Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
File:                     CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft (raw, json)
Hash identifier:          aqcPin2cMnkJQgWJ0jmYdsVAzTt4JGmIscOZWA1VgTk=
Subject key identifier:   FE:DA:FB:3B:E8:49:A5:D8:B2:80:3E:A3:E3:C5:EA:01:1D:4C:12:08
Authority key identifier: 09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5
Certificate issuer:       /CN=092be762fbb10fee42d6de5567936ecd1f83ded5
Certificate serial:       0199FB45D49E5CD8ADAF60826E672A2F2FA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
Manifest number:          013C
Signing time:             Sun 19 Oct 2025 07:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:21 +0000
Files and hashes:         1: 0En_rM3ItFKYLhaLLd8WBZOTlpA.roa (hash: 152maO322NYmeUI+2QBI3Muc080/yMuLJaeicPAME94=)
                          2: CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl (hash: 1Vlyj4NxFtszTdBZ5w6hAx2+W13mG8FiK7EPYuBfHiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:d4:9e:5c:d8:ad:af:60:82:6e:67:2a:2f:2f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092be762fbb10fee42d6de5567936ecd1f83ded5
        Validity
            Not Before: Oct 19 07:01:21 2025 GMT
            Not After : Oct 20 07:01:21 2025 GMT
        Subject: CN=fedafb3be849a5d8b2803ea3e3c5ea011d4c1208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:df:c1:22:00:53:38:50:82:ec:09:85:6f:
                    51:7f:23:6e:c5:59:89:ef:4a:7b:c5:09:f7:95:fa:
                    ba:80:04:d2:e9:5e:59:7c:c0:bc:70:3e:bb:d4:ea:
                    c1:23:9f:12:29:e9:1e:ea:be:53:8b:c5:29:a9:da:
                    8a:5a:c4:6d:85:fa:9a:94:50:90:50:69:ac:48:3a:
                    5f:39:09:f9:63:26:7d:58:31:cf:26:86:6c:c5:c2:
                    f2:1a:31:35:50:4f:f6:4f:ee:1e:f0:89:f6:17:2f:
                    7f:65:23:73:0f:81:43:f9:17:d3:58:33:ff:1c:ee:
                    a3:24:df:a5:0a:60:e4:b9:73:b9:05:e5:04:6e:a3:
                    fa:30:92:c8:b9:9b:94:52:c2:ea:67:4a:0d:ce:73:
                    99:18:38:04:53:6d:99:d9:e4:02:a8:29:64:67:85:
                    bd:6b:5a:65:ae:98:66:d3:34:bd:3f:61:18:ac:9c:
                    c6:fd:25:46:ed:9c:9b:fc:d5:57:95:71:92:08:31:
                    ce:e8:73:8e:71:e5:0c:2f:aa:e4:6b:e1:4b:68:08:
                    36:c3:d5:62:1a:7c:01:bd:29:37:6d:b8:bf:5e:6d:
                    c1:2d:0f:6d:d9:7b:30:bd:f7:54:69:c8:43:40:c8:
                    b2:25:e7:3f:db:66:ea:b0:32:65:2c:f0:95:2b:1d:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DA:FB:3B:E8:49:A5:D8:B2:80:3E:A3:E3:C5:EA:01:1D:4C:12:08
            X509v3 Authority Key Identifier:
