Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File:                     RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier:          Kz2BeKkriW2iC34nmtmJSpd1QXefJEH5po5W9bhuPKM=
Subject key identifier:   C4:B6:53:E6:E7:1E:CD:68:77:AC:2C:CA:08:5A:74:FD:27:46:4C:BB
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer:       /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial:       019A006C2637CC201A43DD64EF5716C974CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number:          0F6A
Signing time:             Mon 20 Oct 2025 07:01:18 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:18 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:18 +0000
Files and hashes:         1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=)
                          2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: rcIGGdpXxWxwu7F9DPoUcD9GCw2ZdbhDbl6KzBGS32Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:26:37:cc:20:1a:43:dd:64:ef:57:16:c9:74:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
        Validity
            Not Before: Oct 20 07:01:18 2025 GMT
            Not After : Oct 21 07:01:18 2025 GMT
        Subject: CN=c4b653e6e71ecd6877ac2cca085a74fd27464cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:51:6f:e2:f8:00:34:14:36:57:64:30:39:
                    49:6e:39:81:32:e4:49:62:9d:ae:17:2f:5a:c9:40:
                    7a:f1:44:38:45:60:94:23:a9:7b:04:35:9b:d2:80:
                    65:16:1e:84:8f:ec:49:41:da:d0:93:b2:1a:00:e7:
                    0f:94:c7:38:86:12:67:ee:da:3b:74:75:61:35:87:
                    e3:5c:5d:5a:0f:8e:20:ea:5e:02:ad:be:53:e4:07:
                    67:2a:50:19:db:d3:e3:19:85:58:18:3c:e7:d8:90:
                    13:c6:79:79:f7:a5:98:91:bd:a6:de:56:87:76:a3:
                    94:19:95:78:8e:a1:c0:a2:62:77:66:49:6b:ca:a5:
                    90:0c:1a:d3:94:ec:fd:3d:d6:2f:83:70:f0:d4:2b:
                    e5:aa:02:78:68:19:3e:4e:69:c3:5c:94:6e:00:0f:
                    ea:9c:b1:53:42:0f:20:cc:4f:70:8a:41:a3:bb:4c:
                    d6:0b:64:4c:e6:6b:ed:ef:b4:2d:4d:b6:d0:66:16:
                    80:40:9d:28:ed:de:61:d4:81:3c:5c:84:33:2e:15:
                    97:38:83:63:3f:1e:c3:cc:8c:83:bd:48:df:8f:5f:
                    8f:e7:1b:09:67:d8:cb:d8:18:8d:3f:21:30:1d:69:
                    fb:47:cf:8f:40:0f:bd:33:85:bf:21:9c:0b:fd:46:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B6:53:E6:E7:1E:CD:68:77:AC:2C:CA:08:5A:74:FD:27:46:4C:BB
            X509v3 Authority Key Identifier:
                keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:38:d4:c6:7c:d4:e9:e8:6d:4c:fb:b2:81:28:ca:73:6b:b1:
         45:dc:1e:8b:c0:6c:a7:fc:26:44:be:00:de:40:36:9e:c7:d1:
         25:97:18:82:cc:f8:a1:95:bb:e7:6c:7d:a9:61:e3:5f:75:af:
         28:95:9c:10:07:c5:06:07:a1:27:e4:4b:14:24:f8:62:92:6a:
         54:a2:80:e3:27:bd:6f:e3:51:26:c7:4e:96:d3:f2:36:f1:23:
         94:90:96:8c:44:2d:df:78:2e:66:63:e9:46:2d:02:d7:0f:8e:
         00:62:f7:60:fa:36:01:89:bb:13:2c:e9:b6:c5:de:7c:42:4a:
         b3:0a:88:7b:1c:56:ef:3d:7d:29:3c:ec:43:0a:d6:48:7a:7d:
         dd:c2:be:61:dc:e6:6a:e9:34:6f:5a:f2:88:8a:04:58:df:13:
         09:58:66:0e:bf:17:f5:14:9a:63:a3:e2:1d:bb:40:ca:1d:9b:
         c5:7a:55:94:4f:5a:34:d2:63:3c:9e:e8:c1:74:91:93:f5:d2:
         02:28:ea:54:e0:3a:d6:3e:43:7b:c3:74:fe:a3:ec:54:f3:36:
         db:d4:95:ed:28:91:ed:f3:2b:f2:18:6e:eb:3c:4d:c0:47:37:
         ab:27:d8:b9:e7:99:ad:7c:bf:ec:bb:9a:21:c4:46:8f:6d:3b:
         90:07:bd:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbCY3zCAaQ91k71cWyXTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli
YzA1YTcwHhcNMjUxMDIwMDcwMTE4WhcNMjUxMDIxMDcwMTE4WjAzMTEwLwYDVQQD
EyhjNGI2NTNlNmU3MWVjZDY4NzdhYzJjY2EwODVhNzRmZDI3NDY0Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowRRb+L4ADQUNldkMDlJbjmBMuRJ
Yp2uFy9ayUB68UQ4RWCUI6l7BDWb0oBlFh6Ej+xJQdrQk7IaAOcPlMc4hhJn7to7
dHVhNYfjXF1aD44g6l4Crb5T5AdnKlAZ29PjGYVYGDzn2JATxnl596WYkb2m3laH
dqOUGZV4jqHAomJ3ZklryqWQDBrTlOz9PdYvg3Dw1CvlqgJ4aBk+TmnDXJRuAA/q
nLFTQg8gzE9wikGju0zWC2RM5mvt77QtTbbQZhaAQJ0o7d5h1IE8XIQzLhWXOINj
Px7DzIyDvUjfj1+P5xsJZ9jL2BiNPyEwHWn7R8+PQA+9M4W/IZwL/UbWfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMS2U+bnHs1od6wsyghadP0nRky7MB8GA1UdIwQY
MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt
MmQzNGRjNmU1NjU2LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2
LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjjUxnzU
6ehtTPuygSjKc2uxRdwei8Bsp/wmRL4A3kA2nsfRJZcYgsz4oZW752x9qWHjX3Wv
KJWcEAfFBgehJ+RLFCT4YpJqVKKA4ye9b+NRJsdOltPyNvEjlJCWjEQt33guZmPp
Ri0C1w+OAGL3YPo2AYm7EyzptsXefEJKswqIexxW7z19KTzsQwrWSHp93cK+Ydzm
auk0b1ryiIoEWN8TCVhmDr8X9RSaY6PiHbtAyh2bxXpVlE9aNNJjPJ7owXSRk/XS
AijqVOA61j5De8N0/qPsVPM229SV7SiR7fMr8hhu6zxNwEc3qyfYueeZrXy/7Lua
IcRGj207kAe9Kg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:49 2025 by rpki-client