Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
File:                     k_0m06C2k6ApvGLcud2pUZ5HdkA.mft (raw, json)
Hash identifier:          elt9H0n3qYUkM/m2w7xVBrLX9Q2Kcpu8i05X3+sfJg0=
Subject key identifier:   F7:BC:DB:26:0C:F3:75:AB:DA:CE:9E:CC:43:BB:28:72:C2:C7:CC:04
Authority key identifier: 93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40
Certificate issuer:       /CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
Certificate serial:       019A003598D664E422338FBEDFF5A1734E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
Manifest number:          091D
Signing time:             Mon 20 Oct 2025 06:01:43 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:43 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:43 +0000
Files and hashes:         1: ArhXiZl_rJ6jBgX2PzZ8anI0Wyw.roa (hash: 9a5DYYLxOiKU0/Lz5D5+BYks2R+Do2ZNkpv4HeNltqY=)
                          2: k_0m06C2k6ApvGLcud2pUZ5HdkA.crl (hash: n4EVby9GjO/8LE52ahu4w1JTBXeWEd8h3ayrVy8+wxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:98:d6:64:e4:22:33:8f:be:df:f5:a1:73:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fd26d3a0b693a029bc62dcb9dda9519e477640
        Validity
            Not Before: Oct 20 06:01:43 2025 GMT
            Not After : Oct 21 06:01:43 2025 GMT
        Subject: CN=f7bcdb260cf375abdace9ecc43bb2872c2c7cc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:30:06:fb:06:cd:93:24:fd:44:4e:a2:ba:95:
                    62:29:01:98:e2:a0:38:fd:22:ed:02:5f:1a:a2:78:
                    67:3d:d4:1f:e1:c7:6b:07:1b:1a:c1:14:d6:5b:8c:
                    17:de:c0:22:85:89:89:ad:38:a1:4e:cc:8a:49:f4:
                    28:db:fa:b0:e2:c7:ae:b5:79:f6:d4:2c:15:76:f5:
                    c3:e1:ac:e2:0b:83:12:ae:37:8b:33:0a:a3:75:a2:
                    7d:83:4b:9c:ff:e8:90:5e:fa:4b:cf:a6:d0:a2:48:
                    ce:25:30:62:f3:62:c5:8d:64:98:44:af:a3:a0:1d:
                    27:43:f1:44:01:45:5b:4b:88:2e:f3:a3:9a:83:94:
                    b7:4f:65:b4:38:8c:60:81:04:fd:4c:8c:bb:b1:8c:
                    48:13:a4:45:f8:77:92:82:d5:47:22:03:65:59:07:
                    1b:fd:d1:d7:d0:5d:bc:c4:69:fa:05:c7:38:56:cf:
                    3f:87:84:90:70:53:88:d4:b7:02:97:5e:b3:7e:c8:
                    b2:68:7c:b5:71:6b:ac:1d:cb:98:55:4d:1f:63:73:
                    73:e1:50:cc:dd:11:48:34:b0:47:75:50:c7:8d:ce:
                    b8:c9:d1:2f:e0:00:52:98:18:21:58:9b:71:d9:74:
                    05:a3:02:1c:eb:e6:53:b9:06:1d:9b:b3:91:cd:65:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BC:DB:26:0C:F3:75:AB:DA:CE:9E:CC:43:BB:28:72:C2:C7:CC:04
            X509v3 Authority Key Identifier:
