Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
File:                     P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json)
Hash identifier:          Qa8iKx6vKsFUOHFHQXigogrkT4mzcaJAW0V1pBb/rVk=
Subject key identifier:   01:6F:93:CB:BD:CE:0A:B8:F0:3A:90:89:40:B7:25:B4:CC:43:72:14
Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
Certificate issuer:       /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Certificate serial:       0199FEB481077F7881FF51E8C7E2BBA7051A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
Manifest number:          0219
Signing time:             Sun 19 Oct 2025 23:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:06 +0000
Files and hashes:         1: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: KgR8UySO0IlsMCcoHiTQYFcWiNuuI3abei+YP5JynfI=)
                          2: tO945n8IOH4m4HY-IByza0kUANU.roa (hash: 1Y70k1PM1fySvFZtbmtzuB2FgWQvwNTM4axab3kjR2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:81:07:7f:78:81:ff:51:e8:c7:e2:bb:a7:05:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
        Validity
            Not Before: Oct 19 23:01:06 2025 GMT
            Not After : Oct 20 23:01:06 2025 GMT
        Subject: CN=016f93cbbdce0ab8f03a908940b725b4cc437214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:7f:3f:c4:75:99:db:d6:d2:fc:f2:d0:7b:
                    fb:ff:7e:bc:c2:ee:08:3a:40:12:16:16:97:98:bb:
                    9f:c5:c1:c7:5b:61:be:8c:a5:3d:df:03:1b:2a:80:
                    a5:a6:32:3b:28:ec:a9:47:ef:63:fd:69:49:e2:99:
                    75:f9:bd:bc:ef:c3:b4:28:bd:3f:db:c1:95:93:d2:
                    40:59:40:67:c4:f4:b1:3f:ea:64:2b:90:c0:33:09:
                    aa:34:d3:15:72:d0:6e:d3:95:a7:e5:3a:ec:96:ca:
                    f2:bd:60:9a:f0:c9:00:b4:2b:20:4b:41:53:36:50:
                    32:b5:c9:13:a0:1e:d5:b7:6b:8b:a2:d9:79:26:74:
                    cc:1a:d5:8a:e5:aa:36:af:a9:b9:ff:c2:c6:78:d8:
                    a7:c6:16:6b:00:97:e6:e1:d5:a6:86:24:5d:f0:2a:
                    40:ba:08:85:5b:f0:c8:8d:ce:80:59:0e:bf:e1:4b:
                    ce:8a:6b:ad:58:60:84:53:8c:d5:2d:18:c4:9d:d2:
                    fc:7a:0b:31:5c:c9:7b:5d:2d:2c:ec:5e:55:19:04:
                    6d:12:23:b8:cd:b3:0a:e5:6d:c3:8f:7f:33:39:fa:
                    1d:67:30:6e:e7:30:8c:39:9c:0d:16:aa:c5:7b:18:
                    d1:05:e9:d7:4d:10:55:c1:c2:61:d0:04:0b:15:49:
                    60:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6F:93:CB:BD:CE:0A:B8:F0:3A:90:89:40:B7:25:B4:CC:43:72:14
            X509v3 Authority Key Identifier:
                keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:93:20:fe:bd:38:48:a8:e8:ab:27:1c:56:9f:7b:c4:aa:5b:
         87:13:42:82:f2:6a:ff:ce:68:ed:fd:e5:d4:99:cf:1a:59:20:
         fc:cc:6c:e6:f0:7a:49:eb:4a:02:99:4e:4b:d6:cf:71:48:01:
         59:1d:f7:56:21:7c:c9:63:de:b6:6c:05:00:7b:f4:ce:4f:5d:
         3b:67:6d:97:77:f1:48:ed:72:fc:b9:98:71:10:60:82:a3:c6:
         20:8c:17:ce:aa:5c:bc:84:76:c6:6b:ca:6c:95:d0:17:12:30:
         56:cf:90:7d:ce:3d:3c:76:4b:33:5b:cb:01:41:5d:dc:c9:a8:
         eb:0d:01:03:31:fe:93:45:70:06:f5:f2:d3:5c:78:24:94:59:
         f0:5f:67:b8:95:fe:6d:c2:c3:49:47:18:01:1c:62:89:4a:7d:
         94:b9:67:c9:05:63:cf:35:a9:07:7f:88:a1:3a:ba:65:08:a7:
         19:42:c3:c9:05:af:7f:3d:d4:46:a7:1f:b8:1c:50:71:f4:15:
         61:6c:3c:52:df:f4:1c:9c:bf:4c:7b:aa:c6:a7:f9:1c:dd:d4:
         e3:87:7c:ad:d0:59:80:37:c2:79:84:86:f2:6f:2e:88:c1:75:
         10:f8:3c:f5:6e:fe:68:b7:43:60:64:99:fa:2d:94:a2:4d:7b:
         28:d2:ef:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tIEHf3iB/1Hox+K7pwUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYjc4Y2QxYTMxMGM5OWQ2Mzc3MTQwZTUyOGFhM2U2ZTBk
Y2FiOWYwHhcNMjUxMDE5MjMwMTA2WhcNMjUxMDIwMjMwMTA2WjAzMTEwLwYDVQQD
EygwMTZmOTNjYmJkY2UwYWI4ZjAzYTkwODk0MGI3MjViNGNjNDM3MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fd/P8R1mdvW0vzy0Hv7/368wu4I
OkASFhaXmLufxcHHW2G+jKU93wMbKoClpjI7KOypR+9j/WlJ4pl1+b2878O0KL0/
28GVk9JAWUBnxPSxP+pkK5DAMwmqNNMVctBu05Wn5TrslsryvWCa8MkAtCsgS0FT
NlAytckToB7Vt2uLotl5JnTMGtWK5ao2r6m5/8LGeNinxhZrAJfm4dWmhiRd8CpA
ugiFW/DIjc6AWQ6/4UvOimutWGCEU4zVLRjEndL8egsxXMl7XS0s7F5VGQRtEiO4
zbMK5W3Dj38zOfodZzBu5zCMOZwNFqrFexjRBenXTRBVwcJh0AQLFUlgcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFvk8u9zgq48DqQiUC3JbTMQ3IUMB8GA1UdIwQY
MBaAFD+3jNGjEMmdY3cUDlKKo+bg3KufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMjNjM2YtYWFiMy00Njg0LTgxYzct
YzU4MTUxMThlNTJmLzEvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zMjNjM2YtYWFiMy00Njg0LTgxYzctYzU4MTUxMThlNTJm
LzEvUDdlTTBhTVF5WjFqZHhRT1VvcWo1dURjcTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJMg/r04
SKjoqyccVp97xKpbhxNCgvJq/85o7f3l1JnPGlkg/Mxs5vB6SetKAplOS9bPcUgB
WR33ViF8yWPetmwFAHv0zk9dO2dtl3fxSO1y/LmYcRBggqPGIIwXzqpcvIR2xmvK
bJXQFxIwVs+Qfc49PHZLM1vLAUFd3Mmo6w0BAzH+k0VwBvXy01x4JJRZ8F9nuJX+
bcLDSUcYARxiiUp9lLlnyQVjzzWpB3+IoTq6ZQinGULDyQWvfz3URqcfuBxQcfQV
YWw8Ut/0HJy/THuqxqf5HN3U44d8rdBZgDfCeYSG8m8uiMF1EPg89W7+aLdDYGSZ
+i2Uok17KNLvig==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:47 2025 by rpki-client