Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
File:                     XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json)
Hash identifier:          di1znrHOAtLoUY3tuUcPTmspMui/W4uHPxiQk6dxuoI=
Subject key identifier:   D1:99:9B:82:85:B6:6B:50:DD:8A:BB:F5:37:CB:7A:C7:23:2A:6E:39
Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8
Certificate issuer:       /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
Certificate serial:       019A1C5068AADB72CD68C944B89953A04AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
Manifest number:          07BC
Signing time:             Sat 25 Oct 2025 17:00:22 +0000
Manifest this update:     Sat 25 Oct 2025 17:00:22 +0000
Manifest next update:     Sun 26 Oct 2025 17:00:22 +0000
Files and hashes:         1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=)
                          2: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: aUtEXOimWnEo4uwB0P4zgj6Kr2qmQf+XmyCHkYMqwEI=)
                          3: YxZAW7xYuuoItNSxZUB_Jyv54M8.roa (hash: ZHkpmuH04xDfiHb0nZigSHP0TijTWcHxuOKkj3BJQR4=)
                          4: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=)
                          5: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=)
                          6: yM87hDn48G9pC2uXeNqB6MxDyyY.roa (hash: m4eQad2ewLgQnWmXHQewt9Vc5wlc0Xqlxo4fhTztW/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:50:68:aa:db:72:cd:68:c9:44:b8:99:53:a0:4a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8
        Validity
            Not Before: Oct 25 17:00:22 2025 GMT
            Not After : Oct 26 17:00:22 2025 GMT
        Subject: CN=d1999b8285b66b50dd8abbf537cb7ac7232a6e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:21:6b:c8:50:f0:ff:61:11:d5:70:c0:6c:
                    36:01:be:57:71:4d:e3:aa:82:53:9f:66:12:72:b9:
                    fa:c5:a8:e3:c3:6e:3e:85:9a:8b:12:a4:51:48:b8:
                    c7:2f:ee:81:54:3e:db:d3:dd:b7:2f:e7:0a:0b:0c:
                    37:d6:79:fb:f2:c6:9a:57:7d:2f:c9:34:c8:f3:a9:
                    02:48:7d:1a:3e:2b:cf:17:e7:bf:5b:8d:64:6f:42:
                    19:40:5c:c7:92:d1:eb:07:d3:ca:a6:92:2d:56:a8:
                    00:55:d9:0c:a3:cf:8c:9c:0f:68:03:0d:98:64:71:
                    90:f0:33:98:44:79:8f:5b:fa:57:e2:f2:ac:5d:9c:
                    41:d2:d1:93:83:ba:53:f7:74:39:75:26:1b:7a:17:
                    dd:e6:6a:a0:7f:29:e1:6e:e2:e0:ef:32:15:41:37:
                    96:af:5f:88:22:e5:87:8e:a8:ab:1d:6f:e5:ce:52:
                    01:5e:09:a0:17:0b:b3:0f:8b:02:2f:f4:45:9a:8a:
                    d8:04:cc:43:46:b8:78:39:ec:13:6f:2a:59:3a:42:
                    15:e7:9b:e3:47:62:0e:6b:42:03:47:40:f1:0f:22:
