Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
File:                     mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft (raw, json)
Hash identifier:          3ovRwYqzwRDNgL/GV6VZXUnhUVlvvBlfZUXVXyQR+U0=
Subject key identifier:   50:10:94:6B:40:9B:51:43:6E:F2:73:ED:41:63:0C:BE:A8:BA:78:09
Authority key identifier: 98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48
Certificate issuer:       /CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
Certificate serial:       0199FE7DE5F18C714219E88D937A2D042829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
Manifest number:          0294
Signing time:             Sun 19 Oct 2025 22:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:27 +0000
Files and hashes:         1: mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl (hash: WsvlgCMB6EkAjK9OS2f2+SdLZZIjoGk0XmqpdUUlPxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:e5:f1:8c:71:42:19:e8:8d:93:7a:2d:04:28:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987aba6f74455c4fa3abe23aa823067ecfc33c48
        Validity
            Not Before: Oct 19 22:01:27 2025 GMT
            Not After : Oct 20 22:01:27 2025 GMT
        Subject: CN=5010946b409b51436ef273ed41630cbea8ba7809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6d:de:75:af:c4:b1:21:12:ae:a9:45:d6:73:
                    bc:47:55:a0:eb:b7:ae:d6:f3:98:59:6f:b5:e5:92:
                    be:19:77:07:9d:71:26:fb:5d:0a:f4:62:0e:c3:9b:
                    cc:ab:7a:36:ef:6a:c5:5d:67:ea:18:e6:b7:82:49:
                    f7:19:4f:8d:a6:6e:dc:b1:47:73:4f:a4:01:8c:66:
                    e8:2c:e4:d5:82:08:fd:0e:e2:18:97:d2:de:be:fa:
                    de:f3:a2:4f:1a:17:ce:45:f6:79:ae:75:0b:b4:c5:
                    b6:e7:e5:1e:17:f8:01:da:bf:69:82:21:d3:57:fb:
                    cf:f1:8d:88:19:a4:8d:ad:a0:27:de:f1:92:44:76:
                    fe:d6:05:2c:95:db:62:e2:6a:93:73:99:c6:40:b0:
                    f8:ee:34:4a:ca:b8:6c:c2:cf:e4:0e:1d:8c:ad:87:
                    98:8d:12:39:19:0b:fd:7c:f2:f5:95:b9:a6:3e:ac:
                    5d:31:42:b0:4c:32:25:dd:19:7c:e9:68:41:43:22:
                    19:70:2a:e5:ad:b8:2d:8e:be:40:09:f2:46:ba:c5:
                    cf:db:6a:cf:70:1a:0f:9d:9f:00:ae:20:f9:e5:41:
                    d3:56:55:83:3f:96:ae:2d:f0:9e:d7:72:ac:3d:01:
                    9d:20:d7:41:f2:92:d8:29:9f:24:56:ec:e0:00:7e:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:94:6B:40:9B:51:43:6E:F2:73:ED:41:63:0C:BE:A8:BA:78:09
            X509v3 Authority Key Identifier:
