Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
File:                     m-02rxPaSC_feftUA-UHSGDuzQ0.mft (raw, json)
Hash identifier:          VrI/W6nMBMWdhwMGn3ZabktcGbe9HhxNMj9k67txUV4=
Subject key identifier:   A5:AC:E7:17:A6:2C:50:91:D8:0E:61:C1:38:16:2A:69:17:C3:2E:1F
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Certificate issuer:       /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial:       019931C84A7D455E93C433613BD32332413A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
Manifest number:          115D
Signing time:             Wed 10 Sep 2025 04:00:33 +0000
Manifest this update:     Wed 10 Sep 2025 04:00:33 +0000
Manifest next update:     Thu 11 Sep 2025 04:00:33 +0000
Files and hashes:         1: GCFxtCAUzvqYZpyUW8Mzrm4wxsc.roa (hash: IKXqgRLjEEuJWHSAJe6iyyi0FX1Oz2p26+VidSpPSQE=)
                          2: gME55grAdW0csfpDqI4X-z1lPB8.roa (hash: Yk24RuTuN+kQwIiTqSqW+TjwkayeuH80Y+g3ReFhIuE=)
                          3: m-02rxPaSC_feftUA-UHSGDuzQ0.crl (hash: BG7NA0WqT1KINGhCRUzP/Z6jshYxBAk9eEz6Mvah2aQ=)
                          4: oAMq7eOSrrg7QzHYvuiclu2pDcU.roa (hash: 0Dq9HT+D04Msgy5j4AI+QE/myTwZkQVZ5ZeJBagVuyM=)
                          5: rPUiYOwFFBXwEbG0rI7AP5flCD0.roa (hash: fpp2fjiduFcCROlP6+vFm2e63EILUjHK8HyGsStaukM=)
                          6: tsiU7azXEn11ZU6Xi_XUw-9XI8A.roa (hash: zObDmeFB3M8dfzRuyTAH/oAzX2g0/cCu39kU8lAYB64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:c8:4a:7d:45:5e:93:c4:33:61:3b:d3:23:32:41:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
        Validity
            Not Before: Sep 10 04:00:33 2025 GMT
            Not After : Sep 11 04:00:33 2025 GMT
        Subject: CN=a5ace717a62c5091d80e61c138162a6917c32e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:3b:fc:a9:a5:4e:38:94:7a:96:f6:c1:3c:
                    8a:1c:bf:bb:53:30:ef:65:af:68:ac:e2:67:ad:9f:
                    f1:4b:90:31:e4:5b:dd:32:da:78:be:35:50:b0:16:
                    d6:71:81:8f:f0:70:0b:98:be:db:d5:79:c6:fa:cf:
                    b2:f1:89:5c:8c:c0:70:48:9f:8b:7c:62:45:89:fa:
                    e0:6d:1d:6f:5b:6b:6c:ab:7a:7d:10:87:b3:fe:a2:
                    7d:05:c9:4f:d9:ff:f0:fa:5f:6f:ed:f4:dd:f0:3c:
                    d8:ba:f8:8f:83:aa:93:3e:f8:a3:ac:b0:fe:02:15:
                    0c:29:45:0f:ea:c7:e9:f7:e0:e3:13:2a:f9:62:bb:
                    92:22:47:af:9d:eb:60:9c:37:7a:78:f3:77:4c:3e:
                    fc:34:f2:17:63:2e:80:0f:00:f3:c0:3a:f4:d5:02:
                    a6:5a:ff:64:d7:ff:20:23:c8:2b:f4:d3:8f:61:12:
                    75:45:ea:6f:c2:42:64:b2:c3:08:94:33:46:c8:07:
                    e5:74:93:79:45:90:75:4e:1d:64:7b:7c:b7:c3:cd:
                    bb:dc:44:90:f3:96:74:a9:a0:27:ab:ae:44:a9:76:
                    9c:88:8f:5e:e4:d8:84:f4:36:c6:da:c0:f0:92:56:
                    64:fc:d0:0f:d5:66:ef:b3:f4:f1:60:3f:51:3f:ef:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AC:E7:17:A6:2C:50:91:D8:0E:61:C1:38:16:2A:69:17:C3:2E:1F
            X509v3 Authority Key Identifier:
                keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5c:61:72:58:dd:2f:92:0b:df:22:2b:06:1b:32:f7:95:21:
         e7:64:16:5a:30:22:46:76:48:44:d3:02:b2:d6:f8:3c:c0:03:
         bf:fd:6a:8f:30:c8:cd:2c:23:55:37:77:a0:ac:e6:5e:f4:2f:
         83:9b:bc:b3:a3:a8:9f:96:b0:05:65:81:e6:4c:89:62:5a:01:
         08:f8:cb:ea:b7:aa:40:96:c1:38:de:00:8c:f4:3a:af:7b:08:
         07:6d:b1:02:13:1a:8f:d9:61:29:d4:61:8e:42:94:e3:c8:aa:
         ac:26:2c:4f:0c:e0:04:e1:1e:23:c3:d8:6b:69:29:14:aa:46:
         28:ef:61:ea:40:b9:47:2d:fa:c2:ca:49:3f:45:53:19:ae:c7:
         b0:81:ea:11:be:10:8f:0c:1f:cb:5d:31:32:cf:e8:af:e1:38:
         7e:1f:72:79:ce:14:a1:95:30:d5:02:dd:4a:d3:f0:f7:7f:d3:
         e3:e9:e5:ac:a1:d0:90:03:29:aa:a3:21:35:1f:9c:2b:cf:22:
         4e:0a:ca:88:f0:da:f0:1b:0e:fc:cb:37:1c:2f:52:54:20:10:
         b0:50:ad:18:3f:ca:2c:e7:91:07:b2:cc:01:8c:95:c4:a3:b4:
         b0:80:91:18:8e:db:bf:ac:9b:d7:ef:ef:47:3b:03:ba:61:3c:
         eb:d0:e1:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyEp9RV6TxDNhO9MjMkE6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZWQzNmFmMTNkYTQ4MmZkZjc5ZmI1NDAzZTUwNzQ4NjBl
ZWNkMGQwHhcNMjUwOTEwMDQwMDMzWhcNMjUwOTExMDQwMDMzWjAzMTEwLwYDVQQD
EyhhNWFjZTcxN2E2MmM1MDkxZDgwZTYxYzEzODE2MmE2OTE3YzMyZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVI7/KmlTjiUepb2wTyKHL+7UzDv
Za9orOJnrZ/xS5Ax5FvdMtp4vjVQsBbWcYGP8HALmL7b1XnG+s+y8YlcjMBwSJ+L
fGJFifrgbR1vW2tsq3p9EIez/qJ9BclP2f/w+l9v7fTd8DzYuviPg6qTPvijrLD+
AhUMKUUP6sfp9+DjEyr5YruSIkevnetgnDd6ePN3TD78NPIXYy6ADwDzwDr01QKm
Wv9k1/8gI8gr9NOPYRJ1RepvwkJkssMIlDNGyAfldJN5RZB1Th1ke3y3w8273ESQ
85Z0qaAnq65EqXaciI9e5NiE9DbG2sDwklZk/NAP1Wbvs/TxYD9RP+8LrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWs5xemLFCR2A5hwTgWKmkXwy4fMB8GA1UdIwQY
MBaAFJvtNq8T2kgv33n7VAPlB0hg7s0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80YjAyODMtYTkwYy00ZDY0LTgzMDEt
ZDIyMWViZDA4MThkLzEvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80YjAyODMtYTkwYy00ZDY0LTgzMDEtZDIyMWViZDA4MThk
LzEvbS0wMnJ4UGFTQ19mZWZ0VUEtVUhTR0R1elEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlxhcljd
L5IL3yIrBhsy95Uh52QWWjAiRnZIRNMCstb4PMADv/1qjzDIzSwjVTd3oKzmXvQv
g5u8s6Oon5awBWWB5kyJYloBCPjL6reqQJbBON4AjPQ6r3sIB22xAhMaj9lhKdRh
jkKU48iqrCYsTwzgBOEeI8PYa2kpFKpGKO9h6kC5Ry36wspJP0VTGa7HsIHqEb4Q
jwwfy10xMs/or+E4fh9yec4UoZUw1QLdStPw93/T4+nlrKHQkAMpqqMhNR+cK88i
TgrKiPDa8BsO/Ms3HC9SVCAQsFCtGD/KLOeRB7LMAYyVxKO0sICRGI7bv6yb1+/v
RzsDumE869DhSg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 13:38:30 2025 by rpki-client