Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File:                     9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier:          CckoBBoHz+8DCfBXIg/hZsl1KbEu9eqvIoBLXAb+pcw=
Subject key identifier:   9A:5E:7E:0E:3D:6E:1F:88:2F:C3:3B:0A:8A:6A:29:F9:E6:A6:D6:21
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer:       /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial:       0199FF22E3A1CB9ABDD7161BE2F5468985CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number:          148B
Signing time:             Mon 20 Oct 2025 01:01:40 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:40 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:40 +0000
Files and hashes:         1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: RVoMWAECg7HOIKMfCC4wMIcNDApZ/q4rISXtNMvHwGg=)
                          2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:e3:a1:cb:9a:bd:d7:16:1b:e2:f5:46:89:85:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
        Validity
            Not Before: Oct 20 01:01:40 2025 GMT
            Not After : Oct 21 01:01:40 2025 GMT
        Subject: CN=9a5e7e0e3d6e1f882fc33b0a8a6a29f9e6a6d621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1b:88:40:fd:71:a4:9a:56:e6:04:b0:f3:5b:
                    1b:01:59:a1:2e:2e:c2:13:67:5b:b3:bc:9d:0b:42:
                    33:d0:5e:24:02:f3:f6:d6:ea:f6:f7:52:56:cb:3a:
                    65:df:ba:13:29:6e:45:e0:fb:ee:96:fd:77:65:fa:
                    df:e3:5d:8c:59:37:5a:5c:c1:e4:0b:33:8f:b6:36:
                    73:07:a4:9a:94:c7:01:6e:a8:06:60:aa:b3:22:62:
                    81:bb:6f:84:24:a9:e8:0f:ef:01:de:73:88:af:73:
                    a0:e5:69:34:f6:0a:e1:dd:9c:86:28:c0:83:21:7b:
                    0e:af:76:a8:17:37:3d:3b:31:a3:23:62:06:f4:1b:
                    b0:14:df:4d:b7:0f:2e:b7:2c:ce:fd:40:a6:4a:e5:
                    95:38:42:9c:d9:95:9a:07:f6:8e:38:88:16:9a:70:
                    59:b0:7c:2f:ea:af:97:7e:8b:de:c3:ba:3e:15:5f:
                    8e:ab:5f:36:e9:4e:c8:41:a6:00:fd:35:a0:68:61:
                    98:ba:b1:7c:11:2e:b8:1e:5c:ca:19:93:fc:16:85:
                    fe:15:e5:29:38:9f:06:a5:a6:eb:7f:4b:69:a0:76:
                    f1:d3:9d:29:ab:6f:a2:03:4f:d8:20:f6:48:52:b5:
                    2a:06:24:53:5f:8f:eb:77:d9:b1:f5:42:b3:e4:ec:
                    4d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5E:7E:0E:3D:6E:1F:88:2F:C3:3B:0A:8A:6A:29:F9:E6:A6:D6:21
            X509v3 Authority Key Identifier:
                keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a8:65:f9:cb:73:e1:45:c7:76:c9:5a:b9:ab:a0:8e:74:c4:
         11:24:d2:72:45:b9:ad:f3:c3:6d:f1:c8:51:f8:85:6b:06:4b:
         42:6a:fb:82:3d:6a:f7:b4:f8:4c:de:8f:e7:57:e0:ae:1a:69:
         75:55:e9:8f:c2:db:50:dc:77:13:f2:75:61:e0:86:8d:ea:65:
         fe:59:27:5d:cf:1f:90:3c:53:44:eb:d8:a7:86:3c:c9:f9:e7:
         81:3e:83:e0:51:9c:3d:e9:51:f3:f4:e1:12:74:bb:55:68:7c:
         01:c5:a4:f8:d1:38:57:90:6c:a2:ff:28:d5:55:a8:65:01:ae:
         4a:68:7b:0c:b9:ee:31:eb:03:fb:f2:24:2e:d9:31:8a:03:5b:
         18:54:14:b6:73:0b:61:26:36:e2:e8:9f:f4:c2:fb:55:52:c3:
         c5:dd:f3:90:76:9f:a5:bc:9f:cb:3d:c7:1e:5e:3c:2b:bf:08:
         57:ab:53:9f:9b:d5:b7:d7:c4:c2:b0:90:76:c1:b1:52:b4:af:
         50:a8:b3:ed:e8:8b:19:5b:49:32:bd:8b:0d:3b:45:0a:cf:11:
         3b:12:51:f9:8b:77:d7:52:b2:20:cc:c6:d1:14:8a:6a:f1:90:
         d8:40:53:dd:57:ef:23:fb:2b:22:10:20:18:63:11:ca:b4:fe:
         eb:4c:5b:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IuOhy5q91xYb4vVGiYXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDFkNDY4OTNhYWExNjRmZTI2NzM5OTBkMDdhYTZjMDcx
MDAzYzAwHhcNMjUxMDIwMDEwMTQwWhcNMjUxMDIxMDEwMTQwWjAzMTEwLwYDVQQD
Eyg5YTVlN2UwZTNkNmUxZjg4MmZjMzNiMGE4YTZhMjlmOWU2YTZkNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRuIQP1xpJpW5gSw81sbAVmhLi7C
E2dbs7ydC0Iz0F4kAvP21ur291JWyzpl37oTKW5F4Pvulv13Zfrf412MWTdaXMHk
CzOPtjZzB6SalMcBbqgGYKqzImKBu2+EJKnoD+8B3nOIr3Og5Wk09grh3ZyGKMCD
IXsOr3aoFzc9OzGjI2IG9BuwFN9Ntw8utyzO/UCmSuWVOEKc2ZWaB/aOOIgWmnBZ
sHwv6q+Xfovew7o+FV+Oq1826U7IQaYA/TWgaGGYurF8ES64HlzKGZP8FoX+FeUp
OJ8Gpabrf0tpoHbx050pq2+iA0/YIPZIUrUqBiRTX4/rd9mx9UKz5OxNCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpefg49bh+IL8M7CopqKfnmptYhMB8GA1UdIwQY
MBaAFPVB1GiTqqFk/iZzmQ0HqmwHEAPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMt
Mzk4YzA0NTE4OWViLzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMtMzk4YzA0NTE4OWVi
LzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6hl+ctz
4UXHdslauaugjnTEESTSckW5rfPDbfHIUfiFawZLQmr7gj1q97T4TN6P51fgrhpp
dVXpj8LbUNx3E/J1YeCGjepl/lknXc8fkDxTROvYp4Y8yfnngT6D4FGcPelR8/Th
EnS7VWh8AcWk+NE4V5Bsov8o1VWoZQGuSmh7DLnuMesD+/IkLtkxigNbGFQUtnML
YSY24uif9ML7VVLDxd3zkHafpbyfyz3HHl48K78IV6tTn5vVt9fEwrCQdsGxUrSv
UKiz7eiLGVtJMr2LDTtFCs8ROxJR+Yt311KyIMzG0RSKavGQ2EBT3VfvI/srIhAg
GGMRyrT+60xbeQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:43 2025 by rpki-client