Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
File:                     p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json)
Hash identifier:          Dr/+40hKE+XLd8cJCDTE1R04gw7NTzFGS+aS9PthFDU=
Subject key identifier:   3F:5D:5F:86:A9:B7:3B:9D:3C:CE:26:34:AB:6E:F2:1D:8C:EA:A3:E7
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Certificate issuer:       /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial:       0199FCC6AE50790A86DC784BAE4242E76BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
Manifest number:          13E6
Signing time:             Sun 19 Oct 2025 14:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:43 +0000
Files and hashes:         1: 6nka26L-7vbT-huqQ7zH80Ad2_Q.roa (hash: bi36P0sQvSkI3t0S3Th1jO23VxQKQmTqbcjBaO1g00A=)
                          2: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: GEiHAs4WgbLU5lu6+wYFQdomFCVJSWFmu9P5eGiVFnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:ae:50:79:0a:86:dc:78:4b:ae:42:42:e7:6b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
        Validity
            Not Before: Oct 19 14:01:43 2025 GMT
            Not After : Oct 20 14:01:43 2025 GMT
        Subject: CN=3f5d5f86a9b73b9d3cce2634ab6ef21d8ceaa3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c2:1a:b5:ad:34:03:f3:08:d0:76:c4:d9:25:
                    61:e2:fb:8f:dd:c2:2a:a2:c4:a1:67:2b:f4:6a:42:
                    4f:36:62:43:a5:50:66:e4:d2:61:93:96:59:b3:bc:
                    59:e7:49:2c:66:b6:2a:dd:3a:63:e4:96:8c:e8:a4:
                    8f:d8:97:20:d2:c9:d6:77:c0:18:d8:55:5c:79:58:
                    26:25:02:a4:2b:dd:21:ef:4d:da:21:75:38:d8:e6:
                    1e:96:6d:e6:7c:c0:e0:18:33:4c:35:33:33:86:06:
                    f8:3c:bc:70:4b:4d:35:dd:9d:3e:f4:2c:ab:45:d1:
                    b6:96:d1:b0:ff:47:1b:5b:ba:30:ab:7c:66:ab:6c:
                    60:28:b7:71:cb:09:de:ce:ec:a6:f2:95:f5:82:53:
                    6a:69:b1:95:51:75:93:d8:81:37:5e:b7:67:3e:16:
                    fe:95:a5:59:71:f2:66:43:94:e9:55:36:bb:71:50:
                    53:e2:41:a2:d3:58:82:f6:4c:be:09:3d:5f:2d:a6:
                    31:80:f7:a0:c7:52:09:c3:21:86:66:ae:bd:33:78:
                    8e:58:94:0f:86:78:81:6f:a3:9c:ad:25:22:11:79:
                    dd:6e:37:ea:d5:99:4a:b8:66:23:83:a1:55:06:45:
                    ab:ae:ff:4d:76:aa:f1:40:a1:27:35:db:59:7d:0b:
                    54:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5D:5F:86:A9:B7:3B:9D:3C:CE:26:34:AB:6E:F2:1D:8C:EA:A3:E7
            X509v3 Authority Key Identifier:
                keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8a:74:ac:ca:fd:5e:ce:39:ed:a8:f0:a7:b6:94:e4:d4:4f:
         2c:b9:40:2c:66:6b:a9:9b:10:08:e0:75:08:4d:54:64:81:91:
         1a:bf:a0:79:e2:f7:5b:40:96:7d:b3:eb:31:00:a2:db:c6:13:
         6c:05:12:d2:c3:87:26:42:42:96:e4:d5:ee:4e:66:a2:47:b7:
         f7:4d:1a:1e:44:80:b4:62:15:f9:ee:62:9e:ea:33:e7:1a:99:
         7d:25:27:29:9c:76:c8:a2:01:31:5f:77:9e:c7:76:2e:63:dd:
         89:be:9c:6e:70:72:68:4d:59:e1:7a:a9:ce:02:44:4e:5f:d0:
         f5:88:b5:a0:9f:5a:c0:f2:93:21:55:21:2a:3d:3f:e1:5d:83:
         f9:49:32:98:29:08:a0:70:69:ee:18:21:ed:ce:6d:9f:fc:84:
         76:63:b3:dc:50:08:74:7c:10:93:58:8e:c7:4f:d0:2c:40:e1:
         47:3d:f9:6c:11:d7:70:2e:94:6d:84:4d:66:22:af:88:f6:b8:
         20:7f:53:fa:7c:a9:e2:d2:9f:69:71:b6:12:ec:cc:7f:da:80:
         0e:4d:e7:30:6a:a3:12:7d:3c:4d:74:6a:8c:1c:90:e4:97:36:
         31:2c:47:17:b7:81:5c:39:35:c2:12:31:7c:b4:46:0c:e7:df:
         f8:e6:74:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xq5QeQqG3HhLrkJC52ujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OTY3ZDc2YzJkNDY3MjBkNGNmYWMwNDU5ZmEzYzNkMjIw
MDUwNDQwHhcNMjUxMDE5MTQwMTQzWhcNMjUxMDIwMTQwMTQzWjAzMTEwLwYDVQQD
EygzZjVkNWY4NmE5YjczYjlkM2NjZTI2MzRhYjZlZjIxZDhjZWFhM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcIata00A/MI0HbE2SVh4vuP3cIq
osShZyv0akJPNmJDpVBm5NJhk5ZZs7xZ50ksZrYq3Tpj5JaM6KSP2Jcg0snWd8AY
2FVceVgmJQKkK90h703aIXU42OYelm3mfMDgGDNMNTMzhgb4PLxwS0013Z0+9Cyr
RdG2ltGw/0cbW7owq3xmq2xgKLdxywnezuym8pX1glNqabGVUXWT2IE3XrdnPhb+
laVZcfJmQ5TpVTa7cVBT4kGi01iC9ky+CT1fLaYxgPegx1IJwyGGZq69M3iOWJQP
hniBb6OcrSUiEXndbjfq1ZlKuGYjg6FVBkWrrv9NdqrxQKEnNdtZfQtUowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9dX4aptzudPM4mNKtu8h2M6qPnMB8GA1UdIwQY
MBaAFKeWfXbC1Gcg1M+sBFn6PD0iAFBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDVaOWRzTFVaeURVejZ3RVdmbzhQU0lBVUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84N2I3NjgtMTU0NS00OTRhLTg0Zjkt
MWNmNTBhNTM2MDI2LzEvcDVaOWRzTFVaeURVejZ3RVdmbzhQU0lBVUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS84N2I3NjgtMTU0NS00OTRhLTg0ZjktMWNmNTBhNTM2MDI2
LzEvcDVaOWRzTFVaeURVejZ3RVdmbzhQU0lBVUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIp0rMr9
Xs457ajwp7aU5NRPLLlALGZrqZsQCOB1CE1UZIGRGr+geeL3W0CWfbPrMQCi28YT
bAUS0sOHJkJCluTV7k5moke3900aHkSAtGIV+e5inuoz5xqZfSUnKZx2yKIBMV93
nsd2LmPdib6cbnByaE1Z4XqpzgJETl/Q9Yi1oJ9awPKTIVUhKj0/4V2D+UkymCkI
oHBp7hgh7c5tn/yEdmOz3FAIdHwQk1iOx0/QLEDhRz35bBHXcC6UbYRNZiKviPa4
IH9T+nyp4tKfaXG2EuzMf9qADk3nMGqjEn08TXRqjByQ5Jc2MSxHF7eBXDk1whIx
fLRGDOff+OZ0dw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:41 2025 by rpki-client