Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
File:                     ge84bpUp6_89_qsXonx5OCPNPVU.mft (raw, json)
Hash identifier:          T4WFPa6OtanF37JrGfcqejsFj+ufAFLsGYcteaWyypA=
Subject key identifier:   62:BF:79:62:75:E0:14:CD:D2:46:E7:97:60:F8:66:AC:FB:7C:A9:89
Authority key identifier: 81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Certificate issuer:       /CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Certificate serial:       0199FBEA9D20C1B16AF7F32D835042CF3794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
Manifest number:          03AC
Signing time:             Sun 19 Oct 2025 10:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:20 +0000
Files and hashes:         1: ge84bpUp6_89_qsXonx5OCPNPVU.crl (hash: qQWOP6eQunHJbFpGu1PcDFbRP/9zkNa+hL56v2Ye2mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:9d:20:c1:b1:6a:f7:f3:2d:83:50:42:cf:37:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
        Validity
            Not Before: Oct 19 10:01:20 2025 GMT
            Not After : Oct 20 10:01:20 2025 GMT
        Subject: CN=62bf796275e014cdd246e79760f866acfb7ca989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:70:70:5e:2f:5f:33:1f:87:a8:12:9d:61:
                    59:ac:79:14:ca:ea:ff:9a:28:63:aa:bd:fc:13:09:
                    e6:1a:90:6e:b6:a8:8b:0f:f7:01:60:e1:2e:a5:a1:
                    59:bb:c3:29:6f:8e:59:40:0b:b0:91:78:a9:a4:51:
                    c9:47:16:92:2f:a7:1e:e7:bc:a1:33:15:c8:82:fa:
                    4e:8a:1a:39:70:07:27:3d:4d:79:39:8b:c7:a6:7e:
                    ea:f3:3d:77:ea:1a:bb:c8:dd:3d:93:0d:f6:9b:72:
                    3d:97:bd:cd:7b:ad:f6:5b:ce:a1:d5:1f:b2:cc:f4:
                    9f:89:67:7f:25:65:8f:31:df:ca:7c:16:80:5c:98:
                    09:9c:bc:c4:25:9a:da:ab:6d:eb:65:b5:02:89:89:
                    ac:30:c6:73:ec:bc:ae:f1:5e:3f:f8:e3:7d:d7:f6:
                    25:88:3b:73:0f:7f:af:e9:25:78:05:1a:3d:a4:36:
                    ed:4a:ab:42:44:21:8c:d4:1d:c5:94:01:ca:94:51:
                    f1:f6:20:9b:d0:08:9b:52:6c:32:0c:26:a1:3e:e8:
                    a2:e8:c4:39:1d:67:7e:87:83:6f:d3:45:ff:9b:36:
                    c5:41:98:a3:c0:73:12:c4:67:2f:27:00:bf:56:64:
                    9e:0b:2d:f7:ac:b2:00:85:eb:a4:52:8a:e6:07:60:
                    47:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BF:79:62:75:E0:14:CD:D2:46:E7:97:60:F8:66:AC:FB:7C:A9:89
            X509v3 Authority Key Identifier:
                keyid:81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:31:e5:3f:12:b5:a2:88:c7:b2:90:eb:6b:9f:2b:de:72:f9:
         3f:9b:33:9e:7d:d3:98:dd:fe:6e:5b:75:13:f3:2f:f5:ca:83:
         20:6a:ea:fe:15:11:9d:d6:77:8c:19:0d:61:62:8e:e5:3e:0b:
         22:f7:67:22:0e:4b:ff:be:ee:d3:e8:9f:f5:bb:51:28:9e:f2:
         e1:0d:51:73:aa:6a:bc:c7:ff:94:93:a8:9e:05:22:65:d9:3a:
         91:4e:9a:a6:6d:e3:c1:dc:12:30:82:a0:ee:38:0a:b2:e9:b7:
         df:d0:e8:e6:9d:43:b1:d4:e4:7c:2e:03:4a:49:32:9a:ab:99:
         fe:e3:57:41:0f:2d:57:88:9e:33:bb:3d:7e:7d:96:5a:e6:3b:
         30:85:2e:92:dc:92:2d:53:29:82:93:9f:ea:27:89:8e:f8:63:
         9d:02:3b:9c:29:29:a2:16:db:a5:d6:3d:b3:91:34:b2:5c:52:
         3b:a3:fa:b1:6f:9a:15:75:b3:2e:93:a7:e5:ee:97:05:b1:9b:
         d4:a9:d6:9d:9f:09:53:cb:9a:55:f5:76:07:c3:7d:30:9e:83:
         39:9e:30:16:24:f5:96:da:a5:e8:0f:b7:30:13:b9:21:14:0e:
         bd:59:ef:8f:ef:89:5a:77:8f:85:25:32:c0:22:84:9e:7a:1b:
         f6:d1:00:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76p0gwbFq9/Mtg1BCzzeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWYzODZlOTUyOWViZmYzZGZlYWIxN2EyN2M3OTM4MjNj
ZDNkNTUwHhcNMjUxMDE5MTAwMTIwWhcNMjUxMDIwMTAwMTIwWjAzMTEwLwYDVQQD
Eyg2MmJmNzk2Mjc1ZTAxNGNkZDI0NmU3OTc2MGY4NjZhY2ZiN2NhOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwtwcF4vXzMfh6gSnWFZrHkUyur/
mihjqr38EwnmGpButqiLD/cBYOEupaFZu8Mpb45ZQAuwkXippFHJRxaSL6ce57yh
MxXIgvpOiho5cAcnPU15OYvHpn7q8z136hq7yN09kw32m3I9l73Ne632W86h1R+y
zPSfiWd/JWWPMd/KfBaAXJgJnLzEJZraq23rZbUCiYmsMMZz7Lyu8V4/+ON91/Yl
iDtzD3+v6SV4BRo9pDbtSqtCRCGM1B3FlAHKlFHx9iCb0AibUmwyDCahPuii6MQ5
HWd+h4Nv00X/mzbFQZijwHMSxGcvJwC/VmSeCy33rLIAheukUormB2BHnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGK/eWJ14BTN0kbnl2D4Zqz7fKmJMB8GA1UdIwQY
MBaAFIHvOG6VKev/Pf6rF6J8eTgjzT1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U4NGJwVXA2Xzg5X3FzWG9ueDVPQ1BOUFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNWNhNDgtM2FhNS00YmRmLTkyODQt
MjhmYjAzOWY5YTQyLzEvZ2U4NGJwVXA2Xzg5X3FzWG9ueDVPQ1BOUFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mNWNhNDgtM2FhNS00YmRmLTkyODQtMjhmYjAzOWY5YTQy
LzEvZ2U4NGJwVXA2Xzg5X3FzWG9ueDVPQ1BOUFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETHlPxK1
oojHspDra58r3nL5P5sznn3TmN3+blt1E/Mv9cqDIGrq/hURndZ3jBkNYWKO5T4L
IvdnIg5L/77u0+if9btRKJ7y4Q1Rc6pqvMf/lJOongUiZdk6kU6apm3jwdwSMIKg
7jgKsum339Do5p1DsdTkfC4DSkkymquZ/uNXQQ8tV4ieM7s9fn2WWuY7MIUuktyS
LVMpgpOf6ieJjvhjnQI7nCkpohbbpdY9s5E0slxSO6P6sW+aFXWzLpOn5e6XBbGb
1KnWnZ8JU8uaVfV2B8N9MJ6DOZ4wFiT1ltql6A+3MBO5IRQOvVnvj++JWnePhSUy
wCKEnnob9tEANQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:31 2025 by rpki-client