Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File:                     4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier:          zIveHqaaeGriryNsryV8STJ3PQ3jFdJ4C8lQGWZ5Yhc=
Subject key identifier:   BC:61:F6:C8:DA:5D:B0:9B:61:48:44:72:C1:75:30:B9:E6:14:A9:DE
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer:       /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial:       0199FAD8006869DBD3F797BEDCD90589979B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number:          1575
Signing time:             Sun 19 Oct 2025 05:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:23 +0000
Files and hashes:         1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: mGetUUyf0IOvKjx+KjdGURH/5+mFaS3V75+0r6QMtC4=)
                          2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:00:68:69:db:d3:f7:97:be:dc:d9:05:89:97:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
        Validity
            Not Before: Oct 19 05:01:23 2025 GMT
            Not After : Oct 20 05:01:23 2025 GMT
        Subject: CN=bc61f6c8da5db09b61484472c17530b9e614a9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a8:57:34:40:13:90:c3:b1:57:10:8d:5a:1b:
                    74:8f:79:04:38:a8:9f:1f:e9:b5:22:8c:38:54:73:
                    35:3c:e7:14:9b:7e:63:85:ad:ca:6e:7b:b2:e4:ba:
                    5e:fe:61:08:fa:36:2a:37:b3:97:02:d0:44:07:ff:
                    43:82:bb:d2:4f:e9:52:40:7c:f2:78:6a:c7:d1:d0:
                    c3:6c:bb:c2:2a:e1:97:3f:52:48:bd:5c:bd:6b:04:
                    7e:5f:c1:77:8e:ea:b4:28:64:16:ee:29:35:e9:28:
                    58:65:59:f0:22:48:5b:74:01:4c:28:33:e0:23:b1:
                    34:e8:23:85:8d:51:e3:8b:44:a7:91:36:15:e1:1c:
                    3b:c5:06:4d:4a:70:df:f5:20:02:f3:94:79:f7:09:
                    2c:82:e9:fb:c6:df:fb:61:3d:2a:97:c5:2c:3d:4b:
                    98:93:37:c9:05:e0:6e:e1:e5:73:f1:1d:19:8d:d4:
                    a2:2b:7f:b3:8f:2f:ef:ad:f4:6d:ab:e8:27:89:3f:
                    68:65:6a:1a:99:87:42:a1:0e:89:c4:fc:59:5c:be:
                    bd:d8:62:4c:ed:6c:cf:c2:81:27:80:28:ae:47:e5:
                    b7:d0:f5:00:10:6d:dd:57:3c:97:17:fc:90:2c:ba:
                    64:08:ae:46:8d:05:3d:18:93:78:18:58:10:33:f9:
                    4f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:61:F6:C8:DA:5D:B0:9B:61:48:44:72:C1:75:30:B9:E6:14:A9:DE
            X509v3 Authority Key Identifier:
                keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b1:6a:18:2a:88:0e:69:05:69:ce:1d:2f:83:97:80:63:30:
         e8:df:32:09:1b:a7:43:1b:ab:73:80:40:49:a2:d9:f0:51:d9:
         54:28:f3:28:93:b1:ed:3c:92:ae:7b:e1:53:49:0a:94:e3:91:
         96:6c:e8:c9:9f:f3:83:05:03:aa:55:d0:c6:75:37:2c:f7:c0:
         1f:9b:91:e0:96:85:ad:5d:9d:8b:ea:cf:11:19:dd:9e:58:73:
         30:09:00:1e:a1:6e:72:ec:c4:7c:76:ad:95:8c:b2:9e:70:f5:
         50:26:7a:44:74:ad:e4:a7:18:c7:d2:61:c1:0e:0b:5e:3b:97:
         1b:c7:25:e1:6a:6b:05:3d:47:fb:c5:25:37:c8:4e:f2:7d:a5:
         23:a0:f1:47:d9:66:68:9d:6e:93:fb:ea:ac:dd:ab:95:0e:53:
         c8:22:d0:c2:d2:67:ca:67:8c:31:ec:be:09:0a:56:69:1e:71:
         18:55:96:82:64:64:b9:da:f8:21:cc:38:49:f3:24:db:fb:be:
         45:d5:11:ec:da:d5:55:c7:86:12:e1:9a:16:f3:1c:e9:30:0f:
         0f:62:64:7b:d9:89:f4:1a:f2:59:c5:34:ec:bd:c6:9a:26:c5:
         d5:d4:e6:4c:b0:13:54:6f:3b:1a:31:c6:ed:aa:81:b4:38:70:
         30:0c:26:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62ABoadvT95e+3NkFiZebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTU0YWRiNWEyZWQ5OTljZjFkYjljMTI3MWIyMjA5ZGFk
MzQ0OWUwHhcNMjUxMDE5MDUwMTIzWhcNMjUxMDIwMDUwMTIzWjAzMTEwLwYDVQQD
EyhiYzYxZjZjOGRhNWRiMDliNjE0ODQ0NzJjMTc1MzBiOWU2MTRhOWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6hXNEATkMOxVxCNWht0j3kEOKif
H+m1Iow4VHM1POcUm35jha3Kbnuy5Lpe/mEI+jYqN7OXAtBEB/9DgrvST+lSQHzy
eGrH0dDDbLvCKuGXP1JIvVy9awR+X8F3juq0KGQW7ik16ShYZVnwIkhbdAFMKDPg
I7E06COFjVHji0SnkTYV4Rw7xQZNSnDf9SAC85R59wksgun7xt/7YT0ql8UsPUuY
kzfJBeBu4eVz8R0ZjdSiK3+zjy/vrfRtq+gniT9oZWoamYdCoQ6JxPxZXL692GJM
7WzPwoEngCiuR+W30PUAEG3dVzyXF/yQLLpkCK5GjQU9GJN4GFgQM/lPyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxh9sjaXbCbYUhEcsF1MLnmFKneMB8GA1UdIwQY
MBaAFOMVSttaLtmZzx25wScbIgna00SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDct
MTQyZmNhY2Q3YTQ5LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8wMTY3ZWItMGQxNi00Y2MxLTgwNDctMTQyZmNhY2Q3YTQ5
LzEvNHhWSzIxb3UyWm5QSGJuQkp4c2lDZHJUUko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbFqGCqI
DmkFac4dL4OXgGMw6N8yCRunQxurc4BASaLZ8FHZVCjzKJOx7TySrnvhU0kKlOOR
lmzoyZ/zgwUDqlXQxnU3LPfAH5uR4JaFrV2di+rPERndnlhzMAkAHqFucuzEfHat
lYyynnD1UCZ6RHSt5KcYx9JhwQ4LXjuXG8cl4WprBT1H+8UlN8hO8n2lI6DxR9lm
aJ1uk/vqrN2rlQ5TyCLQwtJnymeMMey+CQpWaR5xGFWWgmRkudr4Icw4SfMk2/u+
RdUR7NrVVceGEuGaFvMc6TAPD2Jke9mJ9BryWcU07L3GmibF1dTmTLATVG87GjHG
7aqBtDhwMAwmBw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:52 2025 by rpki-client