Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
File:                     k059UV3emgPC3Ic4mi_KTn1YxOw.mft (raw, json)
Hash identifier:          IuSpydfbxmR+De9zV9VLYijwnuRNCD3+WJH2Sve24yQ=
Subject key identifier:   E5:AE:3F:86:E7:AB:9F:7C:33:94:E0:27:1C:DA:AB:36:48:41:9C:D2
Authority key identifier: 93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC
Certificate issuer:       /CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
Certificate serial:       019A70DC7986F7F8AE15D514E1D86A891C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
Manifest number:          1419
Signing time:             Tue 11 Nov 2025 03:01:28 +0000
Manifest this update:     Tue 11 Nov 2025 03:01:28 +0000
Manifest next update:     Wed 12 Nov 2025 03:01:28 +0000
Files and hashes:         1: Xv-bUtmsrHjQ28dXxWqb3uBJRDg.roa (hash: 0bOsSKKdGKKiMo/FFhxHgHDZgsrzyzkqrbIyGUoQTCk=)
                          2: cL-keBkm4oIskLWJO5aafKhJ0jo.roa (hash: s9gkn4aSVId/ngfYN3hJphayygttMpgwEt/RQqhzDWs=)
                          3: k059UV3emgPC3Ic4mi_KTn1YxOw.crl (hash: nBkNy3eVqybTmvZSDZmMB225vYuV9UhlWRQemqR+LpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 03:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:dc:79:86:f7:f8:ae:15:d5:14:e1:d8:6a:89:1c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934e7d515dde9a03c2dc87389a2fca4e7d58c4ec
        Validity
            Not Before: Nov 11 03:01:28 2025 GMT
            Not After : Nov 12 03:01:28 2025 GMT
        Subject: CN=e5ae3f86e7ab9f7c3394e0271cdaab3648419cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:21:6e:d7:bf:f4:af:d8:a8:50:bf:e3:5a:
                    fb:9e:47:64:b7:5b:ab:4d:46:6e:78:c0:9e:d1:00:
                    48:7e:c0:a9:7f:be:9f:cc:64:4d:8a:81:ca:20:59:
                    2a:65:90:50:fa:04:97:87:22:af:d1:e4:57:27:8a:
                    5a:87:39:01:41:cc:be:d6:40:d4:5c:ff:2d:08:bb:
                    86:05:2b:ed:93:2f:fd:78:1e:1f:80:a5:a0:c3:38:
                    7c:70:59:15:99:39:34:89:b9:38:82:f1:80:de:f6:
                    c6:7f:d1:ae:6a:0e:26:c4:11:21:7e:2e:a8:f9:a5:
                    16:84:b7:d7:06:8b:05:91:27:be:9b:d4:d3:f5:91:
                    d6:92:e1:11:82:24:e2:af:22:04:47:f6:66:fb:68:
                    86:f8:17:e4:21:db:40:9d:91:ec:f3:a5:3e:d6:18:
                    89:45:87:f6:ee:f3:f8:c4:43:71:f5:01:60:b7:04:
                    d1:84:10:25:cb:c5:82:62:7c:08:00:15:8c:7a:fe:
                    8b:9b:3b:b2:0f:06:be:4d:5d:04:0a:b8:8e:4d:09:
                    bf:dd:cc:21:f2:dc:c5:3d:41:0b:d7:5e:f7:07:3f:
                    09:54:f8:b8:01:4a:26:c2:da:48:7c:46:43:3a:06:
                    77:d4:76:18:dc:16:ab:4d:0d:b9:82:56:81:7d:25:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AE:3F:86:E7:AB:9F:7C:33:94:E0:27:1C:DA:AB:36:48:41:9C:D2
