Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
File:                     MeD5m83M1__nK9NcNEvNAy_3T3M.mft (raw, json)
Hash identifier:          FY3MhVtOjTIUoSGa0Ez5jUe4lU3ZO0W3WU60EVEx7g4=
Subject key identifier:   EF:84:EA:2D:41:FF:A1:BF:EE:63:71:01:CA:B6:94:C0:24:68:60:EF
Authority key identifier: 31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73
Certificate issuer:       /CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
Certificate serial:       0199FE10006C354B974513F442F16DFE9D7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
Manifest number:          08D7
Signing time:             Sun 19 Oct 2025 20:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:25 +0000
Files and hashes:         1: MeD5m83M1__nK9NcNEvNAy_3T3M.crl (hash: XlrebXrXnb8FpNsaZo+IceMDs9nol/E0pNrLm6mXKq4=)
                          2: QErrhrzU2U7UlCrmA1T2T22i6Ew.roa (hash: ACC19M63SD4NWKmr69RvxEazwjXMuUP+D1rGLIBn6no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:00:6c:35:4b:97:45:13:f4:42:f1:6d:fe:9d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31e0f99bcdccd7ffe72bd35c344bcd032ff74f73
        Validity
            Not Before: Oct 19 20:01:25 2025 GMT
            Not After : Oct 20 20:01:25 2025 GMT
        Subject: CN=ef84ea2d41ffa1bfee637101cab694c0246860ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:dd:e6:fe:c6:8b:c7:a5:47:c7:3b:b0:ee:
                    fe:44:8b:22:6c:83:fe:b5:73:0e:41:b4:91:40:9a:
                    cc:33:02:3a:d5:f1:68:9a:19:58:f4:12:8b:a3:a0:
                    9b:05:46:ac:4e:44:9e:ee:77:16:81:98:22:f5:24:
                    12:1e:2a:c5:c0:fa:1a:80:52:7c:1f:24:fd:e8:bb:
                    28:68:07:22:8c:14:e2:8b:29:a5:2f:df:0d:21:0d:
                    96:01:13:35:70:34:97:7b:aa:37:67:99:41:46:ea:
                    d7:aa:92:c7:3f:75:38:d8:28:1c:93:9e:be:5c:d6:
                    0b:0b:61:5f:60:92:cf:a4:ee:dd:09:6b:f5:74:c8:
                    5c:be:17:ae:87:73:fc:7d:96:25:ea:d6:30:01:ba:
                    a3:d0:0c:e5:ea:10:cd:9d:c0:d7:16:eb:84:70:0b:
                    e0:91:43:ea:a8:e7:27:a3:9f:da:45:4c:41:d0:cb:
                    9d:2f:5a:04:ff:2b:01:eb:f7:33:7e:92:69:e1:17:
                    8c:f4:93:12:d1:8e:92:a7:1c:6a:3e:25:f9:4b:73:
                    d8:d4:7a:7e:49:6c:0e:49:3a:e0:39:da:d9:d0:17:
                    ff:f1:39:54:a8:a7:10:2e:27:99:fa:b8:97:8e:06:
                    84:c3:ae:a9:be:70:8f:58:d3:01:e5:c0:9c:3d:b1:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:EA:2D:41:FF:A1:BF:EE:63:71:01:CA:B6:94:C0:24:68:60:EF
            X509v3 Authority Key Identifier:
                keyid:31:E0:F9:9B:CD:CC:D7:FF:E7:2B:D3:5C:34:4B:CD:03:2F:F7:4F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeD5m83M1__nK9NcNEvNAy_3T3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ce7ce8-a60d-4f56-bb0e-d5d37aa9b604/1/MeD5m83M1__nK9NcNEvNAy_3T3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ba:97:07:22:fc:a3:84:47:97:0b:a2:21:0f:50:ef:d9:97:
         5e:8e:9b:7a:cb:99:3e:61:92:4e:a5:e4:91:74:01:32:b3:45:
         66:08:40:d3:d7:6d:67:38:e5:c7:36:75:a4:d6:9f:bf:92:20:
         7f:b9:43:a4:c8:be:fc:20:20:4a:81:29:39:df:4c:e8:1d:56:
         d7:43:e9:d5:c8:3a:3a:12:41:1e:ae:55:26:b6:66:ae:fd:0d:
         6c:00:d8:b5:c3:91:3d:32:24:b1:52:8e:38:c5:2b:49:17:30:
         87:74:75:c7:48:cf:1f:4a:d8:87:3a:bc:6d:47:1d:46:31:9b:
         54:e5:ca:23:31:bf:0f:98:b4:ce:62:5b:ee:82:d4:d4:de:64:
         5f:e3:24:36:1e:3f:91:c0:28:b4:12:3f:ad:30:10:f8:a8:c0:
         f6:17:76:c9:5a:a6:8a:67:a9:55:ab:83:e2:39:f9:07:5d:55:
         d7:82:79:0e:7f:dc:fc:01:ba:f6:4b:be:f0:7f:ab:d1:39:0a:
         9b:ab:b8:b8:78:ec:87:2d:4d:1a:61:ed:d7:39:e6:83:01:86:
         fc:8b:3d:66:50:00:c1:ef:55:a3:2e:fc:ba:02:45:66:97:6c:
         6c:99:aa:cd:5b:2c:f4:7e:08:05:1c:e3:ba:28:d7:ab:c2:0b:
         ee:05:35:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EABsNUuXRRP0QvFt/p19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZTBmOTliY2RjY2Q3ZmZlNzJiZDM1YzM0NGJjZDAzMmZm
NzRmNzMwHhcNMjUxMDE5MjAwMTI1WhcNMjUxMDIwMjAwMTI1WjAzMTEwLwYDVQQD
EyhlZjg0ZWEyZDQxZmZhMWJmZWU2MzcxMDFjYWI2OTRjMDI0Njg2MGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndDd5v7Gi8elR8c7sO7+RIsibIP+
tXMOQbSRQJrMMwI61fFomhlY9BKLo6CbBUasTkSe7ncWgZgi9SQSHirFwPoagFJ8
HyT96LsoaAcijBTiiymlL98NIQ2WARM1cDSXe6o3Z5lBRurXqpLHP3U42Cgck56+
XNYLC2FfYJLPpO7dCWv1dMhcvheuh3P8fZYl6tYwAbqj0Azl6hDNncDXFuuEcAvg
kUPqqOcno5/aRUxB0MudL1oE/ysB6/czfpJp4ReM9JMS0Y6SpxxqPiX5S3PY1Hp+
SWwOSTrgOdrZ0Bf/8TlUqKcQLieZ+riXjgaEw66pvnCPWNMB5cCcPbEoNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+E6i1B/6G/7mNxAcq2lMAkaGDvMB8GA1UdIwQY
MBaAFDHg+ZvNzNf/5yvTXDRLzQMv909zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9jZTdjZTgtYTYwZC00ZjU2LWJiMGUt
ZDVkMzdhYTliNjA0LzEvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9jZTdjZTgtYTYwZC00ZjU2LWJiMGUtZDVkMzdhYTliNjA0
LzEvTWVENW04M00xX19uSzlOY05Fdk5BeV8zVDNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7qXByL8
o4RHlwuiIQ9Q79mXXo6besuZPmGSTqXkkXQBMrNFZghA09dtZzjlxzZ1pNafv5Ig
f7lDpMi+/CAgSoEpOd9M6B1W10Pp1cg6OhJBHq5VJrZmrv0NbADYtcORPTIksVKO
OMUrSRcwh3R1x0jPH0rYhzq8bUcdRjGbVOXKIzG/D5i0zmJb7oLU1N5kX+MkNh4/
kcAotBI/rTAQ+KjA9hd2yVqmimepVauD4jn5B11V14J5Dn/c/AG69ku+8H+r0TkK
m6u4uHjshy1NGmHt1znmgwGG/Is9ZlAAwe9Voy78ugJFZpdsbJmqzVss9H4IBRzj
uijXq8IL7gU1Hw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:22 2025 by rpki-client