU5ODA1Zjk0YmUxODUyODIwMzliYmFlMmZhOGE5
MjUzZjUwHhcNMjUxMTA1MDIwMDA1WhcNMjUxMTA2MDIwMDA1WjAzMTEwLwYDVQQD
EyhmYWJjMTk1YTA3YjA2MjIyNDkyNDMyNjBmMzRlYjAwMTAwODkyYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBROtFhHxsCnm21PBIvIHGajAj3R
GVhLYaHfK1ZF/+7ZvbxDZFGebOy2VQkRt22m1gsWjmdlDjVKqBo15TshPTpy8sXe
OH4SupDB4ke3T42aQViEDrj+fnlivNXWstyAEo3SqC6uU0zjNbYdZ6elqnsdpXB8
5KQiGjDrSiRUcLYtPs7hArUJmXDPkbQHqcK0NNudpO6QZGgLS/V8UozrPoVfBlyJ
K7FyxIS4Wj1kPRcY36CoZhkppEhGWa3DLyG0e1F52qNDsYUC7MLEVeZrbok9Fcgc
56IlJ4iUV5HG9hbVtznT2/ELQhod5/UgzHl4I8YSZpEJfH4HXN4UG1lXMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPq8GVoHsGIiSSQyYPNOsAEAiSsVMB8GA1UdIwQY
MBaAFHoF6lmAX5S+GFKCA5u64vqKklP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWdYcVdZQmZsTDRZVW9JRG03cmktb3FTVV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jZjI0YmQtYzE1Yi00ODRjLTk3MzIt
MDRiMzgxM2YzYjNkLzEvZWdYcVdZQmZsTDRZVW9JRG03cmktb3FTVV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jZjI0YmQtYzE1Yi00ODRjLTk3MzItMDRiMzgxM2YzYjNk
LzEvZWdYcVdZQmZsTDRZVW9JRG03cmktb3FTVV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshpfRqqa
e4Unjo4UYs2EGdbiQjGkeyttAz8KH0UkNAgrQC+JOYf5Ix5tRH2myd1BCGj8hAtl
mpaWb6xtD0rEpZtZypNhzEAEfVON1xWXrqrxXzArj3vhL3RLMvLgj4m+FgnGuie1
p/OOfYeo7e+hYn29h7hnQ3uH3kG+hMZYWNqJZ/TCm8/nUf7rqbG6yyU6qz5CqzZQ
n98MxqPdG2lhXIslQif2fytk9enhlEY8I9MBJ/ehKT31dhUqAlUbpf/ZNQxrQfQu
e4L91ILWDBL3/r0e3EeHfG8GVdAGFzpQj2cNTm1lhGfToHPQgaPztkizzIibgNqv
e/iAraHPAbF1XQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:06 2025 by rpki-client