Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          eA59CCnaR1RjOKTuU6ZHTbJf+9CjnaganhXCFew1hrs=
Subject key identifier:   95:C6:B9:31:7C:C9:34:EF:CA:F6:51:B9:3A:23:47:93:0E:8E:4B:23
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       019A047F324BEC0A749DDCA6D73B4A6AAC6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          0DB5
Signing time:             Tue 21 Oct 2025 02:00:35 +0000
Manifest this update:     Tue 21 Oct 2025 02:00:35 +0000
Manifest next update:     Wed 22 Oct 2025 02:00:35 +0000
Files and hashes:         1: X5JIC9unyCIdpKZJwQlA4lYc9cY.roa (hash: TbF6eUUD3ihge0Jd20Jank3p47LpDv7SMCYmoD1OeKU=)
                          2: gs0XpzxFNQmbs4Px1NH3MVPnW5M.roa (hash: DwuTLpmUI5LgM0GpYDySurfXPWoPr7lrzuLuY77FykY=)
                          3: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: X+L1VjsvaLwE/Mil6DUK9FmHSJSJVMDRtu8RRhDntN0=)
                          4: m5kAS92vx1bNl-YtFK-tgJ3aBFc.roa (hash: LVhjeEqDTNmsxowkINJYXb6iHnRvgZx0ebSzKo74mzQ=)
                          5: odHmDhpPBcZ3XwBesQQXylBZA0o.roa (hash: H/gbEaRHX0JWWLdUIVP1AcKvMMZMHQaipUWz40c1nI0=)
                          6: zFdTJX52gPCw2iLD3NYUVO-Vyxo.roa (hash: jAK0gwv0VcbXBTEIIqlyy6XCdTitcUhhvcmF8ss17m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:7f:32:4b:ec:0a:74:9d:dc:a6:d7:3b:4a:6a:ac:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Oct 21 02:00:35 2025 GMT
            Not After : Oct 22 02:00:35 2025 GMT
        Subject: CN=95c6b9317cc934efcaf651b93a2347930e8e4b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:fd:e8:94:35:11:74:72:b1:92:58:26:cb:
                    25:80:82:f3:37:9f:36:2f:dd:ec:2f:08:32:d8:d5:
                    8e:a9:f6:8c:33:0b:49:75:52:e6:a7:b9:ce:eb:f4:
                    01:dd:07:3f:40:a0:ac:75:6d:cf:a3:d5:55:b8:63:
                    ae:0a:fb:bd:01:e5:8d:58:07:64:1d:42:15:9f:d7:
                    d8:18:ce:29:d4:b2:9f:1c:40:92:8a:fc:d3:62:d9:
                    d8:07:3a:a0:24:11:b7:ca:7f:c6:a2:89:a1:a8:e6:
                    1f:15:00:df:c8:0e:8a:e2:54:2d:79:6d:88:c1:66:
                    51:07:bc:74:86:84:71:34:d8:29:71:10:29:f4:88:
                    c6:4b:ca:28:4b:89:d1:7c:8c:16:74:2d:f9:24:dc:
                    c5:0b:e2:d5:5a:00:f5:07:d7:15:cb:f7:a8:06:43:
                    9d:1a:35:1c:96:ca:5b:9c:56:e5:62:9c:be:17:a2:
                    66:a8:7f:4f:33:98:97:f4:10:17:70:a0:16:a1:b6:
                    a6:b3:6d:de:43:95:05:cc:b8:2e:37:df:f4:8a:f6:
                    67:e3:2a:72:5a:4a:2b:e4:94:47:ac:25:63:57:f9:
                    9a:bf:54:26:44:47:38:8e:75:22:5b:55:82:8a:4f:
                    91:0f:79:56:f4:da:35:37:be:dc:df:96:3a:15:75:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C6:B9:31:7C:C9:34:EF:CA:F6:51:B9:3A:23:47:93:0E:8E:4B:23
