Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
File:                     RowmemR0_LfMSc8yXQ6dzF_o0g0.mft (raw, json)
Hash identifier:          9FJ0V05ehNtx1i+9ieLaQ3WPZvyqnq4mpLEQ5oPIwTY=
Subject key identifier:   0E:AC:5C:F6:7D:D9:40:D6:EA:E0:E6:CC:6D:6A:0F:D2:C7:83:A4:27
Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
Certificate issuer:       /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Certificate serial:       019A71B78DEFD417CAC23A48183DA3D9A00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
Manifest number:          1146
Signing time:             Tue 11 Nov 2025 07:00:46 +0000
Manifest this update:     Tue 11 Nov 2025 07:00:46 +0000
Manifest next update:     Wed 12 Nov 2025 07:00:46 +0000
Files and hashes:         1: MZGQkRnrBwu3EiDQXovi1EtOEeQ.roa (hash: emZiRG679KNDGOj4cCA2StKFReSvhFA5nV/8wQXC5Cw=)
                          2: RowmemR0_LfMSc8yXQ6dzF_o0g0.crl (hash: F149ud9o4aVhorjCgs7IA18EE65WR7FdLJbe7YgFsuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:8d:ef:d4:17:ca:c2:3a:48:18:3d:a3:d9:a0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
        Validity
            Not Before: Nov 11 07:00:46 2025 GMT
            Not After : Nov 12 07:00:46 2025 GMT
        Subject: CN=0eac5cf67dd940d6eae0e6cc6d6a0fd2c783a427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:4e:4b:d2:c2:66:20:fc:51:20:22:58:b5:
                    8c:73:4e:99:a9:36:a2:0c:e5:6a:3f:d2:1d:64:75:
                    aa:a7:44:27:5a:9b:08:d3:a9:e1:77:95:df:d8:f8:
                    25:1b:5f:a8:04:63:12:3b:59:0e:62:7c:a0:6e:e0:
                    c2:f9:4d:c6:e9:ab:32:34:dc:75:16:3f:cc:45:a3:
                    44:83:0a:a5:d3:0a:a5:cd:d3:66:9f:a1:2a:a6:56:
                    4d:e2:a8:d9:4b:6a:fe:9d:88:2f:f6:cc:7c:d5:55:
                    02:20:35:de:ce:c0:5d:ea:81:21:f2:4a:57:25:48:
                    0e:2f:88:58:51:84:5b:ac:d8:ed:01:ee:48:f4:48:
                    b1:c3:8d:4a:4f:97:cd:0e:8c:db:41:03:54:d3:f7:
                    b8:14:f0:8f:57:1f:3a:0d:62:f4:95:6e:53:a2:c8:
                    40:e8:1f:06:f4:ef:25:55:99:1d:1b:0d:8f:a8:3b:
                    de:e6:de:81:f6:37:39:50:e4:29:74:59:1c:43:3d:
                    4c:c3:3e:3f:1c:1f:5f:d2:f9:c5:f5:f2:ed:ab:d5:
                    b6:85:eb:92:e7:9c:69:a6:00:83:be:a7:4d:ec:29:
                    99:f2:7f:fd:88:0e:be:c1:7e:e4:4a:16:36:c9:f1:
                    0c:4a:7a:80:63:fd:4a:3e:9f:67:69:c9:86:b4:95:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AC:5C:F6:7D:D9:40:D6:EA:E0:E6:CC:6D:6A:0F:D2:C7:83:A4:27
