Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
File:                     K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft (raw, json)
Hash identifier:          mtKMz6SW85h7Dv8gbX6ira9L0BnEfEiiIKxIaRE6tVc=
Subject key identifier:   BF:8E:6E:C4:A5:7B:6A:48:F6:F8:B3:6B:21:2F:D6:DE:B1:C6:33:7B
Authority key identifier: 2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2
Certificate issuer:       /CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
Certificate serial:       0199FC8F42DC32623321E6666837773DB536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
Manifest number:          0E45
Signing time:             Sun 19 Oct 2025 13:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:11 +0000
Files and hashes:         1: 1-Ctx0OlZ3RY1NyUcG6Kr2eKUErY.roa (hash: JkNd+tdZjJnr7jC7uh7724Mud2+QPZt/dAV8oEoWgb4=)
                          2: K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl (hash: qdFQDjALAz+wfbPraZSv44flcLAezIBvaRNQfJ0Rs1s=)
                          3: UwN1BiytNRPdcWnqBjZDDgnoG8U.roa (hash: GAg0iRD5NjIqqH0MJGqVfIOd1Fcwz79I/HxN8NQjQ6g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:42:dc:32:62:33:21:e6:66:68:37:77:3d:b5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7ab6569de78d3c4a082fde6dd1d6a3f0d509c2
        Validity
            Not Before: Oct 19 13:01:11 2025 GMT
            Not After : Oct 20 13:01:11 2025 GMT
        Subject: CN=bf8e6ec4a57b6a48f6f8b36b212fd6deb1c6337b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d6:74:56:5d:6e:75:77:a7:1e:20:05:2c:6c:
                    cc:53:fb:65:76:d1:9f:56:e0:1f:f2:fe:08:1d:c2:
                    58:ca:dd:b2:a8:e7:a8:6e:8e:3b:fc:9f:7f:55:82:
                    4d:f6:fb:03:7a:b0:45:95:27:24:64:55:5d:74:85:
                    17:b5:4a:90:94:38:a6:4d:d3:3b:d8:9d:af:f8:45:
                    2b:f6:51:3e:d6:75:69:8a:86:5c:4a:2d:aa:85:d0:
                    55:e2:a0:80:f9:88:d5:73:dd:41:77:a8:5f:09:54:
                    6e:02:48:8b:d4:65:23:d3:67:22:f5:67:09:f4:35:
                    b7:91:cc:ad:71:e8:f1:3e:77:39:87:b5:af:01:36:
                    b5:3f:50:2c:94:88:aa:83:a6:c7:de:f3:53:01:08:
                    f7:f9:3a:d1:f5:8f:93:fa:4a:5e:e3:a1:af:8d:cd:
                    da:42:21:77:cc:0a:63:6f:2d:07:3f:bd:c2:3a:cd:
                    c4:5a:4d:43:f7:70:b2:cc:8d:5d:a9:23:3c:4c:4c:
                    f4:95:80:f7:81:1e:71:17:22:74:ab:01:cb:89:38:
                    92:7a:9f:96:9a:bc:5b:d3:3f:12:e9:f4:a3:f8:80:
                    7a:48:50:7a:e3:59:60:5b:10:4a:b5:30:c6:f9:0c:
                    a2:c4:3f:4f:8d:ed:00:e7:62:d9:c6:57:6b:d6:68:
                    28:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8E:6E:C4:A5:7B:6A:48:F6:F8:B3:6B:21:2F:D6:DE:B1:C6:33:7B
