Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File:                     0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier:          GLW30iv1cFtKi390EInpUYSIngbiJ2efxwGMUth534A=
Subject key identifier:   E2:47:38:3D:3E:BD:D3:72:40:AE:06:EC:70:64:A0:46:5F:20:0D:ED
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer:       /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial:       0199FEEBB3A0A01E38AD872C471B1C97E429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number:          12ED
Signing time:             Mon 20 Oct 2025 00:01:23 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:23 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:23 +0000
Files and hashes:         1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: lnQxOesuR5akHye097PbwC2fHpbCrp+SsQ6ZK0iznLk=)
                          2: jQ4CExkfR5inS0zDHfJTtnlJ6V8.roa (hash: GXyBOWfkGPF9vLeodoo4anr9TA244Yte3dkyFGm9PtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:b3:a0:a0:1e:38:ad:87:2c:47:1b:1c:97:e4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
        Validity
            Not Before: Oct 20 00:01:23 2025 GMT
            Not After : Oct 21 00:01:23 2025 GMT
        Subject: CN=e247383d3ebdd37240ae06ec7064a0465f200ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:ce:5f:34:51:e1:a4:75:73:bf:17:9d:6f:
                    26:12:ff:da:05:9b:b9:20:3a:2d:a7:aa:63:26:b7:
                    91:9a:19:16:66:51:49:bb:66:94:4c:9d:ba:bd:50:
                    92:52:9d:9f:dd:02:fd:df:7a:dc:47:07:7b:20:69:
                    db:57:05:e8:a0:a1:96:76:bc:ea:45:07:95:eb:0d:
                    8a:b8:bc:28:7c:a0:b5:a9:be:eb:92:23:66:d0:0a:
                    f2:8d:8b:5a:72:e3:d1:03:ea:a6:b2:ab:77:91:c5:
                    2c:22:77:ec:63:a9:1b:b6:2b:22:78:d5:a1:47:92:
                    20:b5:8d:87:20:5d:a5:e2:2b:83:93:05:c0:2b:81:
                    07:e5:88:4a:cc:f4:bc:14:47:99:37:a6:a3:af:12:
                    f3:f8:be:33:ba:08:83:d3:c7:4d:ad:58:66:70:9b:
                    9f:8c:50:36:7e:75:1c:46:b1:b4:00:0e:65:97:67:
                    01:41:6e:ac:75:f2:2c:45:4c:94:f0:ca:33:47:bd:
                    7d:94:83:29:3d:cb:a9:09:12:e5:89:59:9a:fe:ca:
                    e4:ea:1f:00:29:c5:05:a5:52:4c:61:0d:b9:af:58:
                    49:52:61:a4:24:f0:44:be:6c:aa:99:bb:3c:c5:e0:
                    1b:c8:67:b7:f5:18:36:94:da:04:d8:56:6c:2e:5a:
                    a5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:47:38:3D:3E:BD:D3:72:40:AE:06:EC:70:64:A0:46:5F:20:0D:ED
            X509v3 Authority Key Identifier:
                keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:99:7d:68:9a:d0:d3:3d:cd:c3:f8:77:86:1d:a1:84:93:68:
         6f:9b:0e:c9:28:e1:bc:5e:b0:f7:ff:94:6a:59:a7:fe:42:28:
         9b:5d:0e:bb:36:aa:50:63:09:aa:05:b6:8d:60:80:82:7f:09:
         6d:59:8d:eb:35:54:d1:d6:2a:a4:c8:e1:c2:89:10:bb:08:73:
         0e:07:68:fe:a8:3d:b3:2b:6d:07:1f:c2:a5:6d:d0:30:2b:07:
         21:10:16:ea:26:82:40:a9:12:53:9f:07:bd:e9:fa:d0:6e:f8:
         56:95:a1:7c:58:13:62:45:c5:a6:7d:1f:28:75:90:a4:eb:87:
         f7:2b:49:a9:17:19:f7:8e:81:0c:8f:76:24:22:1a:da:4d:cd:
         d1:a3:fa:b7:e8:3b:ef:d4:e5:52:ab:23:48:f8:4c:d5:b1:1f:
         41:06:0d:48:28:ad:9a:5f:a1:60:57:fc:cc:50:e2:e6:38:59:
         02:7a:2f:19:38:70:7c:62:03:78:38:6a:5b:71:7e:98:0a:6c:
         a0:5a:69:10:d2:38:5e:f9:80:36:a2:2d:83:66:a8:08:fd:58:
         52:63:66:bb:b0:8a:20:78:4d:e7:c7:9a:69:e2:45:9c:a7:95:
         c5:18:5d:14:11:ae:76:4f:c4:a8:67:01:69:5f:e1:49:be:a6:
         8a:ef:72:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+67OgoB44rYcsRxscl+QpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmQwMDAzNjhjMWQ1NGYwOGE3NzgyYzA3NjczYjY4YTkz
ZWRmYzUwHhcNMjUxMDIwMDAwMTIzWhcNMjUxMDIxMDAwMTIzWjAzMTEwLwYDVQQD
EyhlMjQ3MzgzZDNlYmRkMzcyNDBhZTA2ZWM3MDY0YTA0NjVmMjAwZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz/OXzRR4aR1c78XnW8mEv/aBZu5
IDotp6pjJreRmhkWZlFJu2aUTJ26vVCSUp2f3QL933rcRwd7IGnbVwXooKGWdrzq
RQeV6w2KuLwofKC1qb7rkiNm0AryjYtacuPRA+qmsqt3kcUsInfsY6kbtisieNWh
R5IgtY2HIF2l4iuDkwXAK4EH5YhKzPS8FEeZN6ajrxLz+L4zugiD08dNrVhmcJuf
jFA2fnUcRrG0AA5ll2cBQW6sdfIsRUyU8MozR719lIMpPcupCRLliVma/srk6h8A
KcUFpVJMYQ25r1hJUmGkJPBEvmyqmbs8xeAbyGe39Rg2lNoE2FZsLlqlgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJHOD0+vdNyQK4G7HBkoEZfIA3tMB8GA1UdIwQY
MBaAFNMtAANowdVPCKd4LAdnO2ipPt/FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHkwQUEyakIxVThJcDNnc0IyYzdhS2stMzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NjgwNjUtMjIzMy00ZGM3LWI5NWMt
YTdiYjM4YTFhNTNkLzEvMHkwQUEyakIxVThJcDNnc0IyYzdhS2stMzhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NjgwNjUtMjIzMy00ZGM3LWI5NWMtYTdiYjM4YTFhNTNk
LzEvMHkwQUEyakIxVThJcDNnc0IyYzdhS2stMzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpl9aJrQ
0z3Nw/h3hh2hhJNob5sOySjhvF6w9/+Ualmn/kIom10OuzaqUGMJqgW2jWCAgn8J
bVmN6zVU0dYqpMjhwokQuwhzDgdo/qg9syttBx/CpW3QMCsHIRAW6iaCQKkSU58H
ven60G74VpWhfFgTYkXFpn0fKHWQpOuH9ytJqRcZ946BDI92JCIa2k3N0aP6t+g7
79TlUqsjSPhM1bEfQQYNSCitml+hYFf8zFDi5jhZAnovGThwfGIDeDhqW3F+mAps
oFppENI4XvmANqItg2aoCP1YUmNmu7CKIHhN58eaaeJFnKeVxRhdFBGudk/EqGcB
aV/hSb6miu9yVQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:21:42 2025 by rpki-client