Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File:                     J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier:          3XBirvLG90Ui1tgHu1Co7fVktrXlD7f+/BKFyGEslAo=
Subject key identifier:   66:77:7F:CB:15:DF:AD:B0:9F:68:C3:D3:78:F2:2D:ED:CF:7A:B0:0B
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer:       /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial:       0199FC58756F887DAA903A0BCE2DB252F7E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number:          1057
Signing time:             Sun 19 Oct 2025 12:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:19 +0000
Files and hashes:         1: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: ptypg5VehxjHDLAqXsPWnczZ8VbV8KE3HKt7q1xVkc0=)
                          2: vdjx6mVJjB2A5HRAp4zCXF1WOmI.roa (hash: nZy4/J4/xAAVv0Nm8r/1Dh/36Nz5IhwHl0WfPkQGlFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:75:6f:88:7d:aa:90:3a:0b:ce:2d:b2:52:f7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
        Validity
            Not Before: Oct 19 12:01:19 2025 GMT
            Not After : Oct 20 12:01:19 2025 GMT
        Subject: CN=66777fcb15dfadb09f68c3d378f22dedcf7ab00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:2c:bd:70:99:a2:ac:fe:ea:e5:e5:fe:68:
                    28:47:fa:3f:3f:a9:e6:69:65:c1:78:bb:11:dd:c5:
                    3e:77:65:54:0e:c6:bc:00:ef:8c:39:88:24:4f:05:
                    e5:00:5c:a2:a0:a5:5a:0e:5d:ba:ee:67:86:2f:72:
                    40:9b:fc:dd:f9:92:e5:8c:91:f7:fd:d0:8a:32:a7:
                    49:e6:02:26:d0:ae:03:6e:3f:e1:86:b7:0e:09:79:
                    3c:78:3d:3d:5b:2a:ea:63:5d:91:e1:49:f7:f6:2b:
                    97:66:08:59:c0:89:a9:cb:65:69:78:ad:0a:f1:59:
                    55:ad:ef:72:29:a7:b3:e1:e3:76:43:81:0a:9f:a1:
                    e4:e8:08:c2:14:a9:9c:cc:66:fd:d5:b8:d4:7d:6d:
                    31:9f:c8:a2:2c:42:32:3b:80:e6:50:92:1a:0c:39:
                    5e:39:f8:ca:79:2e:b7:73:90:ff:53:b8:6f:29:f9:
                    83:5f:c8:10:44:10:0c:29:e4:83:f8:fd:a1:fc:b1:
                    5a:95:3d:ef:94:ac:0d:b6:c8:65:ea:61:cd:ae:e9:
                    ad:05:8f:f5:f4:a8:28:0c:a1:8c:60:ed:69:88:d9:
                    12:60:98:2c:d8:2c:95:9e:cb:49:2c:da:02:dc:2c:
                    93:37:5e:1e:4c:42:a5:a7:1d:0b:55:47:a3:92:2f:
                    44:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:7F:CB:15:DF:AD:B0:9F:68:C3:D3:78:F2:2D:ED:CF:7A:B0:0B
            X509v3 Authority Key Identifier:
                keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:84:af:10:63:64:56:f1:87:db:40:12:35:a1:f1:9c:b1:3e:
         da:85:66:18:f6:81:62:81:be:b1:c6:19:49:ae:e8:1a:7f:b8:
         16:b2:0e:eb:44:f0:df:75:fb:63:17:81:c3:b6:1c:7c:a5:5f:
         b8:6d:26:fa:1c:4a:af:5d:06:51:ec:0f:ba:ef:64:23:3b:44:
         23:c4:37:52:d0:e6:d2:31:e3:93:16:5a:67:eb:08:00:91:c5:
         24:e8:07:c4:f0:05:1b:70:fe:f0:aa:e5:23:76:07:26:4b:96:
         d4:b6:89:11:45:81:c6:c7:92:e7:7e:6b:5a:41:7a:cf:1a:0a:
         3c:01:ca:95:8c:c2:f4:e5:43:38:f9:5c:f5:bf:ba:23:10:1b:
         be:a8:65:9c:00:28:c6:6a:0a:cf:c3:df:50:3f:8f:43:7f:a6:
         4c:33:b4:97:db:16:1c:75:af:5e:ea:52:60:b9:e4:ba:e6:56:
         df:92:3d:0b:0e:8c:3b:0c:40:3f:dd:26:de:7e:ca:99:2c:28:
         2b:dd:ed:47:95:dd:3c:d3:8b:e9:a6:85:9f:21:ab:dd:45:41:
         01:d4:79:cc:92:b2:34:a4:0e:53:73:b0:f5:3b:11:af:83:8e:
         9f:d7:77:7a:d1:5d:ca:94:a4:5c:77:49:a1:ea:73:9e:80:4c:
         fd:99:6e:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHVviH2qkDoLzi2yUvfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjhhYmFjMjBhNTk4Y2NhNGIxMmY1ZDc1NWQ4ZTg5MzIx
ZjRlYzkwHhcNMjUxMDE5MTIwMTE5WhcNMjUxMDIwMTIwMTE5WjAzMTEwLwYDVQQD
Eyg2Njc3N2ZjYjE1ZGZhZGIwOWY2OGMzZDM3OGYyMmRlZGNmN2FiMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqgsvXCZoqz+6uXl/mgoR/o/P6nm
aWXBeLsR3cU+d2VUDsa8AO+MOYgkTwXlAFyioKVaDl267meGL3JAm/zd+ZLljJH3
/dCKMqdJ5gIm0K4Dbj/hhrcOCXk8eD09WyrqY12R4Un39iuXZghZwImpy2VpeK0K
8VlVre9yKaez4eN2Q4EKn6Hk6AjCFKmczGb91bjUfW0xn8iiLEIyO4DmUJIaDDle
OfjKeS63c5D/U7hvKfmDX8gQRBAMKeSD+P2h/LFalT3vlKwNtshl6mHNrumtBY/1
9KgoDKGMYO1piNkSYJgs2CyVnstJLNoC3CyTN14eTEKlpx0LVUejki9EwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ3f8sV362wn2jD03jyLe3PerALMB8GA1UdIwQY
MBaAFCe4q6wgpZjMpLEvXXVdjokyH07JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAt
NGI2ZmM3YzA2YWU1LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi83MjllMWMtMWNjMC00MjdlLThmMDAtNGI2ZmM3YzA2YWU1
LzEvSjdpcnJDQ2xtTXlrc1M5ZGRWMk9pVElmVHNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtISvEGNk
VvGH20ASNaHxnLE+2oVmGPaBYoG+scYZSa7oGn+4FrIO60Tw33X7YxeBw7YcfKVf
uG0m+hxKr10GUewPuu9kIztEI8Q3UtDm0jHjkxZaZ+sIAJHFJOgHxPAFG3D+8Krl
I3YHJkuW1LaJEUWBxseS535rWkF6zxoKPAHKlYzC9OVDOPlc9b+6IxAbvqhlnAAo
xmoKz8PfUD+PQ3+mTDO0l9sWHHWvXupSYLnkuuZW35I9Cw6MOwxAP90m3n7KmSwo
K93tR5XdPNOL6aaFnyGr3UVBAdR5zJKyNKQOU3Ow9TsRr4OOn9d3etFdypSkXHdJ
oepznoBM/ZlupA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:21 2025 by rpki-client