Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File:                     JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier:          sptKXZghcu5OxCqwwCeVfqsAnKisQgv5OeHB3B9+Tw0=
Subject key identifier:   D0:F9:BD:EE:9A:52:94:7A:B7:7F:D8:A2:09:FE:AB:FB:D9:5B:1A:9F
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer:       /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial:       019A1EAD7FA1CE86D392272ED3017C75BBF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number:          174D
Signing time:             Sun 26 Oct 2025 04:01:17 +0000
Manifest this update:     Sun 26 Oct 2025 04:01:17 +0000
Manifest next update:     Mon 27 Oct 2025 04:01:17 +0000
Files and hashes:         1: 3I4C6Ngc7fDqENlrP9MQ3movJoI.roa (hash: CozQlTp6j6rye5pcJ/4KWGyOSARgztmDQg7ndMeU3mw=)
                          2: 9fhOOLWzaKKnUgNesblBRXup_NE.roa (hash: TIicytJIGRARKhFkXUtm3rRLHNbDX7lgNERyWMF3Dfw=)
                          3: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: a8xdKagdZPZai92crMrqweB4Fz+sn9isijFUvd5XKE8=)
                          4: aLheTfUgtUNdeT-nsAOrx74v2WY.roa (hash: yUihWXxYUVQMAsj8/uxzJUGwVEI6SwR8Wy4B7TIZZnQ=)
                          5: gzLs6Xol47tKfjPqLr4RNwy_8T0.roa (hash: l9a7Iax1Z9uUS5+rKaniwvZo+UX2Ws1F66M5mMABVgA=)
                          6: mLsh4sGtoHIqeKrfN3jXMMLu4k0.roa (hash: m/Mvmk/5mQxCIOXX60XJtwJ8Xe1PRKwFBcukoCDP1Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:ad:7f:a1:ce:86:d3:92:27:2e:d3:01:7c:75:bb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
        Validity
            Not Before: Oct 26 04:01:17 2025 GMT
            Not After : Oct 27 04:01:17 2025 GMT
        Subject: CN=d0f9bdee9a52947ab77fd8a209feabfbd95b1a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:0a:c9:2a:d7:9b:69:99:f8:96:46:c7:1f:
                    60:77:db:19:d7:45:fc:df:30:c4:0d:0d:f5:21:89:
                    79:1a:61:3d:9d:3a:51:2d:a2:fe:1e:ba:4f:c0:1b:
                    f7:cc:09:0c:6c:6e:43:b2:dc:09:f5:a6:a0:d7:10:
                    98:8d:14:85:e4:86:58:0d:2e:54:0e:47:cb:d2:29:
                    8b:05:17:77:03:24:18:c2:5c:eb:61:c4:4a:50:47:
                    27:e0:6d:36:64:3a:d0:41:64:cf:33:0d:00:a1:3f:
                    86:9b:92:1c:6a:70:f5:c6:3f:6d:4e:57:6f:4e:be:
                    08:79:58:16:6e:99:41:2e:56:7f:ce:7e:b1:5d:24:
                    c1:f0:16:9a:38:96:42:bd:52:47:68:29:ca:7c:e4:
                    39:fc:3d:2c:6d:93:d4:52:44:a3:d2:2b:bb:5f:75:
                    3a:2e:41:ec:16:51:0f:34:25:65:98:b1:de:a4:f7:
                    40:56:06:66:85:9e:0f:5b:af:4b:d2:b6:89:72:81:
                    df:f1:47:d2:ed:1d:32:c2:d3:25:71:80:ba:9b:b6:
                    3d:72:bd:96:4b:3f:a2:8a:7b:f0:ec:59:c8:e5:08:
                    1f:c3:f6:d6:5b:e2:95:1a:e8:1f:18:6e:3b:2f:1d:
