Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File:                     humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier:          9wXDL3pGv84Y9xw4j2YKT0vhP9yyodYkmX8nAZAUDXw=
Subject key identifier:   8A:2E:C0:BB:D8:92:DF:84:53:73:7D:DB:3D:A1:20:08:40:E8:F2:2F
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer:       /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial:       0199F01D241F732A8E5C4BB25EDB2994BF9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number:          055F
Signing time:             Fri 17 Oct 2025 03:01:05 +0000
Manifest this update:     Fri 17 Oct 2025 03:01:05 +0000
Manifest next update:     Sat 18 Oct 2025 03:01:05 +0000
Files and hashes:         1: KOsVP5bePK5N3aNgh_Mf2tcpMMI.roa (hash: 7uBjlY68CN9kyBrkClnf/o/c0vAf129ok+umjgiD7ws=)
                          2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: ilDC/RMbNI+GnT8D5ZtqbzqC3GHbsh1HOWdqZxu7tws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Oct 2025 00:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:f0:1d:24:1f:73:2a:8e:5c:4b:b2:5e:db:29:94:bf:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
        Validity
            Not Before: Oct 17 03:01:05 2025 GMT
            Not After : Oct 18 03:01:05 2025 GMT
        Subject: CN=8a2ec0bbd892df8453737ddb3da1200840e8f22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:69:6f:ee:a0:1b:f9:d3:42:4b:3e:ba:2b:
                    79:76:46:ad:d5:81:cf:89:4d:9f:58:cf:cf:aa:cb:
                    93:0c:53:ba:05:9b:40:27:db:de:7b:9e:15:bb:7d:
                    80:d0:0c:bf:50:4a:77:10:3a:44:7d:76:fc:38:d4:
                    23:35:99:f6:7f:a1:33:de:4d:eb:86:bb:e4:c1:6e:
                    01:e2:d1:69:b0:89:7a:0e:7d:a4:c3:0a:d4:7e:8d:
                    7e:e3:27:24:da:05:09:a4:11:ac:2d:36:69:ce:c4:
                    4e:2a:0e:69:ce:3c:c4:ed:db:05:cb:39:92:83:e3:
                    5e:c4:50:ed:1c:e1:ae:1c:20:54:60:f2:00:79:68:
                    fc:47:a3:8a:f6:5a:08:e7:4f:70:68:77:08:2b:64:
                    b8:0b:8d:36:d2:c8:57:4e:3d:d7:0f:43:f3:da:43:
                    ae:01:fb:82:e7:23:b0:51:27:dd:cc:1d:85:34:8d:
                    4c:d6:e1:c3:79:59:69:1f:7e:63:23:74:a1:1e:3c:
                    2f:d4:57:79:df:15:f8:e9:55:0e:b8:14:f5:1d:14:
                    5d:19:b9:0d:68:52:60:ae:7b:85:dd:90:13:b7:70:
                    b9:e1:a2:10:cc:98:20:f0:e0:dc:8e:65:33:14:4e:
                    de:dd:ee:c1:5c:55:03:75:50:9c:7f:bf:2e:54:a4:
                    14:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2E:C0:BB:D8:92:DF:84:53:73:7D:DB:3D:A1:20:08:40:E8:F2:2F
            X509v3 Authority Key Identifier:
                keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:51:9d:ad:f4:6c:4d:ca:9e:58:79:92:b9:92:5f:68:d3:2a:
         b2:52:d0:5f:82:82:b3:77:2b:7c:05:9c:66:b0:c8:ed:08:2f:
         0e:68:a9:4e:54:0b:da:8d:e4:62:bf:85:cf:b1:4e:f7:1e:5d:
         34:bb:65:3d:49:f6:76:44:b2:1e:e4:43:b5:00:ba:f5:17:64:
         8c:c2:5e:89:6e:51:0a:98:56:f1:d8:c2:4c:8f:c1:db:de:9f:
         bf:f5:85:34:6f:63:59:e7:4b:f7:f1:06:cc:27:8e:e7:37:87:
         aa:43:e9:0a:f2:51:f6:72:0e:83:00:be:bb:62:cd:de:4b:fd:
         c9:48:0d:c7:e2:8b:f5:b2:ea:66:f6:51:eb:c5:6f:02:fd:ce:
         19:e5:46:11:80:53:84:c2:30:9b:39:21:44:fc:6a:37:79:b0:
         08:88:1b:82:36:99:43:b7:65:ef:d9:c8:d7:c0:cb:b5:4a:f4:
         38:bf:6f:0e:ea:ed:fb:3d:77:a0:99:50:77:e6:4d:b4:88:5b:
         48:6e:43:7c:ce:80:fc:0d:90:32:fc:32:21:c8:80:e9:b1:3e:
         a9:58:23:92:f9:7d:54:91:dd:1d:a0:11:c4:db:bb:3a:24:57:
         9a:5e:51:ac:75:d3:ac:18:d9:cc:6b:3d:82:47:db:cf:3e:61:
         e8:46:d2:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnwHSQfcyqOXEuyXtsplL+fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZTk5MTM0MTcxYjU4NjNmNjJmMjJiN2Q3YWJmNzQwMzQ5
NTI4ZWMwHhcNMjUxMDE3MDMwMTA1WhcNMjUxMDE4MDMwMTA1WjAzMTEwLwYDVQQD
Eyg4YTJlYzBiYmQ4OTJkZjg0NTM3MzdkZGIzZGExMjAwODQwZThmMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Zpb+6gG/nTQks+uit5dkat1YHP
iU2fWM/PqsuTDFO6BZtAJ9vee54Vu32A0Ay/UEp3EDpEfXb8ONQjNZn2f6Ez3k3r
hrvkwW4B4tFpsIl6Dn2kwwrUfo1+4yck2gUJpBGsLTZpzsROKg5pzjzE7dsFyzmS
g+NexFDtHOGuHCBUYPIAeWj8R6OK9loI509waHcIK2S4C4020shXTj3XD0Pz2kOu
AfuC5yOwUSfdzB2FNI1M1uHDeVlpH35jI3ShHjwv1Fd53xX46VUOuBT1HRRdGbkN
aFJgrnuF3ZATt3C54aIQzJgg8ODcjmUzFE7e3e7BXFUDdVCcf78uVKQUWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIouwLvYkt+EU3N92z2hIAhA6PIvMB8GA1UdIwQY
MBaAFIbpkTQXG1hj9i8it9er90A0lSjsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQt
ZGE5NTgwOGJhMmMxLzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMWI1ZWMtNTJmZi00ZWNiLWIzZmQtZGE5NTgwOGJhMmMx
LzEvaHVtUk5CY2JXR1AyTHlLMzE2djNRRFNWS093LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVGdrfRs
TcqeWHmSuZJfaNMqslLQX4KCs3crfAWcZrDI7QgvDmipTlQL2o3kYr+Fz7FO9x5d
NLtlPUn2dkSyHuRDtQC69RdkjMJeiW5RCphW8djCTI/B296fv/WFNG9jWedL9/EG
zCeO5zeHqkPpCvJR9nIOgwC+u2LN3kv9yUgNx+KL9bLqZvZR68VvAv3OGeVGEYBT
hMIwmzkhRPxqN3mwCIgbgjaZQ7dl79nI18DLtUr0OL9vDurt+z13oJlQd+ZNtIhb
SG5DfM6A/A2QMvwyIciA6bE+qVgjkvl9VJHdHaARxNu7OiRXml5RrHXTrBjZzGs9
gkfbzz5h6EbSrQ==
-----END CERTIFICATE-----
Generated at Fri Oct 17 09:47:59 2025 by rpki-client