Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
File:                     js94ugJ10dO2SSqOnWEGE8Awahc.mft (raw, json)
Hash identifier:          T/nVsNi+p5BI4DZD1RWBBWzwvw2XEDkfrm6JX69sQ6Y=
Subject key identifier:   73:5E:79:09:2B:E4:EA:67:D6:14:C8:E4:B5:95:75:46:19:06:4B:A4
Authority key identifier: 8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17
Certificate issuer:       /CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
Certificate serial:       0199C5D8B6F4BD888938E0830FAD064CA3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
Manifest number:          0904
Signing time:             Wed 08 Oct 2025 22:02:18 +0000
Manifest this update:     Wed 08 Oct 2025 22:02:18 +0000
Manifest next update:     Thu 09 Oct 2025 22:02:18 +0000
Files and hashes:         1: GVAyVfy1LnNTQAefw_rQL5ko_Yg.roa (hash: 8dOBfbOxlnAECbl9CEWi1s85m74su/8sfXrqQYKg6QA=)
                          2: OsEP5zrk8wCDIDV1sx3jCXecCF4.roa (hash: +psaVX9NHe1+AmJSehIWVSsskGqMgo97ZOmLdrKAGgs=)
                          3: js94ugJ10dO2SSqOnWEGE8Awahc.crl (hash: Zv95cnqpgxtkrTSDOFi2ZR4Flxkn5kLeIf1B8Gp7fIA=)
                          4: kWqQsigWLE-Ov88YUeZJL-x7iCw.roa (hash: Ge/EMSQE9osHtx1/BzfNSCkBRWxNw3C0d8zRkadzqgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c5:d8:b6:f4:bd:88:89:38:e0:83:0f:ad:06:4c:a3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecf78ba0275d1d3b6492a8e9d610613c0306a17
        Validity
            Not Before: Oct  8 22:02:18 2025 GMT
            Not After : Oct  9 22:02:18 2025 GMT
        Subject: CN=735e79092be4ea67d614c8e4b595754619064ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:c3:54:11:86:e0:61:04:78:96:ea:c6:f1:
                    85:37:f1:6d:05:21:ba:1e:de:d6:bd:09:64:7f:18:
                    a0:6c:99:0b:b2:06:90:cc:bf:88:e6:09:18:b2:e5:
                    d7:9b:d0:3d:fe:78:fc:61:f7:db:1a:47:2e:57:ef:
                    47:9a:39:d9:f7:1a:7c:6c:27:c9:27:7c:9b:08:bf:
                    74:93:98:de:3a:38:84:6d:e7:8e:47:ce:95:88:63:
                    86:8c:68:89:a5:5b:29:e1:a8:cb:76:6b:ce:7e:de:
                    15:ec:87:a2:49:da:e1:74:2d:d4:76:66:30:ae:ad:
                    99:32:aa:c5:76:33:90:dc:64:68:83:5e:59:06:83:
                    5b:5c:13:48:f7:8c:d4:8d:f1:8a:35:f1:b7:1e:e2:
                    d2:39:e2:4c:16:be:6f:e8:41:aa:90:df:c8:2a:32:
                    4b:c1:3c:b6:68:9a:81:f2:f9:f0:1a:44:45:60:2d:
                    5a:fa:00:92:56:22:94:84:c4:3b:a3:fa:4e:c6:5c:
                    5b:5a:c4:ef:f7:80:fc:e9:44:f8:f6:e2:76:47:ea:
                    92:89:e9:d4:e1:13:9f:95:e8:89:50:18:cb:d7:a4:
                    29:9b:a7:36:fd:7c:06:ca:01:03:ae:ec:bd:01:63:
                    f0:b8:43:72:94:fe:cf:6c:dd:10:f6:4f:96:d7:71:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5E:79:09:2B:E4:EA:67:D6:14:C8:E4:B5:95:75:46:19:06:4B:A4
