Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File:                     4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier:          IO7qWoHvn5HD6i5oIg+JNUR+hf0VfnK8TBKCv93ONCQ=
Subject key identifier:   62:C6:24:FD:78:FF:71:E0:7A:DF:9F:B4:D6:0A:40:39:C4:EA:1A:62
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer:       /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial:       0199FF229855EE051CE28E0B3EACE5CCC3BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number:          0F9E
Signing time:             Mon 20 Oct 2025 01:01:21 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:21 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:21 +0000
Files and hashes:         1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: hDXDqYr9hIaqHb/le9Ppcln7KHVt+la9sV7m4BG2OlI=)
                          2: ZTmydTpXIXh_aFM6lIMP1nPGi4M.roa (hash: R6dO91YPQTwtwZipE8GfozYF7WvWuk+GMp9DghrSYmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:98:55:ee:05:1c:e2:8e:0b:3e:ac:e5:cc:c3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
        Validity
            Not Before: Oct 20 01:01:21 2025 GMT
            Not After : Oct 21 01:01:21 2025 GMT
        Subject: CN=62c624fd78ff71e07adf9fb4d60a4039c4ea1a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f1:39:15:40:bb:94:18:c2:4f:c2:4a:86:8d:
                    86:a8:2c:18:e4:55:75:98:e6:5a:90:7b:67:65:67:
                    1f:e3:a3:c4:a9:40:8e:55:05:ab:0a:75:cc:b9:7b:
                    81:e6:39:a0:7a:87:00:7a:98:e8:c6:a9:58:be:a5:
                    7a:ce:b2:a3:66:6f:62:ca:47:3e:3d:70:da:9a:1a:
                    dd:e5:58:60:78:04:43:e8:1c:cf:8c:c9:83:42:f8:
                    b3:aa:99:16:f4:f0:f6:c4:06:e9:5b:5c:75:bd:f1:
                    4a:4a:f2:c6:e8:d3:5e:00:df:40:b1:67:45:e7:a7:
                    04:d5:64:be:29:b5:ce:a1:81:24:d0:1b:0f:f0:a3:
                    09:90:00:94:ab:33:9a:0f:1c:89:91:56:fb:94:70:
                    dc:80:8d:7f:72:18:ce:89:0f:a7:a6:75:e1:ca:80:
                    ed:f3:8a:a3:b1:1e:3f:a1:0d:49:55:39:8d:b5:05:
                    a4:44:0a:ee:9c:2c:4e:ad:70:dd:77:df:1e:fb:8c:
                    c4:6f:73:8e:4e:99:98:2a:b9:1c:4c:54:0f:83:b6:
                    50:51:55:dc:c6:92:8e:17:38:f9:e8:87:c8:57:82:
                    13:02:9e:8a:cc:da:29:68:d7:d1:f3:15:ff:f9:5a:
                    15:f7:08:b8:01:29:a9:0f:9c:ab:cd:7f:fa:52:d9:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C6:24:FD:78:FF:71:E0:7A:DF:9F:B4:D6:0A:40:39:C4:EA:1A:62
            X509v3 Authority Key Identifier:
                keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:34:3a:1a:7c:b4:40:74:32:e7:4c:f4:c2:58:0e:f3:43:eb:
         11:ad:80:af:3f:35:f3:5f:d1:e1:3a:37:b6:20:6e:cc:2f:6d:
         5e:47:76:84:84:9a:7f:69:de:4b:42:a8:60:3d:0f:f4:c9:40:
         8c:ce:7d:cc:97:53:f0:7e:89:7d:ac:30:30:3c:f4:6c:e8:1c:
         0e:46:3d:9d:df:94:0f:04:e9:60:3b:4b:71:ed:1e:0b:48:26:
         07:a0:52:8f:76:3b:e4:0e:86:eb:b6:49:7b:07:5c:8b:13:e7:
         5a:c4:de:bc:1a:d9:50:86:0b:65:0f:a5:10:78:61:59:d9:ec:
         84:44:ec:01:99:49:ee:16:5d:c2:b4:82:29:de:2d:b2:4a:e8:
         51:c8:e0:e6:b0:15:08:9e:55:0f:38:3c:51:4f:d3:68:89:79:
         b9:cf:a2:9a:01:6b:b8:12:7c:47:9a:6b:f4:95:48:29:6f:c5:
         40:6a:2a:e7:a4:1b:c6:6e:4e:9f:6a:1c:e7:79:0b:66:ee:04:
         a5:78:2e:27:0a:60:23:7b:97:d4:4b:c0:a4:68:f4:25:24:c6:
         e1:29:4d:02:1d:f1:bd:3c:2d:ac:06:f7:b7:b3:54:e6:c2:8c:
         ce:ec:2a:10:1c:d5:0c:cc:47:a2:d3:f4:1d:a0:bf:7c:a2:a9:
         6b:69:d2:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IphV7gUc4o4LPqzlzMO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODM0NDI5Nzc1ZTY1NTVlNTc0MjQ5MjI4NjI1NGIxZGE5
ZjE5MDMwHhcNMjUxMDIwMDEwMTIxWhcNMjUxMDIxMDEwMTIxWjAzMTEwLwYDVQQD
Eyg2MmM2MjRmZDc4ZmY3MWUwN2FkZjlmYjRkNjBhNDAzOWM0ZWExYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfE5FUC7lBjCT8JKho2GqCwY5FV1
mOZakHtnZWcf46PEqUCOVQWrCnXMuXuB5jmgeocAepjoxqlYvqV6zrKjZm9iykc+
PXDamhrd5VhgeARD6BzPjMmDQvizqpkW9PD2xAbpW1x1vfFKSvLG6NNeAN9AsWdF
56cE1WS+KbXOoYEk0BsP8KMJkACUqzOaDxyJkVb7lHDcgI1/chjOiQ+npnXhyoDt
84qjsR4/oQ1JVTmNtQWkRArunCxOrXDdd98e+4zEb3OOTpmYKrkcTFQPg7ZQUVXc
xpKOFzj56IfIV4ITAp6KzNopaNfR8xX/+VoV9wi4ASmpD5yrzX/6UtmOvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLGJP14/3Hget+ftNYKQDnE6hpiMB8GA1UdIwQY
MBaAFOKDRCl3XmVV5XQkkihiVLHanxkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2Mt
ZWE5NzY2NWMxM2RmLzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9iNjQ2OGQtMTBlZC00ZDQ4LTgwM2MtZWE5NzY2NWMxM2Rm
LzEvNG9ORUtYZGVaVlhsZENTU0tHSlVzZHFmR1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjQ6Gny0
QHQy50z0wlgO80PrEa2Arz8181/R4To3tiBuzC9tXkd2hISaf2neS0KoYD0P9MlA
jM59zJdT8H6JfawwMDz0bOgcDkY9nd+UDwTpYDtLce0eC0gmB6BSj3Y75A6G67ZJ
ewdcixPnWsTevBrZUIYLZQ+lEHhhWdnshETsAZlJ7hZdwrSCKd4tskroUcjg5rAV
CJ5VDzg8UU/TaIl5uc+imgFruBJ8R5pr9JVIKW/FQGoq56Qbxm5On2oc53kLZu4E
pXguJwpgI3uX1EvApGj0JSTG4SlNAh3xvTwtrAb3t7NU5sKMzuwqEBzVDMxHotP0
HaC/fKKpa2nSGw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:40 2025 by rpki-client