                keyid:93:FD:26:D3:A0:B6:93:A0:29:BC:62:DC:B9:DD:A9:51:9E:47:76:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_0m06C2k6ApvGLcud2pUZ5HdkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0df9ab-2e78-4b98-a6ef-73bb9300f575/1/k_0m06C2k6ApvGLcud2pUZ5HdkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:06:1d:b9:e2:38:63:ff:87:ab:54:46:08:25:8e:ea:d2:3c:
         e9:6e:dc:7d:47:c8:1a:d1:68:3f:79:b5:89:12:ef:25:10:dc:
         e8:38:89:b0:5b:f9:13:d6:f9:14:2b:17:9d:08:e6:71:9d:38:
         16:ed:2c:e3:54:53:be:11:d4:bb:dc:fb:b8:94:3c:b9:07:12:
         fe:b0:a4:90:51:cd:37:a2:bf:3a:62:79:f1:92:77:a1:ca:51:
         c8:65:94:06:de:10:3c:cb:02:0c:9e:17:75:ce:5c:9b:6c:0a:
         b2:34:59:d3:cd:e1:a6:df:62:a3:11:21:4a:b8:6d:1c:84:45:
         f5:15:0a:74:f3:ef:fc:f6:e5:76:77:d0:19:fa:06:82:2c:c6:
         44:8a:bb:50:6a:37:f9:d8:d5:51:23:37:e2:6d:92:b9:ef:67:
         aa:b9:a1:ed:f3:46:83:12:69:93:40:37:f7:69:dc:39:75:e8:
         53:ad:8f:1e:b4:57:10:41:69:09:fd:c6:6a:a7:1b:ce:47:eb:
         a2:14:46:6e:82:04:79:73:b2:ab:7b:cd:ad:f2:40:c4:7f:f0:
         38:f7:92:04:1c:54:45:d0:25:cd:d7:70:3c:26:04:08:f7:0b:
         f8:4a:36:b7:a5:ff:85:96:b7:b5:99:85:28:7f:ec:a2:75:4a:
         80:4e:2f:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANZjWZOQiM4++3/Whc04gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmQyNmQzYTBiNjkzYTAyOWJjNjJkY2I5ZGRhOTUxOWU0
Nzc2NDAwHhcNMjUxMDIwMDYwMTQzWhcNMjUxMDIxMDYwMTQzWjAzMTEwLwYDVQQD
EyhmN2JjZGIyNjBjZjM3NWFiZGFjZTllY2M0M2JiMjg3MmMyYzdjYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zAG+wbNkyT9RE6iupViKQGY4qA4
/SLtAl8aonhnPdQf4cdrBxsawRTWW4wX3sAihYmJrTihTsyKSfQo2/qw4seutXn2
1CwVdvXD4aziC4MSrjeLMwqjdaJ9g0uc/+iQXvpLz6bQokjOJTBi82LFjWSYRK+j
oB0nQ/FEAUVbS4gu86Oag5S3T2W0OIxggQT9TIy7sYxIE6RF+HeSgtVHIgNlWQcb
/dHX0F28xGn6Bcc4Vs8/h4SQcFOI1LcCl16zfsiyaHy1cWusHcuYVU0fY3Nz4VDM
3RFINLBHdVDHjc64ydEv4ABSmBghWJtx2XQFowIc6+ZTuQYdm7ORzWWP6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPe82yYM83Wr2s6ezEO7KHLCx8wEMB8GA1UdIwQY
MBaAFJP9JtOgtpOgKbxi3LndqVGeR3ZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZGY5YWItMmU3OC00Yjk4LWE2ZWYt
NzNiYjkzMDBmNTc1LzEva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wZGY5YWItMmU3OC00Yjk4LWE2ZWYtNzNiYjkzMDBmNTc1
LzEva18wbTA2QzJrNkFwdkdMY3VkMnBVWjVIZGtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwYdueI4
Y/+Hq1RGCCWO6tI86W7cfUfIGtFoP3m1iRLvJRDc6DiJsFv5E9b5FCsXnQjmcZ04
Fu0s41RTvhHUu9z7uJQ8uQcS/rCkkFHNN6K/OmJ58ZJ3ocpRyGWUBt4QPMsCDJ4X
dc5cm2wKsjRZ083hpt9ioxEhSrhtHIRF9RUKdPPv/PbldnfQGfoGgizGRIq7UGo3
+djVUSM34m2Sue9nqrmh7fNGgxJpk0A392ncOXXoU62PHrRXEEFpCf3Gaqcbzkfr
ohRGboIEeXOyq3vNrfJAxH/wOPeSBBxURdAlzddwPCYECPcL+Eo2t6X/hZa3tZmF
KH/sonVKgE4vUw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:50:08 2025 by rpki-client