Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
File:                     dWQLapVyPRupdqH7EJKDnpRrWyQ.mft (raw, json)
Hash identifier:          2aXaVKSvXwPB5j4ZkESdzVsCTwL8E8YkFomfEU1LnyE=
Subject key identifier:   92:9C:74:77:0C:9D:0D:37:5C:37:94:8E:63:78:4A:14:61:0B:58:CE
Authority key identifier: 75:64:0B:6A:95:72:3D:1B:A9:76:A1:FB:10:92:83:9E:94:6B:5B:24
Certificate issuer:       /CN=75640b6a95723d1ba976a1fb1092839e946b5b24
Certificate serial:       0199FC8F52F1A0818D1E39B5F85AAED5A26A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
Manifest number:          E9
Signing time:             Sun 19 Oct 2025 13:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:15 +0000
Files and hashes:         1: dWQLapVyPRupdqH7EJKDnpRrWyQ.crl (hash: fpPodGgIG4KRxlBjN8EbQlVfkkBkkUdjSajAfgSchIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:52:f1:a0:81:8d:1e:39:b5:f8:5a:ae:d5:a2:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75640b6a95723d1ba976a1fb1092839e946b5b24
        Validity
            Not Before: Oct 19 13:01:15 2025 GMT
            Not After : Oct 20 13:01:15 2025 GMT
        Subject: CN=929c74770c9d0d375c37948e63784a14610b58ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:86:19:a9:91:ac:3b:9d:08:ef:8f:fd:36:
                    39:55:ee:d3:c8:49:f3:8b:c8:29:e5:bd:1e:87:e6:
                    a9:1c:56:8e:ef:4e:be:c4:91:fa:3f:72:5f:81:c7:
                    b5:fe:0d:fa:05:b7:5b:6f:b6:5d:08:7e:c6:80:55:
                    00:71:22:37:e5:66:0d:28:e6:1f:38:42:77:ed:05:
                    1a:ff:a9:59:8f:c0:98:b0:98:c7:28:b2:ab:28:6c:
                    b8:fb:79:24:80:68:c1:84:a0:05:f4:a0:a7:a5:e3:
                    9f:f1:94:0f:c7:9e:6b:3d:e0:e2:0e:ac:da:5e:b9:
                    4b:a1:1f:11:72:14:b8:f1:10:f0:4e:b2:84:c7:42:
                    ed:86:05:bf:7b:26:3e:24:62:61:e6:86:33:e0:31:
                    a1:1c:b5:4c:a9:e4:93:c0:fe:16:94:e5:1a:ca:24:
                    09:88:88:80:7c:05:5a:68:ec:a0:fc:ab:d5:e0:f3:
                    d7:e4:b7:09:e4:b6:ec:97:4e:aa:79:b7:68:44:6a:
                    cb:9a:48:8e:e3:a5:74:f1:4d:b8:80:61:6a:c1:18:
                    30:2f:33:b7:17:5e:ab:95:a6:9f:7c:6c:c0:99:e3:
                    3c:34:00:a7:48:15:6f:d6:8a:21:57:76:f9:8a:2d:
                    4a:11:45:e9:a2:c2:39:ce:fd:0d:a7:9f:65:0c:52:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9C:74:77:0C:9D:0D:37:5C:37:94:8E:63:78:4A:14:61:0B:58:CE
            X509v3 Authority Key Identifier:
                keyid:75:64:0B:6A:95:72:3D:1B:A9:76:A1:FB:10:92:83:9E:94:6B:5B:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQLapVyPRupdqH7EJKDnpRrWyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f27e56-305b-4e78-aa5a-fd02e8bb9196/1/dWQLapVyPRupdqH7EJKDnpRrWyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d8:58:51:78:cd:ab:67:0c:58:90:6d:78:d3:54:89:dc:9f:
