Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
File:                     HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft (raw, json)
Hash identifier:          h0xmkZ8YVq16dJZg1kzoqkpvHME5CKCsbqlaFCtzmd0=
Subject key identifier:   52:2D:93:9C:DE:00:C9:1D:4E:24:68:D7:9B:25:98:69:01:02:5B:54
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Certificate issuer:       /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial:       019A12040C0887A852276D54D077C8652601
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
Manifest number:          0C98
Signing time:             Thu 23 Oct 2025 17:00:46 +0000
Manifest this update:     Thu 23 Oct 2025 17:00:46 +0000
Manifest next update:     Fri 24 Oct 2025 17:00:46 +0000
Files and hashes:         1: 89ZdTmp7S2NunnuoGSf_2vtgPY8.roa (hash: bPa9rSCPFw03d28VXPa3N71Ifao0FpVDusG0bNmLxwE=)
                          2: HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl (hash: n1mm/8n/jJ3zQdNlua9LxxWj6zR+pZQchKioJ9hy0+0=)
                          3: f9__0EOOD2bbqws_SYovsEadu64.roa (hash: rdpqu3t3b72JgKQs0LjFSsEK4eL5Gx3rtjq221xpO1U=)
                          4: fTWM1zKEU10CvPHR7x8xLqGMmBk.roa (hash: SLdOjrmdsiTj6gBhRX9Fmq3urmuPys2J1yZIBUXb9kE=)
                          5: kc5iSTCS2Wj8DpgYXFD3Z8kI0-w.roa (hash: uGP+3hnsQtTfTdEoExGqurh/AYLhmRguK0+ycdKSTRo=)
                          6: ozQ0B3nPhW9yGj6eBSj3bv5_jKQ.roa (hash: 52z0loKl64IpfsA33HSHXJF3VKeUhqS7Sku5ZE137X0=)
                          7: rZWoVR8go-ETzcAh50MLSM8Nmkw.roa (hash: cgavxAlOshWtjoy57HjDWJFVrT3Fp0YJu3pSKWnrDaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 14:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:12:04:0c:08:87:a8:52:27:6d:54:d0:77:c8:65:26:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
        Validity
            Not Before: Oct 23 17:00:46 2025 GMT
            Not After : Oct 24 17:00:46 2025 GMT
        Subject: CN=522d939cde00c91d4e2468d79b25986901025b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:09:a5:ee:25:ad:95:bd:a9:32:28:e3:a2:e1:
                    47:48:c8:ad:21:33:0f:06:e1:b9:3d:78:ce:85:cf:
                    fe:9a:b6:d0:1e:df:1e:cd:2c:a9:4f:5a:cf:21:2f:
                    70:31:00:e8:42:f8:6b:78:41:50:02:6e:7d:6b:94:
                    ca:db:f9:1b:ab:b2:00:fb:df:63:62:e3:b1:bb:e5:
                    a6:85:84:0a:51:7c:58:8d:5e:4e:72:af:70:9b:48:
                    87:1f:d3:f1:b3:dc:3c:51:9b:dc:d9:d4:a8:73:99:
                    d0:bd:18:85:3e:5c:8f:2c:0e:ad:d8:5a:b2:11:f4:
                    b8:d8:1d:5c:4d:e4:d4:98:6b:77:26:ef:6a:11:2f:
                    94:72:c7:b3:89:55:31:55:5e:02:d2:f5:26:51:cd:
                    cc:3b:f6:d0:49:fe:16:36:16:f6:9b:82:ae:85:a0:
                    0f:f6:e3:9d:e5:d6:ea:d3:3d:e2:dd:62:96:7e:e8:
