Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
File:                     Mm9RyiOYIQP_40-YkNC3To-nga8.mft (raw, json)
Hash identifier:          23vZbDs2imp0+T+5WpIx2afuZ0rONuFlVHclpBqQ1Ms=
Subject key identifier:   C0:AB:61:0F:22:D9:A8:F9:84:E4:0D:17:F8:6D:25:B3:F3:D5:98:A7
Authority key identifier: 32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
Certificate issuer:       /CN=326f51ca23982103ffe34f9890d0b74e8fa781af
Certificate serial:       0199FB7CB9273E996A577A934B92A652712D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
Manifest number:          0746
Signing time:             Sun 19 Oct 2025 08:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:18 +0000
Files and hashes:         1: Mm9RyiOYIQP_40-YkNC3To-nga8.crl (hash: ghCyBGjXvFflK5m9m7xPSF9t+9doIr8BMGu/1m4w3fU=)
                          2: XS-Ybz0hvV9BojCYEUiidWOyx20.roa (hash: rQhYc9pPbBgv4YgNdF82ibLtydUp9AsYJJ57Y6MS2So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:b9:27:3e:99:6a:57:7a:93:4b:92:a6:52:71:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=326f51ca23982103ffe34f9890d0b74e8fa781af
        Validity
            Not Before: Oct 19 08:01:18 2025 GMT
            Not After : Oct 20 08:01:18 2025 GMT
        Subject: CN=c0ab610f22d9a8f984e40d17f86d25b3f3d598a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a5:84:e7:19:b3:21:b1:87:01:86:26:78:86:
                    03:e7:15:8e:ea:e1:ea:a6:fd:58:93:8e:46:f1:ae:
                    99:38:2b:b5:fd:51:79:02:3f:f0:d0:85:3b:51:c7:
                    37:27:c2:41:2e:de:26:84:65:9e:75:fb:79:0c:5a:
                    e8:2c:59:77:08:f5:f8:dc:d7:63:6a:09:49:7f:b3:
                    19:da:72:d3:55:15:3e:e8:a8:7a:37:1c:e0:ae:b5:
                    04:f2:da:cd:7d:8c:28:f3:ca:4d:70:ab:74:35:7b:
                    1b:c1:20:82:15:ad:f0:9c:95:fd:26:c9:2c:3e:e2:
                    89:bb:18:b2:37:f4:a8:8f:f9:d8:02:cb:38:be:82:
                    97:bd:c5:ce:b9:ad:ca:14:e9:41:53:3f:1d:ec:54:
                    05:03:52:16:5c:e4:d7:64:ce:a5:0d:5a:94:40:e5:
                    36:a2:76:07:53:7e:ca:99:9e:b9:0a:86:5f:e8:34:
                    09:60:c2:c6:30:19:e4:00:41:0c:08:29:32:18:e0:
                    2c:d5:eb:ad:6e:8d:a8:1e:88:a7:47:b6:3a:7f:db:
                    0f:cf:77:11:64:08:6d:94:09:10:43:59:71:c6:f1:
                    a7:94:5e:eb:3f:4b:53:26:10:ab:0e:b4:d0:dc:ca:
                    40:1d:d8:9e:98:f9:20:68:cf:89:f6:32:0c:24:85:
                    16:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AB:61:0F:22:D9:A8:F9:84:E4:0D:17:F8:6D:25:B3:F3:D5:98:A7
