Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
File:                     mwpFcttA2K06pRQevZHpAo51NjE.mft (raw, json)
Hash identifier:          H4mMPplEF3ajxc/ag06+mAIMrnb4hbzsxsfgxsfekHY=
Subject key identifier:   63:38:DE:13:69:0B:20:83:C6:37:B8:42:98:44:52:5F:20:94:73:C2
Authority key identifier: 9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31
Certificate issuer:       /CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
Certificate serial:       019A1EACBD3F0CECC74E824772E4015ECA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
Manifest number:          087A
Signing time:             Sun 26 Oct 2025 04:00:28 +0000
Manifest this update:     Sun 26 Oct 2025 04:00:28 +0000
Manifest next update:     Mon 27 Oct 2025 04:00:28 +0000
Files and hashes:         1: LHiCbbUQ3ZJ_Cn3tRQllJOcd4bU.roa (hash: 0hquK8SkvqQbNfKEbYjZG0icP/g4QwK+sH8IO5xeaXI=)
                          2: mwpFcttA2K06pRQevZHpAo51NjE.crl (hash: DB3uRIOGI9i+d4ptiZmRUuk2g6nUacQSrHBj3b2TAGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:ac:bd:3f:0c:ec:c7:4e:82:47:72:e4:01:5e:ca:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0a4572db40d8ad3aa5141ebd91e9028e753631
        Validity
            Not Before: Oct 26 04:00:28 2025 GMT
            Not After : Oct 27 04:00:28 2025 GMT
        Subject: CN=6338de13690b2083c637b8429844525f209473c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:de:21:91:7c:95:a8:c1:59:92:e7:2e:0c:
                    b2:57:9e:24:74:b1:72:b8:e8:09:3e:3b:a4:a2:fa:
                    1f:20:a3:45:86:d9:82:67:46:33:7c:e2:ce:2d:72:
                    71:20:e3:cc:75:e5:f0:18:69:86:55:bf:43:b6:97:
                    32:87:cf:8a:67:c2:1f:59:98:26:9c:b4:70:9f:36:
                    fc:04:9d:9f:bd:c8:2c:47:79:74:31:80:04:df:95:
                    65:04:5a:31:b9:17:4d:17:30:ef:9a:ee:2f:e5:02:
                    cd:a3:52:5a:67:82:ac:6b:50:9e:ae:2e:35:ca:86:
                    36:d9:fd:f2:c5:67:23:02:ca:58:2d:cc:5d:9b:a9:
                    c7:c0:a4:03:96:d4:52:8d:98:63:5f:e5:73:e5:eb:
                    8b:e8:98:a5:8d:12:b9:ec:74:7a:6e:ef:56:58:af:
                    75:ab:0a:a3:02:8b:29:80:13:6b:9c:ad:4d:74:43:
                    c1:91:d2:d1:6d:e4:11:09:24:af:83:9e:7b:7b:58:
                    4e:8d:a6:85:d9:81:9d:eb:e7:b8:45:06:77:33:0f:
                    cb:76:3a:e3:a3:bd:6a:4b:ec:ba:9d:f6:45:97:13:
                    ef:6c:7d:c7:53:f5:a0:ad:ea:5e:05:6c:b4:4c:40:
                    44:2c:07:f4:52:2a:c9:81:aa:48:ee:cc:07:13:fb:
                    de:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:38:DE:13:69:0B:20:83:C6:37:B8:42:98:44:52:5F:20:94:73:C2
            X509v3 Authority Key Identifier:
