Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
File:                     XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json)
Hash identifier:          oDT0djY4H9G0a+gsBAUe0nrr+dqxhY1a99n2l8OIESQ=
Subject key identifier:   F1:62:DF:72:61:80:85:F6:95:1A:3A:18:D0:9C:D4:2E:DD:A4:2D:5F
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       01991CF7D2875024077A7A5FB7354C5F3766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
Manifest number:          0DEB
Signing time:             Sat 06 Sep 2025 03:00:27 +0000
Manifest this update:     Sat 06 Sep 2025 03:00:27 +0000
Manifest next update:     Sun 07 Sep 2025 03:00:27 +0000
Files and hashes:         1: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=)
                          2: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=)
                          3: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=)
                          4: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: np3speCqTs8tapshfd1KgI7a5CFhLVXVpLofFwD/k08=)
                          5: dpxenuQjvci3ZpL8nHgF9W3MKcg.roa (hash: 6lYuC3m8waBrvvEp1GSL1BkXD3kqcshc7yTLgiT2sJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:f7:d2:87:50:24:07:7a:7a:5f:b7:35:4c:5f:37:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Sep  6 03:00:27 2025 GMT
            Not After : Sep  7 03:00:27 2025 GMT
        Subject: CN=f162df72618085f6951a3a18d09cd42edda42d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:cf:25:a1:7c:87:ff:97:ec:f7:64:e0:e6:
                    b3:b8:44:d1:1f:27:13:b2:17:a0:7d:37:ac:a2:04:
                    68:d8:c0:18:a9:6e:de:37:5f:79:08:1b:93:ec:9c:
                    f0:b0:a8:d5:75:f7:47:f1:10:41:5a:54:73:5a:95:
                    e4:bb:39:73:6b:09:ec:94:70:5c:93:bb:06:6e:6b:
                    62:dd:e1:8f:60:ad:29:dc:5c:92:e3:b0:36:a6:42:
                    64:ea:67:52:20:bf:f4:bc:1f:72:dd:9b:7d:16:79:
                    34:31:48:1c:0a:cc:d6:3c:bd:b2:9c:9b:84:c8:fb:
                    46:23:70:f1:35:a3:c8:74:35:9a:37:bf:fe:90:bc:
                    96:c9:a6:89:b5:bd:c3:76:1b:50:98:79:21:8a:e4:
                    6c:48:42:8d:57:e7:cc:00:46:3d:46:81:e7:1d:3b:
                    b7:1f:9a:ad:c8:8f:89:7e:f5:56:0f:29:88:a7:5e:
                    b7:ea:78:24:0a:d8:7a:72:0a:2d:4e:68:01:41:ed:
                    b2:aa:0a:89:a8:3e:9b:04:00:ed:97:fe:27:be:f0:
                    70:08:ad:04:09:cc:ee:30:13:87:a5:15:f3:6f:3b:
                    11:1c:15:95:69:81:28:91:45:71:a3:a9:a3:65:8f:
                    da:59:62:33:f5:97:b0:33:49:65:66:f3:b2:51:31:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:62:DF:72:61:80:85:F6:95:1A:3A:18:D0:9C:D4:2E:DD:A4:2D:5F
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:73:ee:24:4d:49:c1:de:72:c0:f2:ee:f0:de:b6:ee:5e:be:
         33:ce:a0:7e:c1:35:4d:2b:98:60:60:9d:1f:b8:b4:06:5b:03:
         25:c7:17:48:95:ff:68:4c:0d:5f:45:e9:2e:61:55:47:a0:f8:
         61:38:0a:58:24:60:02:7d:d7:a2:d8:75:a0:f8:b3:87:5b:1c:
         ce:65:23:8c:76:91:99:a6:1d:5d:2d:e9:20:af:d3:ed:0c:b8:
         0c:d9:cc:c1:c3:62:7c:c2:97:cd:93:12:8b:04:0c:35:dd:97:
         d4:58:8e:19:f6:45:59:d0:fd:a1:c2:12:d2:a6:68:32:52:5e:
         27:a2:ee:51:91:75:5d:f4:de:b7:04:1d:cc:21:64:57:be:3a:
         a5:fa:13:ff:b1:98:74:fe:a1:78:b1:ce:b9:a8:02:2f:cb:9e:
         2e:79:f2:ff:8f:1a:1a:2e:d6:07:bd:a7:c7:15:f2:05:f6:f3:
         94:12:9c:04:6b:4a:91:f5:c8:0a:39:a9:72:ac:81:c3:32:42:
         7f:d4:e4:cb:33:18:40:f3:fe:4a:23:c5:89:b9:be:b4:53:71:
         74:57:7d:f6:99:e1:68:0b:40:59:e6:e3:f7:41:a3:84:ac:30:
         92:78:3c:12:9e:12:52:13:b3:fc:00:47:9c:76:f6:18:9b:fe:
         ee:f1:54:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkc99KHUCQHenpftzVMXzdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjUwOTA2MDMwMDI3WhcNMjUwOTA3MDMwMDI3WjAzMTEwLwYDVQQD
EyhmMTYyZGY3MjYxODA4NWY2OTUxYTNhMThkMDljZDQyZWRkYTQyZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIPPJaF8h/+X7Pdk4OazuETRHycT
shegfTesogRo2MAYqW7eN195CBuT7JzwsKjVdfdH8RBBWlRzWpXkuzlzawnslHBc
k7sGbmti3eGPYK0p3FyS47A2pkJk6mdSIL/0vB9y3Zt9Fnk0MUgcCszWPL2ynJuE
yPtGI3DxNaPIdDWaN7/+kLyWyaaJtb3DdhtQmHkhiuRsSEKNV+fMAEY9RoHnHTu3
H5qtyI+JfvVWDymIp1636ngkCth6cgotTmgBQe2yqgqJqD6bBADtl/4nvvBwCK0E
CczuMBOHpRXzbzsRHBWVaYEokUVxo6mjZY/aWWIz9ZewM0llZvOyUTHVvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFi33JhgIX2lRo6GNCc1C7dpC1fMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAunPuJE1J
wd5ywPLu8N627l6+M86gfsE1TSuYYGCdH7i0BlsDJccXSJX/aEwNX0XpLmFVR6D4
YTgKWCRgAn3Xoth1oPizh1sczmUjjHaRmaYdXS3pIK/T7Qy4DNnMwcNifMKXzZMS
iwQMNd2X1FiOGfZFWdD9ocIS0qZoMlJeJ6LuUZF1XfTetwQdzCFkV746pfoT/7GY
dP6heLHOuagCL8ueLnny/48aGi7WB72nxxXyBfbzlBKcBGtKkfXICjmpcqyBwzJC
f9TkyzMYQPP+SiPFibm+tFNxdFd99pnhaAtAWebj90GjhKwwkng8Ep4SUhOz/ABH
nHb2GJv+7vFUWg==
-----END CERTIFICATE-----
Generated at Sat Sep 6 05:21:14 2025 by rpki-client