Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File:                     mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier:          u30yh9CXHrx4Wcb+2HeGZi59KGS7urjuyTi06pU/+Pc=
Subject key identifier:   C7:87:01:01:54:A5:C9:7C:5B:53:3F:85:FF:D8:22:3A:6B:B0:3A:2C
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer:       /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial:       0199FC589B383EB2FABCE56262B9CC353624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number:          06D7
Signing time:             Sun 19 Oct 2025 12:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:29 +0000
Files and hashes:         1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: 8x/GaVydan/gB0i9L4bmVJ8yQ068ocEadl5PUZkJ/70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:9b:38:3e:b2:fa:bc:e5:62:62:b9:cc:35:36:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
        Validity
            Not Before: Oct 19 12:01:29 2025 GMT
            Not After : Oct 20 12:01:29 2025 GMT
        Subject: CN=c787010154a5c97c5b533f85ffd8223a6bb03a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:9b:f9:f5:f5:c6:ad:a9:07:af:ea:eb:2a:
                    04:69:b6:aa:31:fe:44:43:54:ee:a8:5e:48:8e:3c:
                    13:98:1d:a4:e7:bc:96:b6:a4:ff:c0:26:e1:13:ba:
                    b9:f1:7d:a5:bd:4b:bd:34:44:6f:41:42:c0:c8:2d:
                    22:d3:df:5c:e4:44:f3:32:1d:99:77:1c:8a:db:f5:
                    24:7f:67:98:e3:ae:3f:47:39:6d:d2:e1:d8:00:be:
                    e5:9b:62:d2:15:90:fb:cc:9e:ea:88:ba:4a:43:58:
                    b1:ee:87:6a:4a:c2:81:70:4c:8d:ca:22:ba:54:43:
                    ba:a5:35:50:17:ac:e2:d5:3b:db:8c:9d:b6:54:9f:
                    59:a9:f6:e1:2a:ab:0e:ea:41:d2:9e:ba:eb:96:04:
                    6d:9e:b1:57:9f:f7:23:95:70:e8:f2:17:ed:f0:46:
                    2f:d3:81:59:21:d0:74:bd:f0:4f:d1:11:e9:61:33:
                    a0:40:a3:76:12:b2:2a:a8:21:5e:38:02:63:2f:64:
                    b9:74:02:20:08:00:45:8b:e1:f2:19:7c:01:85:ca:
                    91:84:49:f7:7b:3e:8d:d2:aa:fd:30:0b:15:3e:2e:
                    b0:0c:b7:99:d2:70:af:d9:8c:6d:b7:3e:4a:17:a1:
                    d8:bb:90:ca:1a:40:d3:98:bd:05:f2:41:93:2a:a4:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:87:01:01:54:A5:C9:7C:5B:53:3F:85:FF:D8:22:3A:6B:B0:3A:2C
            X509v3 Authority Key Identifier:
                keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:cd:5c:ad:4a:63:5e:51:2d:de:aa:ab:2b:5c:dc:7e:f8:d2:
         ed:78:f6:27:2e:52:c1:85:ff:50:88:40:99:16:0a:cf:9f:ef:
         71:ae:86:c9:3c:9e:ba:da:56:28:71:86:d4:9c:77:48:65:ea:
         ac:69:2c:9e:5b:2a:3f:04:d5:d1:2f:d4:5e:96:2e:4a:b4:1a:
         c6:8a:76:fc:ec:bd:ef:32:c5:85:fe:a7:6b:f3:42:0a:bd:0d:
         f2:dd:09:4a:3f:43:32:c9:cd:46:e6:77:2e:dd:82:01:69:aa:
         87:9c:fb:9c:62:14:dc:de:db:ba:18:00:f2:18:2a:55:87:ad:
         1f:42:82:c2:ad:13:66:eb:23:14:2e:d5:09:23:78:5b:fb:b9:
         f8:d2:91:ca:d4:05:95:f2:56:65:28:6a:cd:eb:9c:d2:d2:f7:
         e0:20:74:69:64:c5:33:38:f3:5c:c9:b1:eb:bd:f4:80:34:b8:
         41:d8:c5:00:a4:5d:46:26:c5:d0:de:2a:d1:e0:d1:16:cb:4a:
         a0:fb:42:d0:7a:1a:5a:d9:50:60:9b:68:a3:00:e7:57:13:6e:
         cd:27:cf:28:ea:69:dd:ea:62:09:54:9e:0e:ac:72:4f:3e:ca:
         64:8b:91:3d:67:a3:3d:52:f0:02:84:09:c9:84:04:91:3a:ef:
         f8:58:fc:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJs4PrL6vOViYrnMNTYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTYxYTEyMWM1MjAwNTRkZjRjZTU5ZTU1OTJhYzY4YjA1
MDZiZWYwHhcNMjUxMDE5MTIwMTI5WhcNMjUxMDIwMTIwMTI5WjAzMTEwLwYDVQQD
EyhjNzg3MDEwMTU0YTVjOTdjNWI1MzNmODVmZmQ4MjIzYTZiYjAzYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPqb+fX1xq2pB6/q6yoEabaqMf5E
Q1TuqF5IjjwTmB2k57yWtqT/wCbhE7q58X2lvUu9NERvQULAyC0i099c5ETzMh2Z
dxyK2/Ukf2eY464/Rzlt0uHYAL7lm2LSFZD7zJ7qiLpKQ1ix7odqSsKBcEyNyiK6
VEO6pTVQF6zi1TvbjJ22VJ9ZqfbhKqsO6kHSnrrrlgRtnrFXn/cjlXDo8hft8EYv
04FZIdB0vfBP0RHpYTOgQKN2ErIqqCFeOAJjL2S5dAIgCABFi+HyGXwBhcqRhEn3
ez6N0qr9MAsVPi6wDLeZ0nCv2Yxttz5KF6HYu5DKGkDTmL0F8kGTKqRtOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeHAQFUpcl8W1M/hf/YIjprsDosMB8GA1UdIwQY
MBaAFJqWGhIcUgBU30zlnlWSrGiwUGvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUt
NDhiYzhjYjNjZGFhLzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jNWMyMzMtYjQ3OC00NGJjLWFlOWUtNDhiYzhjYjNjZGFh
LzEvbXBZYUVoeFNBRlRmVE9XZVZaS3NhTEJRYS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK81crUpj
XlEt3qqrK1zcfvjS7Xj2Jy5SwYX/UIhAmRYKz5/vca6GyTyeutpWKHGG1Jx3SGXq
rGksnlsqPwTV0S/UXpYuSrQaxop2/Oy97zLFhf6na/NCCr0N8t0JSj9DMsnNRuZ3
Lt2CAWmqh5z7nGIU3N7buhgA8hgqVYetH0KCwq0TZusjFC7VCSN4W/u5+NKRytQF
lfJWZShqzeuc0tL34CB0aWTFMzjzXMmx6730gDS4QdjFAKRdRibF0N4q0eDRFstK
oPtC0HoaWtlQYJtoowDnVxNuzSfPKOpp3epiCVSeDqxyTz7KZIuRPWejPVLwAoQJ
yYQEkTrv+Fj8gw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:23 2025 by rpki-client