         1b:5e:c1:6a:ac:77:fa:45:4e:60:87:a1:1c:c6:d5:72:38:8e:
         44:f0:ab:0d:06:a7:93:1a:46:c7:bf:28:1c:12:04:be:61:a1:
         cc:70:d6:e7:91:fd:be:c5:fa:e2:d6:0f:24:d2:ad:4a:31:01:
         42:56:19:d6:33:c8:c5:f0:29:14:36:a0:4c:20:d8:74:17:7b:
         06:12:d3:4d:c5:68:05:c2:fb:5d:99:b5:07:c1:aa:07:0f:a3:
         02:e1:be:fd:5e:82:c3:22:0b:2b:34:16:bc:d5:1b:99:fa:c5:
         bf:1e:41:06:65:6a:43:07:94:46:7c:52:02:ab:66:2e:30:90:
         cb:df:81:32:39:74:84:39:0a:1c:8c:ea:12:e4:d0:ea:d4:a5:
         cf:a4:3f:9e:49:86:85:9d:f2:3f:1f:97:d3:54:b8:5d:e3:a6:
         96:7c:98:58:31:e8:f5:ac:7a:9f:75:0d:4a:0a:14:f9:89:6f:
         9a:66:c1:16:a1:c3:4a:d2:73:c5:c0:e4:f4:10:4e:e0:bb:ab:
         44:5f:c7:e0:78:e7:12:64:39:31:bc:72:d1:39:83:88:98:56:
         49:b8:1d:25:5c:35:06:8f:92:ef:7b:92:56:ec:03:60:2d:e9:
         cd:30:fc:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1LxoIGNHjm1+Fqu1aJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjQwYjZhOTU3MjNkMWJhOTc2YTFmYjEwOTI4MzllOTQ2
YjViMjQwHhcNMjUxMDE5MTMwMTE1WhcNMjUxMDIwMTMwMTE1WjAzMTEwLwYDVQQD
Eyg5MjljNzQ3NzBjOWQwZDM3NWMzNzk0OGU2Mzc4NGExNDYxMGI1OGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MmGGamRrDudCO+P/TY5Ve7TyEnz
i8gp5b0eh+apHFaO706+xJH6P3Jfgce1/g36Bbdbb7ZdCH7GgFUAcSI35WYNKOYf
OEJ37QUa/6lZj8CYsJjHKLKrKGy4+3kkgGjBhKAF9KCnpeOf8ZQPx55rPeDiDqza
XrlLoR8RchS48RDwTrKEx0LthgW/eyY+JGJh5oYz4DGhHLVMqeSTwP4WlOUayiQJ
iIiAfAVaaOyg/KvV4PPX5LcJ5Lbsl06qebdoRGrLmkiO46V08U24gGFqwRgwLzO3
F16rlaaffGzAmeM8NACnSBVv1oohV3b5ii1KEUXposI5zv0Np59lDFLV3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKcdHcMnQ03XDeUjmN4ShRhC1jOMB8GA1UdIwQY
MBaAFHVkC2qVcj0bqXah+xCSg56Ua1skMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdRTGFwVnlQUnVwZHFIN0VKS0RucFJyV3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9mMjdlNTYtMzA1Yi00ZTc4LWFhNWEt
ZmQwMmU4YmI5MTk2LzEvZFdRTGFwVnlQUnVwZHFIN0VKS0RucFJyV3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9mMjdlNTYtMzA1Yi00ZTc4LWFhNWEtZmQwMmU4YmI5MTk2
LzEvZFdRTGFwVnlQUnVwZHFIN0VKS0RucFJyV3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9hYUXjN
q2cMWJBteNNUidyfG17Baqx3+kVOYIehHMbVcjiORPCrDQankxpGx78oHBIEvmGh
zHDW55H9vsX64tYPJNKtSjEBQlYZ1jPIxfApFDagTCDYdBd7BhLTTcVoBcL7XZm1
B8GqBw+jAuG+/V6CwyILKzQWvNUbmfrFvx5BBmVqQweURnxSAqtmLjCQy9+BMjl0
hDkKHIzqEuTQ6tSlz6Q/nkmGhZ3yPx+X01S4XeOmlnyYWDHo9ax6n3UNSgoU+Ylv
mmbBFqHDStJzxcDk9BBO4LurRF/H4HjnEmQ5Mbxy0TmDiJhWSbgdJVw1Bo+S73uS
VuwDYC3pzTD8hg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:00 2025 by rpki-client