Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
File:                     KJJ3dbRNuHnp85wpd72u1ipP8k0.mft (raw, json)
Hash identifier:          5w88nNDlKtj4WgDollKNyzfnm7Iy5gb2dyL+18IsVTA=
Subject key identifier:   56:AA:DD:2A:0D:3D:E8:05:EB:CE:99:B4:3E:6E:11:87:87:8A:B5:E9
Authority key identifier: 28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D
Certificate issuer:       /CN=28927775b44db879e9f39c2977bdaed62a4ff24d
Certificate serial:       0199FEB50E60BD2C5D7AA296AE993CE3913B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
Manifest number:          0DC4
Signing time:             Sun 19 Oct 2025 23:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:42 +0000
Files and hashes:         1: KJJ3dbRNuHnp85wpd72u1ipP8k0.crl (hash: i5qJqpIA89CyGqXNZ//kfhjy86ytKlvM4qEHv0OrkBo=)
                          2: saiCyIGJOWPs1K9_Ew_s8P6lgY4.roa (hash: e/erISXLnvRZkY9KcM4YsZzd9BZRvEUZNZ5EqmwF75Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:0e:60:bd:2c:5d:7a:a2:96:ae:99:3c:e3:91:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28927775b44db879e9f39c2977bdaed62a4ff24d
        Validity
            Not Before: Oct 19 23:01:42 2025 GMT
            Not After : Oct 20 23:01:42 2025 GMT
        Subject: CN=56aadd2a0d3de805ebce99b43e6e1187878ab5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:36:91:5c:5e:63:d2:cb:e3:42:a4:85:48:ff:
                    bb:c2:00:80:5c:82:83:05:a9:05:47:ca:49:76:f7:
                    3e:6c:67:46:e2:bb:6d:60:51:9c:94:3b:e8:2d:e2:
                    32:cf:d9:80:08:e5:d1:ac:e5:0a:dc:d1:0d:89:90:
                    bf:21:01:a5:b2:19:2d:02:34:84:26:8f:33:dc:52:
                    27:05:7a:88:ea:9f:54:5c:53:b9:86:cc:4e:c3:1f:
                    ff:69:7d:2e:05:ab:9a:d4:9c:cc:0f:14:bb:6b:33:
                    fb:00:f0:ec:24:b7:9e:f9:dc:ae:2f:f8:03:de:15:
                    4a:f5:2b:0a:2f:b7:89:73:1f:0b:53:ba:67:d1:8a:
                    27:b2:ea:8a:b0:3f:37:b0:92:20:b0:43:a0:bf:66:
                    a8:92:e3:69:e9:69:4c:53:48:3b:a5:61:61:ef:51:
                    c0:ea:3a:ea:42:af:6b:8a:fe:df:e6:ab:e5:ed:e3:
                    b5:83:6b:b9:e5:9e:a9:6a:b6:79:f7:31:b1:9b:2c:
                    d9:3f:7b:a5:f7:6e:87:0a:2b:9f:55:47:26:19:48:
                    35:ec:0d:bd:29:1c:d5:24:c3:69:eb:28:54:25:ce:
                    42:b1:43:a0:eb:30:b3:ab:47:2c:e7:a9:f6:64:57:
                    33:ed:b2:ad:b8:ec:fe:5e:57:99:b5:27:04:11:f3:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AA:DD:2A:0D:3D:E8:05:EB:CE:99:B4:3E:6E:11:87:87:8A:B5:E9
            X509v3 Authority Key Identifier:
                keyid:28:92:77:75:B4:4D:B8:79:E9:F3:9C:29:77:BD:AE:D6:2A:4F:F2:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJJ3dbRNuHnp85wpd72u1ipP8k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/7ef3e3-242d-4cb3-a524-c44c6beef382/1/KJJ3dbRNuHnp85wpd72u1ipP8k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f3:62:85:3c:99:8f:b7:88:c6:2f:4e:c9:e2:3c:68:60:db:
         2c:c7:b0:93:76:1b:df:29:6a:75:54:75:ae:91:7e:21:d6:a1:
         1e:b0:f3:2d:90:d2:69:b0:12:fa:f7:2d:72:fd:75:6d:51:14:
         8b:df:da:ae:31:fb:14:e0:1e:a8:2e:21:c6:af:ac:d2:3d:78:
         bd:b8:52:86:44:8c:4e:e1:36:02:80:bc:81:0f:ae:bf:45:33:
         08:f6:c3:e3:34:db:2f:22:9c:99:c0:ca:f2:e4:23:87:4b:e7:
         80:86:05:0b:82:fc:c7:9d:4a:9c:aa:b6:c2:1d:93:84:66:2b:
         4f:fe:00:6f:48:a1:c3:c4:38:03:f4:c9:98:bc:e9:19:ff:ce:
         97:28:bd:2a:e6:8a:43:97:63:da:7a:4b:3e:95:ea:e9:f3:07:
         d1:e4:72:6f:26:4b:56:cb:21:98:c7:c7:e7:dc:60:86:27:c9:
         b4:96:c3:44:34:fb:8d:4c:f2:80:0d:e8:95:02:9f:fa:2c:f5:
         bb:53:5a:7d:e1:4a:1f:97:f2:94:a8:f1:3c:c7:f0:85:61:f3:
         10:ff:0c:da:23:26:53:83:fe:a0:47:bd:00:77:b2:b7:09:90:
         6f:50:1e:c8:71:de:be:89:d2:29:67:fe:2e:cf:69:cb:69:dc:
         0b:cf:78:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tQ5gvSxdeqKWrpk845E7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4OTI3Nzc1YjQ0ZGI4NzllOWYzOWMyOTc3YmRhZWQ2MmE0
ZmYyNGQwHhcNMjUxMDE5MjMwMTQyWhcNMjUxMDIwMjMwMTQyWjAzMTEwLwYDVQQD
Eyg1NmFhZGQyYTBkM2RlODA1ZWJjZTk5YjQzZTZlMTE4Nzg3OGFiNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzaRXF5j0svjQqSFSP+7wgCAXIKD
BakFR8pJdvc+bGdG4rttYFGclDvoLeIyz9mACOXRrOUK3NENiZC/IQGlshktAjSE
Jo8z3FInBXqI6p9UXFO5hsxOwx//aX0uBaua1JzMDxS7azP7APDsJLee+dyuL/gD
3hVK9SsKL7eJcx8LU7pn0YonsuqKsD83sJIgsEOgv2aokuNp6WlMU0g7pWFh71HA
6jrqQq9riv7f5qvl7eO1g2u55Z6parZ59zGxmyzZP3ul926HCiufVUcmGUg17A29
KRzVJMNp6yhUJc5CsUOg6zCzq0cs56n2ZFcz7bKtuOz+XleZtScEEfPh9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaq3SoNPegF686ZtD5uEYeHirXpMB8GA1UdIwQY
MBaAFCiSd3W0Tbh56fOcKXe9rtYqT/JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0pKM2RiUk51SG5wODV3cGQ3MnUxaXBQOGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83ZWYzZTMtMjQyZC00Y2IzLWE1MjQt
YzQ0YzZiZWVmMzgyLzEvS0pKM2RiUk51SG5wODV3cGQ3MnUxaXBQOGswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi83ZWYzZTMtMjQyZC00Y2IzLWE1MjQtYzQ0YzZiZWVmMzgy
LzEvS0pKM2RiUk51SG5wODV3cGQ3MnUxaXBQOGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfNihTyZ
j7eIxi9OyeI8aGDbLMewk3Yb3ylqdVR1rpF+IdahHrDzLZDSabAS+vctcv11bVEU
i9/arjH7FOAeqC4hxq+s0j14vbhShkSMTuE2AoC8gQ+uv0UzCPbD4zTbLyKcmcDK
8uQjh0vngIYFC4L8x51KnKq2wh2ThGYrT/4Ab0ihw8Q4A/TJmLzpGf/Olyi9KuaK
Q5dj2npLPpXq6fMH0eRybyZLVsshmMfH59xghifJtJbDRDT7jUzygA3olQKf+iz1
u1NafeFKH5fylKjxPMfwhWHzEP8M2iMmU4P+oEe9AHeytwmQb1AeyHHevonSKWf+
Ls9py2ncC894/A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:29 2025 by rpki-client