            X509v3 Authority Key Identifier:
                keyid:93:4E:7D:51:5D:DE:9A:03:C2:DC:87:38:9A:2F:CA:4E:7D:58:C4:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k059UV3emgPC3Ic4mi_KTn1YxOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/759327-cc9f-4d6d-ac79-9cb8d023cc0b/1/k059UV3emgPC3Ic4mi_KTn1YxOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:36:70:01:d1:e4:e6:f2:51:6c:0f:bb:a4:ed:45:ca:f1:a8:
         8b:2c:51:e2:71:ba:ea:f6:70:53:bc:67:64:a9:44:a3:7f:60:
         70:6c:6d:78:5f:e4:d5:7d:ec:11:f8:56:45:09:4c:58:72:47:
         86:d3:ce:f2:6a:2a:d4:c1:59:cd:2a:28:a2:77:0f:5d:18:17:
         79:74:57:b3:bc:50:29:02:28:a9:97:de:3e:7b:a0:0f:ab:93:
         df:48:d8:d0:62:fb:1f:64:9f:50:7a:09:03:a7:f8:64:98:fc:
         25:24:31:7b:66:bc:99:b8:af:95:61:bd:05:92:8d:b9:04:07:
         a1:e1:78:35:59:30:88:81:df:27:e5:90:ff:5b:cd:bd:07:80:
         6f:41:24:af:b3:93:1f:b9:47:bb:0a:30:87:19:e4:9c:6e:b2:
         88:18:d4:66:82:e8:64:3e:47:5a:b4:bd:a0:6d:59:4e:d5:c5:
         98:0d:f1:1d:d6:31:96:6d:cf:32:29:b1:d7:e6:50:13:ff:89:
         34:57:39:b2:7a:95:90:95:da:93:a4:5a:fe:33:ad:d1:19:d6:
         da:51:3a:49:37:5c:ea:dd:1c:96:6e:99:2c:2c:a2:6f:69:37:
         71:09:33:5a:24:85:72:7f:bf:1e:26:5c:ba:71:26:af:a6:ba:
         a5:bf:5e:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3HmG9/iuFdUU4dhqiRxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNGU3ZDUxNWRkZTlhMDNjMmRjODczODlhMmZjYTRlN2Q1
OGM0ZWMwHhcNMjUxMTExMDMwMTI4WhcNMjUxMTEyMDMwMTI4WjAzMTEwLwYDVQQD
EyhlNWFlM2Y4NmU3YWI5ZjdjMzM5NGUwMjcxY2RhYWIzNjQ4NDE5Y2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv0hbte/9K/YqFC/41r7nkdkt1ur
TUZueMCe0QBIfsCpf76fzGRNioHKIFkqZZBQ+gSXhyKv0eRXJ4pahzkBQcy+1kDU
XP8tCLuGBSvtky/9eB4fgKWgwzh8cFkVmTk0ibk4gvGA3vbGf9Guag4mxBEhfi6o
+aUWhLfXBosFkSe+m9TT9ZHWkuERgiTiryIER/Zm+2iG+BfkIdtAnZHs86U+1hiJ
RYf27vP4xENx9QFgtwTRhBAly8WCYnwIABWMev6LmzuyDwa+TV0ECriOTQm/3cwh
8tzFPUEL1173Bz8JVPi4AUomwtpIfEZDOgZ31HYY3BarTQ25glaBfSUq1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWuP4bnq598M5TgJxzaqzZIQZzSMB8GA1UdIwQY
MBaAFJNOfVFd3poDwtyHOJovyk59WMTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NTkzMjctY2M5Zi00ZDZkLWFjNzkt
OWNiOGQwMjNjYzBiLzEvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83NTkzMjctY2M5Zi00ZDZkLWFjNzktOWNiOGQwMjNjYzBi
LzEvazA1OVVWM2VtZ1BDM0ljNG1pX0tUbjFZeE93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjZwAdHk
5vJRbA+7pO1FyvGoiyxR4nG66vZwU7xnZKlEo39gcGxteF/k1X3sEfhWRQlMWHJH
htPO8moq1MFZzSoooncPXRgXeXRXs7xQKQIoqZfePnugD6uT30jY0GL7H2SfUHoJ
A6f4ZJj8JSQxe2a8mbivlWG9BZKNuQQHoeF4NVkwiIHfJ+WQ/1vNvQeAb0Ekr7OT
H7lHuwowhxnknG6yiBjUZoLoZD5HWrS9oG1ZTtXFmA3xHdYxlm3PMimx1+ZQE/+J
NFc5snqVkJXak6Ra/jOt0RnW2lE6STdc6t0clm6ZLCyib2k3cQkzWiSFcn+/HiZc
unEmr6a6pb9e0w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:02 2025 by rpki-client