            X509v3 Authority Key Identifier:
                keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:84:e4:9c:a6:1f:0a:2b:52:53:0d:cc:20:df:19:55:99:b0:
         e1:91:c9:5e:74:f3:18:40:38:4e:44:f5:2a:ec:df:6e:bb:65:
         f9:b1:d0:d9:da:c4:04:e7:1e:fd:5d:c4:1b:85:39:2f:55:e4:
         d0:84:07:e3:d7:e2:81:e6:07:5c:b5:a5:0d:a9:a8:44:d1:f4:
         a1:31:a4:30:41:9a:54:2e:45:5c:4a:2d:32:a6:02:c4:28:ba:
         a4:7b:ee:e8:bd:d7:17:16:98:67:64:93:99:45:d4:88:de:96:
         f4:79:cb:59:c3:43:7c:31:0c:ea:08:4a:9a:11:6e:7b:58:e9:
         37:14:71:23:72:78:31:4a:b0:22:e5:e4:6e:55:19:00:b6:3b:
         60:28:f1:35:67:f4:a5:69:4c:8d:a0:f9:64:e4:0a:24:5c:cd:
         0a:11:d1:de:22:6e:8a:ec:25:fb:70:97:51:65:8d:ab:e8:52:
         90:12:8e:20:51:56:1f:75:eb:35:1c:15:48:79:a9:75:d4:c8:
         60:09:47:40:9c:f5:d5:17:94:12:0f:98:09:87:dd:93:59:57:
         b1:39:aa:af:98:e3:02:21:07:85:01:2e:40:49:ad:b9:48:ce:
         9e:74:18:84:c3:45:11:68:0e:4b:07:94:a1:59:f9:a7:24:27:
         cf:fd:45:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt43v1BfKwjpIGD2j2aANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGMyNjdhNjQ3NGZjYjdjYzQ5Y2YzMjVkMGU5ZGNjNWZl
OGQyMGQwHhcNMjUxMTExMDcwMDQ2WhcNMjUxMTEyMDcwMDQ2WjAzMTEwLwYDVQQD
EygwZWFjNWNmNjdkZDk0MGQ2ZWFlMGU2Y2M2ZDZhMGZkMmM3ODNhNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysJOS9LCZiD8USAiWLWMc06ZqTai
DOVqP9IdZHWqp0QnWpsI06nhd5Xf2PglG1+oBGMSO1kOYnygbuDC+U3G6asyNNx1
Fj/MRaNEgwql0wqlzdNmn6EqplZN4qjZS2r+nYgv9sx81VUCIDXezsBd6oEh8kpX
JUgOL4hYUYRbrNjtAe5I9Eixw41KT5fNDozbQQNU0/e4FPCPVx86DWL0lW5ToshA
6B8G9O8lVZkdGw2PqDve5t6B9jc5UOQpdFkcQz1Mwz4/HB9f0vnF9fLtq9W2heuS
55xppgCDvqdN7CmZ8n/9iA6+wX7kShY2yfEMSnqAY/1KPp9nacmGtJXcLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6sXPZ92UDW6uDmzG1qD9LHg6QnMB8GA1UdIwQY
MBaAFEaMJnpkdPy3zEnPMl0Oncxf6NINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82ZTYxNWYtNWZkNy00NWI2LThhY2It
NzY5OTliZjk5OTlmLzEvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82ZTYxNWYtNWZkNy00NWI2LThhY2ItNzY5OTliZjk5OTlm
LzEvUm93bWVtUjBfTGZNU2M4eVhRNmR6Rl9vMGcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKITknKYf
CitSUw3MIN8ZVZmw4ZHJXnTzGEA4TkT1Kuzfbrtl+bHQ2drEBOce/V3EG4U5L1Xk
0IQH49figeYHXLWlDamoRNH0oTGkMEGaVC5FXEotMqYCxCi6pHvu6L3XFxaYZ2ST
mUXUiN6W9HnLWcNDfDEM6ghKmhFue1jpNxRxI3J4MUqwIuXkblUZALY7YCjxNWf0
pWlMjaD5ZOQKJFzNChHR3iJuiuwl+3CXUWWNq+hSkBKOIFFWH3XrNRwVSHmpddTI
YAlHQJz11ReUEg+YCYfdk1lXsTmqr5jjAiEHhQEuQEmtuUjOnnQYhMNFEWgOSweU
oVn5pyQnz/1Frw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:41 2025 by rpki-client