Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
File:                     jswinlaZEFgoVkt4UJ87cvMJCiE.mft (raw, json)
Hash identifier:          OKA1x5NI8r6yeqNtq8vxTT0GUe71Ecxio4dDKNXu/+g=
Subject key identifier:   FB:9E:62:ED:53:8A:DC:B5:5C:1F:F7:B5:18:72:4B:82:B8:37:FB:BF
Authority key identifier: 8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21
Certificate issuer:       /CN=8ecc229e5699105828564b78509f3b72f3090a21
Certificate serial:       019A22C0734BE66A30811D07D71ADEC41E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
Manifest number:          16FE
Signing time:             Sun 26 Oct 2025 23:00:28 +0000
Manifest this update:     Sun 26 Oct 2025 23:00:28 +0000
Manifest next update:     Mon 27 Oct 2025 23:00:28 +0000
Files and hashes:         1: FURjaUQ0FEbchTkhcxeSRtrU1s4.roa (hash: jQVRJAAAyS8YQn84udlC/TaV1qdxFSfvYs7sBZO1tP0=)
                          2: K5vbAl_H3B87djRm_AqpMSGgebs.roa (hash: Fe41AX22b8kKGMiquA7Aakj+0l+wq87HyZLc6RPvrEg=)
                          3: jswinlaZEFgoVkt4UJ87cvMJCiE.crl (hash: cNFtegxnlGK6pdkM2c72CPM5eQaxgDiLEAp9YrWNQAA=)
                          4: t8cq4b1nAfG-fC4vwdKSmjzZztc.roa (hash: URrKscem9x14TGL4Viw7da7kLuo3IZFxvYHMeZaxOEs=)
                          5: xqlVZBB9sO3vWj8zwFa7d_DV0K8.roa (hash: WJGw9tR1uFvJvx7voYo2acpZQ7m9lC9bCrk6L8c57Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:c0:73:4b:e6:6a:30:81:1d:07:d7:1a:de:c4:1e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ecc229e5699105828564b78509f3b72f3090a21
        Validity
            Not Before: Oct 26 23:00:28 2025 GMT
            Not After : Oct 27 23:00:28 2025 GMT
        Subject: CN=fb9e62ed538adcb55c1ff7b518724b82b837fbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:ec:22:0f:03:a9:ad:0e:af:c9:4e:27:c2:
                    1e:c6:29:3b:f6:91:6b:55:30:b6:d1:cf:4a:3d:f4:
                    ee:51:05:52:23:8b:66:b8:77:a7:e3:20:a2:78:e9:
                    f2:50:c1:1f:66:75:d4:f6:50:67:2e:d6:22:43:1e:
                    14:46:72:97:8c:55:cd:83:4f:b6:8c:5d:b3:cf:89:
                    d0:10:38:bd:65:05:68:f3:c6:93:08:4a:5c:93:72:
                    7c:c7:a8:4a:6e:9c:59:17:e9:35:c8:b2:79:9a:91:
                    36:66:12:15:a4:71:4b:11:3d:96:4d:53:18:9d:0d:
                    fd:41:f3:c4:2c:03:1a:b4:01:10:35:0b:26:fc:e4:
                    01:3d:57:17:02:18:3e:90:68:47:31:de:37:46:e3:
                    80:73:18:58:25:93:14:b3:0f:25:d8:ec:50:e6:56:
                    37:ff:7d:8d:0c:bb:c3:d1:68:63:3c:29:14:97:ca:
                    0c:44:85:6e:33:10:8c:15:96:0e:3f:c7:69:7a:f7:
                    f7:aa:5c:b8:b7:f5:9b:57:84:a5:47:7d:9b:73:7f:
                    85:e5:85:c0:83:ce:a5:7b:4b:ac:0a:e9:aa:c6:bc:
                    ef:2a:94:ea:ef:57:e0:a9:4a:6c:d2:5b:5a:5a:50:
                    41:c1:44:a9:aa:7a:e4:69:18:07:3a:a0:1f:4b:ed:
                    2c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9E:62:ED:53:8A:DC:B5:5C:1F:F7:B5:18:72:4B:82:B8:37:FB:BF
            X509v3 Authority Key Identifier:
                keyid:8E:CC:22:9E:56:99:10:58:28:56:4B:78:50:9F:3B:72:F3:09:0A:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jswinlaZEFgoVkt4UJ87cvMJCiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3060bd-feb2-4986-b9e3-3c9ebc456623/1/jswinlaZEFgoVkt4UJ87cvMJCiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:cc:35:62:95:0e:ef:64:1a:f7:1c:e8:00:33:49:85:3d:5b:
         aa:51:72:4a:6f:60:38:69:30:8a:f4:e5:8e:54:b3:d4:f5:fd:
         f5:c7:b9:08:cd:dd:fd:dc:ac:9d:c2:80:a4:bd:bd:6f:14:c8:
         47:5b:ef:34:bf:e7:78:29:db:fc:12:e9:d6:5e:b2:0c:77:fb:
         24:65:54:2b:c5:68:ab:ec:cf:ff:f9:87:9f:44:f7:5b:56:8c:
         68:fd:f1:24:0c:93:64:a9:ac:06:40:87:0c:fc:65:58:47:6e:
         9d:73:e7:45:ad:86:1e:e8:95:2e:58:7b:b5:8b:c5:1c:ad:9f:
         58:1d:41:4c:7a:1a:77:b3:36:e8:31:c4:05:b0:12:23:c7:95:
         f5:74:dd:e1:bf:8c:f6:b6:40:4d:51:03:9d:3f:3f:0e:fa:6c:
         d6:d1:ec:de:ec:e5:2b:fa:88:e1:26:56:42:c9:0c:bd:64:20:
         bf:99:fd:00:72:88:dc:75:58:3e:33:12:3a:48:b2:82:82:22:
         23:e1:52:8f:29:74:2a:51:1d:1d:7a:5d:5f:b7:4c:af:c8:33:
         5a:58:af:b0:df:e2:e1:07:52:e9:68:ee:a0:b3:f6:01:83:da:
         de:f4:5b:ec:9f:e2:a6:05:c5:16:69:84:82:90:9e:8b:ca:84:
         3b:9b:4a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiwHNL5mowgR0H1xrexB5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlY2MyMjllNTY5OTEwNTgyODU2NGI3ODUwOWYzYjcyZjMw
OTBhMjEwHhcNMjUxMDI2MjMwMDI4WhcNMjUxMDI3MjMwMDI4WjAzMTEwLwYDVQQD
EyhmYjllNjJlZDUzOGFkY2I1NWMxZmY3YjUxODcyNGI4MmI4MzdmYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BrsIg8Dqa0Or8lOJ8Iexik79pFr
VTC20c9KPfTuUQVSI4tmuHen4yCieOnyUMEfZnXU9lBnLtYiQx4URnKXjFXNg0+2
jF2zz4nQEDi9ZQVo88aTCEpck3J8x6hKbpxZF+k1yLJ5mpE2ZhIVpHFLET2WTVMY
nQ39QfPELAMatAEQNQsm/OQBPVcXAhg+kGhHMd43RuOAcxhYJZMUsw8l2OxQ5lY3
/32NDLvD0WhjPCkUl8oMRIVuMxCMFZYOP8dpevf3qly4t/WbV4SlR32bc3+F5YXA
g86le0usCumqxrzvKpTq71fgqUps0ltaWlBBwUSpqnrkaRgHOqAfS+0s1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPueYu1Tity1XB/3tRhyS4K4N/u/MB8GA1UdIwQY
MBaAFI7MIp5WmRBYKFZLeFCfO3LzCQohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMt
M2M5ZWJjNDU2NjIzLzEvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zMDYwYmQtZmViMi00OTg2LWI5ZTMtM2M5ZWJjNDU2NjIz
LzEvanN3aW5sYVpFRmdvVmt0NFVKODdjdk1KQ2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3cw1YpUO
72Qa9xzoADNJhT1bqlFySm9gOGkwivTljlSz1PX99ce5CM3d/dysncKApL29bxTI
R1vvNL/neCnb/BLp1l6yDHf7JGVUK8Voq+zP//mHn0T3W1aMaP3xJAyTZKmsBkCH
DPxlWEdunXPnRa2GHuiVLlh7tYvFHK2fWB1BTHoad7M26DHEBbASI8eV9XTd4b+M
9rZATVEDnT8/Dvps1tHs3uzlK/qI4SZWQskMvWQgv5n9AHKI3HVYPjMSOkiygoIi
I+FSjyl0KlEdHXpdX7dMr8gzWlivsN/i4QdS6WjuoLP2AYPa3vRb7J/ipgXFFmmE
gpCei8qEO5tKZA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:32 2025 by rpki-client