Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
File:                     S81y1ss4Wjozxsj-VFnGhqaElQk.mft (raw, json)
Hash identifier:          rZKv4GawzAO7FruS1EPlkN0P7/Wexn2qKnd15m+ArgY=
Subject key identifier:   C4:CD:BA:71:A9:B4:F0:72:95:D5:3B:84:03:F9:7C:B7:39:7B:BA:03
Authority key identifier: 4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09
Certificate issuer:       /CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
Certificate serial:       0199FC58CC1145028AA3DE9B76CC72777AFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
Manifest number:          11BC
Signing time:             Sun 19 Oct 2025 12:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:41 +0000
Files and hashes:         1: S81y1ss4Wjozxsj-VFnGhqaElQk.crl (hash: Ed6VLvRW8o60AvQiNWuG4nC5xiOk17qkGimgTFmo9S0=)
                          2: wEf4V0fjRLwMdiaytYSjwCEyTHU.roa (hash: lUa2DLkPGwF47ayLCrKzv9wyplQdvB6BMfu9nJfZZtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:cc:11:45:02:8a:a3:de:9b:76:cc:72:77:7a:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bcd72d6cb385a3a33c6c8fe5459c686a6849509
        Validity
            Not Before: Oct 19 12:01:41 2025 GMT
            Not After : Oct 20 12:01:41 2025 GMT
        Subject: CN=c4cdba71a9b4f07295d53b8403f97cb7397bba03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:ce:72:46:1a:a5:91:37:2d:b0:26:39:94:
                    fa:27:0d:f8:d9:19:cb:a6:6c:3a:91:ab:a8:d7:48:
                    be:11:3e:cb:3d:9d:10:38:85:47:67:27:5f:0a:84:
                    83:58:eb:0b:70:f0:cd:4d:d6:c1:80:01:76:f1:1c:
                    d9:d4:d5:fb:2f:5a:dc:a6:91:ea:1d:2c:5b:b0:6d:
                    62:fa:24:b3:b4:0c:38:f4:4b:7e:ca:97:ed:c2:ba:
                    f1:0c:38:e6:dd:e4:76:8a:c3:65:9c:3e:73:cb:0e:
                    51:75:37:9e:db:0c:48:0f:6a:a4:bc:d9:13:5d:41:
                    c1:3f:ed:f8:a2:39:b0:e0:36:1a:83:8e:15:58:0d:
                    1b:87:b7:4c:80:f1:60:5d:e4:7a:2e:11:c2:52:2c:
                    4c:f1:f7:2c:96:5b:89:a5:8d:62:bc:f4:9b:71:d7:
                    94:69:59:e7:86:66:1c:51:0f:0e:8d:0f:7d:68:f6:
                    11:67:de:5c:d5:ee:ab:03:b0:9e:56:87:3e:f0:25:
                    66:3e:88:ce:bf:f0:a3:96:e8:b0:a2:b9:09:9e:64:
                    db:07:c5:57:fb:de:60:b2:81:37:64:56:65:a3:0a:
                    e7:e5:cb:ce:ec:66:8f:31:f0:31:f5:a0:e4:18:2c:
                    e1:c3:14:f9:6d:3d:b6:6d:7f:a4:a1:4c:fa:24:cf:
                    70:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CD:BA:71:A9:B4:F0:72:95:D5:3B:84:03:F9:7C:B7:39:7B:BA:03
            X509v3 Authority Key Identifier:
                keyid:4B:CD:72:D6:CB:38:5A:3A:33:C6:C8:FE:54:59:C6:86:A6:84:95:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S81y1ss4Wjozxsj-VFnGhqaElQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/08f671-3c35-450a-a90e-2cce9600660f/1/S81y1ss4Wjozxsj-VFnGhqaElQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a0:02:03:82:71:a9:48:3c:c9:ea:52:40:46:d1:0c:62:2c:
         d4:54:3a:a2:14:4f:31:38:ac:58:2d:b2:ec:e7:6f:61:2e:9e:
         e7:75:77:a8:d8:b0:1e:a7:43:54:91:31:8c:ee:98:c0:49:0a:
         6d:4c:17:b1:41:8a:29:03:ec:85:97:ec:86:24:fe:4d:65:59:
         57:31:78:d4:6f:7b:e0:e5:4f:f0:b2:a0:1a:fd:34:fe:5f:51:
         be:3f:d3:99:19:ea:8c:bb:56:4a:61:98:d6:ac:65:c8:e8:79:
         fe:98:9a:e0:61:04:f2:3f:27:e4:61:e8:c2:d7:4a:29:9b:70:
         7f:d5:a2:bd:68:4f:00:f2:7b:60:92:3b:27:d7:89:8b:9d:d4:
         be:92:01:0a:db:3b:8b:14:e6:e5:75:7f:4c:6c:87:ec:69:bb:
         d6:12:41:c2:74:0d:a9:1a:cf:08:43:71:d9:9c:6d:93:70:1d:
         fa:ae:7a:20:1a:2c:eb:1d:19:17:88:25:d6:00:47:d6:a2:7a:
         29:96:ff:4c:e0:61:6e:7b:59:e0:0c:23:64:7d:9d:aa:38:69:
         10:9b:d6:6d:c9:3a:59:a9:a7:06:37:e6:da:8a:f7:d0:e7:b2:
         0e:ac:0e:85:ac:f6:1a:7c:6d:c9:6e:99:60:42:26:3c:d1:d2:
         55:38:3f:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WMwRRQKKo96bdsxyd3r6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiY2Q3MmQ2Y2IzODVhM2EzM2M2YzhmZTU0NTljNjg2YTY4
NDk1MDkwHhcNMjUxMDE5MTIwMTQxWhcNMjUxMDIwMTIwMTQxWjAzMTEwLwYDVQQD
EyhjNGNkYmE3MWE5YjRmMDcyOTVkNTNiODQwM2Y5N2NiNzM5N2JiYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb3OckYapZE3LbAmOZT6Jw342RnL
pmw6kauo10i+ET7LPZ0QOIVHZydfCoSDWOsLcPDNTdbBgAF28RzZ1NX7L1rcppHq
HSxbsG1i+iSztAw49Et+ypftwrrxDDjm3eR2isNlnD5zyw5RdTee2wxID2qkvNkT
XUHBP+34ojmw4DYag44VWA0bh7dMgPFgXeR6LhHCUixM8fcslluJpY1ivPSbcdeU
aVnnhmYcUQ8OjQ99aPYRZ95c1e6rA7CeVoc+8CVmPojOv/CjluiworkJnmTbB8VX
+95gsoE3ZFZlowrn5cvO7GaPMfAx9aDkGCzhwxT5bT22bX+koUz6JM9wCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTNunGptPByldU7hAP5fLc5e7oDMB8GA1UdIwQY
MBaAFEvNctbLOFo6M8bI/lRZxoamhJUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wOGY2NzEtM2MzNS00NTBhLWE5MGUt
MmNjZTk2MDA2NjBmLzEvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wOGY2NzEtM2MzNS00NTBhLWE5MGUtMmNjZTk2MDA2NjBm
LzEvUzgxeTFzczRXam96eHNqLVZGbkdocWFFbFFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaACA4Jx
qUg8yepSQEbRDGIs1FQ6ohRPMTisWC2y7OdvYS6e53V3qNiwHqdDVJExjO6YwEkK
bUwXsUGKKQPshZfshiT+TWVZVzF41G974OVP8LKgGv00/l9Rvj/TmRnqjLtWSmGY
1qxlyOh5/pia4GEE8j8n5GHowtdKKZtwf9WivWhPAPJ7YJI7J9eJi53UvpIBCts7
ixTm5XV/TGyH7Gm71hJBwnQNqRrPCENx2Zxtk3Ad+q56IBos6x0ZF4gl1gBH1qJ6
KZb/TOBhbntZ4AwjZH2dqjhpEJvWbck6WamnBjfm2or30OeyDqwOhaz2GnxtyW6Z
YEImPNHSVTg/SA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:56 2025 by rpki-client