Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
File:                     5QGBXG-Y86K2GEr-vxjqNBvoguo.mft (raw, json)
Hash identifier:          KyjVCGe8klv7YNgKssABnDp/eHeBNyYRiwyLabl0hxE=
Subject key identifier:   EB:67:DA:9B:AE:C1:E8:34:A6:32:3B:D8:64:BF:61:F2:2F:98:B6:FA
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       019A0A811AD9F6973A2DB93403498AFD6B20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
Manifest number:          1729
Signing time:             Wed 22 Oct 2025 06:00:24 +0000
Manifest this update:     Wed 22 Oct 2025 06:00:24 +0000
Manifest next update:     Thu 23 Oct 2025 06:00:24 +0000
Files and hashes:         1: 43y7EOGBptoEQuKUeXgk6SpCiKM.roa (hash: JqRad2v+qIhbHewbO6BDiGvY7klaYPQyg0QWPHcgDXg=)
                          2: 5QGBXG-Y86K2GEr-vxjqNBvoguo.crl (hash: Sc0gaUV+1no3T3E3BBxbVO8sTtjujdgGt7il+/pXonY=)
                          3: H0nzbISenXARQ7LjMm13gCpgBwU.roa (hash: lx2NoDAlntNGOTqfrVMLC+nLmzh32KKsGBcKq8aFDes=)
                          4: f8kI2b59PBZRb_sckjtBe463HL0.roa (hash: f8FR8GkiNDWi6iflclZKzM3152IDL3F7lGZsDidin1k=)
                          5: hijMYiQr6vyULb-mnkn1xi1JvNs.roa (hash: dK5CEEe3WQ4TKnmD3J/bUooowbDXJp8gMo/+1WCMR7Q=)
                          6: xqyjrBAsPt6VFzztGhRFGsUeKVs.roa (hash: nSJGx8Mnaocq9nqKOOejGII6taJSf7vvPw4XmH1Q6Ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0a:81:1a:d9:f6:97:3a:2d:b9:34:03:49:8a:fd:6b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Oct 22 06:00:24 2025 GMT
            Not After : Oct 23 06:00:24 2025 GMT
        Subject: CN=eb67da9baec1e834a6323bd864bf61f22f98b6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:b2:f8:20:f3:5f:4a:43:d0:6f:40:8d:cf:
                    c9:de:55:d0:1a:0c:f1:2b:97:15:9b:b9:64:23:48:
                    fa:1c:d2:83:4f:df:87:72:42:b8:17:60:c9:b7:36:
                    69:70:a7:83:1c:14:4d:b3:75:a7:e7:0a:8c:10:30:
                    8a:49:28:1d:75:82:70:46:e3:23:c6:35:01:65:b0:
                    80:16:03:9c:75:4e:c6:bd:7f:f6:83:d0:2b:19:a8:
                    63:25:db:f0:5d:20:61:10:f9:26:11:07:63:3e:52:
                    e7:b8:46:14:5b:9d:41:4e:89:a9:aa:36:5c:9d:6f:
                    22:90:57:15:17:91:27:03:8b:2f:07:5b:ff:fc:3a:
                    4e:78:10:9b:e8:80:44:ab:83:0c:40:e9:c9:6e:33:
                    7d:1e:63:b4:4c:68:75:8e:3d:07:b4:91:8f:fe:57:
                    a9:60:88:31:f9:b0:96:11:d5:d4:1e:9c:3d:2e:1e:
                    7f:e5:72:6a:46:a8:a4:6b:3c:8b:4b:63:43:c8:e6:
                    57:a1:e9:40:1a:18:3f:62:5a:0a:ad:a1:5f:d3:b2:
                    eb:29:8b:c3:bd:07:0e:be:aa:b9:c7:04:c6:60:a8:
                    c2:ca:d4:2d:b1:6e:8e:a1:61:44:d5:0c:09:99:17:
                    c5:d4:4a:03:ca:98:f7:72:7c:d8:a5:be:15:92:96:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:67:DA:9B:AE:C1:E8:34:A6:32:3B:D8:64:BF:61:F2:2F:98:B6:FA
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8a:0b:59:07:21:64:0f:52:fd:79:3a:94:12:37:d2:de:de:
         4e:c9:d6:2b:73:e3:e6:95:91:10:eb:f1:35:ea:6b:29:b1:36:
         8d:b1:58:5f:e0:dc:d2:a4:0f:82:e4:a4:e5:52:35:73:b3:68:
         52:67:7e:40:76:e7:61:ba:31:4a:ad:1d:1d:aa:24:bf:99:14:
         3e:3f:8c:13:62:30:8f:5f:ec:01:5f:5e:27:14:50:bd:98:fe:
         fc:8d:47:6f:80:f5:04:91:54:0d:01:43:d1:b3:8e:17:76:5c:
         c0:7e:e4:13:97:5b:7b:0c:ca:dc:5e:6b:a9:f9:8e:08:37:c9:
         ee:20:b0:52:e2:80:a5:a0:75:b3:6f:e8:16:5e:12:81:64:f5:
         89:01:d9:2b:f5:89:26:f6:9c:18:93:23:5f:b6:85:c8:99:23:
         61:e0:27:18:07:b4:25:ae:15:8f:f7:48:43:d5:a7:05:80:85:
         41:56:ae:aa:c6:da:b5:74:cc:43:63:30:f4:86:e6:35:d1:c2:
         8c:33:72:82:60:a8:d1:8e:e9:d3:1e:76:b1:6a:37:b9:9f:86:
         f7:19:42:9e:ce:f8:33:a4:8e:5b:c4:28:3f:dc:f3:c8:bc:09:
         1a:b9:46:ff:74:9d:ff:82:2f:e0:43:5a:1a:27:85:c2:8d:4b:
         75:2a:22:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoKgRrZ9pc6Lbk0A0mK/WsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjUxMDIyMDYwMDI0WhcNMjUxMDIzMDYwMDI0WjAzMTEwLwYDVQQD
EyhlYjY3ZGE5YmFlYzFlODM0YTYzMjNiZDg2NGJmNjFmMjJmOThiNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX2y+CDzX0pD0G9Ajc/J3lXQGgzx
K5cVm7lkI0j6HNKDT9+HckK4F2DJtzZpcKeDHBRNs3Wn5wqMEDCKSSgddYJwRuMj
xjUBZbCAFgOcdU7GvX/2g9ArGahjJdvwXSBhEPkmEQdjPlLnuEYUW51BTompqjZc
nW8ikFcVF5EnA4svB1v//DpOeBCb6IBEq4MMQOnJbjN9HmO0TGh1jj0HtJGP/lep
YIgx+bCWEdXUHpw9Lh5/5XJqRqikazyLS2NDyOZXoelAGhg/YloKraFf07LrKYvD
vQcOvqq5xwTGYKjCytQtsW6OoWFE1QwJmRfF1EoDypj3cnzYpb4VkpYi9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtn2puuweg0pjI72GS/YfIvmLb6MB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABooLWQch
ZA9S/Xk6lBI30t7eTsnWK3Pj5pWREOvxNeprKbE2jbFYX+Dc0qQPguSk5VI1c7No
Umd+QHbnYboxSq0dHaokv5kUPj+ME2Iwj1/sAV9eJxRQvZj+/I1Hb4D1BJFUDQFD
0bOOF3ZcwH7kE5dbewzK3F5rqfmOCDfJ7iCwUuKApaB1s2/oFl4SgWT1iQHZK/WJ
JvacGJMjX7aFyJkjYeAnGAe0Ja4Vj/dIQ9WnBYCFQVauqsbatXTMQ2Mw9IbmNdHC
jDNygmCo0Y7p0x52sWo3uZ+G9xlCns74M6SOW8QoP9zzyLwJGrlG/3Sd/4Iv4ENa
GieFwo1LdSoiJQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 09:17:38 2025 by rpki-client