Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File:                     1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier:          3uzhDJ59DPAasWqe2LwADYkY2IXrK+JtnIb0/xnVJ10=
Subject key identifier:   B8:03:0A:D4:41:7C:AB:F5:AE:95:1B:AC:D1:55:93:57:00:CA:24:9F
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer:       /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial:       0199FBEB6C2038158116B8525A98646CF2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number:          073C
Signing time:             Sun 19 Oct 2025 10:02:13 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:13 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:13 +0000
Files and hashes:         1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: hwIjjSlH+TUsPlGDBOHUOIcCVbU9HLOV9l4aAeN4xB4=)
                          2: NZJDMNeawRRaR2kN6M6VUEMWS6s.roa (hash: 4yyzbuml8orMhWCVhBPIpnlBdZcJZlvRc7XP5PPxwGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:6c:20:38:15:81:16:b8:52:5a:98:64:6c:f2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
        Validity
            Not Before: Oct 19 10:02:13 2025 GMT
            Not After : Oct 20 10:02:13 2025 GMT
        Subject: CN=b8030ad4417cabf5ae951bacd155935700ca249f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:18:5e:ff:03:62:61:f2:a1:54:66:a6:e9:
                    ec:86:49:26:2f:67:d1:8e:2b:ff:6e:75:24:7f:8d:
                    ad:63:cc:84:0a:cc:9b:cf:16:45:eb:9e:2d:56:a3:
                    3f:63:fd:72:02:c4:8a:2b:3e:b6:41:99:4a:de:22:
                    1e:b9:b9:47:d0:31:b4:76:28:6e:7f:c4:ec:00:a6:
                    c2:33:16:09:6f:b5:b2:0d:e3:c9:f2:f4:9b:aa:af:
                    c4:d3:dc:7d:dd:57:69:d3:06:01:c8:87:96:ef:63:
                    c8:4f:04:b7:72:49:55:86:17:08:7c:8a:b4:89:b9:
                    0a:a0:a1:9b:e3:91:01:ab:71:aa:82:0e:a9:c1:87:
                    49:9c:43:d5:18:ee:c0:19:e6:f1:2c:19:bf:f0:d7:
                    a7:b6:60:7f:f1:42:c9:c9:5f:bd:ea:26:7e:9d:94:
                    7a:04:cf:d8:80:c5:8e:46:ea:aa:86:6d:88:46:02:
                    07:be:c0:55:1a:6b:8d:af:7e:e3:12:36:e6:6e:7c:
                    65:23:33:b4:bb:c3:c5:d1:5b:03:47:c5:72:e3:83:
                    0a:f8:23:5f:7c:bc:0f:86:fb:ca:f9:38:5b:48:4c:
                    f7:c4:6c:c8:bd:b7:78:60:ff:52:1a:f8:4d:2b:d1:
                    93:c4:9a:0f:30:92:31:ac:ee:b2:07:40:3d:ec:75:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:03:0A:D4:41:7C:AB:F5:AE:95:1B:AC:D1:55:93:57:00:CA:24:9F
            X509v3 Authority Key Identifier:
                keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0a:c1:35:23:1e:6c:4b:28:89:bd:1c:19:bb:b5:77:51:55:
         01:f5:f4:b2:f9:92:a8:36:72:c0:39:62:9d:60:35:da:6d:b2:
         09:3b:0c:52:2d:79:f6:5d:de:16:a0:42:ea:25:7d:63:9b:f9:
         9f:53:d0:d3:1b:53:5e:25:cb:b1:e9:1e:20:b1:66:2b:44:ae:
         6b:2a:cc:71:91:a3:74:15:05:da:a9:fb:df:ff:27:00:0f:b4:
         76:36:4e:ff:79:c9:8f:f2:8d:9b:01:bb:1d:61:33:f6:d4:ec:
         47:ac:b1:34:ce:e4:c5:80:da:14:7c:62:4f:36:f5:f9:8f:7b:
         9a:6c:9b:3c:a2:d7:38:35:88:61:45:99:f4:49:55:f3:9d:66:
         85:17:6d:7d:1c:c1:a6:88:a1:b6:3a:39:78:d6:84:65:5a:dd:
         6c:27:ab:3a:ef:aa:b6:53:d9:60:67:38:47:44:47:0e:06:9b:
         37:df:7c:71:f7:07:a9:cd:55:ce:4e:ab:93:64:66:5f:91:d6:
         f7:d1:40:b5:7e:09:e6:df:d8:07:9f:c5:3c:dd:39:40:a2:5d:
         01:dc:53:29:87:67:c6:f2:80:f3:ef:f0:02:cf:ab:9e:84:92:
         5f:2e:05:72:5e:7b:c4:0d:68:85:99:21:22:da:3f:1f:d3:ba:
         f8:79:b4:0c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn762wgOBWBFrhSWphkbPKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZGUxMmI5MWNiMWYyOTMzYTdiZThlYWZmMmQzZTM1ZGVi
MzgxYTYwHhcNMjUxMDE5MTAwMjEzWhcNMjUxMDIwMTAwMjEzWjAzMTEwLwYDVQQD
EyhiODAzMGFkNDQxN2NhYmY1YWU5NTFiYWNkMTU1OTM1NzAwY2EyNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWkYXv8DYmHyoVRmpunshkkmL2fR
jiv/bnUkf42tY8yECsybzxZF654tVqM/Y/1yAsSKKz62QZlK3iIeublH0DG0dihu
f8TsAKbCMxYJb7WyDePJ8vSbqq/E09x93Vdp0wYByIeW72PITwS3cklVhhcIfIq0
ibkKoKGb45EBq3Gqgg6pwYdJnEPVGO7AGebxLBm/8NentmB/8ULJyV+96iZ+nZR6
BM/YgMWORuqqhm2IRgIHvsBVGmuNr37jEjbmbnxlIzO0u8PF0VsDR8Vy44MK+CNf
fLwPhvvK+ThbSEz3xGzIvbd4YP9SGvhNK9GTxJoPMJIxrO6yB0A97HVjLQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLgDCtRBfKv1rpUbrNFVk1cAyiSfMB8GA1UdIwQY
MBaAFPveErkcsfKTOnvo6v8tPjXes4GmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05NFN1Unl4OHBNNmUtanFfeTAtTmQ2emdhWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOWYwNTM5LWZkNzQtNGVlYy05MTMx
LTQ5MzE5Yjk0NzlmMy8xLzEtOTRTdVJ5eDhwTTZlLWpxX3kwLU5kNnpnYVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc2LzlmMDUzOS1mZDc0LTRlZWMtOTEzMS00OTMxOWI5NDc5
ZjMvMS8xLTk0U3VSeXg4cE02ZS1qcV95MC1OZDZ6Z2FZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwrB
NSMebEsoib0cGbu1d1FVAfX0svmSqDZywDlinWA12m2yCTsMUi159l3eFqBC6iV9
Y5v5n1PQ0xtTXiXLsekeILFmK0SuayrMcZGjdBUF2qn73/8nAA+0djZO/3nJj/KN
mwG7HWEz9tTsR6yxNM7kxYDaFHxiTzb1+Y97mmybPKLXODWIYUWZ9ElV851mhRdt
fRzBpoihtjo5eNaEZVrdbCerOu+qtlPZYGc4R0RHDgabN998cfcHqc1Vzk6rk2Rm
X5HW99FAtX4J5t/YB5/FPN05QKJdAdxTKYdnxvKA8+/wAs+rnoSSXy4Fcl57xA1o
hZkhIto/H9O6+Hm0DA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:42 2025 by rpki-client