Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
File:                     4hEKzOM6yFARyowi0gAWZuRbk3c.mft (raw, json)
Hash identifier:          xnsHMdFVmVoDG7E2lsWfYytYoMWkU09EbeMcL+4lVqs=
Subject key identifier:   54:DC:00:13:DA:5E:1E:CC:C4:43:03:F4:50:7E:74:37:3B:EE:8A:2A
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       019A21ADF85563D04C26E7D96C1B99BBFF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
Manifest number:          1703
Signing time:             Sun 26 Oct 2025 18:00:40 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:40 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:40 +0000
Files and hashes:         1: 4hEKzOM6yFARyowi0gAWZuRbk3c.crl (hash: AVUfpBwLOyYst57JPmlCgFPbwNLJ9/V2WwLeVVlPZNE=)
                          2: 6fR_eS1-S-5XOCu6-_w9WFRAsnM.roa (hash: QrWF8qdwleA9HW7Gs5bTLxZ2kKrxxkYNg+tfhj45HxE=)
                          3: EeuiVBHDBppbMbvhnK9cVO-GWuY.roa (hash: RibVRzvF2zG1KnABcO1H1cwM+0LZwhWIJrVmfB+N9ZY=)
                          4: JMkLxoa9gyb522lPudXUln-VtH8.roa (hash: HGRLs3/3xdKBB32Jm7MzBkeAQwnme0p6aKkTVOkrnLU=)
                          5: UdT52qeUwfKz4cUKsNmdkQLdPTw.roa (hash: Kck1eebPn1LOtIjWwJSFOCY1FX3byBpP9hqNzAg6lBY=)
                          6: feh72HR-_mrzGLz7VSpEFnXqaJo.roa (hash: LwnQ+vMA051C/u4c2Kzemun4LSgaDWuT73rcQZC4pSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ad:f8:55:63:d0:4c:26:e7:d9:6c:1b:99:bb:ff:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Oct 26 18:00:40 2025 GMT
            Not After : Oct 27 18:00:40 2025 GMT
        Subject: CN=54dc0013da5e1eccc44303f4507e74373bee8a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:29:0f:c8:fd:c6:00:9c:76:6e:62:34:a8:
                    e5:cb:14:22:91:18:26:88:7b:e1:4d:32:dc:c9:f1:
                    c4:c7:0d:05:be:3b:95:6d:33:cc:60:f7:3f:37:08:
                    74:0d:00:72:0e:6a:6d:7a:dc:f1:1c:ad:65:7f:57:
                    40:78:07:7d:d1:31:42:9d:2c:93:e2:e2:f4:fe:d7:
                    e6:e8:96:07:68:e2:2d:d0:d9:ce:da:00:86:dd:50:
                    3a:33:51:e6:12:51:b4:71:a6:71:90:61:03:f7:64:
                    0e:0c:42:b5:d0:1f:d4:81:d2:33:3d:b9:60:30:59:
                    ce:d2:e1:89:33:6d:47:b8:ac:82:38:c1:a9:32:d3:
                    88:5f:0a:61:81:85:5f:14:d4:03:92:57:c4:fb:d2:
                    74:c3:98:c8:6d:a3:98:e2:a6:07:94:b5:ff:a5:c7:
                    0c:5e:9f:8f:21:89:85:dd:34:ac:de:91:23:0c:ac:
                    14:0e:1d:39:55:d7:3d:e8:d1:84:4a:8f:08:68:f9:
                    75:6c:75:ee:37:fa:b9:c6:93:fc:d6:16:19:f6:bf:
                    7c:ba:16:dd:60:0a:d1:8c:52:16:5c:94:4b:f3:71:
                    78:3c:ee:ef:38:dd:c6:7e:2e:72:b2:0e:19:26:8f:
                    a6:71:28:9c:e9:38:b7:67:8f:5f:38:cf:ff:8b:83:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DC:00:13:DA:5E:1E:CC:C4:43:03:F4:50:7E:74:37:3B:EE:8A:2A
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:4f:c5:6d:4c:ce:77:4f:bf:56:b5:a4:55:14:1a:68:db:
         94:b3:a0:fe:1b:1a:f8:72:ae:8f:a6:f4:3d:0a:76:da:5a:98:
         93:ed:30:46:91:9a:84:65:9d:eb:76:ba:cf:3d:48:47:52:a6:
         7f:f9:0a:71:7e:01:1a:00:1c:f4:f4:bb:4d:ad:56:79:b1:d3:
         fb:e5:ce:06:ee:26:29:90:9e:1b:a1:8f:0d:a3:a6:11:e3:b7:
         29:af:04:f1:a7:91:ca:29:4f:7b:bf:b2:f6:20:21:76:1e:63:
         26:0f:2b:0b:5b:85:7f:0c:9a:e9:c2:b2:89:08:fb:a6:f5:6d:
         86:22:d0:96:97:cf:8f:4b:c7:ac:b0:dd:0b:22:60:97:1a:03:
         d9:24:e4:ef:9d:6f:98:96:d5:cb:af:5d:b4:11:10:0f:52:04:
         b7:1f:2a:71:36:c2:24:0d:7b:e9:79:ea:79:24:ec:58:d8:3c:
         f4:54:ce:c8:69:10:0b:43:1f:28:de:2b:1b:31:87:44:5e:da:
         26:b3:52:2d:13:9c:50:68:38:5c:15:4a:f4:4f:fe:c0:b2:25:
         5b:da:2c:4b:ca:f9:fa:bd:4e:65:1c:d5:c3:a5:a6:1f:f5:f1:
         51:8f:b8:f8:d1:e7:9f:75:95:a1:6a:68:75:d9:19:fd:c4:dd:
         9e:f4:4d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohrfhVY9BMJufZbBuZu/9EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTEwYWNjZTMzYWM4NTAxMWNhOGMyMmQyMDAxNjY2ZTQ1
YjkzNzcwHhcNMjUxMDI2MTgwMDQwWhcNMjUxMDI3MTgwMDQwWjAzMTEwLwYDVQQD
Eyg1NGRjMDAxM2RhNWUxZWNjYzQ0MzAzZjQ1MDdlNzQzNzNiZWU4YTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNIpD8j9xgCcdm5iNKjlyxQikRgm
iHvhTTLcyfHExw0FvjuVbTPMYPc/Nwh0DQByDmptetzxHK1lf1dAeAd90TFCnSyT
4uL0/tfm6JYHaOIt0NnO2gCG3VA6M1HmElG0caZxkGED92QODEK10B/UgdIzPblg
MFnO0uGJM21HuKyCOMGpMtOIXwphgYVfFNQDklfE+9J0w5jIbaOY4qYHlLX/pccM
Xp+PIYmF3TSs3pEjDKwUDh05Vdc96NGESo8IaPl1bHXuN/q5xpP81hYZ9r98uhbd
YArRjFIWXJRL83F4PO7vON3Gfi5ysg4ZJo+mcSic6Ti3Z49fOM//i4M7zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTcABPaXh7MxEMD9FB+dDc77ooqMB8GA1UdIwQY
MBaAFOIRCszjOshQEcqMItIAFmbkW5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEt
ZDMzZjA4ZjNhNDhkLzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEtZDMzZjA4ZjNhNDhk
LzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSNPxW1M
zndPv1a1pFUUGmjblLOg/hsa+HKuj6b0PQp22lqYk+0wRpGahGWd63a6zz1IR1Km
f/kKcX4BGgAc9PS7Ta1WebHT++XOBu4mKZCeG6GPDaOmEeO3Ka8E8aeRyilPe7+y
9iAhdh5jJg8rC1uFfwya6cKyiQj7pvVthiLQlpfPj0vHrLDdCyJglxoD2STk751v
mJbVy69dtBEQD1IEtx8qcTbCJA176XnqeSTsWNg89FTOyGkQC0MfKN4rGzGHRF7a
JrNSLROcUGg4XBVK9E/+wLIlW9osS8r5+r1OZRzVw6WmH/XxUY+4+NHnn3WVoWpo
ddkZ/cTdnvRNKw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:52 2025 by rpki-client