                keyid:98:7A:BA:6F:74:45:5C:4F:A3:AB:E2:3A:A8:23:06:7E:CF:C3:3C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHq6b3RFXE-jq-I6qCMGfs_DPEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea59ec-3e58-4437-adf2-6f022a0e5ad9/1/mHq6b3RFXE-jq-I6qCMGfs_DPEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:6f:bb:44:60:a7:af:8e:06:7c:4e:53:ee:c3:9a:48:5c:81:
         2c:6f:ac:7c:5b:e6:d9:7c:ab:af:f3:3a:96:ec:89:a1:f2:8e:
         97:52:73:66:63:03:58:66:31:bc:70:46:aa:9c:8d:26:9d:5e:
         13:37:47:f9:b5:d2:58:12:dd:3c:f8:b4:9e:62:31:a2:1e:83:
         13:fb:b4:69:99:c7:86:16:87:fb:bd:59:d5:59:9f:55:d8:4f:
         6b:1e:11:fc:fe:89:85:23:10:8c:b9:74:51:f1:fa:a2:1d:8b:
         db:98:4d:4b:11:a3:b8:eb:aa:bc:cb:af:c7:91:32:9f:4a:1c:
         8e:31:48:0b:40:99:9c:78:7a:1f:ac:93:d7:42:33:35:d2:38:
         47:b7:b5:6d:7e:9c:71:ae:f6:da:a6:98:f2:67:f3:9f:b8:df:
         73:6b:ae:7d:4a:28:7d:3b:11:11:50:95:72:a1:33:33:d8:da:
         21:e7:79:8d:56:3c:ef:fb:28:72:85:55:66:d1:aa:22:e9:15:
         c8:98:c1:72:ac:3c:4f:6c:1b:f3:c0:17:e5:18:51:82:36:a3:
         f8:3a:4b:96:0a:c3:46:dc:13:9d:a3:44:ca:5e:8d:89:40:6e:
         6a:e6:73:d8:39:04:a6:59:a0:02:8b:83:71:c8:e0:45:2d:7d:
         90:67:02:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+feXxjHFCGeiNk3otBCgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4N2FiYTZmNzQ0NTVjNGZhM2FiZTIzYWE4MjMwNjdlY2Zj
MzNjNDgwHhcNMjUxMDE5MjIwMTI3WhcNMjUxMDIwMjIwMTI3WjAzMTEwLwYDVQQD
Eyg1MDEwOTQ2YjQwOWI1MTQzNmVmMjczZWQ0MTYzMGNiZWE4YmE3ODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim3eda/EsSESrqlF1nO8R1Wg67eu
1vOYWW+15ZK+GXcHnXEm+10K9GIOw5vMq3o272rFXWfqGOa3gkn3GU+Npm7csUdz
T6QBjGboLOTVggj9DuIYl9Levvre86JPGhfORfZ5rnULtMW25+UeF/gB2r9pgiHT
V/vP8Y2IGaSNraAn3vGSRHb+1gUsldti4mqTc5nGQLD47jRKyrhsws/kDh2MrYeY
jRI5GQv9fPL1lbmmPqxdMUKwTDIl3Rl86WhBQyIZcCrlrbgtjr5ACfJGusXP22rP
cBoPnZ8AriD55UHTVlWDP5auLfCe13KsPQGdINdB8pLYKZ8kVuzgAH6IiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAQlGtAm1FDbvJz7UFjDL6oungJMB8GA1UdIwQY
MBaAFJh6um90RVxPo6viOqgjBn7PwzxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lYTU5ZWMtM2U1OC00NDM3LWFkZjIt
NmYwMjJhMGU1YWQ5LzEvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lYTU5ZWMtM2U1OC00NDM3LWFkZjItNmYwMjJhMGU1YWQ5
LzEvbUhxNmIzUkZYRS1qcS1JNnFDTUdmc19EUEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG+7RGCn
r44GfE5T7sOaSFyBLG+sfFvm2Xyrr/M6luyJofKOl1JzZmMDWGYxvHBGqpyNJp1e
EzdH+bXSWBLdPPi0nmIxoh6DE/u0aZnHhhaH+71Z1VmfVdhPax4R/P6JhSMQjLl0
UfH6oh2L25hNSxGjuOuqvMuvx5Eyn0ocjjFIC0CZnHh6H6yT10IzNdI4R7e1bX6c
ca722qaY8mfzn7jfc2uufUoofTsREVCVcqEzM9jaIed5jVY87/socoVVZtGqIukV
yJjBcqw8T2wb88AX5RhRgjaj+DpLlgrDRtwTnaNEyl6NiUBuauZz2DkEplmgAouD
ccjgRS19kGcCAA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:42 2025 by rpki-client