Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File:                     8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier:          4qBa4vcq/qA2spXiwETbjvsrBfJ81wmtz/s3v3PMnAc=
Subject key identifier:   F6:F6:5C:87:E8:0B:11:B9:40:56:2F:D2:4D:9F:4E:6E:C8:85:35:FB
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer:       /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial:       0199FCFD56D316BB6F6C2E6054B5662F13DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number:          1496
Signing time:             Sun 19 Oct 2025 15:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:25 +0000
Files and hashes:         1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: o7vc2mA0JQlnhQz+Xpy2SwP+kdJu/H+zFmm+l4i+v9k=)
                          2: OkXBNJnUgokPx0Xxs8AUPN40aT4.roa (hash: E/UomHj5ST+3/lio4VV13yWumaIvNp+hYEYFZLaJR7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:56:d3:16:bb:6f:6c:2e:60:54:b5:66:2f:13:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
        Validity
            Not Before: Oct 19 15:01:25 2025 GMT
            Not After : Oct 20 15:01:25 2025 GMT
        Subject: CN=f6f65c87e80b11b940562fd24d9f4e6ec88535fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:df:b4:79:c7:26:ab:08:19:d1:48:62:c3:80:
                    ab:98:a1:3d:5e:06:6f:12:20:4e:4c:5c:9e:99:c2:
                    3e:87:c0:ea:5a:2d:5b:2c:42:34:af:5d:15:9e:1b:
                    98:b3:f7:8a:bb:e3:78:52:b4:7b:b1:3b:8d:00:41:
                    4c:44:e3:0f:0d:c4:1a:66:1d:3a:db:10:73:a3:42:
                    a5:0d:ed:7b:55:cc:6f:12:90:92:ef:fc:be:3b:59:
                    1b:c8:f2:4a:26:88:8b:3f:61:e4:f9:0d:b0:b2:4e:
                    5e:dd:92:86:4a:2d:58:95:be:fa:80:b5:49:6b:95:
                    3c:ff:a3:a9:37:06:05:09:80:b5:c2:52:9e:8f:a2:
                    38:66:37:a9:45:2f:41:d2:c0:20:db:72:5f:8a:44:
                    43:0f:5d:f5:69:0e:7c:b6:49:70:c6:93:78:0d:16:
                    61:7f:0d:1f:f3:7e:0c:45:8f:02:ad:0a:31:21:85:
                    d0:68:c1:0c:1b:f0:91:90:d2:10:a4:00:84:24:e8:
                    67:5c:a5:80:01:97:a5:d8:ec:a8:99:e1:f7:48:ad:
                    52:2c:c4:26:69:a8:47:2b:f0:f6:ef:1d:7e:8f:9d:
                    9b:ba:1a:f2:e2:0d:8f:c8:06:d5:b5:ed:ce:c4:a5:
                    52:51:c1:1e:35:40:4d:d0:cd:8f:7f:f1:8a:97:e2:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F6:5C:87:E8:0B:11:B9:40:56:2F:D2:4D:9F:4E:6E:C8:85:35:FB
            X509v3 Authority Key Identifier:
                keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:df:4a:af:3e:76:7c:84:bf:bc:d2:89:46:d4:a8:de:37:e3:
         76:ed:0c:84:05:c4:77:7c:ca:05:5b:c2:40:65:9c:c7:95:5f:
         60:65:3f:97:fc:d2:55:65:f6:67:39:a0:bf:04:32:5a:0c:bc:
         fc:83:af:ae:8d:96:fa:82:0b:9d:49:e3:65:83:3b:26:44:20:
         c9:54:fe:2c:75:b4:f3:05:54:7c:11:de:6c:ab:d5:d7:7a:d3:
         5c:57:d7:99:04:cd:a5:f0:41:33:39:06:2e:e2:ae:1b:a6:39:
         04:62:45:dd:31:01:97:a6:2e:3f:17:66:7a:56:0f:2a:07:da:
         a1:a5:4a:bd:c8:d5:67:97:46:60:6a:d2:bb:33:84:4f:71:e9:
         ef:82:ad:fd:42:d7:09:86:5f:05:72:a6:d6:28:ea:00:4f:19:
         d5:8f:dd:a7:6a:7e:cd:ce:74:f5:9f:e1:03:25:63:01:79:fc:
         d8:6a:0b:85:06:1b:ae:20:f2:e4:97:b2:95:f0:1c:8f:4f:fd:
         2f:0c:8f:f9:af:4c:e7:0b:2d:80:8e:b0:aa:6f:04:7d:a2:19:
         8d:83:5b:e8:e4:04:6b:40:df:77:ef:fb:77:0a:fe:d3:0b:9c:
         ab:3a:69:cc:05:c4:23:29:0c:e6:1a:5e:13:58:6d:a0:2b:d1:
         0f:e3:65:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/VbTFrtvbC5gVLVmLxPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZDAzMDk4YjgzNTZmZmZjNWE1OTdlOWM0NWI4NGVkZjg3
Y2Y5OTQwHhcNMjUxMDE5MTUwMTI1WhcNMjUxMDIwMTUwMTI1WjAzMTEwLwYDVQQD
EyhmNmY2NWM4N2U4MGIxMWI5NDA1NjJmZDI0ZDlmNGU2ZWM4ODUzNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09+0eccmqwgZ0Uhiw4CrmKE9XgZv
EiBOTFyemcI+h8DqWi1bLEI0r10VnhuYs/eKu+N4UrR7sTuNAEFMROMPDcQaZh06
2xBzo0KlDe17VcxvEpCS7/y+O1kbyPJKJoiLP2Hk+Q2wsk5e3ZKGSi1Ylb76gLVJ
a5U8/6OpNwYFCYC1wlKej6I4ZjepRS9B0sAg23JfikRDD131aQ58tklwxpN4DRZh
fw0f834MRY8CrQoxIYXQaMEMG/CRkNIQpACEJOhnXKWAAZel2OyomeH3SK1SLMQm
aahHK/D27x1+j52buhry4g2PyAbVte3OxKVSUcEeNUBN0M2Pf/GKl+I0dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPb2XIfoCxG5QFYv0k2fTm7IhTX7MB8GA1UdIwQY
MBaAFPDQMJi4NW//xaWX6cRbhO34fPmUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQt
MzI3ZjgzMTk0NWZkLzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kZjU2ZWUtZGQ3MS00Y2E3LTk4ZWQtMzI3ZjgzMTk0NWZk
LzEvOE5Bd21MZzFiX19GcFpmcHhGdUU3Zmg4LVpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgt9Krz52
fIS/vNKJRtSo3jfjdu0MhAXEd3zKBVvCQGWcx5VfYGU/l/zSVWX2ZzmgvwQyWgy8
/IOvro2W+oILnUnjZYM7JkQgyVT+LHW08wVUfBHebKvV13rTXFfXmQTNpfBBMzkG
LuKuG6Y5BGJF3TEBl6YuPxdmelYPKgfaoaVKvcjVZ5dGYGrSuzOET3Hp74Kt/ULX
CYZfBXKm1ijqAE8Z1Y/dp2p+zc509Z/hAyVjAXn82GoLhQYbriDy5JeylfAcj0/9
LwyP+a9M5wstgI6wqm8EfaIZjYNb6OQEa0Dfd+/7dwr+0wucqzppzAXEIykM5hpe
E1htoCvRD+Nlxg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:38 2025 by rpki-client