Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File:                     kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier:          +8SFkeI/2mABMKLxnsK6UKmy60/Pd7HqReHjQfT461c=
Subject key identifier:   05:06:81:B2:0E:5C:48:5B:58:67:C4:37:F7:99:5C:9B:74:EA:81:BD
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer:       /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial:       0199FBEAF7988542F4F48A2D3B0FAE0BC42B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number:          1482
Signing time:             Sun 19 Oct 2025 10:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:43 +0000
Files and hashes:         1: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: TJWPekfwjML4E4iH9cTnGeEs+UFUQecShrRUoifGgPY=)
                          2: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (hash: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f7:98:85:42:f4:f4:8a:2d:3b:0f:ae:0b:c4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
        Validity
            Not Before: Oct 19 10:01:43 2025 GMT
            Not After : Oct 20 10:01:43 2025 GMT
        Subject: CN=050681b20e5c485b5867c437f7995c9b74ea81bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:61:e1:46:3c:6d:75:76:0b:e1:05:c5:2a:
                    c5:16:b5:30:fd:13:14:a6:e8:db:ae:23:1a:27:91:
                    95:45:5a:ab:c8:55:fb:58:df:2b:51:a0:22:bf:3d:
                    ed:f5:1b:d1:e1:8c:a1:22:e8:8f:20:78:c7:54:ee:
                    7b:b9:a1:75:fa:f4:49:3b:35:5f:ea:13:ff:1d:7e:
                    31:f8:d2:f7:ed:1f:87:3f:83:ca:29:95:1a:82:c0:
                    5d:51:44:1b:16:63:bf:e0:f4:56:74:ed:9b:3f:08:
                    22:83:59:c5:08:1a:5e:1b:ef:de:49:dc:95:29:8d:
                    72:e0:64:51:be:d3:64:7b:f4:c0:ff:42:0a:94:d2:
                    66:a8:b9:84:0c:84:61:80:44:47:c3:ee:c4:67:38:
                    82:b6:76:bd:fa:38:c0:88:da:fe:ee:d2:b2:15:c6:
                    f7:a1:df:e7:1a:50:57:af:1e:63:5f:a5:14:2e:25:
                    1b:61:38:52:cb:12:fd:fe:e5:c9:26:1c:85:61:c3:
                    c3:e6:69:39:09:1f:57:09:c7:62:f9:4c:ab:98:0d:
                    b9:12:47:d8:f6:81:50:c4:e0:e8:31:61:a8:37:19:
                    8d:b2:fa:75:92:07:04:e2:db:6e:b6:6d:ed:64:08:
                    21:25:2f:d9:67:a6:f1:23:ac:aa:c3:f4:85:1b:54:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:06:81:B2:0E:5C:48:5B:58:67:C4:37:F7:99:5C:9B:74:EA:81:BD
            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c2:98:8b:6f:ef:ab:82:f6:59:11:26:c8:14:cb:58:3e:54:
         06:cb:1e:5c:85:15:37:f1:da:ab:7c:ae:67:b2:a9:e5:0a:9e:
         59:41:27:07:ab:de:f0:8a:47:d5:89:4b:36:8b:e0:20:8b:40:
         a3:34:37:cb:d6:5c:22:96:ac:8e:ab:54:85:d3:dd:a3:75:70:
         90:9c:54:a4:c3:a6:26:b6:00:f4:be:07:07:c6:b7:ad:5f:a7:
         27:02:fd:57:7c:d8:fd:3d:66:b0:b8:94:42:6e:c4:7b:c6:6b:
         32:45:4f:ee:1e:fd:db:8b:a2:c6:de:09:3e:d5:b5:d0:c5:1a:
         ac:9e:00:cf:76:c5:60:37:30:62:3d:e7:30:0c:66:28:e5:57:
         9d:39:85:ed:88:6c:a5:ac:21:0e:c7:96:42:b1:cb:01:73:1c:
         17:89:ad:67:95:db:28:56:79:83:f9:b0:b5:e3:3f:8c:19:4a:
         6c:5b:1a:33:de:24:f1:3f:ec:0d:cf:9b:58:a5:36:38:f1:66:
         73:1f:12:6b:cd:e5:cf:74:be:8c:f7:b0:04:2d:c9:bf:12:cb:
         a7:2a:51:df:14:fc:d4:a1:cc:12:be:82:24:7d:21:a4:4a:35:
         df:3d:47:bf:98:bc:da:e8:77:07:1a:8c:bb:51:13:5c:67:bf:
         db:e6:e3:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76veYhUL09IotOw+uC8QrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOGQ2ZTNkY2YyNThhZTI2YjBjZmE2ZmZkZWY0NjdjNTRi
YjdkOWYwHhcNMjUxMDE5MTAwMTQzWhcNMjUxMDIwMTAwMTQzWjAzMTEwLwYDVQQD
EygwNTA2ODFiMjBlNWM0ODViNTg2N2M0MzdmNzk5NWM5Yjc0ZWE4MWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRdh4UY8bXV2C+EFxSrFFrUw/RMU
pujbriMaJ5GVRVqryFX7WN8rUaAivz3t9RvR4YyhIuiPIHjHVO57uaF1+vRJOzVf
6hP/HX4x+NL37R+HP4PKKZUagsBdUUQbFmO/4PRWdO2bPwgig1nFCBpeG+/eSdyV
KY1y4GRRvtNke/TA/0IKlNJmqLmEDIRhgERHw+7EZziCtna9+jjAiNr+7tKyFcb3
od/nGlBXrx5jX6UULiUbYThSyxL9/uXJJhyFYcPD5mk5CR9XCcdi+UyrmA25EkfY
9oFQxODoMWGoNxmNsvp1kgcE4ttutm3tZAghJS/ZZ6bxI6yqw/SFG1QO+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUGgbIOXEhbWGfEN/eZXJt06oG9MB8GA1UdIwQY
MBaAFJCNbj3PJYriawz6b/3vRnxUu32fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85NmMxZGUtYzFmZC00OWM1LTllZTUt
ZWQ2MTE0Yzc5ZGFlLzEva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85NmMxZGUtYzFmZC00OWM1LTllZTUtZWQ2MTE0Yzc5ZGFl
LzEva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8KYi2/v
q4L2WREmyBTLWD5UBsseXIUVN/Haq3yuZ7Kp5QqeWUEnB6ve8IpH1YlLNovgIItA
ozQ3y9ZcIpasjqtUhdPdo3VwkJxUpMOmJrYA9L4HB8a3rV+nJwL9V3zY/T1msLiU
Qm7Ee8ZrMkVP7h7924uixt4JPtW10MUarJ4Az3bFYDcwYj3nMAxmKOVXnTmF7Yhs
pawhDseWQrHLAXMcF4mtZ5XbKFZ5g/mwteM/jBlKbFsaM94k8T/sDc+bWKU2OPFm
cx8Sa83lz3S+jPewBC3JvxLLpypR3xT81KHMEr6CJH0hpEo13z1Hv5i82uh3BxqM
u1ETXGe/2+bjYA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:24 2025 by rpki-client