                keyid:09:2B:E7:62:FB:B1:0F:EE:42:D6:DE:55:67:93:6E:CD:1F:83:DE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/aac3eb-0cb4-4e23-9f70-c940ad3c008a/1/CSvnYvuxD-5C1t5VZ5NuzR-D3tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9c:3b:45:6d:12:51:3d:77:e7:fd:a8:44:2d:4b:8e:4f:1b:
         49:51:8b:eb:a7:1f:4d:8f:cf:da:41:57:34:27:27:89:31:fe:
         29:d9:4f:b6:de:db:9b:87:9a:cc:58:81:a9:9d:15:ea:0b:77:
         57:65:77:b3:74:78:4e:0c:13:ba:83:e9:dc:14:52:72:4c:f2:
         0d:b5:14:df:57:ff:7b:cd:ab:07:5c:57:f9:12:99:4a:f9:dc:
         56:6a:58:bd:e6:74:88:3c:df:ef:1b:c6:33:91:0c:42:d8:db:
         72:86:59:46:fb:25:1a:d9:47:dc:05:5d:86:23:7a:20:23:ba:
         5f:31:e7:33:d6:4d:9e:b5:b6:ab:6c:43:6e:88:c7:f9:27:f2:
         b1:3c:fc:80:3d:67:de:7c:4e:35:a7:bf:26:ef:b4:36:1c:aa:
         c8:08:c2:e9:2e:cf:e3:13:68:fa:af:7d:a4:c2:80:df:71:66:
         81:cd:96:a8:56:a2:3d:ff:d7:92:cb:09:da:e2:b9:a1:6f:58:
         18:dd:26:ff:a9:67:7d:17:5c:aa:b3:69:16:0f:4b:d2:43:0a:
         00:37:a8:df:04:0c:b5:bd:40:19:00:7f:12:a4:33:65:a7:50:
         c1:1b:05:a9:c8:12:f8:d3:e9:95:46:ba:65:72:df:14:fe:44:
         52:0b:01:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RdSeXNitr2CCbmcqLy+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MmJlNzYyZmJiMTBmZWU0MmQ2ZGU1NTY3OTM2ZWNkMWY4
M2RlZDUwHhcNMjUxMDE5MDcwMTIxWhcNMjUxMDIwMDcwMTIxWjAzMTEwLwYDVQQD
EyhmZWRhZmIzYmU4NDlhNWQ4YjI4MDNlYTNlM2M1ZWEwMTFkNGMxMjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl67fwSIAUzhQguwJhW9RfyNuxVmJ
70p7xQn3lfq6gATS6V5ZfMC8cD671OrBI58SKeke6r5Ti8UpqdqKWsRthfqalFCQ
UGmsSDpfOQn5YyZ9WDHPJoZsxcLyGjE1UE/2T+4e8In2Fy9/ZSNzD4FD+RfTWDP/
HO6jJN+lCmDkuXO5BeUEbqP6MJLIuZuUUsLqZ0oNznOZGDgEU22Z2eQCqClkZ4W9
a1plrphm0zS9P2EYrJzG/SVG7Zyb/NVXlXGSCDHO6HOOceUML6rka+FLaAg2w9Vi
GnwBvSk3bbi/Xm3BLQ9t2XswvfdUachDQMiyJec/22bqsDJlLPCVKx0SkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7a+zvoSaXYsoA+o+PF6gEdTBIIMB8GA1UdIwQY
MBaAFAkr52L7sQ/uQtbeVWeTbs0fg97VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAt
Yzk0MGFkM2MwMDhhLzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hYWMzZWItMGNiNC00ZTIzLTlmNzAtYzk0MGFkM2MwMDhh
LzEvQ1N2bll2dXhELTVDMXQ1Vlo1TnV6Ui1EM3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJw7RW0S
UT135/2oRC1Ljk8bSVGL66cfTY/P2kFXNCcniTH+KdlPtt7bm4eazFiBqZ0V6gt3
V2V3s3R4TgwTuoPp3BRSckzyDbUU31f/e82rB1xX+RKZSvncVmpYveZ0iDzf7xvG
M5EMQtjbcoZZRvslGtlH3AVdhiN6ICO6XzHnM9ZNnrW2q2xDbojH+SfysTz8gD1n
3nxONae/Ju+0NhyqyAjC6S7P4xNo+q99pMKA33Fmgc2WqFaiPf/XkssJ2uK5oW9Y
GN0m/6lnfRdcqrNpFg9L0kMKADeo3wQMtb1AGQB/EqQzZadQwRsFqcgS+NPplUa6
ZXLfFP5EUgsB5g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:04 2025 by rpki-client