Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File:                     0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier:          EwB94brB4SRBeogBsgYjvQRsrk5u+anv3+FU5k582lU=
Subject key identifier:   5C:B3:31:AA:04:29:93:BC:AC:1B:8B:CC:1D:AD:66:41:CB:8D:2D:84
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer:       /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial:       0199FB45DEED2D11A6D118468808853007D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number:          0EC2
Signing time:             Sun 19 Oct 2025 07:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:24 +0000
Files and hashes:         1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: VXfFCa108MbdL7+S7NVcRnNlvwfLdm3LPoxSFSSD/mg=)
                          2: ToCmO2uxejju7hWaQpgf8WOfMl0.roa (hash: ToZmw4QGeHPusAJiluz9KvdVpulMcwof8zXt9GUC+Og=)
                          3: ffPM5tOijzqMCvBgVLZrulDjr9M.roa (hash: mjTFPQvjm3YGXdJ50ci8rDHwA1GVzk1mURHKwSEJb1M=)
                          4: v6hAmhwF5zdYx8dEgkzg5dcM3po.roa (hash: WVX44j02BF26OexloZBarRA/wYQhTTWNJB3y+NBHmOM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:de:ed:2d:11:a6:d1:18:46:88:08:85:30:07:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
        Validity
            Not Before: Oct 19 07:01:24 2025 GMT
            Not After : Oct 20 07:01:24 2025 GMT
        Subject: CN=5cb331aa042993bcac1b8bcc1dad6641cb8d2d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:95:dd:61:52:cf:9d:06:83:5a:18:d0:3f:
                    1d:b9:6e:79:d3:94:01:11:c9:f9:24:4c:de:de:e9:
                    fa:39:1f:df:48:0f:f1:e9:36:4e:6f:c8:32:6b:c5:
                    05:be:16:13:42:f5:1a:19:a5:07:60:de:85:cf:1d:
                    08:dc:9d:0f:57:4b:cb:43:cf:0c:b8:4c:35:c0:6d:
                    51:6e:10:14:44:7f:b1:db:7a:59:38:cd:a7:d1:a5:
                    aa:9f:82:0e:4a:bb:5c:d9:ba:48:3a:7e:2e:d2:82:
                    65:52:71:ec:b4:20:d4:94:80:f4:bb:6f:1a:99:cd:
                    42:e4:1c:8f:29:51:e5:cc:07:1e:a1:06:8f:45:c1:
                    5a:64:2f:a8:b1:b6:b5:1d:60:0f:d7:6c:b3:da:9a:
                    c9:7c:3b:2e:52:ff:3d:ea:e6:05:ba:57:aa:2f:ce:
                    89:27:bc:0c:2b:64:2b:08:33:f3:3c:d2:50:5b:6d:
                    98:64:d3:f2:6b:61:3c:01:62:3d:b5:1b:63:02:56:
                    57:51:7e:11:bf:a6:7f:ca:4b:1e:72:e9:9b:ac:0b:
                    8c:00:f3:5a:27:4b:3e:c9:c5:f6:ac:e7:ba:93:0c:
                    4f:7a:b8:d3:fd:e6:f2:68:29:a0:60:93:69:4e:56:
                    12:6e:9a:7f:ee:cf:93:6e:99:fa:cc:17:32:d9:fa:
                    d7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B3:31:AA:04:29:93:BC:AC:1B:8B:CC:1D:AD:66:41:CB:8D:2D:84
            X509v3 Authority Key Identifier:
                keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:78:16:28:b9:c3:93:4d:22:f9:91:a7:be:7d:39:10:72:04:
         84:d4:41:d2:c1:a8:a1:77:19:c9:65:4a:d4:14:c4:90:5a:8b:
         38:b6:d8:de:57:84:e1:6e:15:b3:76:28:f8:a5:52:01:89:e0:
         19:28:1c:66:15:4b:a5:7b:7f:79:ac:43:26:bd:52:8d:2b:b8:
         ed:bd:15:dd:2e:10:be:4c:a1:ab:67:01:37:1c:c2:b5:f4:1a:
         62:83:bb:7a:c7:c8:d5:d6:e8:32:a5:ed:73:d0:c7:d9:52:02:
         89:6f:97:bd:bd:0e:8c:d4:ce:18:97:99:c7:be:c8:a8:f6:70:
         ac:02:61:4c:d5:6b:6f:83:1e:73:d5:17:65:ca:03:c8:b5:86:
         54:92:f8:34:78:e1:cb:e6:6c:45:6d:d0:10:12:f7:7c:07:77:
         7c:9e:fa:c2:93:ce:0c:58:9a:60:2f:4a:97:c3:41:43:89:a4:
         14:a6:4e:cd:7d:fd:60:b6:86:4e:61:fc:35:7b:de:6c:f2:7f:
         21:db:18:35:40:e8:3e:71:65:dd:9c:dd:fa:86:e8:35:d4:18:
         14:b7:be:ea:51:f5:c1:49:fc:aa:97:c3:5f:a8:63:a1:47:37:
         2a:88:14:1e:9f:b0:03:4d:86:37:30:bc:f3:51:bb:8d:b1:f9:
         1e:ef:bd:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rd7tLRGm0RhGiAiFMAfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmE0NDA5ZWE5MWY1MDZkNjMzODcxYzZjMzU1NDBkNDYw
MzM3ZDEwHhcNMjUxMDE5MDcwMTI0WhcNMjUxMDIwMDcwMTI0WjAzMTEwLwYDVQQD
Eyg1Y2IzMzFhYTA0Mjk5M2JjYWMxYjhiY2MxZGFkNjY0MWNiOGQyZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5SV3WFSz50Gg1oY0D8duW5505QB
Ecn5JEze3un6OR/fSA/x6TZOb8gya8UFvhYTQvUaGaUHYN6Fzx0I3J0PV0vLQ88M
uEw1wG1RbhAURH+x23pZOM2n0aWqn4IOSrtc2bpIOn4u0oJlUnHstCDUlID0u28a
mc1C5ByPKVHlzAceoQaPRcFaZC+osba1HWAP12yz2prJfDsuUv896uYFuleqL86J
J7wMK2QrCDPzPNJQW22YZNPya2E8AWI9tRtjAlZXUX4Rv6Z/yksecumbrAuMAPNa
J0s+ycX2rOe6kwxPerjT/ebyaCmgYJNpTlYSbpp/7s+Tbpn6zBcy2frXTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyzMaoEKZO8rBuLzB2tZkHLjS2EMB8GA1UdIwQY
MBaAFNJqRAnqkfUG1jOHHGw1VA1GAzfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYt
Y2ZlZmRmZGZiZTZiLzEvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYtY2ZlZmRmZGZiZTZi
LzEvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3gWKLnD
k00i+ZGnvn05EHIEhNRB0sGooXcZyWVK1BTEkFqLOLbY3leE4W4Vs3Yo+KVSAYng
GSgcZhVLpXt/eaxDJr1SjSu47b0V3S4Qvkyhq2cBNxzCtfQaYoO7esfI1dboMqXt
c9DH2VICiW+Xvb0OjNTOGJeZx77IqPZwrAJhTNVrb4Mec9UXZcoDyLWGVJL4NHjh
y+ZsRW3QEBL3fAd3fJ76wpPODFiaYC9Kl8NBQ4mkFKZOzX39YLaGTmH8NXvebPJ/
IdsYNUDoPnFl3Zzd+oboNdQYFLe+6lH1wUn8qpfDX6hjoUc3KogUHp+wA02GNzC8
81G7jbH5Hu+96Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:04 2025 by rpki-client