            X509v3 Authority Key Identifier:
                keyid:2B:7A:B6:56:9D:E7:8D:3C:4A:08:2F:DE:6D:D1:D6:A3:F0:D5:09:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3q2Vp3njTxKCC_ebdHWo_DVCcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6e4544-e65f-4bf0-94c8-3fc96594b4c5/1/K3q2Vp3njTxKCC_ebdHWo_DVCcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:86:f3:7b:9d:52:fb:5c:87:eb:ca:9c:8b:d8:5c:77:82:ff:
         01:5b:49:a2:c2:a4:2f:7a:e4:ed:77:ff:93:43:66:1e:af:4e:
         56:8d:19:e0:f3:0d:71:51:5f:5c:5c:b4:b2:2c:17:34:3d:24:
         3a:8f:0d:de:4f:bc:8f:be:7e:0e:f3:f4:2e:14:03:01:0b:39:
         fd:c0:f0:21:d4:55:7c:15:e0:b0:d5:dd:a2:ae:45:9c:d5:52:
         0b:3e:95:34:8b:73:b1:c3:0f:e0:56:8a:d9:9e:d3:f1:9d:4e:
         24:67:01:1e:a6:4f:5a:55:ef:40:98:de:e6:22:94:d8:8b:57:
         9c:ad:3e:b0:45:6b:c5:53:6f:ac:47:2f:ed:99:b2:80:bc:23:
         55:cf:db:8e:cb:98:c6:02:0d:0d:13:9a:05:d2:30:71:ac:bf:
         9b:9c:9c:88:c8:0c:58:ea:4d:81:1d:14:b8:67:ca:ec:55:cb:
         b6:c7:55:cc:7c:da:c3:75:49:13:0b:1d:4a:7b:b6:ec:72:27:
         66:00:0c:29:d9:e8:c4:8c:14:d3:6a:b0:bf:30:63:44:41:9c:
         4c:e8:05:ce:0a:a8:ea:dc:97:91:fd:51:43:da:81:04:a7:c1:
         57:62:ec:65:5c:c6:9b:10:0c:3a:b9:83:a4:3a:13:85:90:41:
         28:43:cc:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j0LcMmIzIeZmaDd3PbU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiN2FiNjU2OWRlNzhkM2M0YTA4MmZkZTZkZDFkNmEzZjBk
NTA5YzIwHhcNMjUxMDE5MTMwMTExWhcNMjUxMDIwMTMwMTExWjAzMTEwLwYDVQQD
EyhiZjhlNmVjNGE1N2I2YTQ4ZjZmOGIzNmIyMTJmZDZkZWIxYzYzMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dZ0Vl1udXenHiAFLGzMU/tldtGf
VuAf8v4IHcJYyt2yqOeobo47/J9/VYJN9vsDerBFlSckZFVddIUXtUqQlDimTdM7
2J2v+EUr9lE+1nVpioZcSi2qhdBV4qCA+YjVc91Bd6hfCVRuAkiL1GUj02ci9WcJ
9DW3kcytcejxPnc5h7WvATa1P1AslIiqg6bH3vNTAQj3+TrR9Y+T+kpe46Gvjc3a
QiF3zApjby0HP73COs3EWk1D93CyzI1dqSM8TEz0lYD3gR5xFyJ0qwHLiTiSep+W
mrxb0z8S6fSj+IB6SFB641lgWxBKtTDG+QyixD9Pje0A52LZxldr1mgoEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+ObsSle2pI9vizayEv1t6xxjN7MB8GA1UdIwQY
MBaAFCt6tlad5408Sggv3m3R1qPw1QnCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0Yzgt
M2ZjOTY1OTRiNGM1LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82ZTQ1NDQtZTY1Zi00YmYwLTk0YzgtM2ZjOTY1OTRiNGM1
LzEvSzNxMlZwM25qVHhLQ0NfZWJkSFdvX0RWQ2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4bze51S
+1yH68qci9hcd4L/AVtJosKkL3rk7Xf/k0NmHq9OVo0Z4PMNcVFfXFy0siwXND0k
Oo8N3k+8j75+DvP0LhQDAQs5/cDwIdRVfBXgsNXdoq5FnNVSCz6VNItzscMP4FaK
2Z7T8Z1OJGcBHqZPWlXvQJje5iKU2ItXnK0+sEVrxVNvrEcv7ZmygLwjVc/bjsuY
xgINDROaBdIwcay/m5yciMgMWOpNgR0UuGfK7FXLtsdVzHzaw3VJEwsdSnu27HIn
ZgAMKdnoxIwU02qwvzBjREGcTOgFzgqo6tyXkf1RQ9qBBKfBV2LsZVzGmxAMOrmD
pDoThZBBKEPMEQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:37 2025 by rpki-client