                    77:a0:ac:f6:bd:b3:be:45:ca:4b:22:c2:1a:1f:1f:
                    24:0f:b3:46:a4:64:7e:5f:a9:05:62:b9:37:26:aa:
                    ac:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:99:9B:82:85:B6:6B:50:DD:8A:BB:F5:37:CB:7A:C7:23:2A:6E:39
            X509v3 Authority Key Identifier:
                keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:80:04:0e:63:7f:94:c8:47:c6:fe:a8:c5:dc:b6:0e:43:4c:
         af:21:a9:ff:fa:2f:4d:58:fc:5d:ae:f4:47:f8:a6:f0:a9:17:
         15:30:ce:48:1f:d4:77:ce:e2:3d:d2:6f:20:5b:07:65:37:36:
         c5:48:4d:88:19:8c:01:59:77:59:72:02:7b:9f:59:c9:80:2a:
         83:c2:e8:4a:1e:77:76:64:d7:0f:e7:bf:1a:5b:ff:11:dd:c9:
         04:08:5f:41:74:1a:8d:72:c4:5f:33:e3:47:e5:f8:dc:ba:b2:
         12:a0:9d:a7:c2:23:f0:57:b9:65:97:38:98:42:bd:bd:b8:d0:
         35:c7:40:a0:9e:c9:2f:5d:8c:79:57:31:4d:08:05:7c:2d:a3:
         30:91:43:c9:e9:7b:45:0c:e8:af:46:fb:58:3f:dd:3a:db:07:
         1b:e3:e2:f7:ff:89:94:4e:35:31:f4:51:6a:f2:8d:dc:c5:c1:
         06:0e:48:58:9c:d8:91:fc:75:aa:d0:85:f9:3c:49:9f:01:26:
         79:81:fd:23:81:41:9a:01:a8:4a:0c:e0:40:fa:cd:32:54:9b:
         26:0e:22:e1:69:98:c1:72:fe:ff:d5:00:80:d9:dc:b7:25:47:
         a5:a3:be:8e:4c:c2:14:36:cf:af:bb:77:63:be:be:43:d1:0c:
         cb:ee:11:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocUGiq23LNaMlEuJlToEqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODZjNDdkYTZkOTA3OTM0N2I2MGYwNGVkNWM1NTU3ZmU5
ODNlYjgwHhcNMjUxMDI1MTcwMDIyWhcNMjUxMDI2MTcwMDIyWjAzMTEwLwYDVQQD
EyhkMTk5OWI4Mjg1YjY2YjUwZGQ4YWJiZjUzN2NiN2FjNzIzMmE2ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGQha8hQ8P9hEdVwwGw2Ab5XcU3j
qoJTn2YScrn6xajjw24+hZqLEqRRSLjHL+6BVD7b0923L+cKCww31nn78saaV30v
yTTI86kCSH0aPivPF+e/W41kb0IZQFzHktHrB9PKppItVqgAVdkMo8+MnA9oAw2Y
ZHGQ8DOYRHmPW/pX4vKsXZxB0tGTg7pT93Q5dSYbehfd5mqgfynhbuLg7zIVQTeW
r1+IIuWHjqirHW/lzlIBXgmgFwuzD4sCL/RFmorYBMxDRrh4OewTbypZOkIV55vj
R2IOa0IDR0DxDyJ3oKz2vbO+RcpLIsIaHx8kD7NGpGR+X6kFYrk3JqqsTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGZm4KFtmtQ3Yq79TfLescjKm45MB8GA1UdIwQY
MBaAFF2GxH2m2QeTR7YPBO1cVVf+mD64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYt
ZmM2MzI4NDFiYTNlLzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYtZmM2MzI4NDFiYTNl
LzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoAEDmN/
lMhHxv6oxdy2DkNMryGp//ovTVj8Xa70R/im8KkXFTDOSB/Ud87iPdJvIFsHZTc2
xUhNiBmMAVl3WXICe59ZyYAqg8LoSh53dmTXD+e/Glv/Ed3JBAhfQXQajXLEXzPj
R+X43LqyEqCdp8Ij8Fe5ZZc4mEK9vbjQNcdAoJ7JL12MeVcxTQgFfC2jMJFDyel7
RQzor0b7WD/dOtsHG+Pi9/+JlE41MfRRavKN3MXBBg5IWJzYkfx1qtCF+TxJnwEm
eYH9I4FBmgGoSgzgQPrNMlSbJg4i4WmYwXL+/9UAgNnctyVHpaO+jkzCFDbPr7t3
Y76+Q9EMy+4RVw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 00:28:02 2025 by rpki-client