                    29:14:95:e7:98:4f:c5:9a:ee:2f:4b:ec:99:8c:46:
                    c3:11:14:c2:b4:a7:99:b6:73:66:b3:bb:d7:0c:a5:
                    f8:ab:24:1c:d6:5a:a3:5c:10:3a:2b:58:07:40:8a:
                    c1:c2:29:d3:50:aa:0c:72:ea:da:d0:02:37:fd:04:
                    b9:9f:af:b5:a4:e4:0f:ed:61:05:3c:3a:1e:fc:58:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2D:93:9C:DE:00:C9:1D:4E:24:68:D7:9B:25:98:69:01:02:5B:54
            X509v3 Authority Key Identifier:
                keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b1:51:55:99:be:f4:a8:10:03:d0:01:03:ea:80:13:51:a9:
         cc:94:34:d0:d6:4f:e5:3e:28:fe:a3:62:06:b2:cb:45:e5:f7:
         a6:e4:d2:ef:6a:24:53:83:52:4c:43:94:0b:14:83:be:e6:ae:
         43:d3:a6:82:bd:0d:76:3c:e6:47:e2:07:f5:e2:8a:5b:5f:d1:
         ca:63:83:65:c6:fd:47:d4:f9:23:63:77:9f:05:2d:a3:48:1e:
         6f:17:e8:e6:39:c1:73:03:3e:79:5c:c3:27:46:23:f2:a2:b3:
         e5:09:19:60:6b:95:3e:9d:d0:47:be:9d:e9:d3:7c:b1:96:a0:
         69:26:69:d5:84:aa:c3:e1:3c:e4:2d:2c:5e:45:a7:f0:79:09:
         6f:43:2e:a1:85:1f:fe:25:fe:ba:72:11:0c:56:d3:85:b3:a6:
         06:62:fc:35:bc:df:29:80:1b:27:40:02:43:1a:b0:c8:0e:3c:
         8f:c7:34:fb:f9:50:8f:a5:2d:c4:1e:4b:35:d3:fe:33:5c:dd:
         98:dd:c9:6b:65:a0:c4:e6:62:c0:b2:c8:c8:7a:56:91:a5:ba:
         42:29:00:94:3a:70:4c:3e:c0:4c:f1:da:b4:5c:3f:fb:9d:1b:
         6d:9c:97:3d:9f:cd:56:f3:45:7e:11:2c:fd:00:86:a7:00:90:
         d6:cb:d5:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoSBAwIh6hSJ21U0HfIZSYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1
NDEyNTUwHhcNMjUxMDIzMTcwMDQ2WhcNMjUxMDI0MTcwMDQ2WjAzMTEwLwYDVQQD
Eyg1MjJkOTM5Y2RlMDBjOTFkNGUyNDY4ZDc5YjI1OTg2OTAxMDI1YjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wml7iWtlb2pMijjouFHSMitITMP
BuG5PXjOhc/+mrbQHt8ezSypT1rPIS9wMQDoQvhreEFQAm59a5TK2/kbq7IA+99j
YuOxu+WmhYQKUXxYjV5Ocq9wm0iHH9Pxs9w8UZvc2dSoc5nQvRiFPlyPLA6t2Fqy
EfS42B1cTeTUmGt3Ju9qES+UcseziVUxVV4C0vUmUc3MO/bQSf4WNhb2m4KuhaAP
9uOd5dbq0z3i3WKWfugpFJXnmE/Fmu4vS+yZjEbDERTCtKeZtnNms7vXDKX4qyQc
1lqjXBA6K1gHQIrBwinTUKoMcura0AI3/QS5n6+1pOQP7WEFPDoe/FiXAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFItk5zeAMkdTiRo15slmGkBAltUMB8GA1UdIwQY
MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt
ZGY3OTNhOTQwYmFiLzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi
LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7FRVZm+
9KgQA9ABA+qAE1GpzJQ00NZP5T4o/qNiBrLLReX3puTS72okU4NSTEOUCxSDvuau
Q9Omgr0NdjzmR+IH9eKKW1/RymODZcb9R9T5I2N3nwUto0gebxfo5jnBcwM+eVzD
J0Yj8qKz5QkZYGuVPp3QR76d6dN8sZagaSZp1YSqw+E85C0sXkWn8HkJb0MuoYUf
/iX+unIRDFbThbOmBmL8NbzfKYAbJ0ACQxqwyA48j8c0+/lQj6UtxB5LNdP+M1zd
mN3Ja2WgxOZiwLLIyHpWkaW6QikAlDpwTD7ATPHatFw/+50bbZyXPZ/NVvNFfhEs
/QCGpwCQ1svVaw==
-----END CERTIFICATE-----
Generated at Thu Oct 23 21:04:39 2025 by rpki-client