                    5a:18:fc:12:bf:28:6a:e3:85:87:14:c0:34:4d:71:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F9:BD:EE:9A:52:94:7A:B7:7F:D8:A2:09:FE:AB:FB:D9:5B:1A:9F
            X509v3 Authority Key Identifier:
                keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bd:95:3a:32:35:02:2e:9e:67:b5:ac:06:72:d4:34:99:03:
         2a:cd:c4:83:dd:2b:d0:90:62:a5:b8:e9:4f:7b:9d:88:6d:bd:
         c9:49:d7:d2:30:ce:a9:fd:f3:ce:77:2f:dc:fb:3d:2e:8c:0c:
         8d:3b:11:3e:d8:75:4b:4d:0a:c1:71:76:cf:ae:2f:68:a4:88:
         99:af:ab:77:44:38:06:95:2d:9a:08:51:dc:79:91:46:81:09:
         6f:b4:7a:a9:d7:4a:19:b7:ff:b1:46:4b:3a:bd:22:97:19:c8:
         2d:9a:ea:98:11:67:a2:01:d2:03:73:7c:77:be:23:bc:db:22:
         c9:8c:42:6b:d8:5f:c8:c5:9e:06:e5:7c:ac:f6:47:fe:09:28:
         b5:01:cf:b2:44:0b:3c:57:25:9f:7e:25:d7:d3:fe:e5:6a:19:
         38:97:5f:bf:e0:5b:fe:eb:ac:1d:2a:fe:45:1b:e7:ce:91:57:
         b4:90:d6:4b:a3:14:0f:82:32:cd:1c:bf:3a:ee:40:f2:70:10:
         fb:01:0a:33:a2:03:dd:27:41:ca:f0:66:e9:04:aa:70:9d:e2:
         04:58:ca:d5:8e:ee:54:17:6d:29:ab:97:61:24:e9:48:d6:6e:
         fc:94:95:c7:8e:26:05:82:e2:f6:12:9d:b9:f5:ef:86:c3:49:
         d6:1e:ef:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerX+hzobTkicu0wF8dbv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YmE0ZjUyYWMxYmUwNzU1ZDM0YmM1NDgzYzA2MWJkZjI5
MzQ0N2UwHhcNMjUxMDI2MDQwMTE3WhcNMjUxMDI3MDQwMTE3WjAzMTEwLwYDVQQD
EyhkMGY5YmRlZTlhNTI5NDdhYjc3ZmQ4YTIwOWZlYWJmYmQ5NWIxYTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cUKySrXm2mZ+JZGxx9gd9sZ10X8
3zDEDQ31IYl5GmE9nTpRLaL+HrpPwBv3zAkMbG5DstwJ9aag1xCYjRSF5IZYDS5U
DkfL0imLBRd3AyQYwlzrYcRKUEcn4G02ZDrQQWTPMw0AoT+Gm5IcanD1xj9tTldv
Tr4IeVgWbplBLlZ/zn6xXSTB8BaaOJZCvVJHaCnKfOQ5/D0sbZPUUkSj0iu7X3U6
LkHsFlEPNCVlmLHepPdAVgZmhZ4PW69L0raJcoHf8UfS7R0ywtMlcYC6m7Y9cr2W
Sz+iinvw7FnI5Qgfw/bWW+KVGugfGG47Lx1aGPwSvyhq44WHFMA0TXFxgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND5ve6aUpR6t3/Yogn+q/vZWxqfMB8GA1UdIwQY
MBaAFCS6T1KsG+B1XTS8VIPAYb3yk0R+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zOTc1NDYtZGM3Yi00NjYwLThhNTEt
YmY1OWZjMWNiMjZkLzEvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zOTc1NDYtZGM3Yi00NjYwLThhNTEtYmY1OWZjMWNiMjZk
LzEvSkxwUFVxd2I0SFZkTkx4VWc4Qmh2ZktUUkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfr2VOjI1
Ai6eZ7WsBnLUNJkDKs3Eg90r0JBipbjpT3udiG29yUnX0jDOqf3zzncv3Ps9LowM
jTsRPth1S00KwXF2z64vaKSIma+rd0Q4BpUtmghR3HmRRoEJb7R6qddKGbf/sUZL
Or0ilxnILZrqmBFnogHSA3N8d74jvNsiyYxCa9hfyMWeBuV8rPZH/gkotQHPskQL
PFcln34l19P+5WoZOJdfv+Bb/uusHSr+RRvnzpFXtJDWS6MUD4IyzRy/Ou5A8nAQ
+wEKM6ID3SdByvBm6QSqcJ3iBFjK1Y7uVBdtKauXYSTpSNZu/JSVx44mBYLi9hKd
ufXvhsNJ1h7v7Q==
-----END CERTIFICATE-----
Generated at Sun Oct 26 07:18:46 2025 by rpki-client