Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
File:                     9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json)
Hash identifier:          qArXetWAX/LiUaFUlK/bb027hEizdl038XO07tkk2To=
Subject key identifier:   5E:7C:50:3F:3F:38:C6:54:95:FD:69:9A:CF:B4:B7:E3:F9:AC:F2:F6
Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4
Certificate issuer:       /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
Certificate serial:       0199FE46EA14DDFB5A3A4609DA88D782BE68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
Manifest number:          15F9
Signing time:             Sun 19 Oct 2025 21:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:24 +0000
Files and hashes:         1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: PMVvJ7EqeF1jdxssbLfvnLwUTlsuHAAQISsbdZlGDBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:ea:14:dd:fb:5a:3a:46:09:da:88:d7:82:be:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4
        Validity
            Not Before: Oct 19 21:01:24 2025 GMT
            Not After : Oct 20 21:01:24 2025 GMT
        Subject: CN=5e7c503f3f38c65495fd699acfb4b7e3f9acf2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:66:bb:9d:b0:80:6f:10:7b:76:e5:11:10:
                    1d:0b:55:a4:63:df:64:ee:82:3e:fa:dc:80:06:ed:
                    69:d9:14:75:96:1c:24:82:8d:d6:b2:c2:56:3d:1f:
                    6a:48:66:6c:91:91:71:43:c3:47:b0:70:7f:75:6f:
                    51:ea:62:ef:bf:b2:96:84:df:31:72:60:66:18:8f:
                    f0:fd:bf:67:ff:0d:bf:12:96:27:cb:c9:a1:d9:85:
                    c2:46:b5:04:7e:c0:11:37:39:23:e8:e7:32:ca:e6:
                    1f:86:d4:65:af:bb:67:11:f4:1f:6c:2d:8a:cf:29:
                    ab:d8:5c:c9:63:dd:8d:d8:76:f2:95:72:0b:69:80:
                    44:c5:ec:52:89:83:43:7a:9d:3c:a9:bb:b4:2e:49:
                    38:49:8c:ad:4b:5f:80:11:bc:9b:a9:9e:a2:3f:32:
                    4e:83:c3:8c:b3:ab:ba:57:06:85:0c:80:d0:a7:d6:
                    4f:27:db:2c:bb:85:7e:8e:34:1c:a5:4f:a8:d3:25:
                    2f:03:79:57:94:f1:52:fc:a7:8f:29:7a:40:0c:11:
                    66:33:b9:72:19:60:a7:8f:39:93:80:91:85:c7:ef:
                    55:2b:fc:d3:67:97:2e:0c:2b:81:0b:68:bc:e6:23:
                    3a:4a:9e:44:80:b6:d7:89:2e:df:78:f6:f4:fb:7c:
                    b0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7C:50:3F:3F:38:C6:54:95:FD:69:9A:CF:B4:B7:E3:F9:AC:F2:F6
            X509v3 Authority Key Identifier:
                keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ff:cb:21:1b:d7:ce:ef:9c:5c:4a:1c:53:55:27:12:34:47:
         e7:db:11:2b:ec:8a:cb:2b:03:aa:35:43:61:29:6d:9c:c2:a7:
         2a:bc:c3:9f:5f:6a:8d:91:b1:5b:dd:a9:f8:e0:19:86:7e:0d:
         8b:35:4a:3b:76:d7:ae:16:39:37:2e:0d:34:7b:4a:8d:d6:cf:
         5f:89:4d:84:86:6a:02:9e:1e:ed:dd:61:9f:40:b4:00:4c:e5:
         32:8c:15:fe:eb:9a:74:3a:00:c3:02:12:b8:c5:34:44:96:62:
         80:ec:8e:8f:bc:c7:2e:63:4b:c0:95:2f:9e:e5:f0:12:34:f7:
         db:f6:f2:f3:0e:d2:ac:69:c4:0f:9b:24:bc:31:da:7d:37:73:
         c3:7e:ef:cc:f8:23:4b:ec:0c:fd:54:5e:6a:c7:69:58:a5:c3:
         3f:05:d0:37:e5:3c:3b:2f:ae:b2:5d:26:d2:f5:be:aa:1a:92:
         7f:0f:ab:a9:94:3f:0b:92:4a:d3:19:6f:35:aa:ef:23:55:d9:
         cb:ac:8e:ba:f0:62:72:e0:c5:96:17:da:50:dd:1d:f8:fc:a8:
         bd:85:78:e0:6f:99:33:ea:b6:2d:0c:9e:5f:17:69:da:7e:86:
         75:48:43:74:99:71:43:96:62:78:65:5e:2d:d0:e8:ab:f8:e9:
         70:ad:3a:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RuoU3ftaOkYJ2ojXgr5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YjVjODhjNWVkOTRhZjFjOTlkNTAxYmEwMjk1ZjQwNDM3
MjUxYzQwHhcNMjUxMDE5MjEwMTI0WhcNMjUxMDIwMjEwMTI0WjAzMTEwLwYDVQQD
Eyg1ZTdjNTAzZjNmMzhjNjU0OTVmZDY5OWFjZmI0YjdlM2Y5YWNmMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmJmu52wgG8Qe3blERAdC1WkY99k
7oI++tyABu1p2RR1lhwkgo3WssJWPR9qSGZskZFxQ8NHsHB/dW9R6mLvv7KWhN8x
cmBmGI/w/b9n/w2/EpYny8mh2YXCRrUEfsARNzkj6OcyyuYfhtRlr7tnEfQfbC2K
zymr2FzJY92N2HbylXILaYBExexSiYNDep08qbu0Lkk4SYytS1+AEbybqZ6iPzJO
g8OMs6u6VwaFDIDQp9ZPJ9ssu4V+jjQcpU+o0yUvA3lXlPFS/KePKXpADBFmM7ly
GWCnjzmTgJGFx+9VK/zTZ5cuDCuBC2i85iM6Sp5EgLbXiS7fePb0+3yw0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF58UD8/OMZUlf1pms+0t+P5rPL2MB8GA1UdIwQY
MBaAFPS1yIxe2UrxyZ1QG6ApX0BDclHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDIt
YzU3YWRhZDFiZmEzLzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDItYzU3YWRhZDFiZmEz
LzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUP/LIRvX
zu+cXEocU1UnEjRH59sRK+yKyysDqjVDYSltnMKnKrzDn19qjZGxW92p+OAZhn4N
izVKO3bXrhY5Ny4NNHtKjdbPX4lNhIZqAp4e7d1hn0C0AEzlMowV/uuadDoAwwIS
uMU0RJZigOyOj7zHLmNLwJUvnuXwEjT32/by8w7SrGnED5skvDHafTdzw37vzPgj
S+wM/VReasdpWKXDPwXQN+U8Oy+usl0m0vW+qhqSfw+rqZQ/C5JK0xlvNarvI1XZ
y6yOuvBicuDFlhfaUN0d+PyovYV44G+ZM+q2LQyeXxdp2n6GdUhDdJlxQ5ZieGVe
LdDoq/jpcK06/A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:35 2025 by rpki-client