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:6f:dd:9a:1e:0e:a5:1f:34:2d:39:8d:29:ef:98:a4:73:b8:
         81:af:66:c3:2f:6a:42:53:7b:be:ab:5b:03:2f:43:51:15:bf:
         6a:12:96:9d:b1:92:e6:e8:c5:73:be:6f:1e:b9:26:89:7e:ae:
         60:26:63:40:51:52:08:9e:b9:d8:08:65:e3:c1:6a:cf:9d:40:
         d5:1b:dc:c7:bb:94:23:e4:ef:65:91:3c:c9:9e:04:d3:2d:16:
         35:8a:19:45:0b:54:56:99:60:19:fc:6c:48:de:92:81:b0:46:
         56:96:3d:fd:c4:46:12:55:53:55:1c:e9:ee:28:d2:00:7a:80:
         91:b9:3d:53:00:c2:e8:04:91:58:86:f1:f2:96:70:60:e5:f0:
         13:0a:01:f0:db:85:9d:45:c1:b3:23:d8:a1:e3:a0:5b:4a:76:
         a4:09:68:7f:62:75:81:fa:28:f1:3b:bb:4a:d9:36:64:e3:fe:
         10:04:b9:27:4e:6a:50:60:98:33:c2:49:19:77:53:33:b1:8e:
         28:f7:80:48:e0:a4:ce:38:85:30:5c:4b:4f:43:71:74:2e:b6:
         7a:5a:df:c3:a1:6a:d3:f7:ab:9a:c1:c7:6e:3d:04:65:cd:83:
         0b:04:54:c9:68:98:49:d9:dc:11:74:94:90:10:ae:78:d7:55:
         8b:d2:8f:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoEfzJL7Ap0ndym1ztKaqxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOTg3MDM5YjNmM2IyZGI5YjI5OGFlMGQ4ZDBlYjM0ODk2
OWFkNjIwHhcNMjUxMDIxMDIwMDM1WhcNMjUxMDIyMDIwMDM1WjAzMTEwLwYDVQQD
Eyg5NWM2YjkzMTdjYzkzNGVmY2FmNjUxYjkzYTIzNDc5MzBlOGU0YjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucL96JQ1EXRysZJYJsslgILzN582
L93sLwgy2NWOqfaMMwtJdVLmp7nO6/QB3Qc/QKCsdW3Po9VVuGOuCvu9AeWNWAdk
HUIVn9fYGM4p1LKfHECSivzTYtnYBzqgJBG3yn/GoomhqOYfFQDfyA6K4lQteW2I
wWZRB7x0hoRxNNgpcRAp9IjGS8ooS4nRfIwWdC35JNzFC+LVWgD1B9cVy/eoBkOd
GjUclspbnFblYpy+F6JmqH9PM5iX9BAXcKAWobams23eQ5UFzLguN9/0ivZn4ypy
Wkor5JRHrCVjV/mav1QmREc4jnUiW1WCik+RD3lW9No1N77c35Y6FXUrcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXGuTF8yTTvyvZRuTojR5MOjksjMB8GA1UdIwQY
MBaAFI6YcDmz87LbmymK4NjQ6zSJaa1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanBod09iUHpzdHViS1lyZzJORHJOSWxwcldJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNjY1NjAtMDk2ZS00ODM1LTg5ZmQt
NTYzNjAwMzE5YTFmLzEvanBod09iUHpzdHViS1lyZzJORHJOSWxwcldJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zNjY1NjAtMDk2ZS00ODM1LTg5ZmQtNTYzNjAwMzE5YTFm
LzEvanBod09iUHpzdHViS1lyZzJORHJOSWxwcldJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5W/dmh4O
pR80LTmNKe+YpHO4ga9mwy9qQlN7vqtbAy9DURW/ahKWnbGS5ujFc75vHrkmiX6u
YCZjQFFSCJ652Ahl48Fqz51A1Rvcx7uUI+TvZZE8yZ4E0y0WNYoZRQtUVplgGfxs
SN6SgbBGVpY9/cRGElVTVRzp7ijSAHqAkbk9UwDC6ASRWIbx8pZwYOXwEwoB8NuF
nUXBsyPYoeOgW0p2pAlof2J1gfoo8Tu7Stk2ZOP+EAS5J05qUGCYM8JJGXdTM7GO
KPeASOCkzjiFMFxLT0NxdC62elrfw6Fq0/ermsHHbj0EZc2DCwRUyWiYSdncEXSU
kBCueNdVi9KP5A==
-----END CERTIFICATE-----
Generated at Tue Oct 21 05:54:10 2025 by rpki-client