            X509v3 Authority Key Identifier:
                keyid:32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c2:74:99:34:f2:b3:7f:fb:df:aa:fc:65:98:24:3d:37:99:
         84:4b:03:01:58:b5:1c:58:39:4f:b0:f0:de:39:06:4b:74:63:
         e8:4f:34:17:9c:3a:93:0e:fe:19:0a:a0:b0:46:2d:2a:3f:eb:
         9c:86:24:91:83:93:71:1c:d1:53:d2:d3:f6:66:52:1a:bd:71:
         8d:5d:56:8e:05:93:64:00:56:a1:64:58:40:6c:8c:c3:f5:77:
         7b:bc:40:7d:f8:53:ea:d6:bc:50:ba:c2:70:c9:7d:e1:7b:f8:
         37:c2:3a:7c:6b:ba:c4:1f:47:ac:86:48:0e:1b:3a:c7:82:54:
         15:cb:2c:8f:73:ae:68:35:9b:a9:f9:e7:3d:25:4b:f1:e0:37:
         76:09:be:39:fc:45:07:45:99:69:cd:54:23:35:de:b2:0a:d4:
         fd:d7:c5:77:2e:5c:79:94:ab:82:e0:86:15:3c:9e:08:16:a8:
         fa:9f:f8:0d:1c:af:46:c1:15:31:b3:b0:9b:07:17:87:68:e5:
         e6:43:26:f4:23:63:28:e5:89:2d:dc:52:7a:61:f2:8c:bc:7f:
         55:f1:28:60:d7:63:6b:aa:bd:06:7a:c8:7f:c1:1f:5e:45:b2:
         19:e6:30:1a:92:36:22:3b:28:57:78:d8:41:a1:8a:03:ce:7e:
         2a:b9:ec:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fLknPplqV3qTS5KmUnEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNmY1MWNhMjM5ODIxMDNmZmUzNGY5ODkwZDBiNzRlOGZh
NzgxYWYwHhcNMjUxMDE5MDgwMTE4WhcNMjUxMDIwMDgwMTE4WjAzMTEwLwYDVQQD
EyhjMGFiNjEwZjIyZDlhOGY5ODRlNDBkMTdmODZkMjViM2YzZDU5OGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaWE5xmzIbGHAYYmeIYD5xWO6uHq
pv1Yk45G8a6ZOCu1/VF5Aj/w0IU7Ucc3J8JBLt4mhGWedft5DFroLFl3CPX43Ndj
aglJf7MZ2nLTVRU+6Kh6NxzgrrUE8trNfYwo88pNcKt0NXsbwSCCFa3wnJX9Jsks
PuKJuxiyN/Soj/nYAss4voKXvcXOua3KFOlBUz8d7FQFA1IWXOTXZM6lDVqUQOU2
onYHU37KmZ65CoZf6DQJYMLGMBnkAEEMCCkyGOAs1eutbo2oHoinR7Y6f9sPz3cR
ZAhtlAkQQ1lxxvGnlF7rP0tTJhCrDrTQ3MpAHdiemPkgaM+J9jIMJIUW7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCrYQ8i2aj5hOQNF/htJbPz1ZinMB8GA1UdIwQY
MBaAFDJvUcojmCED/+NPmJDQt06Pp4GvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80MGE5YjUtZTg5OS00YThhLWFjNGYt
OTY2ZmE5NmJlZmYyLzEvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS80MGE5YjUtZTg5OS00YThhLWFjNGYtOTY2ZmE5NmJlZmYy
LzEvTW05UnlpT1lJUVBfNDAtWWtOQzNUby1uZ2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMJ0mTTy
s3/736r8ZZgkPTeZhEsDAVi1HFg5T7Dw3jkGS3Rj6E80F5w6kw7+GQqgsEYtKj/r
nIYkkYOTcRzRU9LT9mZSGr1xjV1WjgWTZABWoWRYQGyMw/V3e7xAffhT6ta8ULrC
cMl94Xv4N8I6fGu6xB9HrIZIDhs6x4JUFcssj3OuaDWbqfnnPSVL8eA3dgm+OfxF
B0WZac1UIzXesgrU/dfFdy5ceZSrguCGFTyeCBao+p/4DRyvRsEVMbOwmwcXh2jl
5kMm9CNjKOWJLdxSemHyjLx/VfEoYNdja6q9BnrIf8EfXkWyGeYwGpI2IjsoV3jY
QaGKA85+Krns/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:55 2025 by rpki-client