Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
File:                     lHS1JBtjw6-9s0LMR2NMVasv-EY.mft (raw, json)
Hash identifier:          72NqLcRbCCkC1vbTDAMaLLlPz5HxRuv+3+3GfVI/bLE=
Subject key identifier:   29:A4:70:ED:A2:C1:3C:24:5E:C5:BF:41:8C:53:F7:88:0B:71:14:A0
Authority key identifier: 94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46
Certificate issuer:       /CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
Certificate serial:       0199FAD7B0ED24CC4795EF7CF3353DC14EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
Manifest number:          01F1
Signing time:             Sun 19 Oct 2025 05:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:03 +0000
Files and hashes:         1: _esauh0bwxU4lPvXm-nLiVYT1MY.roa (hash: dg/Xh0ZCbSrkvMtC9w3xbJVNO3y7y3uRRsJgcH21rXg=)
                          2: lHS1JBtjw6-9s0LMR2NMVasv-EY.crl (hash: NyOyCc2z5rlzKIYeeCBqSN8KrP+v1VbMFMtLRSxOPlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:b0:ed:24:cc:47:95:ef:7c:f3:35:3d:c1:4e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9474b5241b63c3afbdb342cc47634c55ab2ff846
        Validity
            Not Before: Oct 19 05:01:03 2025 GMT
            Not After : Oct 20 05:01:03 2025 GMT
        Subject: CN=29a470eda2c13c245ec5bf418c53f7880b7114a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:e2:cc:04:2b:77:a4:e0:9f:95:f5:63:87:
                    63:5b:3a:5e:b9:4f:aa:70:eb:82:6c:92:51:2e:65:
                    2b:c6:02:0e:70:95:a8:f3:ec:a7:9e:70:21:1d:43:
                    38:93:66:e9:32:99:6a:cd:d0:48:6e:ab:9d:7d:b8:
                    62:2b:2b:cf:08:a2:c1:4a:84:df:18:6a:5f:d0:9e:
                    ec:59:7b:a2:d0:4a:ee:5f:a1:8b:c6:6a:04:4f:a1:
                    a0:88:4d:e9:d6:1c:57:22:53:2b:d9:af:a1:dc:34:
                    fe:d6:da:ae:04:33:e6:7d:25:45:94:96:fe:60:d3:
                    7b:78:23:7e:07:a9:4a:d2:3d:18:13:3d:ce:91:d8:
                    5d:49:43:0a:73:4b:36:28:14:ae:64:fd:a0:8c:29:
                    2a:a1:57:fb:05:3f:6e:93:26:c4:ba:86:6e:0d:1e:
                    ab:a5:b2:2f:2b:69:5e:cc:28:46:ee:dd:17:d4:85:
                    8f:ec:4b:c9:10:74:ae:4c:36:20:c9:b1:7d:f7:7b:
                    9a:33:db:99:02:47:fb:70:8b:42:48:b1:4b:4f:59:
                    e7:f5:37:3c:60:58:6a:95:0e:90:ed:9b:28:c8:17:
                    2b:cd:1a:2e:fb:df:ca:ba:9d:f2:13:1b:01:5f:6f:
                    57:74:c5:d7:fe:07:6a:dc:a8:43:72:ec:79:3d:88:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A4:70:ED:A2:C1:3C:24:5E:C5:BF:41:8C:53:F7:88:0B:71:14:A0
            X509v3 Authority Key Identifier:
