Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File:                     N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier:          9Yu18xhh3g29+FiO6NaBUDL8SR4RYp2MOA14j9oIcN4=
Subject key identifier:   FA:9D:93:C7:4E:7B:45:1F:E3:E7:9E:AD:F7:79:3E:27:AB:FB:FA:99
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer:       /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial:       0199FCC672299E0EB10E051944A00E933249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number:          096B
Signing time:             Sun 19 Oct 2025 14:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:27 +0000
Files and hashes:         1: 7myDqZoO0D52fYkn1KhaJrD96EE.roa (hash: yHoSO6m/e9uh7PHZ1aPdH1Xie0fMoLfRWey6tzleRjk=)
                          2: BdJsQb2Wyhj6V0MXrOpAeFMeHNc.roa (hash: BCOWfpe+Hm7MDisoXCkcr8quTvjHMSMJ8WxC+uEAJgk=)
                          3: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: GYJGxZoxffV3RJlWG238PGN4GdkZGbPisozfDF9PNuo=)
                          4: RmPUZU9rgiug_5WIY_aOFDQOqq4.roa (hash: Z4A1GoFiN/7vwrzFbweE6fGSkI6jo7WoF/vQ8o3WdYI=)
                          5: VliM74cUB27zXPoFL0FWOeXRIlk.roa (hash: 0/MfIsQIxcICHCrqkcEZGbkULpAHKRw0QMQaxLs2zh8=)
                          6: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:72:29:9e:0e:b1:0e:05:19:44:a0:0e:93:32:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
        Validity
            Not Before: Oct 19 14:01:27 2025 GMT
            Not After : Oct 20 14:01:27 2025 GMT
        Subject: CN=fa9d93c74e7b451fe3e79eadf7793e27abfbfa99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5a:3b:90:a8:1e:ce:ec:47:0f:9e:58:3a:8b:
                    ce:31:f8:7d:d1:6c:cb:2d:e2:95:f1:cb:d1:66:b2:
                    72:75:9a:df:6d:90:f8:c3:ef:b9:de:42:5d:80:64:
                    aa:24:d3:e3:a5:64:15:4f:05:71:5b:22:a2:d5:82:
                    f7:e8:35:88:1b:bf:2d:17:79:55:24:21:cf:cf:b0:
                    6c:45:5e:75:22:b6:b4:db:6c:12:9b:63:a3:93:21:
                    34:1b:57:4c:f9:96:74:9d:16:b5:d2:c7:af:2d:e1:
                    18:80:49:91:ff:d3:44:70:13:25:0b:ce:64:f1:40:
                    b9:98:a2:1f:fc:03:2d:08:4f:97:f9:b0:6c:eb:74:
                    37:a9:48:62:7f:d3:11:42:e8:bc:1d:49:10:a6:2b:
                    54:6b:0d:5e:ff:b7:74:c1:6e:f5:38:29:86:91:7c:
                    4d:38:6b:84:a9:37:a0:9b:7f:78:d7:f1:f6:40:4f:
                    65:02:7a:13:9d:b7:13:b5:45:e6:5d:ff:1a:1e:f3:
                    82:23:3f:94:ca:4b:92:cd:70:51:b5:d9:6a:90:c2:
                    fa:5d:32:79:80:dd:29:fe:c6:83:36:39:a3:3a:f2:
                    81:a1:74:76:74:44:1f:fc:80:de:b7:8e:09:50:b6:
