Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File:                     XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier:          lMlc0ugVhs+3pzmATCJHETTyvmp6R0VmO5W58QEWa90=
Subject key identifier:   8F:EB:FB:74:14:17:EE:A5:01:D5:B5:32:5B:37:01:00:B0:CF:81:47
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer:       /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial:       01993870A4A651AA72DC5A0057BD580115FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number:          05F6
Signing time:             Thu 11 Sep 2025 11:02:10 +0000
Manifest this update:     Thu 11 Sep 2025 11:02:10 +0000
Manifest next update:     Fri 12 Sep 2025 11:02:10 +0000
Files and hashes:         1: 0EYHloNNMUeAQfFhtTwh0_j8yCs.roa (hash: cCeGu5Zp9qskDY7ZxrA5s8MH+wQ38rU2p3PBy29pBl4=)
                          2: 3pGMf2uelis93d-cWIqOvjIte_8.roa (hash: hCA0m5958CMIXlTPuOx73BRCeRHxrLBc3i7kaHRRzvM=)
                          3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: UqdJL1yGh5NuLaOiZsubRY6zmvwlIBAeyrCieThizJY=)
                          4: lmViBZUrJauVEE0G2QrmSk33TZM.roa (hash: HMXZlZJ5YNloePMdOCSIn559A8cE+RQD1iAwls1t7fk=)
                          5: p5sda-HwuWNCoJb8ZwZwGaKEMGY.roa (hash: aNaLV+OqbrfnfcABJDi26qGq5f1GualuPpkp1NT1+Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:70:a4:a6:51:aa:72:dc:5a:00:57:bd:58:01:15:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
        Validity
            Not Before: Sep 11 11:02:10 2025 GMT
            Not After : Sep 12 11:02:10 2025 GMT
        Subject: CN=8febfb741417eea501d5b5325b370100b0cf8147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:73:2d:25:2a:79:12:d7:ae:07:fe:28:23:
                    21:cd:2f:5d:d7:b4:2f:9a:43:ac:63:a5:4e:6c:aa:
                    50:2a:d8:8f:cc:59:ce:df:49:30:6b:38:e0:db:06:
                    66:81:75:ac:f3:e0:78:9e:ed:98:0c:da:62:be:d8:
                    0a:c9:e2:ee:f6:82:a3:68:0d:aa:99:a8:dc:61:44:
                    bb:d3:22:15:63:32:c3:98:84:ed:88:23:03:8c:a1:
                    d9:a1:36:26:50:15:7d:fe:79:43:5b:4f:65:cc:8f:
                    41:29:a3:e2:43:86:34:58:2d:2d:6c:fa:cc:ce:92:
                    30:41:9a:11:61:13:e0:2a:b2:66:34:33:27:51:00:
                    c5:b6:61:8b:6a:3f:49:09:4f:e2:a1:bc:25:54:28:
                    1f:d0:b7:ec:67:d4:46:7a:93:f9:36:2e:18:68:18:
                    71:b5:fb:ea:6b:93:e0:00:2e:e4:31:2d:3f:5e:95:
                    b4:eb:bb:76:98:0b:3c:d9:f4:9f:ed:8f:44:9a:a0:
                    ba:16:06:3c:49:5f:84:9c:79:9b:bd:66:9f:99:c6:
                    3d:67:2f:9b:1d:9e:5c:1d:52:f0:18:21:d5:f4:46:
                    0e:84:1e:fe:fc:98:88:0c:57:68:4d:90:03:08:a3:
                    6c:52:42:ef:97:b9:e2:9e:e7:cf:4a:79:15:fc:a4:
                    0f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:FB:74:14:17:EE:A5:01:D5:B5:32:5B:37:01:00:B0:CF:81:47
            X509v3 Authority Key Identifier:
                keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:5b:2e:a7:46:74:4c:e1:d0:08:b0:bc:99:13:53:97:19:42:
         29:bd:83:f5:93:06:8b:02:21:63:e3:05:03:df:e5:f5:45:9a:
         c3:f0:7a:70:23:88:a4:14:dc:c9:b6:f6:e0:11:f2:e9:03:b3:
         c4:a9:ba:cc:69:7d:98:55:50:0e:e3:8d:90:a6:c5:38:e9:d0:
         54:40:a3:b3:a9:df:f4:ac:fe:16:cb:c6:d0:1c:46:22:71:92:
         75:62:4e:5c:f3:f7:8e:f2:58:a4:de:6b:76:98:67:df:47:2e:
         58:ee:5e:84:38:7b:10:5e:64:53:b1:cb:93:49:f3:18:62:65:
         32:f0:6b:b2:03:1a:77:9b:4a:70:13:e3:ed:5e:c5:cf:af:fc:
         8c:a0:a0:72:ad:41:a4:22:6a:8d:20:a8:94:22:e9:cb:24:1d:
         3f:6a:34:61:df:91:d0:00:9f:38:f5:e5:2f:b8:f8:e6:f1:8e:
         8b:4d:4e:43:92:c3:93:62:70:7b:ac:8c:31:7f:8e:1c:2b:d3:
         3a:26:a4:3f:ba:c5:81:b6:7c:46:fd:95:0e:3f:0f:88:f0:4e:
         d1:13:25:bb:13:fc:51:81:c6:2b:e3:1c:6b:8c:00:6f:ce:56:
         e3:84:23:cb:8d:3f:4c:d4:d8:cb:41:13:7a:56:6f:f1:af:5e:
         f8:f2:81:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4cKSmUapy3FoAV71YARX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl
YmFjYmYwHhcNMjUwOTExMTEwMjEwWhcNMjUwOTEyMTEwMjEwWjAzMTEwLwYDVQQD
Eyg4ZmViZmI3NDE0MTdlZWE1MDFkNWI1MzI1YjM3MDEwMGIwY2Y4MTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqVzLSUqeRLXrgf+KCMhzS9d17Qv
mkOsY6VObKpQKtiPzFnO30kwazjg2wZmgXWs8+B4nu2YDNpivtgKyeLu9oKjaA2q
majcYUS70yIVYzLDmITtiCMDjKHZoTYmUBV9/nlDW09lzI9BKaPiQ4Y0WC0tbPrM
zpIwQZoRYRPgKrJmNDMnUQDFtmGLaj9JCU/iobwlVCgf0LfsZ9RGepP5Ni4YaBhx
tfvqa5PgAC7kMS0/XpW067t2mAs82fSf7Y9EmqC6FgY8SV+EnHmbvWafmcY9Zy+b
HZ5cHVLwGCHV9EYOhB7+/JiIDFdoTZADCKNsUkLvl7ninufPSnkV/KQPiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/r+3QUF+6lAdW1Mls3AQCwz4FHMB8GA1UdIwQY
MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt
NGE3ZGRmMmQ4NmJkLzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk
LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplsup0Z0
TOHQCLC8mRNTlxlCKb2D9ZMGiwIhY+MFA9/l9UWaw/B6cCOIpBTcybb24BHy6QOz
xKm6zGl9mFVQDuONkKbFOOnQVECjs6nf9Kz+FsvG0BxGInGSdWJOXPP3jvJYpN5r
dphn30cuWO5ehDh7EF5kU7HLk0nzGGJlMvBrsgMad5tKcBPj7V7Fz6/8jKCgcq1B
pCJqjSColCLpyyQdP2o0Yd+R0ACfOPXlL7j45vGOi01OQ5LDk2Jwe6yMMX+OHCvT
OiakP7rFgbZ8Rv2VDj8PiPBO0RMluxP8UYHGK+Mca4wAb85W44Qjy40/TNTYy0ET
elZv8a9e+PKBzQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 13:00:09 2025 by rpki-client