Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
File:                     2KmU2EbLZpboicHMMiheCyOvx3c.mft (raw, json)
Hash identifier:          /OemMwwC6kywPyGQM9fPWgpmTZHYHfzE5liHuWzFveM=
Subject key identifier:   8E:82:90:F2:80:97:47:60:C7:46:AA:CE:79:52:C2:C2:F5:02:A5:97
Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77
Certificate issuer:       /CN=d8a994d846cb6696e889c1cc32285e0b23afc777
Certificate serial:       0199FAD805BB5EB70B3D2CF6EC31B481D5E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
Manifest number:          15CB
Signing time:             Sun 19 Oct 2025 05:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:25 +0000
Files and hashes:         1: 2KmU2EbLZpboicHMMiheCyOvx3c.crl (hash: RmGEAbU1phs+gyUcW7GgGyvX8mSZ0pQfWvIQj1D201Q=)
                          2: UHp7t70IbcWp2bwKOGl-4b8ScF4.roa (hash: UvX//cn/2erRwYZHy/h/xPpeIQdcBl4GUvhBbyEANqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:05:bb:5e:b7:0b:3d:2c:f6:ec:31:b4:81:d5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777
        Validity
            Not Before: Oct 19 05:01:25 2025 GMT
            Not After : Oct 20 05:01:25 2025 GMT
        Subject: CN=8e8290f280974760c746aace7952c2c2f502a597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:70:90:ec:36:ac:ba:5e:3a:fb:ef:97:c6:
                    ab:ce:b5:da:ba:c3:ca:36:e1:16:81:9a:49:5e:60:
                    70:a8:7c:ce:5e:1a:3d:a3:25:60:e4:3c:92:f1:8a:
                    30:53:b8:38:1d:02:49:9a:a7:f4:28:1b:4b:97:20:
                    c6:80:0d:67:f7:e9:d7:6e:b4:bb:ed:fa:5d:97:af:
                    e8:f2:ed:c9:03:fa:19:ea:e9:e8:0b:ef:3c:95:36:
                    94:71:14:5f:15:8c:70:ac:de:a2:58:fd:a3:db:29:
                    9d:2f:d1:e8:fe:ed:fd:ee:fa:3d:08:33:50:16:bb:
                    10:77:61:32:6c:71:0a:81:cd:aa:ae:93:1d:44:f7:
                    c3:25:bd:22:46:bb:a1:76:19:72:23:c6:4f:61:3f:
                    cf:c4:85:fd:e1:4c:f0:6c:3e:04:b6:4a:e5:59:c2:
                    df:6c:e2:f6:d3:b0:36:a6:14:40:77:cc:7e:e2:6d:
                    a3:44:9e:bb:2b:50:96:43:09:e1:ad:16:77:59:a8:
                    c9:e7:a1:fc:f2:70:c5:65:7d:ff:d5:43:d9:f7:d6:
                    d7:5a:a4:45:6e:24:96:84:93:b0:a3:de:5f:75:84:
                    ee:3e:3f:c6:e2:58:11:28:8f:20:81:f7:73:bd:09:
                    a9:2d:c6:c7:ef:25:c7:63:af:01:cd:8c:2b:6e:04:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:82:90:F2:80:97:47:60:C7:46:AA:CE:79:52:C2:C2:F5:02:A5:97
            X509v3 Authority Key Identifier:
                keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:47:2d:bc:d0:ed:82:f5:f0:67:8f:64:82:b9:7a:7e:9a:65:
         05:40:8f:74:56:f5:f7:6f:21:94:fc:51:b1:9b:3a:96:c5:de:
         fb:19:17:24:ee:5f:0e:a0:58:0b:cf:41:67:de:dd:82:64:14:
         f4:16:fd:55:63:8f:cc:b9:2d:ce:b0:07:f6:0a:ca:2d:b0:fb:
         2e:de:02:f4:66:73:b0:6b:a5:87:96:65:73:8f:de:f9:ec:d1:
         2f:55:fc:23:2e:a9:b3:c5:66:ca:6b:fd:e5:cb:90:8c:09:ac:
         d3:88:77:bb:19:bc:a9:c5:8b:78:b6:8a:eb:6c:36:24:d9:99:
         76:02:98:72:35:2f:97:03:a2:7c:73:9a:63:17:bc:3a:b1:6b:
         8b:77:53:2a:f1:d2:d1:bb:ce:84:0f:59:0c:c1:c1:e0:20:72:
         49:f6:84:d2:dc:0b:9b:58:95:86:e7:37:fa:4c:60:60:80:cd:
         82:05:a7:9f:6a:91:39:89:25:82:c1:42:d1:99:82:73:44:a4:
         67:67:fa:b7:5b:94:41:8a:ce:db:cb:65:82:d0:7f:92:d0:08:
         6c:23:40:3e:f3:09:47:96:c9:68:da:5c:92:5a:cf:23:0d:7f:
         5c:bd:ec:ef:98:50:71:54:b9:85:9b:30:08:36:ee:16:14:c5:
         d6:d7:96:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62AW7XrcLPSz27DG0gdXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YTk5NGQ4NDZjYjY2OTZlODg5YzFjYzMyMjg1ZTBiMjNh
ZmM3NzcwHhcNMjUxMDE5MDUwMTI1WhcNMjUxMDIwMDUwMTI1WjAzMTEwLwYDVQQD
Eyg4ZTgyOTBmMjgwOTc0NzYwYzc0NmFhY2U3OTUyYzJjMmY1MDJhNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2pwkOw2rLpeOvvvl8arzrXausPK
NuEWgZpJXmBwqHzOXho9oyVg5DyS8YowU7g4HQJJmqf0KBtLlyDGgA1n9+nXbrS7
7fpdl6/o8u3JA/oZ6unoC+88lTaUcRRfFYxwrN6iWP2j2ymdL9Ho/u397vo9CDNQ
FrsQd2EybHEKgc2qrpMdRPfDJb0iRruhdhlyI8ZPYT/PxIX94UzwbD4EtkrlWcLf
bOL207A2phRAd8x+4m2jRJ67K1CWQwnhrRZ3WajJ56H88nDFZX3/1UPZ99bXWqRF
biSWhJOwo95fdYTuPj/G4lgRKI8ggfdzvQmpLcbH7yXHY68BzYwrbgQ2JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6CkPKAl0dgx0aqznlSwsL1AqWXMB8GA1UdIwQY
MBaAFNiplNhGy2aW6InBzDIoXgsjr8d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDct
MjNhYjU5Nzk4NDIxLzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDctMjNhYjU5Nzk4NDIx
LzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEctvNDt
gvXwZ49kgrl6fpplBUCPdFb1928hlPxRsZs6lsXe+xkXJO5fDqBYC89BZ97dgmQU
9Bb9VWOPzLktzrAH9grKLbD7Lt4C9GZzsGulh5Zlc4/e+ezRL1X8Iy6ps8Vmymv9
5cuQjAms04h3uxm8qcWLeLaK62w2JNmZdgKYcjUvlwOifHOaYxe8OrFri3dTKvHS
0bvOhA9ZDMHB4CBySfaE0twLm1iVhuc3+kxgYIDNggWnn2qROYklgsFC0ZmCc0Sk
Z2f6t1uUQYrO28tlgtB/ktAIbCNAPvMJR5bJaNpcklrPIw1/XL3s75hQcVS5hZsw
CDbuFhTF1teWqA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:25 2025 by rpki-client