Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
File:                     9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json)
Hash identifier:          C9UcWSeuKs5LFbzSe1GKpgtlslmifhQI2y8Bg3o2pnM=
Subject key identifier:   28:54:38:54:5B:1C:93:36:7B:BD:3D:D4:84:3F:82:13:AD:80:C6:B7
Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
Certificate issuer:       /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Certificate serial:       0199FBEAB84194E514284552712D5B628624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
Manifest number:          09DC
Signing time:             Sun 19 Oct 2025 10:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:27 +0000
Files and hashes:         1: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: xtkwscLbhOlz11nJjqYeuiSZzku+3oU5dEGpJYoG04g=)
                          2: RFRyemMh5cFgw6G_Hs8rXpd2Ve4.roa (hash: Q/GgNiv43TfFu8lH2/Qowfw2+WyW8sNGbwKNhf/jdeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:b8:41:94:e5:14:28:45:52:71:2d:5b:62:86:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
        Validity
            Not Before: Oct 19 10:01:27 2025 GMT
            Not After : Oct 20 10:01:27 2025 GMT
        Subject: CN=285438545b1c93367bbd3dd4843f8213ad80c6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:d4:bf:98:7b:b9:7a:df:8f:04:31:64:a7:
                    84:ab:2d:1a:0b:a2:38:00:2b:62:81:29:33:5a:ae:
                    fe:36:f8:d9:b7:eb:02:e0:86:bb:7b:a7:e5:a1:b5:
                    2e:e4:43:50:a1:8c:de:48:c3:4e:3f:8f:e2:b4:05:
                    94:2f:c8:7e:2e:e3:4f:55:2c:ba:3b:ad:8f:3b:89:
                    d9:57:d2:02:dd:c5:2d:ed:2f:f4:08:e3:06:11:f1:
                    a8:3e:0f:fc:50:37:4a:be:9d:7a:48:01:ac:5e:6b:
                    95:eb:d2:7b:70:2b:47:1c:fe:94:4c:1e:d4:55:a9:
                    db:43:ad:8f:ec:3f:3f:b9:6b:50:4c:1e:52:67:50:
                    8e:ff:3d:16:e9:d1:e6:e6:37:0a:2c:35:7b:ce:e3:
                    4e:d9:d9:24:6d:71:65:b7:88:66:99:8b:d2:54:5d:
                    ed:9c:df:d5:16:87:4f:ee:b8:89:e5:76:17:6e:4e:
                    35:52:b8:47:1b:6e:c4:f2:4f:79:6f:bc:5a:ad:b4:
                    e9:c1:c2:00:12:ba:c6:aa:74:9e:c0:e0:20:cf:50:
                    f3:54:4e:6f:aa:90:4c:dc:2e:c7:61:8f:d5:c3:c1:
                    0b:b0:42:69:e3:12:1a:00:03:e9:d6:df:c1:e1:d7:
                    26:61:54:42:51:28:dc:d4:c5:63:3a:c4:0c:f7:19:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:54:38:54:5B:1C:93:36:7B:BD:3D:D4:84:3F:82:13:AD:80:C6:B7
            X509v3 Authority Key Identifier:
                keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:be:b4:90:7c:74:a8:4f:e6:84:3e:b8:74:3a:15:bf:ff:c6:
         0e:35:60:bb:87:d9:b5:10:d8:0a:37:78:2f:69:ae:b2:e3:63:
         5c:59:e5:54:51:04:67:1d:40:41:15:87:4f:0d:33:77:da:fa:
         68:99:c7:c8:8c:a3:15:23:9e:b2:7e:89:fa:f2:1a:0f:cd:47:
         86:4f:3a:a5:73:83:b6:31:62:70:3e:99:e7:28:c6:23:cd:6b:
         bd:f7:14:28:a1:f3:d4:92:ad:b8:47:af:e9:87:1b:ed:81:0e:
         b0:6d:15:27:7f:fe:c2:ec:12:9d:7c:d9:47:d0:19:4c:0f:40:
         36:b2:75:42:65:5c:f2:ca:8b:b9:ae:99:3f:6a:ec:f0:37:0d:
         39:43:9f:be:09:66:49:a9:f9:57:4e:56:e7:8c:02:c7:0e:2a:
         f8:04:3a:34:a6:bf:36:9b:e2:ea:85:b6:ed:24:94:00:63:6d:
         8f:42:09:56:72:2a:f8:c7:33:bc:12:29:e9:15:33:6b:d5:43:
         73:c3:3f:cf:67:c9:dd:f4:2b:89:fe:24:8d:c5:e7:ad:ba:bd:
         85:49:9a:96:97:b0:a0:f3:1e:58:ed:eb:70:ea:2e:06:fb:a7:
         86:2a:35:82:49:5a:12:87:85:fb:5f:eb:33:e1:9b:55:ca:ac:
         f4:86:59:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rhBlOUUKEVScS1bYoYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTE2ZDdmMjhjZGJlOGIzZjU1ZDc1MzcyYWFkNGQzYjEw
YmUwOWYwHhcNMjUxMDE5MTAwMTI3WhcNMjUxMDIwMTAwMTI3WjAzMTEwLwYDVQQD
EygyODU0Mzg1NDViMWM5MzM2N2JiZDNkZDQ4NDNmODIxM2FkODBjNmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLnUv5h7uXrfjwQxZKeEqy0aC6I4
ACtigSkzWq7+NvjZt+sC4Ia7e6flobUu5ENQoYzeSMNOP4/itAWUL8h+LuNPVSy6
O62PO4nZV9IC3cUt7S/0COMGEfGoPg/8UDdKvp16SAGsXmuV69J7cCtHHP6UTB7U
VanbQ62P7D8/uWtQTB5SZ1CO/z0W6dHm5jcKLDV7zuNO2dkkbXFlt4hmmYvSVF3t
nN/VFodP7riJ5XYXbk41UrhHG27E8k95b7xarbTpwcIAErrGqnSewOAgz1DzVE5v
qpBM3C7HYY/Vw8ELsEJp4xIaAAPp1t/B4dcmYVRCUSjc1MVjOsQM9xmihwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChUOFRbHJM2e7091IQ/ghOtgMa3MB8GA1UdIwQY
MBaAFPZRbX8ozb6LP1XXU3Kq1NOxC+CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2It
ZTk3YWU1YzYwNTY4LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2ItZTk3YWU1YzYwNTY4
LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb60kHx0
qE/mhD64dDoVv//GDjVgu4fZtRDYCjd4L2musuNjXFnlVFEEZx1AQRWHTw0zd9r6
aJnHyIyjFSOesn6J+vIaD81Hhk86pXODtjFicD6Z5yjGI81rvfcUKKHz1JKtuEev
6Ycb7YEOsG0VJ3/+wuwSnXzZR9AZTA9ANrJ1QmVc8sqLua6ZP2rs8DcNOUOfvglm
San5V05W54wCxw4q+AQ6NKa/Npvi6oW27SSUAGNtj0IJVnIq+MczvBIp6RUza9VD
c8M/z2fJ3fQrif4kjcXnrbq9hUmalpewoPMeWO3rcOouBvunhio1gklaEoeF+1/r
M+GbVcqs9IZZwA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:24 2025 by rpki-client