                    bb:6c:4e:f5:5e:6f:ed:97:c1:09:1e:fe:6d:18:8f:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9D:93:C7:4E:7B:45:1F:E3:E7:9E:AD:F7:79:3E:27:AB:FB:FA:99
            X509v3 Authority Key Identifier:
                keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:97:91:e7:2d:b0:71:09:2f:3e:2b:18:11:22:b2:d5:14:d7:
         c7:64:4c:ae:a8:d7:ec:eb:65:65:71:13:ae:bf:cd:0f:c1:d4:
         f5:e2:b6:7e:ab:88:4e:67:03:dc:ab:2f:1e:fb:31:54:56:e8:
         48:87:7f:f8:6e:3e:d6:ad:2d:5e:be:32:7b:81:d7:91:ef:4f:
         23:63:f7:95:f7:a1:d0:68:9c:7d:aa:b9:83:c6:44:92:eb:00:
         8b:c6:b7:ab:aa:8b:fc:08:ed:bc:84:81:09:51:11:b2:9a:5d:
         08:6a:d3:d6:3f:18:e8:3e:0b:75:4d:d3:77:de:79:e4:73:8a:
         64:9a:a6:36:b7:14:86:d1:f7:a4:40:75:59:05:c0:51:5f:73:
         9c:d5:84:88:8e:1b:89:56:c5:cd:0b:78:5e:63:c2:22:0c:ef:
         6c:92:9a:79:49:e3:f6:de:d4:d8:62:be:00:64:e4:53:8d:af:
         ff:0a:e4:35:e9:e2:14:ac:9a:eb:3b:a5:41:57:8f:e7:ce:3c:
         c4:a8:f5:49:a7:4c:28:62:1e:ee:21:71:43:06:b4:97:c3:0b:
         d5:e5:ed:04:04:c1:f6:d6:18:cb:38:99:dd:d4:4f:69:6c:14:
         8c:5e:f7:7c:e6:6f:aa:bd:8f:6a:76:4c:97:96:13:6e:60:91:
         2a:13:b9:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnIpng6xDgUZRKAOkzJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDMxZjFiZTlmZGMyNDE5MDk4NDc5Y2RlNDU3YmJmNzk1
NzE3NTkwHhcNMjUxMDE5MTQwMTI3WhcNMjUxMDIwMTQwMTI3WjAzMTEwLwYDVQQD
EyhmYTlkOTNjNzRlN2I0NTFmZTNlNzllYWRmNzc5M2UyN2FiZmJmYTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lo7kKgezuxHD55YOovOMfh90WzL
LeKV8cvRZrJydZrfbZD4w++53kJdgGSqJNPjpWQVTwVxWyKi1YL36DWIG78tF3lV
JCHPz7BsRV51Ira022wSm2OjkyE0G1dM+ZZ0nRa10sevLeEYgEmR/9NEcBMlC85k
8UC5mKIf/AMtCE+X+bBs63Q3qUhif9MRQui8HUkQpitUaw1e/7d0wW71OCmGkXxN
OGuEqTegm3941/H2QE9lAnoTnbcTtUXmXf8aHvOCIz+UykuSzXBRtdlqkML6XTJ5
gN0p/saDNjmjOvKBoXR2dEQf/IDet44JULa7bE71Xm/tl8EJHv5tGI8YLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqdk8dOe0Uf4+eerfd5Pier+/qZMB8GA1UdIwQY
MBaAFDdDHxvp/cJBkJhHnN5Fe795VxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYt
NjE1OTYxMzEyYjUyLzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYtNjE1OTYxMzEyYjUy
LzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJeR5y2w
cQkvPisYESKy1RTXx2RMrqjX7OtlZXETrr/ND8HU9eK2fquITmcD3KsvHvsxVFbo
SId/+G4+1q0tXr4ye4HXke9PI2P3lfeh0Gicfaq5g8ZEkusAi8a3q6qL/AjtvISB
CVERsppdCGrT1j8Y6D4LdU3Td9555HOKZJqmNrcUhtH3pEB1WQXAUV9znNWEiI4b
iVbFzQt4XmPCIgzvbJKaeUnj9t7U2GK+AGTkU42v/wrkNeniFKya6zulQVeP5848
xKj1SadMKGIe7iFxQwa0l8ML1eXtBATB9tYYyziZ3dRPaWwUjF73fOZvqr2PanZM
l5YTbmCRKhO5Nw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:00:31 2025 by rpki-client