            X509v3 Authority Key Identifier:
                keyid:8E:CF:78:BA:02:75:D1:D3:B6:49:2A:8E:9D:61:06:13:C0:30:6A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/js94ugJ10dO2SSqOnWEGE8Awahc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b2a2dc-c076-45e1-bec4-2bbf8faa00ca/1/js94ugJ10dO2SSqOnWEGE8Awahc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f3:5c:d2:65:bd:55:d4:9f:40:b3:71:ae:a4:dd:4c:58:a2:
         98:74:ec:63:8f:43:1c:f8:8f:6e:f9:ed:e5:75:24:8c:45:53:
         e3:26:8c:7c:af:a3:5c:85:b8:bd:00:3b:72:5c:9d:dc:9b:69:
         ff:77:5f:ea:25:ea:ce:2c:4f:2c:cb:84:94:46:33:a3:43:bd:
         52:d8:c2:5c:c9:b3:1c:0a:0e:bf:fe:cf:e3:93:40:41:cf:aa:
         e5:17:bd:32:e8:79:b7:da:c0:d0:4d:a1:9a:b7:9a:4f:4b:96:
         b6:a9:77:4c:1a:58:2f:5c:8b:40:69:11:6f:b3:82:74:31:da:
         2b:4c:0d:d7:41:f6:67:03:05:fa:79:9d:46:b2:1d:71:e4:53:
         bd:70:b0:b5:93:9d:ab:ac:84:a5:e9:e6:96:44:b4:9a:2c:70:
         24:48:d9:2c:82:94:0f:62:d1:e7:b5:20:c2:22:7c:ed:40:4e:
         a0:56:58:1c:31:9a:ba:9f:9f:ce:4e:e3:76:0e:d1:f1:6e:03:
         48:22:dd:27:cb:fd:0d:b5:cb:b3:bf:dc:eb:d7:4f:76:a9:c4:
         90:d5:10:b7:5a:c3:dd:de:0e:0e:37:93:ea:8d:50:ae:d6:9b:
         0a:ee:4e:8e:cd:e8:ed:af:e6:8a:0e:94:86:7f:87:56:bf:39:
         ec:5f:92:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnF2Lb0vYiJOOCDD60GTKPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlY2Y3OGJhMDI3NWQxZDNiNjQ5MmE4ZTlkNjEwNjEzYzAz
MDZhMTcwHhcNMjUxMDA4MjIwMjE4WhcNMjUxMDA5MjIwMjE4WjAzMTEwLwYDVQQD
Eyg3MzVlNzkwOTJiZTRlYTY3ZDYxNGM4ZTRiNTk1NzU0NjE5MDY0YmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscvDVBGG4GEEeJbqxvGFN/FtBSG6
Ht7WvQlkfxigbJkLsgaQzL+I5gkYsuXXm9A9/nj8YffbGkcuV+9HmjnZ9xp8bCfJ
J3ybCL90k5jeOjiEbeeOR86ViGOGjGiJpVsp4ajLdmvOft4V7IeiSdrhdC3UdmYw
rq2ZMqrFdjOQ3GRog15ZBoNbXBNI94zUjfGKNfG3HuLSOeJMFr5v6EGqkN/IKjJL
wTy2aJqB8vnwGkRFYC1a+gCSViKUhMQ7o/pOxlxbWsTv94D86UT49uJ2R+qSienU
4ROfleiJUBjL16Qpm6c2/XwGygEDruy9AWPwuENylP7PbN0Q9k+W13GB9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNeeQkr5Opn1hTI5LWVdUYZBkukMB8GA1UdIwQY
MBaAFI7PeLoCddHTtkkqjp1hBhPAMGoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQt
MmJiZjhmYWEwMGNhLzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iMmEyZGMtYzA3Ni00NWUxLWJlYzQtMmJiZjhmYWEwMGNh
LzEvanM5NHVnSjEwZE8yU1NxT25XRUdFOEF3YWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPNc0mW9
VdSfQLNxrqTdTFiimHTsY49DHPiPbvnt5XUkjEVT4yaMfK+jXIW4vQA7clyd3Jtp
/3df6iXqzixPLMuElEYzo0O9UtjCXMmzHAoOv/7P45NAQc+q5Re9Muh5t9rA0E2h
mreaT0uWtql3TBpYL1yLQGkRb7OCdDHaK0wN10H2ZwMF+nmdRrIdceRTvXCwtZOd
q6yEpenmlkS0mixwJEjZLIKUD2LR57UgwiJ87UBOoFZYHDGaup+fzk7jdg7R8W4D
SCLdJ8v9DbXLs7/c69dPdqnEkNUQt1rD3d4ODjeT6o1QrtabCu5Ojs3o7a/mig6U
hn+HVr857F+S5g==
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:10:28 2025 by rpki-client