                keyid:9B:0A:45:72:DB:40:D8:AD:3A:A5:14:1E:BD:91:E9:02:8E:75:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwpFcttA2K06pRQevZHpAo51NjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5f9b8b-5c39-45eb-a3f2-395141a6cffd/1/mwpFcttA2K06pRQevZHpAo51NjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:7e:4f:37:1f:38:60:94:4c:ac:74:d4:bf:55:7c:47:7b:54:
         84:9e:76:88:b3:90:69:2d:59:c4:fe:2e:46:6e:0a:5e:ad:2a:
         a0:ec:8d:35:61:bc:4e:d0:48:e0:1b:8b:c0:f0:4f:fd:8a:e2:
         aa:82:57:c2:9d:cc:5d:1e:ca:99:78:7e:01:ab:57:4a:e3:5c:
         c9:fc:f7:55:32:c5:fd:20:e0:56:39:68:53:ee:d0:26:71:9a:
         f1:03:84:eb:97:f0:9e:7f:31:97:20:13:f3:25:d6:d3:36:70:
         f8:4a:6b:c8:a4:cf:3d:56:05:84:77:7a:5f:d9:a5:05:90:9c:
         c0:fa:12:42:c0:1e:ad:2c:47:6e:f0:bc:f2:11:99:e2:d1:b1:
         f9:4d:7f:17:f8:92:51:1b:51:4b:43:79:fd:d0:45:04:79:c6:
         ec:b8:4c:ce:f7:5c:ae:a7:44:a7:88:12:32:4f:9c:eb:f6:f5:
         c9:e7:b2:2c:ef:8d:7f:5a:d2:c1:fa:c8:a7:09:cc:e9:a2:cf:
         ac:db:2d:bc:0d:15:ac:87:10:4f:9f:36:6a:08:52:d5:4f:1b:
         08:a9:1c:84:63:b7:6e:69:8b:4d:4c:31:e6:61:7d:58:2b:0c:
         54:98:11:2f:cb:f7:e9:d6:c0:1d:48:f2:ae:b9:d3:8b:23:df:
         94:98:a1:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerL0/DOzHToJHcuQBXspjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGE0NTcyZGI0MGQ4YWQzYWE1MTQxZWJkOTFlOTAyOGU3
NTM2MzEwHhcNMjUxMDI2MDQwMDI4WhcNMjUxMDI3MDQwMDI4WjAzMTEwLwYDVQQD
Eyg2MzM4ZGUxMzY5MGIyMDgzYzYzN2I4NDI5ODQ0NTI1ZjIwOTQ3M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjXeIZF8lajBWZLnLgyyV54kdLFy
uOgJPjukovofIKNFhtmCZ0YzfOLOLXJxIOPMdeXwGGmGVb9Dtpcyh8+KZ8IfWZgm
nLRwnzb8BJ2fvcgsR3l0MYAE35VlBFoxuRdNFzDvmu4v5QLNo1JaZ4Ksa1Ceri41
yoY22f3yxWcjAspYLcxdm6nHwKQDltRSjZhjX+Vz5euL6JiljRK57HR6bu9WWK91
qwqjAospgBNrnK1NdEPBkdLRbeQRCSSvg557e1hOjaaF2YGd6+e4RQZ3Mw/Ldjrj
o71qS+y6nfZFlxPvbH3HU/WgrepeBWy0TEBELAf0UirJgapI7swHE/veZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGM43hNpCyCDxje4QphEUl8glHPCMB8GA1UdIwQY
MBaAFJsKRXLbQNitOqUUHr2R6QKOdTYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXdwRmN0dEEySzA2cFJRZXZaSHBBbzUxTmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZjliOGItNWMzOS00NWViLWEzZjIt
Mzk1MTQxYTZjZmZkLzEvbXdwRmN0dEEySzA2cFJRZXZaSHBBbzUxTmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81ZjliOGItNWMzOS00NWViLWEzZjItMzk1MTQxYTZjZmZk
LzEvbXdwRmN0dEEySzA2cFJRZXZaSHBBbzUxTmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaH5PNx84
YJRMrHTUv1V8R3tUhJ52iLOQaS1ZxP4uRm4KXq0qoOyNNWG8TtBI4BuLwPBP/Yri
qoJXwp3MXR7KmXh+AatXSuNcyfz3VTLF/SDgVjloU+7QJnGa8QOE65fwnn8xlyAT
8yXW0zZw+EpryKTPPVYFhHd6X9mlBZCcwPoSQsAerSxHbvC88hGZ4tGx+U1/F/iS
URtRS0N5/dBFBHnG7LhMzvdcrqdEp4gSMk+c6/b1yeeyLO+Nf1rSwfrIpwnM6aLP
rNstvA0VrIcQT582aghS1U8bCKkchGO3bmmLTUwx5mF9WCsMVJgRL8v36dbAHUjy
rrnTiyPflJihDQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 07:04:49 2025 by rpki-client