Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File:                     icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier:          0t//129aopZKioH28JeGpOMKkfWtxks01cJwuSLtsyM=
Subject key identifier:   41:A5:02:2F:AC:B5:6E:8B:88:39:9C:3B:F0:46:70:DC:40:AD:DF:34
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer:       /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial:       0199FBEAF8D309BC8F3D63E85CA9B060C771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number:          0AEF
Signing time:             Sun 19 Oct 2025 10:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:44 +0000
Files and hashes:         1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: //QqQo1UkS1XGWGzzthTnt4r6BqzYpHdt0FJED4vjmk=)
                          2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f8:d3:09:bc:8f:3d:63:e8:5c:a9:b0:60:c7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
        Validity
            Not Before: Oct 19 10:01:44 2025 GMT
            Not After : Oct 20 10:01:44 2025 GMT
        Subject: CN=41a5022facb56e8b88399c3bf04670dc40addf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9b:18:2a:15:e6:c5:30:72:f9:11:3f:f4:1f:
                    f3:85:1a:89:7f:2f:ca:3c:4b:86:1c:2a:51:fa:c6:
                    9f:9d:4a:f5:b7:c7:3b:82:5c:33:9d:a5:ec:aa:d3:
                    06:8e:1d:b1:8c:7a:b8:23:e8:73:53:79:86:1f:5b:
                    1a:14:ed:b6:7b:b2:eb:fd:7f:f8:ae:f6:ee:4d:a0:
                    d4:45:04:bc:cc:96:21:cb:4e:a1:2e:d7:6a:2b:4c:
                    55:06:d8:c4:b7:ab:56:56:d0:f3:15:ce:ff:df:f4:
                    28:b0:82:97:b1:0c:f8:8f:5a:e6:17:6b:f1:55:33:
                    5b:90:27:64:1b:bc:be:e8:48:29:b6:47:7d:9d:6d:
                    c9:01:66:cc:24:db:fc:66:dc:b0:4e:04:24:d0:65:
                    74:8a:25:d7:84:43:bf:e4:f4:97:2e:08:c0:35:32:
                    23:13:17:55:a1:7c:4d:3d:83:db:bd:f4:4f:e7:f5:
                    f6:f3:9d:76:81:83:79:bd:4f:74:53:19:04:2f:22:
                    03:c8:d6:ae:3d:f4:fc:f7:e1:ed:4b:6b:fb:ec:7c:
                    63:58:a5:28:20:9e:7c:cb:2c:08:67:91:21:4d:d5:
                    4c:83:c0:aa:24:de:6d:ab:7a:ee:26:50:29:6a:d5:
                    ae:67:ff:e0:8c:dc:45:88:b6:6a:39:2d:4a:80:37:
                    cc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A5:02:2F:AC:B5:6E:8B:88:39:9C:3B:F0:46:70:DC:40:AD:DF:34
            X509v3 Authority Key Identifier:
                keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f8:10:9f:04:64:00:dc:82:04:f0:f1:06:00:72:dd:92:dd:
         5c:9b:dc:72:ae:66:0e:5a:37:be:b0:27:3b:50:43:5e:0e:eb:
         c0:17:1c:6f:bd:3c:9b:9a:9c:33:43:7c:0f:d3:d9:4c:a2:bc:
         15:e2:b8:5d:2c:a9:2a:91:e0:ca:f0:e5:ec:e4:a9:b6:f6:f4:
         01:2f:0e:49:0a:61:24:33:1f:a5:5f:79:29:ff:a1:16:99:2d:
         5a:b7:26:3a:d9:a3:7b:86:f0:67:9d:97:d6:90:29:5e:e0:60:
         0c:a1:bb:df:0e:01:08:ec:6c:4f:ef:47:8c:09:9f:95:e2:90:
         a5:52:90:9a:31:81:2c:9d:e3:22:af:4b:95:83:48:52:c4:93:
         47:a3:bc:8b:36:9d:d2:81:ea:fb:a3:b1:f5:dc:df:80:9c:71:
         be:70:2a:2e:71:0d:f2:1c:98:cc:ad:60:f5:94:a5:f5:f9:e7:
         84:d2:b1:b7:10:0e:a2:b7:58:ea:d3:5a:51:33:38:90:88:7b:
         ce:cb:d9:95:b7:9f:2d:c5:9e:18:91:f1:22:4d:17:00:64:ac:
         88:2d:a3:ea:fd:3b:b7:cc:a5:1d:26:be:75:c6:f6:9a:16:fa:
         68:38:a0:14:0a:9d:7a:39:6e:67:81:b6:ac:6a:41:b8:96:40:
         d6:e2:5a:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76vjTCbyPPWPoXKmwYMdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YzNjOTJhNGUxZDRmZTg4NTcyYmZhNjhjOTg1YzMxZTMz
NjhjODIwHhcNMjUxMDE5MTAwMTQ0WhcNMjUxMDIwMTAwMTQ0WjAzMTEwLwYDVQQD
Eyg0MWE1MDIyZmFjYjU2ZThiODgzOTljM2JmMDQ2NzBkYzQwYWRkZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5sYKhXmxTBy+RE/9B/zhRqJfy/K
PEuGHCpR+safnUr1t8c7glwznaXsqtMGjh2xjHq4I+hzU3mGH1saFO22e7Lr/X/4
rvbuTaDURQS8zJYhy06hLtdqK0xVBtjEt6tWVtDzFc7/3/QosIKXsQz4j1rmF2vx
VTNbkCdkG7y+6Egptkd9nW3JAWbMJNv8ZtywTgQk0GV0iiXXhEO/5PSXLgjANTIj
ExdVoXxNPYPbvfRP5/X28512gYN5vU90UxkELyIDyNauPfT89+HtS2v77HxjWKUo
IJ58yywIZ5EhTdVMg8CqJN5tq3ruJlApatWuZ//gjNxFiLZqOS1KgDfMLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGlAi+stW6LiDmcO/BGcNxArd80MB8GA1UdIwQY
MBaAFInDySpOHU/ohXK/poyYXDHjNoyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYt
ZTkxZmY1ZmU2YzI2LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9jMzM5MDUtZWNjNS00NGI3LTgxNDYtZTkxZmY1ZmU2YzI2
LzEvaWNQSktrNGRULWlGY3ItbWpKaGNNZU0yaklJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/gQnwRk
ANyCBPDxBgBy3ZLdXJvccq5mDlo3vrAnO1BDXg7rwBccb708m5qcM0N8D9PZTKK8
FeK4XSypKpHgyvDl7OSptvb0AS8OSQphJDMfpV95Kf+hFpktWrcmOtmje4bwZ52X
1pApXuBgDKG73w4BCOxsT+9HjAmfleKQpVKQmjGBLJ3jIq9LlYNIUsSTR6O8izad
0oHq+6Ox9dzfgJxxvnAqLnEN8hyYzK1g9ZSl9fnnhNKxtxAOordY6tNaUTM4kIh7
zsvZlbefLcWeGJHxIk0XAGSsiC2j6v07t8ylHSa+dcb2mhb6aDigFAqdejluZ4G2
rGpBuJZA1uJaKw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:44 2025 by rpki-client