Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
File:                     iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json)
Hash identifier:          X1UKacvKzMm0Grw/b5Sos+3+TYkv5Qd5VGgKI69aXwc=
Subject key identifier:   E6:12:06:4C:52:6A:0F:D9:A7:B4:A7:B8:A5:67:E0:05:BD:B0:74:3B
Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
Certificate issuer:       /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Certificate serial:       0199FBEAFEE09BFF3884E7222A27145497D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
Manifest number:          01D2
Signing time:             Sun 19 Oct 2025 10:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:45 +0000
Files and hashes:         1: 2CoStS1PhVOk0Xe0b76gr5yU3sM.roa (hash: kaUq6JiT8bLQt6omc8n9uCI1T0SxY0tZ3BmNCenDeRM=)
                          2: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: M3GSK7saJBrSFLrvuNLzToAZYW44kslzx7TFsNvukBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:fe:e0:9b:ff:38:84:e7:22:2a:27:14:54:97:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
        Validity
            Not Before: Oct 19 10:01:45 2025 GMT
            Not After : Oct 20 10:01:45 2025 GMT
        Subject: CN=e612064c526a0fd9a7b4a7b8a567e005bdb0743b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:7e:32:c9:46:43:72:17:55:b0:9a:e1:cd:
                    cf:3b:e0:f1:59:7a:26:7b:7f:dd:7c:53:eb:0e:21:
                    f8:4d:12:24:a3:e7:33:cf:b0:96:9d:e5:2b:af:3f:
                    71:18:a1:cd:26:3a:2c:97:79:fa:65:0b:08:31:71:
                    21:be:ec:a3:32:27:10:53:99:64:2d:4d:78:67:5d:
                    95:b7:d4:38:f5:4d:94:c7:c6:90:bd:2e:22:6a:8e:
                    81:3f:35:4a:85:53:2c:7c:5c:99:8b:fc:ed:d6:5b:
                    f1:34:f7:45:5f:c9:6f:5c:73:20:54:b6:df:5a:aa:
                    af:6c:be:3f:a2:75:e0:83:66:bf:08:d3:d4:03:5b:
                    dc:ae:c5:5c:27:3b:5f:63:73:c6:c0:09:0b:bf:21:
                    e8:1f:f8:07:c1:a7:43:5f:60:8e:2f:e6:99:2f:bd:
                    d8:3e:a2:bb:cd:12:82:64:67:b1:9c:36:d0:06:c6:
                    5a:f6:42:3f:a6:cf:53:b6:fd:db:ec:c0:e3:07:12:
                    d9:31:82:a6:2a:73:f0:81:26:18:44:99:50:4d:d2:
                    be:9b:0e:85:b9:73:12:fc:97:d2:bf:54:45:47:e8:
                    23:73:cb:79:a4:5e:93:02:34:b6:3c:f9:68:dc:0c:
                    04:c7:2f:77:45:ca:07:0a:a5:62:03:6b:87:ff:c6:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:12:06:4C:52:6A:0F:D9:A7:B4:A7:B8:A5:67:E0:05:BD:B0:74:3B
            X509v3 Authority Key Identifier:
                keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:58:c7:c2:85:d5:07:f0:25:72:cb:ec:8f:09:1d:ed:a5:03:
         9b:c0:00:73:1e:60:8b:01:32:c5:59:6a:63:e3:50:8c:f1:03:
         e1:f4:34:e0:d8:a1:5d:7d:4f:31:20:2e:a5:60:95:18:6b:ea:
         f6:ca:67:2c:1f:10:c6:1b:2c:32:5f:66:3b:42:b0:b8:78:ff:
         db:3c:0e:f9:60:b6:46:2f:5a:60:f0:a8:88:62:9f:b5:04:84:
         50:ef:c5:25:20:04:52:46:7c:28:a8:72:e5:b7:cb:ca:fb:16:
         9f:8e:30:a3:95:5c:cc:69:d2:0b:ec:e4:36:1e:e8:5d:d1:ea:
         c0:ff:19:c7:15:5a:e7:8a:99:55:3d:61:07:37:1b:d5:38:c3:
         b2:41:6e:f7:0b:f9:57:1a:4d:57:10:bd:a8:36:88:c8:c3:e6:
         7d:23:28:cf:1f:d0:c7:75:75:d2:65:a1:23:24:cc:19:ab:f7:
         d2:24:9e:cb:a7:02:a1:cd:35:b9:5c:6b:ec:26:2d:5e:3b:65:
         59:5b:44:37:90:b2:2d:43:99:9a:9b:69:e7:af:70:07:15:aa:
         07:44:d1:16:07:cf:35:d3:28:43:68:e6:35:9e:71:fe:42:a1:
         53:61:1b:a5:0f:ad:20:8c:4a:6b:c5:31:1c:8f:03:bb:02:54:
         0f:da:33:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76v7gm/84hOciKicUVJfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWUzMTk5M2ZhODU4NzU2OGIzZmNkZTViN2ZlZTk2ZGI0
M2E5YjcwHhcNMjUxMDE5MTAwMTQ1WhcNMjUxMDIwMTAwMTQ1WjAzMTEwLwYDVQQD
EyhlNjEyMDY0YzUyNmEwZmQ5YTdiNGE3YjhhNTY3ZTAwNWJkYjA3NDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcF+MslGQ3IXVbCa4c3PO+DxWXom
e3/dfFPrDiH4TRIko+czz7CWneUrrz9xGKHNJjosl3n6ZQsIMXEhvuyjMicQU5lk
LU14Z12Vt9Q49U2Ux8aQvS4iao6BPzVKhVMsfFyZi/zt1lvxNPdFX8lvXHMgVLbf
WqqvbL4/onXgg2a/CNPUA1vcrsVcJztfY3PGwAkLvyHoH/gHwadDX2COL+aZL73Y
PqK7zRKCZGexnDbQBsZa9kI/ps9Ttv3b7MDjBxLZMYKmKnPwgSYYRJlQTdK+mw6F
uXMS/JfSv1RFR+gjc8t5pF6TAjS2PPlo3AwExy93RcoHCqViA2uH/8bIDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYSBkxSag/Zp7SnuKVn4AW9sHQ7MB8GA1UdIwQY
MBaAFIgeMZk/qFh1aLP83lt/7pbbQ6m3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2Yt
NTEzOGYzNDJlOWY1LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2YtNTEzOGYzNDJlOWY1
LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVjHwoXV
B/Alcsvsjwkd7aUDm8AAcx5giwEyxVlqY+NQjPED4fQ04NihXX1PMSAupWCVGGvq
9spnLB8QxhssMl9mO0KwuHj/2zwO+WC2Ri9aYPCoiGKftQSEUO/FJSAEUkZ8KKhy
5bfLyvsWn44wo5VczGnSC+zkNh7oXdHqwP8ZxxVa54qZVT1hBzcb1TjDskFu9wv5
VxpNVxC9qDaIyMPmfSMozx/Qx3V10mWhIyTMGav30iSey6cCoc01uVxr7CYtXjtl
WVtEN5CyLUOZmptp569wBxWqB0TRFgfPNdMoQ2jmNZ5x/kKhU2EbpQ+tIIxKa8Ux
HI8DuwJUD9ozew==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:00 2025 by rpki-client