Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File:                     K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier:          O43vyvvu3CRv+lTZJIdEwoGyoQP655dZzOaYPR+91AA=
Subject key identifier:   E4:51:59:0E:A3:9A:41:10:04:BA:E3:D1:EA:C3:4C:0E:4B:DE:9A:4D
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer:       /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial:       0199FF596744A716DBE670EA03C42190595C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number:          0DCA
Signing time:             Mon 20 Oct 2025 02:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:12 +0000
Files and hashes:         1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: i96tQIdAqAOjD0j5hpF9yIG0uK5+uFEc7U4IyDlc4Vk=)
                          2: jYHRdDHfT6bQOmOGT7Tls1WhRLY.roa (hash: pWv0ClQXtIskoLimOYMYx3t3am8WhnpvjCRS+V8Iqy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:67:44:a7:16:db:e6:70:ea:03:c4:21:90:59:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
        Validity
            Not Before: Oct 20 02:01:12 2025 GMT
            Not After : Oct 21 02:01:12 2025 GMT
        Subject: CN=e451590ea39a411004bae3d1eac34c0e4bde9a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:75:e2:55:b5:6f:99:4b:80:0d:ed:46:85:d7:
                    7e:21:53:2c:dd:a3:57:0c:13:d1:c7:40:d7:91:b3:
                    eb:d0:85:c3:8b:c8:25:e4:42:9a:47:88:f8:1f:8f:
                    9a:2d:37:b0:85:1b:1b:49:2a:70:9b:88:cb:f5:5f:
                    4d:57:c1:b8:fc:4e:6d:99:50:5d:f3:fc:4a:0b:66:
                    48:ec:93:c4:70:85:96:eb:a6:9d:68:b7:d7:5a:d9:
                    d3:08:66:0f:ca:13:71:2a:e4:7c:a5:01:e4:e9:76:
                    b7:8e:95:ae:6c:41:ff:4f:3f:3c:75:07:e9:73:81:
                    43:7c:55:9e:85:47:b9:cd:80:4e:ee:f9:94:20:81:
                    09:0a:8f:47:c6:55:4b:3d:8d:d9:3d:3b:bf:0f:ee:
                    33:09:95:a0:cc:cf:13:cc:76:f8:f2:d2:6e:1b:2d:
                    42:1c:d7:98:26:43:fe:85:13:79:2f:33:b3:3d:34:
                    d2:5a:26:2e:8d:ad:12:2e:d5:b5:d4:37:e2:65:16:
                    95:e2:35:de:5b:8a:68:7c:6e:9b:77:d2:1c:e2:2a:
                    3b:33:78:45:c8:e8:6d:dc:a5:1e:ce:97:b5:54:0f:
                    8a:f3:a7:98:ea:70:7d:94:42:59:11:07:1b:40:01:
                    93:3f:bc:90:67:83:b4:a5:0e:c1:23:b1:1c:70:5e:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:51:59:0E:A3:9A:41:10:04:BA:E3:D1:EA:C3:4C:0E:4B:DE:9A:4D
            X509v3 Authority Key Identifier:
                keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:a3:3a:cf:0c:5c:91:11:ae:e8:89:e8:e9:e6:3b:7b:1d:
         c2:29:25:62:0d:a6:d1:68:51:9f:c7:14:3c:68:07:2b:7b:e1:
         01:af:e1:24:26:af:22:0d:f3:d3:aa:32:a4:7e:06:af:8f:3e:
         06:bd:70:32:98:60:c1:e6:ae:d2:9e:80:48:b0:6b:68:8a:56:
         31:2d:03:9b:c5:fa:4c:63:77:2f:80:85:e2:56:21:9b:68:4b:
         fd:d4:59:2c:83:35:0b:af:01:7e:7d:16:17:d1:10:10:7f:41:
         7a:91:b7:20:83:f1:cb:d1:f5:cf:f6:7e:c6:bf:d8:b6:c0:a5:
         ba:66:c3:90:3c:22:88:cb:3f:f0:c9:4b:cb:a4:cc:1c:31:82:
         e3:a8:3b:70:ea:db:de:77:24:60:d0:06:80:1b:fd:e5:fe:ee:
         cf:66:63:61:30:e4:68:fe:e9:98:4f:84:5c:10:c6:29:62:ae:
         d4:3e:42:e5:4e:69:f7:14:44:12:2e:76:20:63:5b:98:a0:9c:
         6c:6c:f0:eb:1e:9f:9e:78:83:5e:42:c0:33:a2:e8:0f:6c:ad:
         bc:ea:30:94:dc:4a:33:35:e7:ed:51:f7:6c:b1:fc:56:fc:e3:
         9e:12:b2:19:28:42:71:49:54:31:e0:1a:75:5a:98:32:03:16:
         8a:1c:59:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WWdEpxbb5nDqA8QhkFlcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWQ2MjkzNWZiNDhhZjZlNDRjYmExOTQyNmVmYWI1MWYx
YzU0MTAwHhcNMjUxMDIwMDIwMTEyWhcNMjUxMDIxMDIwMTEyWjAzMTEwLwYDVQQD
EyhlNDUxNTkwZWEzOWE0MTEwMDRiYWUzZDFlYWMzNGMwZTRiZGU5YTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXXiVbVvmUuADe1Ghdd+IVMs3aNX
DBPRx0DXkbPr0IXDi8gl5EKaR4j4H4+aLTewhRsbSSpwm4jL9V9NV8G4/E5tmVBd
8/xKC2ZI7JPEcIWW66adaLfXWtnTCGYPyhNxKuR8pQHk6Xa3jpWubEH/Tz88dQfp
c4FDfFWehUe5zYBO7vmUIIEJCo9HxlVLPY3ZPTu/D+4zCZWgzM8TzHb48tJuGy1C
HNeYJkP+hRN5LzOzPTTSWiYuja0SLtW11DfiZRaV4jXeW4pofG6bd9Ic4io7M3hF
yOht3KUezpe1VA+K86eY6nB9lEJZEQcbQAGTP7yQZ4O0pQ7BI7EccF6RMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORRWQ6jmkEQBLrj0erDTA5L3ppNMB8GA1UdIwQY
MBaAFCvtYpNftIr25Ey6GUJu+rUfHFQQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWIt
NDg0MDE0YTRkOTRlLzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85YjgxYzgtNzMyYy00M2YyLWI2YWItNDg0MDE0YTRkOTRl
LzEvSy0xaWsxLTBpdmJrVExvWlFtNzZ0UjhjVkJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfSjOs8M
XJERruiJ6OnmO3sdwiklYg2m0WhRn8cUPGgHK3vhAa/hJCavIg3z06oypH4Gr48+
Br1wMphgweau0p6ASLBraIpWMS0Dm8X6TGN3L4CF4lYhm2hL/dRZLIM1C68Bfn0W
F9EQEH9BepG3IIPxy9H1z/Z+xr/YtsClumbDkDwiiMs/8MlLy6TMHDGC46g7cOrb
3nckYNAGgBv95f7uz2ZjYTDkaP7pmE+EXBDGKWKu1D5C5U5p9xREEi52IGNbmKCc
bGzw6x6fnniDXkLAM6LoD2ytvOowlNxKMzXn7VH3bLH8VvzjnhKyGShCcUlUMeAa
dVqYMgMWihxZ0w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:58:59 2025 by rpki-client