Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File:                     XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier:          iJtvtJRj4bQZMunj8mYoAXE5Zs7Eie/k6bhwqHcGoxc=
Subject key identifier:   B3:FE:8B:E2:F0:B4:8D:8F:87:03:5F:87:69:00:79:6D:41:B6:D5:71
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer:       /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial:       019935DBE6AC910FA4C9091B70FC978E1994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number:          063C
Signing time:             Wed 10 Sep 2025 23:00:27 +0000
Manifest this update:     Wed 10 Sep 2025 23:00:27 +0000
Manifest next update:     Thu 11 Sep 2025 23:00:27 +0000
Files and hashes:         1: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (hash: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=)
                          2: U5LzRtt7TqgwcmDyAykCjfC_tyg.roa (hash: MnSBkpXKCh2/fnPZQ+yyW+as55btZcpHuSExX+Fr9KQ=)
                          3: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: /fxvVkHwnDP8Nxz4vnMEbhBv7jzkhURgF6PiEid5fjk=)
                          4: XsQzypEDi3dbORi7Sjru6BV7874.roa (hash: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=)
                          5: ihdmZnPFfRQouiDEX9hoP7FnJXY.roa (hash: vMOPJDVg/5XoKEVMMHXuz77Sx41YI4RzrWjRsAiZbwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:db:e6:ac:91:0f:a4:c9:09:1b:70:fc:97:8e:19:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
        Validity
            Not Before: Sep 10 23:00:27 2025 GMT
            Not After : Sep 11 23:00:27 2025 GMT
        Subject: CN=b3fe8be2f0b48d8f87035f876900796d41b6d571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:94:11:da:93:aa:c1:8e:94:d3:74:e5:11:
                    32:8d:32:8c:1e:89:e2:69:fd:e0:5f:0c:07:cb:27:
                    ce:d7:2d:ae:fa:2f:1a:4d:7a:bf:66:00:2c:a0:a0:
                    28:a9:05:e8:88:12:c6:f5:5a:39:d1:c9:2f:d7:09:
                    7e:e9:fb:51:39:f8:bd:fc:02:08:55:46:a5:72:a2:
                    0e:e7:e7:18:30:bd:02:27:7f:28:13:af:87:ff:16:
                    aa:a6:c0:48:34:04:e1:5c:12:05:d5:12:dd:f2:39:
                    82:0f:78:a0:07:f5:d2:9c:03:30:ba:e9:40:7e:3a:
                    be:2b:24:71:78:5d:49:66:c7:a4:71:74:a0:1d:01:
                    17:7d:4a:40:ba:2f:fb:0d:5a:3d:cb:c8:e0:52:06:
                    a9:a4:59:ea:e2:7a:8f:7a:9b:96:a5:72:ea:fa:ca:
                    85:bf:bc:c2:91:b2:ef:0a:84:55:77:2f:c6:85:e8:
                    b4:97:89:c4:52:61:6a:4f:fa:19:f7:de:c0:bc:b0:
                    f1:22:fb:fb:f7:93:4e:8d:16:c7:e7:8f:04:27:c3:
                    fd:c5:cc:43:b0:80:cc:fd:21:2d:fe:6b:ae:b2:3f:
                    65:e8:45:31:6d:cf:ba:31:f4:df:73:c8:a5:ac:2d:
                    54:e8:39:3d:7a:47:ed:03:47:7c:1d:c5:26:3f:9f:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FE:8B:E2:F0:B4:8D:8F:87:03:5F:87:69:00:79:6D:41:B6:D5:71
            X509v3 Authority Key Identifier:
                keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bc:72:59:04:dd:6f:dc:73:bb:5a:61:04:d4:11:c8:b2:11:
         48:17:ba:02:83:bc:78:b8:43:32:d1:0f:60:9e:61:d2:28:55:
         3b:e8:35:38:75:bc:6b:bf:8f:ba:2d:10:07:c4:93:f1:ae:dc:
         b0:33:05:a1:b1:a7:85:47:74:57:24:b2:4f:73:62:e5:70:8b:
         f2:9e:d1:e5:ef:5d:f9:f6:49:3e:92:1c:e5:bc:48:09:37:56:
         d1:21:ae:5c:30:62:69:ae:3b:d3:20:dc:c7:0b:36:67:bb:71:
         4c:43:bd:29:fe:ab:eb:37:34:d8:ce:bc:ec:db:45:ab:be:09:
         d6:d4:24:f5:92:dd:ec:a5:ac:6f:99:fa:19:4c:4c:fe:6e:1b:
         08:2e:8c:b0:1e:a2:93:9f:7c:54:df:fd:6f:5a:ea:6e:a7:38:
         62:23:13:d6:63:17:ed:a4:e2:db:cf:23:14:e5:5c:d4:b1:d9:
         6f:37:49:c0:21:0e:47:5a:12:39:49:03:5c:b5:2c:03:76:02:
         7e:ee:bb:5e:45:8f:cd:90:7e:8f:6d:36:51:66:5e:59:bb:f9:
         ef:8c:39:8c:08:36:a2:04:83:b9:89:76:f2:26:f9:90:31:4b:
         23:ae:6d:eb:7a:96:b1:34:de:71:ef:47:20:56:5b:50:22:6f:
         2c:89:35:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk12+askQ+kyQkbcPyXjhmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0
NjU4MjQwHhcNMjUwOTEwMjMwMDI3WhcNMjUwOTExMjMwMDI3WjAzMTEwLwYDVQQD
EyhiM2ZlOGJlMmYwYjQ4ZDhmODcwMzVmODc2OTAwNzk2ZDQxYjZkNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EeUEdqTqsGOlNN05REyjTKMHoni
af3gXwwHyyfO1y2u+i8aTXq/ZgAsoKAoqQXoiBLG9Vo50ckv1wl+6ftROfi9/AII
VUalcqIO5+cYML0CJ38oE6+H/xaqpsBINAThXBIF1RLd8jmCD3igB/XSnAMwuulA
fjq+KyRxeF1JZsekcXSgHQEXfUpAui/7DVo9y8jgUgappFnq4nqPepuWpXLq+sqF
v7zCkbLvCoRVdy/Ghei0l4nEUmFqT/oZ997AvLDxIvv795NOjRbH548EJ8P9xcxD
sIDM/SEt/muusj9l6EUxbc+6MfTfc8ilrC1U6Dk9ekftA0d8HcUmP592rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP+i+LwtI2PhwNfh2kAeW1BttVxMB8GA1UdIwQY
MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt
ZTFiNTM1NTZjMWMzLzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz
LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7xyWQTd
b9xzu1phBNQRyLIRSBe6AoO8eLhDMtEPYJ5h0ihVO+g1OHW8a7+Pui0QB8ST8a7c
sDMFobGnhUd0VySyT3Ni5XCL8p7R5e9d+fZJPpIc5bxICTdW0SGuXDBiaa470yDc
xws2Z7txTEO9Kf6r6zc02M687NtFq74J1tQk9ZLd7KWsb5n6GUxM/m4bCC6MsB6i
k598VN/9b1rqbqc4YiMT1mMX7aTi288jFOVc1LHZbzdJwCEOR1oSOUkDXLUsA3YC
fu67XkWPzZB+j202UWZeWbv574w5jAg2ogSDuYl28ib5kDFLI65t63qWsTTece9H
IFZbUCJvLIk13A==
-----END CERTIFICATE-----
Generated at Thu Sep 11 05:44:45 2025 by rpki-client