Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
File:                     DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json)
Hash identifier:          N4Hq8fHPlYMSR0RgSuokAyq6yK90CB+t7NYBV+q+ZC8=
Subject key identifier:   27:E5:69:CC:3F:84:03:98:05:8C:E8:36:9D:BD:98:F1:3B:76:B3:48
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Certificate issuer:       /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial:       0199FC21A7E10BBFCE11A04517832B5AD324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
Manifest number:          08F8
Signing time:             Sun 19 Oct 2025 11:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:28 +0000
Files and hashes:         1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: vs7+aCo9JmSQUJbozk7+OdOh5wN0GwzrxxcHhBY2vqQ=)
                          2: EjaSjQvA_h8ofCWrzWooV6nayF8.roa (hash: gCmjXDkeCn1nqh4fUFSkYceSyNQm14lj5sOPimTxKOE=)
                          3: wS1UXRfPtMS1NBYtNz71NeZmtRk.roa (hash: iGK/CXBp/TXIP03g8PJuN3+7774KqoPIJH5kjoUJiwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:a7:e1:0b:bf:ce:11:a0:45:17:83:2b:5a:d3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
        Validity
            Not Before: Oct 19 11:01:28 2025 GMT
            Not After : Oct 20 11:01:28 2025 GMT
        Subject: CN=27e569cc3f840398058ce8369dbd98f13b76b348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:c8:7f:63:29:87:c3:3e:3b:52:a1:01:2f:
                    4b:2c:8e:25:dd:bc:70:81:c3:7c:e1:3a:3a:96:8a:
                    1f:f4:91:0f:2b:af:70:58:1c:84:2d:98:ef:5c:48:
                    e5:61:87:2f:8a:00:d4:12:3e:79:2b:77:49:fe:16:
                    ec:1a:91:d9:67:0d:f5:6f:c4:fe:96:f4:24:3a:b2:
                    e6:9c:c8:cf:d3:5b:a1:b2:58:8d:06:ca:8e:17:aa:
                    77:50:8c:dc:2d:71:e1:51:96:e6:89:78:5b:bc:97:
                    76:e9:d2:65:25:ce:20:1b:cc:12:89:70:37:63:9f:
                    1f:ba:70:85:81:f7:e3:d2:ec:19:21:7a:1b:af:a7:
                    7e:ed:ff:70:b6:a3:75:e8:6e:0e:04:4c:0a:57:1c:
                    53:3d:11:5d:fd:ad:5b:de:04:f3:35:44:ea:5d:c8:
                    93:ed:32:28:c0:a8:4a:84:a6:99:7a:ce:08:41:69:
                    25:45:17:90:db:14:af:78:78:0f:c2:4e:f2:5a:67:
                    ce:ef:83:b7:d2:b3:8a:b4:22:41:a6:ce:18:d0:4f:
                    58:40:e7:fd:5b:17:4e:39:5a:69:bc:46:85:e4:6d:
                    a0:9f:53:2d:6b:9d:96:78:f5:e8:52:81:9f:ba:02:
                    d7:a3:96:c2:aa:11:56:68:de:2b:d4:31:bb:f5:1f:
                    63:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E5:69:CC:3F:84:03:98:05:8C:E8:36:9D:BD:98:F1:3B:76:B3:48
            X509v3 Authority Key Identifier:
                keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2c:bb:60:e4:51:d4:b1:2e:29:da:60:65:c4:94:f6:f7:d8:
         ff:61:24:19:40:76:d8:fb:e7:65:fc:55:62:ce:31:58:d8:58:
         ee:3f:f2:8f:1a:52:9b:02:91:77:15:f4:2e:ad:d4:fc:f1:15:
         29:6c:24:90:d8:d4:99:d1:8f:b6:ba:8c:d1:13:b7:5d:f7:7c:
         30:9a:cc:0c:48:d1:c9:cc:16:00:3c:1f:6e:9f:6b:40:09:72:
         d5:e6:30:6f:1c:fd:c2:7a:72:a4:c7:32:d3:7d:a2:22:1a:2d:
         3f:f6:22:b2:01:e2:cf:d9:54:cf:1f:f4:db:f1:e4:c4:0a:e8:
         53:9d:19:08:56:96:33:9c:90:9d:2f:f1:c5:10:bc:8e:9c:bb:
         f2:d5:19:66:ab:99:77:83:8a:5a:a9:32:6f:da:96:d7:bc:1a:
         28:9f:a0:26:41:34:7e:64:71:af:82:90:39:ab:da:de:49:09:
         c9:61:35:f1:c2:fe:aa:63:ae:89:8d:a3:21:57:48:31:34:52:
         93:1c:39:c7:ab:25:a6:a1:1e:1e:db:ad:69:7f:db:cc:7d:cd:
         75:35:08:45:c1:3b:dd:1a:40:93:b3:72:8e:ea:c8:ff:8d:78:
         f1:cd:df:7c:34:0e:8e:43:f4:5b:97:40:b4:d7:ed:ec:c6:63:
         87:ec:73:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IafhC7/OEaBFF4MrWtMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjllM2VlNTVkZDg2MjY3NGQ0NTg2NjFiYTM0OTA4YjA2
MTdmYTEwHhcNMjUxMDE5MTEwMTI4WhcNMjUxMDIwMTEwMTI4WjAzMTEwLwYDVQQD
EygyN2U1NjljYzNmODQwMzk4MDU4Y2U4MzY5ZGJkOThmMTNiNzZiMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmnIf2Mph8M+O1KhAS9LLI4l3bxw
gcN84To6loof9JEPK69wWByELZjvXEjlYYcvigDUEj55K3dJ/hbsGpHZZw31b8T+
lvQkOrLmnMjP01uhsliNBsqOF6p3UIzcLXHhUZbmiXhbvJd26dJlJc4gG8wSiXA3
Y58funCFgffj0uwZIXobr6d+7f9wtqN16G4OBEwKVxxTPRFd/a1b3gTzNUTqXciT
7TIowKhKhKaZes4IQWklRReQ2xSveHgPwk7yWmfO74O30rOKtCJBps4Y0E9YQOf9
WxdOOVppvEaF5G2gn1Mta52WePXoUoGfugLXo5bCqhFWaN4r1DG79R9jQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCflacw/hAOYBYzoNp29mPE7drNIMB8GA1UdIwQY
MBaAFA1p4+5V3YYmdNRYZhujSQiwYX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUt
YjgzM2JkOWUwYjNhLzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUtYjgzM2JkOWUwYjNh
LzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCy7YORR
1LEuKdpgZcSU9vfY/2EkGUB22PvnZfxVYs4xWNhY7j/yjxpSmwKRdxX0Lq3U/PEV
KWwkkNjUmdGPtrqM0RO3Xfd8MJrMDEjRycwWADwfbp9rQAly1eYwbxz9wnpypMcy
032iIhotP/YisgHiz9lUzx/02/HkxAroU50ZCFaWM5yQnS/xxRC8jpy78tUZZquZ
d4OKWqkyb9qW17waKJ+gJkE0fmRxr4KQOava3kkJyWE18cL+qmOuiY2jIVdIMTRS
kxw5x6slpqEeHtutaX/bzH3NdTUIRcE73RpAk7NyjurI/4148c3ffDQOjkP0W5dA
tNft7MZjh+xzdw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:41 2025 by rpki-client