Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
File:                     Ezm5qJRtJr4tj__mwePCLLk-BIY.mft (raw, json)
Hash identifier:          h2H//+BN34Gk7h/40iPK8Qt7swnjPPMdJXgZ2Monddk=
Subject key identifier:   AD:88:30:B2:A8:75:9C:D7:C2:DB:A2:99:ED:40:40:B1:8B:4D:10:C7
Authority key identifier: 13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86
Certificate issuer:       /CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
Certificate serial:       0199FCC65945ECA1A7BE93B5326BE660ADF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
Manifest number:          0DAB
Signing time:             Sun 19 Oct 2025 14:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:21 +0000
Files and hashes:         1: Ezm5qJRtJr4tj__mwePCLLk-BIY.crl (hash: NuBtApc+FJ1cfyGI/fdTjEk69Qnfpq3myB0MxyNChiA=)
                          2: Pd_TRMzeLXmR4l_ISjIRf3kfJG8.roa (hash: eMT9U1JgE9Qp7ruvpzaw9x/RY238h1ceOul754xPuwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:59:45:ec:a1:a7:be:93:b5:32:6b:e6:60:ad:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1339b9a8946d26be2d8fffe6c1e3c22cb93e0486
        Validity
            Not Before: Oct 19 14:01:21 2025 GMT
            Not After : Oct 20 14:01:21 2025 GMT
        Subject: CN=ad8830b2a8759cd7c2dba299ed4040b18b4d10c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:93:68:0b:be:a5:29:ef:f6:9c:bb:50:0e:
                    9f:7c:2a:8a:be:b3:68:18:6a:dc:8c:ce:ad:ea:f9:
                    1d:2f:8c:8e:1a:11:6a:5c:49:82:22:ea:3c:a6:7d:
                    dd:57:59:89:54:9d:9d:ac:1f:ee:ec:60:48:c3:b2:
                    ca:04:04:f5:be:e9:2f:ec:d2:6c:2b:2a:6f:10:26:
                    7b:58:a6:ff:dd:a3:a4:22:5d:c3:c6:d2:a8:14:80:
                    a7:9a:1b:49:6d:3a:07:ee:79:a7:5c:87:5f:a0:3b:
                    fb:76:fc:1b:e4:8d:2e:e4:58:8b:1e:0d:78:03:7d:
                    96:1e:e1:c0:6d:f7:9d:ac:ce:d2:3e:43:07:1b:9d:
                    c1:44:01:87:d5:4c:ee:04:b3:d7:23:24:40:a7:df:
                    39:d2:c8:bf:5a:28:68:29:a5:77:53:5b:f4:f4:b2:
                    0d:4d:5f:59:ee:23:71:93:b5:31:87:91:66:e0:cc:
                    a4:66:f5:80:9e:cf:fa:d4:21:28:76:51:df:58:ed:
                    d3:f9:81:fb:d6:cf:9a:b2:60:44:21:0f:a0:55:34:
                    51:c3:9f:17:89:a3:f2:2f:ae:63:73:4f:c3:83:1a:
                    90:f9:71:e3:e8:33:f7:47:ba:4a:7e:9e:3c:ca:c9:
                    5d:86:35:91:bf:03:69:66:9b:eb:ad:22:ec:ff:69:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:88:30:B2:A8:75:9C:D7:C2:DB:A2:99:ED:40:40:B1:8B:4D:10:C7
            X509v3 Authority Key Identifier:
                keyid:13:39:B9:A8:94:6D:26:BE:2D:8F:FF:E6:C1:E3:C2:2C:B9:3E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ezm5qJRtJr4tj__mwePCLLk-BIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c7cc9-c095-42f5-9bb6-946c0f7e8f78/1/Ezm5qJRtJr4tj__mwePCLLk-BIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:8f:1b:4b:52:60:4e:49:30:3a:79:32:86:37:d6:65:94:02:
         ba:04:a5:38:5e:2f:a2:81:aa:2b:f5:a6:77:61:77:f7:77:d4:
         f1:15:a8:0c:ad:38:f6:e4:9c:5d:90:ed:d1:f3:e6:80:24:25:
         d0:b1:31:09:3b:fe:09:56:51:ba:0e:79:fd:14:47:b6:36:09:
         0a:00:6a:d6:9a:87:21:2e:7e:cf:ca:91:96:3a:4f:5f:b7:ed:
         18:9a:83:cb:89:2b:5b:af:d3:ee:4a:69:24:8a:c8:17:db:a4:
         7b:eb:4e:9c:53:b0:e4:13:9d:56:db:f6:94:ec:e7:1e:f5:d1:
         2e:e6:00:f9:c4:dc:fe:6a:66:ed:82:84:bc:b0:b7:fe:ef:65:
         c5:dc:9b:74:31:f5:d7:76:93:6b:f8:43:09:98:71:8c:2e:92:
         67:b7:90:f3:5d:20:6b:dd:51:5d:e6:47:20:f0:a9:5b:b4:10:
         8e:a3:d7:58:d7:1a:20:2e:b5:63:7e:97:0b:d8:69:ef:3f:68:
         4c:04:9d:25:ad:c1:55:42:15:b8:5d:8e:a3:70:39:2f:cb:2d:
         a5:64:76:19:49:5e:61:90:d0:d1:19:e5:6c:21:aa:58:5e:38:
         5f:5d:d2:86:bd:e7:0b:46:48:55:43:8a:0f:c7:f3:a2:4f:a9:
         4d:87:32:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xllF7KGnvpO1MmvmYK3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzliOWE4OTQ2ZDI2YmUyZDhmZmZlNmMxZTNjMjJjYjkz
ZTA0ODYwHhcNMjUxMDE5MTQwMTIxWhcNMjUxMDIwMTQwMTIxWjAzMTEwLwYDVQQD
EyhhZDg4MzBiMmE4NzU5Y2Q3YzJkYmEyOTllZDQwNDBiMThiNGQxMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhOTaAu+pSnv9py7UA6ffCqKvrNo
GGrcjM6t6vkdL4yOGhFqXEmCIuo8pn3dV1mJVJ2drB/u7GBIw7LKBAT1vukv7NJs
KypvECZ7WKb/3aOkIl3DxtKoFICnmhtJbToH7nmnXIdfoDv7dvwb5I0u5FiLHg14
A32WHuHAbfedrM7SPkMHG53BRAGH1UzuBLPXIyRAp9850si/WihoKaV3U1v09LIN
TV9Z7iNxk7Uxh5Fm4MykZvWAns/61CEodlHfWO3T+YH71s+asmBEIQ+gVTRRw58X
iaPyL65jc0/DgxqQ+XHj6DP3R7pKfp48ysldhjWRvwNpZpvrrSLs/2lbFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2IMLKodZzXwtuime1AQLGLTRDHMB8GA1UdIwQY
MBaAFBM5uaiUbSa+LY//5sHjwiy5PgSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXptNXFKUnRKcjR0al9fbXdlUENMTGstQklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YzdjYzktYzA5NS00MmY1LTliYjYt
OTQ2YzBmN2U4Zjc4LzEvRXptNXFKUnRKcjR0al9fbXdlUENMTGstQklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84YzdjYzktYzA5NS00MmY1LTliYjYtOTQ2YzBmN2U4Zjc4
LzEvRXptNXFKUnRKcjR0al9fbXdlUENMTGstQklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo8bS1Jg
TkkwOnkyhjfWZZQCugSlOF4vooGqK/Wmd2F393fU8RWoDK049uScXZDt0fPmgCQl
0LExCTv+CVZRug55/RRHtjYJCgBq1pqHIS5+z8qRljpPX7ftGJqDy4krW6/T7kpp
JIrIF9uke+tOnFOw5BOdVtv2lOznHvXRLuYA+cTc/mpm7YKEvLC3/u9lxdybdDH1
13aTa/hDCZhxjC6SZ7eQ810ga91RXeZHIPCpW7QQjqPXWNcaIC61Y36XC9hp7z9o
TASdJa3BVUIVuF2Oo3A5L8stpWR2GUleYZDQ0RnlbCGqWF44X13Shr3nC0ZIVUOK
D8fzok+pTYcyrg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:03 2025 by rpki-client