                keyid:94:74:B5:24:1B:63:C3:AF:BD:B3:42:CC:47:63:4C:55:AB:2F:F8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHS1JBtjw6-9s0LMR2NMVasv-EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7f02b0-d9ad-4f5d-9b69-48f621acb9b7/1/lHS1JBtjw6-9s0LMR2NMVasv-EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:2f:9f:0b:e3:8d:66:4f:64:74:4c:48:9b:00:7d:67:b3:
         cf:6d:bd:95:30:15:14:27:33:43:1f:fc:0f:11:4b:06:66:40:
         21:93:0d:be:31:ca:46:7e:ec:d9:76:53:60:25:1c:ca:bc:54:
         d8:a3:f1:2a:bb:e5:bf:75:2f:a0:0e:eb:bc:73:9c:95:d6:75:
         85:b5:6b:1d:ce:41:f9:63:e1:50:06:5d:df:94:36:0e:bc:81:
         f6:09:17:19:a8:04:91:c6:a6:54:b2:9c:60:5a:8c:3e:df:24:
         98:07:ce:03:1a:3c:28:e8:7b:54:63:b6:4c:82:60:f8:57:90:
         c2:28:62:6d:57:ca:95:12:7d:58:cc:d8:95:56:bb:90:e9:67:
         59:dc:d6:f3:74:16:39:45:42:b5:0a:b4:62:61:02:aa:24:69:
         be:e3:e7:ef:ea:d1:a5:88:4f:39:25:80:10:f6:4d:8e:70:60:
         a9:a0:43:2a:72:17:30:49:12:88:b5:41:d0:2d:53:f4:ae:ae:
         ed:74:0d:a2:e8:25:a2:bc:f9:63:15:1f:55:9d:70:cb:83:60:
         f7:0b:ae:f7:9a:4d:18:9a:19:a9:fa:d1:d4:80:28:6d:12:ca:
         4e:b4:57:bc:e3:8c:40:a0:aa:a3:43:38:1f:f8:16:23:22:56:
         4b:92:9f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn617DtJMxHle988zU9wU7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzRiNTI0MWI2M2MzYWZiZGIzNDJjYzQ3NjM0YzU1YWIy
ZmY4NDYwHhcNMjUxMDE5MDUwMTAzWhcNMjUxMDIwMDUwMTAzWjAzMTEwLwYDVQQD
EygyOWE0NzBlZGEyYzEzYzI0NWVjNWJmNDE4YzUzZjc4ODBiNzExNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6DizAQrd6Tgn5X1Y4djWzpeuU+q
cOuCbJJRLmUrxgIOcJWo8+ynnnAhHUM4k2bpMplqzdBIbqudfbhiKyvPCKLBSoTf
GGpf0J7sWXui0EruX6GLxmoET6GgiE3p1hxXIlMr2a+h3DT+1tquBDPmfSVFlJb+
YNN7eCN+B6lK0j0YEz3OkdhdSUMKc0s2KBSuZP2gjCkqoVf7BT9ukybEuoZuDR6r
pbIvK2lezChG7t0X1IWP7EvJEHSuTDYgybF993uaM9uZAkf7cItCSLFLT1nn9Tc8
YFhqlQ6Q7ZsoyBcrzRou+9/Kup3yExsBX29XdMXX/gdq3KhDcux5PYgsWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmkcO2iwTwkXsW/QYxT94gLcRSgMB8GA1UdIwQY
MBaAFJR0tSQbY8OvvbNCzEdjTFWrL/hGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjkt
NDhmNjIxYWNiOWI3LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83ZjAyYjAtZDlhZC00ZjVkLTliNjktNDhmNjIxYWNiOWI3
LzEvbEhTMUpCdGp3Ni05czBMTVIyTk1WYXN2LUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeIvnwvj
jWZPZHRMSJsAfWezz229lTAVFCczQx/8DxFLBmZAIZMNvjHKRn7s2XZTYCUcyrxU
2KPxKrvlv3UvoA7rvHOcldZ1hbVrHc5B+WPhUAZd35Q2DryB9gkXGagEkcamVLKc
YFqMPt8kmAfOAxo8KOh7VGO2TIJg+FeQwihibVfKlRJ9WMzYlVa7kOlnWdzW83QW
OUVCtQq0YmECqiRpvuPn7+rRpYhPOSWAEPZNjnBgqaBDKnIXMEkSiLVB0C1T9K6u
7XQNouglorz5YxUfVZ1wy4Ng9wuu95pNGJoZqfrR1IAobRLKTrRXvOOMQKCqo0M4
H/gWIyJWS5KfRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:18 2025 by rpki-client