Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
File:                     Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft (raw, json)
Hash identifier:          UA0s5r5mOnUFn6EAwQHaOcn/D4zCJErUgxQUlxOevrQ=
Subject key identifier:   9B:0D:CD:63:77:D6:DE:FC:AD:CC:21:E8:24:9C:03:15:A8:F6:A2:7C
Authority key identifier: 46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
Certificate issuer:       /CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Certificate serial:       0199FC8F22772C2BA301C9726C223B005908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
Manifest number:          139F
Signing time:             Sun 19 Oct 2025 13:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:02 +0000
Files and hashes:         1: Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl (hash: b8khP4Bg3+jU2xLLDmHQQFObDQgJhd4YXM2nOLI2rAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:22:77:2c:2b:a3:01:c9:72:6c:22:3b:00:59:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
        Validity
            Not Before: Oct 19 13:01:02 2025 GMT
            Not After : Oct 20 13:01:02 2025 GMT
        Subject: CN=9b0dcd6377d6defcadcc21e8249c0315a8f6a27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:de:01:9e:1c:51:81:c0:64:01:6a:f1:e5:
                    8c:48:df:97:c6:f9:6f:97:ff:c9:4b:88:a4:b8:f1:
                    37:ad:e1:54:12:eb:d3:6c:32:ba:06:19:b0:1a:21:
                    16:ca:a7:b1:eb:38:fd:15:d7:81:a5:cc:26:36:0c:
                    da:c5:68:52:27:e2:92:d6:13:b5:15:51:1f:bd:61:
                    30:4c:60:3c:02:41:34:b8:b7:a1:df:43:f7:6f:ba:
                    b2:d3:f0:99:23:46:b5:e3:0d:4a:23:88:e2:7d:06:
                    27:81:a6:3e:69:9b:73:8f:57:9a:ae:ef:24:c0:d1:
                    ac:56:22:5c:12:cd:99:f1:3a:51:d1:25:1f:65:58:
                    99:f7:ec:ee:6e:2d:eb:a0:e9:56:6c:a3:09:00:29:
                    52:1b:f8:fb:79:b1:3b:6f:4c:42:79:aa:ff:d4:b0:
                    58:aa:da:c3:98:b7:f4:dc:2d:9c:fc:18:45:ea:6f:
                    51:31:86:11:bf:74:e8:de:b6:dc:bf:b7:4c:dc:87:
                    55:8e:70:00:7e:89:89:a0:80:46:e4:7a:58:41:45:
                    68:9d:43:a8:9a:1a:14:6a:e9:7a:8f:b8:66:46:15:
                    52:63:15:9b:b5:e4:8f:a6:a9:4a:55:28:12:a4:e7:
                    41:c5:d5:92:19:26:60:ec:31:ab:3b:aa:92:f1:02:
                    9a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0D:CD:63:77:D6:DE:FC:AD:CC:21:E8:24:9C:03:15:A8:F6:A2:7C
            X509v3 Authority Key Identifier:
                keyid:46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d5:eb:f2:e8:ca:84:e9:66:80:da:86:b1:f9:94:af:f7:3b:
         2b:04:e1:cf:d9:1e:23:07:2d:d6:15:b6:7f:8d:93:bc:50:1f:
         82:60:7d:4a:71:56:12:e1:7f:4b:67:61:c3:b0:62:6c:62:f2:
         20:69:e0:64:e9:92:da:3f:b6:30:af:a2:10:a4:b8:c9:65:da:
         76:2c:63:eb:ad:49:6c:c8:af:5a:d7:97:d7:90:dc:10:87:fa:
         40:89:11:f4:d2:fa:a7:56:51:c4:81:8b:3d:15:1b:d2:6e:78:
         69:3e:cf:b3:f2:b0:44:e4:36:c3:75:5d:c8:5b:d3:c9:78:bf:
         b1:92:0e:ad:bf:01:c2:c5:4a:67:0f:52:e5:a8:1a:88:04:ee:
         2b:02:17:d0:c7:8f:68:cc:28:7c:75:65:d8:e0:bb:86:c4:3a:
         76:02:ae:4a:9e:71:5d:d9:4e:ad:4c:95:b7:04:f4:7c:b5:40:
         7e:46:12:1e:35:73:8e:4b:23:d1:18:c2:96:05:da:83:f7:dc:
         5f:6d:dc:60:7e:58:2f:fe:01:4c:ee:29:98:fe:86:de:8a:ce:
         24:5a:0b:45:da:0e:81:ca:43:0a:f8:d3:53:b9:c3:88:69:25:
         a0:70:78:d2:40:0f:a6:ab:7d:b3:5f:3c:99:40:79:49:3c:aa:
         02:33:d6:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jyJ3LCujAclybCI7AFkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2N2EzODgxMTJlNjhmNGM3ZDRkODBjMzJkMzdjZmNkNmNk
MjNhNDUwHhcNMjUxMDE5MTMwMTAyWhcNMjUxMDIwMTMwMTAyWjAzMTEwLwYDVQQD
Eyg5YjBkY2Q2Mzc3ZDZkZWZjYWRjYzIxZTgyNDljMDMxNWE4ZjZhMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYDeAZ4cUYHAZAFq8eWMSN+Xxvlv
l//JS4ikuPE3reFUEuvTbDK6BhmwGiEWyqex6zj9FdeBpcwmNgzaxWhSJ+KS1hO1
FVEfvWEwTGA8AkE0uLeh30P3b7qy0/CZI0a14w1KI4jifQYngaY+aZtzj1earu8k
wNGsViJcEs2Z8TpR0SUfZViZ9+zubi3roOlWbKMJAClSG/j7ebE7b0xCear/1LBY
qtrDmLf03C2c/BhF6m9RMYYRv3To3rbcv7dM3IdVjnAAfomJoIBG5HpYQUVonUOo
mhoUaul6j7hmRhVSYxWbteSPpqlKVSgSpOdBxdWSGSZg7DGrO6qS8QKaWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsNzWN31t78rcwh6CScAxWo9qJ8MB8GA1UdIwQY
MBaAFEZ6OIES5o9MfU2Awy03z81s0jpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm5vNGdSTG1qMHg5VFlERExUZlB6V3pTT2tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xZDc3MjctYTRkZS00YWU4LWI2YzUt
YzcxODQ1YTAxNzQ5LzEvUm5vNGdSTG1qMHg5VFlERExUZlB6V3pTT2tVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xZDc3MjctYTRkZS00YWU4LWI2YzUtYzcxODQ1YTAxNzQ5
LzEvUm5vNGdSTG1qMHg5VFlERExUZlB6V3pTT2tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9Xr8ujK
hOlmgNqGsfmUr/c7KwThz9keIwct1hW2f42TvFAfgmB9SnFWEuF/S2dhw7BibGLy
IGngZOmS2j+2MK+iEKS4yWXadixj661JbMivWteX15DcEIf6QIkR9NL6p1ZRxIGL
PRUb0m54aT7Ps/KwROQ2w3VdyFvTyXi/sZIOrb8BwsVKZw9S5agaiATuKwIX0MeP
aMwofHVl2OC7hsQ6dgKuSp5xXdlOrUyVtwT0fLVAfkYSHjVzjksj0RjClgXag/fc
X23cYH5YL/4BTO4pmP6G3orOJFoLRdoOgcpDCvjTU7nDiGkloHB40kAPpqt9s188
mUB5STyqAjPWow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:13 2025 by rpki-client