Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File:                     nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier:          mNBgVcpCJkaa9IBEFwW6ZHZ88q4q6omVWnvWuyciG4I=
Subject key identifier:   53:4A:B3:29:03:77:9F:27:C2:F7:AC:D8:0C:15:7C:D7:BB:2A:23:42
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer:       /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial:       0199FF22D3F63FBFFFF4B27FD19DA29409A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number:          112E
Signing time:             Mon 20 Oct 2025 01:01:36 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:36 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:36 +0000
Files and hashes:         1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: KLIxbEm2GSx1vKvgV/1vOX0EgZx6NNs2BMnk4xHet5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:d3:f6:3f:bf:ff:f4:b2:7f:d1:9d:a2:94:09:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
        Validity
            Not Before: Oct 20 01:01:36 2025 GMT
            Not After : Oct 21 01:01:36 2025 GMT
        Subject: CN=534ab32903779f27c2f7acd80c157cd7bb2a2342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4f:2b:3b:45:1f:5a:8a:2d:d8:53:a6:ca:c3:
                    a7:65:c9:7f:47:d1:31:56:84:7f:99:09:00:e3:45:
                    00:2a:91:e1:44:df:61:c5:55:4f:16:0c:9f:ec:57:
                    1e:f7:9d:f0:e4:6b:74:27:3f:38:f9:c7:7d:93:91:
                    7f:43:d6:75:3d:1e:09:1f:b8:1f:50:51:2e:0a:99:
                    14:8d:6f:94:25:4d:db:7c:17:69:3c:e0:af:05:e1:
                    e3:42:4c:63:5b:4e:ed:cf:23:5f:7a:f7:d8:a5:c7:
                    30:d6:30:5d:64:c8:50:fa:27:dd:32:96:bf:70:cd:
                    de:62:f9:07:2b:ae:64:6c:18:ee:8e:99:21:dc:fe:
                    38:20:07:9a:fa:5a:b5:69:ed:cf:6e:4b:68:df:58:
                    84:fe:ee:9b:23:61:07:5c:1e:1c:43:1d:9c:c4:83:
                    37:54:ed:e5:c1:ce:25:d6:3a:62:3c:d9:6c:89:8f:
                    ae:d9:dd:3d:43:73:e2:e2:41:9f:5d:ac:28:03:23:
                    fe:5b:a5:32:ba:8a:4f:56:02:8f:8b:a4:da:83:d0:
                    f2:d3:eb:69:c7:64:98:f7:03:d2:4d:bf:44:77:2a:
                    21:e2:95:72:ee:71:f3:56:93:d6:84:5b:39:83:e7:
                    c6:d8:5f:4e:2c:cb:a2:f5:c3:6b:59:5b:00:32:83:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4A:B3:29:03:77:9F:27:C2:F7:AC:D8:0C:15:7C:D7:BB:2A:23:42
            X509v3 Authority Key Identifier:
                keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ea:49:ab:4f:bb:ad:a5:ed:83:e3:4a:f1:f4:a1:11:fd:7f:
         d4:65:f4:1b:87:bc:38:ee:83:18:08:8f:b2:e4:88:cf:75:96:
         22:4a:c5:46:79:18:96:b3:a8:e6:fc:7e:a4:68:07:2c:e0:1c:
         19:66:4a:3b:62:7a:9f:3e:b4:fd:86:ca:c6:b7:72:3e:72:67:
         b4:35:93:3e:36:f4:34:23:3a:30:de:5d:ba:67:4e:3a:9b:e8:
         22:76:99:4d:54:02:fc:13:22:e8:0e:1f:6d:b3:a0:e1:ef:bc:
         e6:98:c8:7f:6c:9a:04:85:97:61:02:bd:d7:f1:b5:f9:4d:3f:
         21:90:53:4b:4f:a5:c8:34:8c:33:1b:f8:25:c4:42:60:50:00:
         f4:df:27:df:1b:a5:5f:19:98:15:a6:24:bc:c3:40:ca:58:05:
         97:ed:e9:0a:e5:0c:ff:cc:18:af:9a:89:01:28:ee:3c:70:72:
         29:dd:c9:86:41:a2:e2:cb:4c:c4:93:09:4c:3f:ca:94:c6:8b:
         01:93:59:0b:b0:e3:99:c2:ee:a8:b9:9f:f3:e1:ca:57:38:0c:
         a2:c7:fa:49:2a:d9:a3:45:3e:fc:30:40:c3:8f:7e:e8:9c:0e:
         f0:39:f7:00:5a:0c:09:10:5d:54:fd:d0:54:66:3c:e9:ee:a6:
         2a:d6:05:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/ItP2P7//9LJ/0Z2ilAmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllM2U0YTMyZTA2YTE4NzIzNGUwMTc3ZjJjYmEwNTU2NGNk
MWZiNTAwHhcNMjUxMDIwMDEwMTM2WhcNMjUxMDIxMDEwMTM2WjAzMTEwLwYDVQQD
Eyg1MzRhYjMyOTAzNzc5ZjI3YzJmN2FjZDgwYzE1N2NkN2JiMmEyMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k8rO0UfWoot2FOmysOnZcl/R9Ex
VoR/mQkA40UAKpHhRN9hxVVPFgyf7Fce953w5Gt0Jz84+cd9k5F/Q9Z1PR4JH7gf
UFEuCpkUjW+UJU3bfBdpPOCvBeHjQkxjW07tzyNfevfYpccw1jBdZMhQ+ifdMpa/
cM3eYvkHK65kbBjujpkh3P44IAea+lq1ae3Pbkto31iE/u6bI2EHXB4cQx2cxIM3
VO3lwc4l1jpiPNlsiY+u2d09Q3Pi4kGfXawoAyP+W6UyuopPVgKPi6Tag9Dy0+tp
x2SY9wPSTb9Edyoh4pVy7nHzVpPWhFs5g+fG2F9OLMui9cNrWVsAMoPG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNKsykDd58nwves2AwVfNe7KiNCMB8GA1UdIwQY
MBaAFJ4+SjLgahhyNOAXfyy6BVZM0ftQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMt
OGM3OTNjMDYyYTQ5LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMtOGM3OTNjMDYyYTQ5
LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOpJq0+7
raXtg+NK8fShEf1/1GX0G4e8OO6DGAiPsuSIz3WWIkrFRnkYlrOo5vx+pGgHLOAc
GWZKO2J6nz60/YbKxrdyPnJntDWTPjb0NCM6MN5dumdOOpvoInaZTVQC/BMi6A4f
bbOg4e+85pjIf2yaBIWXYQK91/G1+U0/IZBTS0+lyDSMMxv4JcRCYFAA9N8n3xul
XxmYFaYkvMNAylgFl+3pCuUM/8wYr5qJASjuPHByKd3JhkGi4stMxJMJTD/KlMaL
AZNZC7DjmcLuqLmf8+HKVzgMosf6SSrZo0U+/DBAw49+6JwO8Dn3AFoMCRBdVP3Q
VGY86e6mKtYFDQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:35 2025 by rpki-client