Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          RMVoEZiQHyQTJj9i1plEFrUiElFzRass/QOkPoWDrNA=
Subject key identifier:   05:46:F1:B4:4E:FF:CA:F4:C5:8C:CF:55:A7:C5:58:67:87:D4:EB:B9
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       019A51BE65F6747641547DB5E8005AD8FF84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          1728
Signing time:             Wed 05 Nov 2025 02:00:23 +0000
Manifest this update:     Wed 05 Nov 2025 02:00:23 +0000
Manifest next update:     Thu 06 Nov 2025 02:00:23 +0000
Files and hashes:         1: HMGH1OixlUbIZln6UuRHK_JoRTM.roa (hash: hIobepQhJMDuyYwWr9rOBNqOIvasbF7MFvvQPTjZKdk=)
                          2: PQ45AYuoXrKgjYd4a2nYqs6hfn8.roa (hash: 7Md1PLbDzWkJqH/gps7rzdw/URXMoRhj3yufH4c5pmc=)
                          3: XXKuildCsFJXdNyCwBMrowurkY0.roa (hash: NXW1f3EG3KW4h6xADEdnRgY4ZNLFSP48OU6WesEP2Jo=)
                          4: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: 2hHZFmeJJiYlDs+MkLGG+ztpv5ve188MkxBBVzF9nlQ=)
                          5: pjx3rNTZc8zgxWfuwXBOXgS3sqk.roa (hash: WRGBj9YhrJQ6r6myfQ5P/R+NIt879XmbiNbiLcGeJP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:65:f6:74:76:41:54:7d:b5:e8:00:5a:d8:ff:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: Nov  5 02:00:23 2025 GMT
            Not After : Nov  6 02:00:23 2025 GMT
        Subject: CN=0546f1b44effcaf4c58ccf55a7c5586787d4ebb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:14:54:f9:29:0f:b0:97:11:cb:ff:92:4d:c9:
                    56:3a:23:b6:19:ea:40:c4:2a:2a:31:78:ee:89:8e:
                    80:ea:6a:62:dc:94:19:6e:e4:8a:f8:cb:42:37:a8:
                    b6:df:3b:65:f9:2e:5f:c8:b7:6b:57:fe:f4:67:07:
                    aa:59:4d:a2:57:63:43:8e:bd:2b:e6:ca:a3:cf:22:
                    92:54:6b:0e:aa:ef:7b:70:c6:32:af:0e:59:8f:ae:
                    45:43:c6:bf:51:fe:eb:29:d9:25:d5:94:07:4a:d8:
                    b2:ff:06:6a:5c:e5:57:21:25:43:85:ab:d0:0d:6e:
                    1b:cc:c3:7f:7b:23:7a:05:63:8c:45:77:8c:2b:f3:
                    b9:67:67:93:ab:d4:9d:f6:95:35:4d:1c:0b:40:43:
                    72:f7:67:14:c7:be:41:f7:dd:b0:43:1e:80:01:a5:
                    33:f3:e6:e4:cf:f5:c7:a9:ea:73:24:ed:27:19:01:
                    27:90:a8:c8:8b:c4:4f:d4:47:a9:fc:17:3e:3d:d9:
                    8c:08:06:79:78:4b:2f:34:57:13:32:3e:a3:e4:c6:
                    7f:8a:67:b6:a2:58:6f:a6:d0:02:9a:69:9e:6c:f7:
                    f0:85:9d:9e:1e:92:9a:66:04:d2:58:6e:0d:fe:0e:
                    28:17:93:7f:0e:66:e7:6d:99:f8:cf:68:50:0a:5d:
                    7d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:46:F1:B4:4E:FF:CA:F4:C5:8C:CF:55:A7:C5:58:67:87:D4:EB:B9
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:9f:de:27:b5:a2:61:a5:2f:39:aa:b3:e4:c1:ec:02:24:
         3d:3d:e3:4d:36:96:6e:0d:0a:81:94:c7:05:5b:3c:b9:c1:2a:
         d1:dd:0f:9b:6f:0c:97:a5:49:59:74:84:6f:52:d9:d0:f3:a0:
         72:49:de:b0:0a:2e:03:2e:66:48:65:39:07:5b:0c:ea:87:4a:
         11:6a:c9:00:e8:0f:65:20:ec:4b:7b:ad:72:e5:53:b4:98:0b:
         43:2a:40:30:58:2c:54:9a:14:28:cf:68:5e:c2:71:6c:27:1d:
         88:2b:67:e5:39:88:cc:16:cf:93:fa:19:d1:20:54:b6:c3:4a:
         4a:de:00:8e:67:45:91:df:c2:c3:0c:94:6b:01:35:d5:9a:9f:
         a8:80:3e:d3:69:2c:79:12:bc:e8:6b:43:37:0b:2b:29:4f:23:
         b9:1b:d4:d6:ea:d4:09:21:fc:81:c1:b0:e0:e2:81:ed:18:92:
         21:ce:79:e2:fa:3d:a5:54:da:48:8d:a9:4e:bb:df:15:87:8f:
         20:4a:22:af:64:72:8c:44:3e:2e:9e:bb:9f:ca:7e:e9:a3:c8:
         bd:44:39:2f:b2:23:01:af:0a:77:62:77:36:d2:87:d8:62:22:
         3e:21:9a:4d:88:1a:ba:7f:51:a5:cf:4c:64:93:b3:13:84:67:
         43:e4:68:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvmX2dHZBVH216ABa2P+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Zjg0MzYwMDNkMzc2MDIwMjZiNjU1MzE3NTVjYThmY2Qz
MWJlZDIwHhcNMjUxMTA1MDIwMDIzWhcNMjUxMTA2MDIwMDIzWjAzMTEwLwYDVQQD
EygwNTQ2ZjFiNDRlZmZjYWY0YzU4Y2NmNTVhN2M1NTg2Nzg3ZDRlYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hRU+SkPsJcRy/+STclWOiO2GepA
xCoqMXjuiY6A6mpi3JQZbuSK+MtCN6i23ztl+S5fyLdrV/70ZweqWU2iV2NDjr0r
5sqjzyKSVGsOqu97cMYyrw5Zj65FQ8a/Uf7rKdkl1ZQHStiy/wZqXOVXISVDhavQ
DW4bzMN/eyN6BWOMRXeMK/O5Z2eTq9Sd9pU1TRwLQENy92cUx75B992wQx6AAaUz
8+bkz/XHqepzJO0nGQEnkKjIi8RP1Eep/Bc+PdmMCAZ5eEsvNFcTMj6j5MZ/ime2
olhvptACmmmebPfwhZ2eHpKaZgTSWG4N/g4oF5N/DmbnbZn4z2hQCl199wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVG8bRO/8r0xYzPVafFWGeH1Ou5MB8GA1UdIwQY
MBaAFKT4Q2AD03YCAmtlUxdVyo/NMb7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQt
MjdiZjgzY2RlZDZiLzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQtMjdiZjgzY2RlZDZi
LzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCef3ie1
omGlLzmqs+TB7AIkPT3jTTaWbg0KgZTHBVs8ucEq0d0Pm28Ml6VJWXSEb1LZ0POg
cknesAouAy5mSGU5B1sM6odKEWrJAOgPZSDsS3utcuVTtJgLQypAMFgsVJoUKM9o
XsJxbCcdiCtn5TmIzBbPk/oZ0SBUtsNKSt4AjmdFkd/CwwyUawE11ZqfqIA+02ks
eRK86GtDNwsrKU8juRvU1urUCSH8gcGw4OKB7RiSIc554vo9pVTaSI2pTrvfFYeP
IEoir2RyjEQ+Lp67n8p+6aPIvUQ5L7IjAa8Kd2J3NtKH2GIiPiGaTYgaun9Rpc9M
ZJOzE4RnQ+RoWw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:06:06 2025 by rpki-client