Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
File:                     RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft (raw, json)
Hash identifier:          7UGjRPwwvKLn+rTqQSmlhTMuaRiKn00kEaGKJcR3bC4=
Subject key identifier:   B8:FF:7F:86:DB:D8:0C:72:EC:FD:19:D6:28:FC:98:DE:67:1D:EA:CC
Authority key identifier: 45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
Certificate issuer:       /CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Certificate serial:       0199FE474ACBB924415E5E42692913583793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
Manifest number:          0E54
Signing time:             Sun 19 Oct 2025 21:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:48 +0000
Files and hashes:         1: RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl (hash: 3xPmnpo0GY+f4krcc+/uw2wptGAXXciCAfithGMc0Y8=)
                          2: su-hbEzusTLSOxmaXJEWMOWCTZI.roa (hash: wY777l5pDJFcS+82iBVpdLmEK77pZHYgVlbVwhboSl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:4a:cb:b9:24:41:5e:5e:42:69:29:13:58:37:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
        Validity
            Not Before: Oct 19 21:01:48 2025 GMT
            Not After : Oct 20 21:01:48 2025 GMT
        Subject: CN=b8ff7f86dbd80c72ecfd19d628fc98de671deacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:87:5d:d1:2c:65:6e:e3:b3:7b:d0:d5:1b:
                    c4:31:5d:1d:b1:d0:97:04:c2:7d:83:4f:9f:c1:ee:
                    6f:ef:f6:34:b2:af:23:fc:0d:fa:bd:77:ed:37:73:
                    2d:39:3c:3b:30:50:73:4b:b7:6f:c8:c2:dc:b1:ec:
                    86:dc:39:e6:8f:a6:44:19:a1:4d:8e:ae:44:b9:e7:
                    ec:a1:fc:51:c9:a2:77:8b:d6:be:79:f0:56:cf:6e:
                    a6:c6:9f:89:2c:db:65:3c:33:cd:e4:ec:1b:65:cb:
                    94:70:4a:33:bb:03:2d:46:f9:fd:23:d6:d8:09:9c:
                    bc:59:70:ed:e4:34:6e:ba:6c:12:1b:19:b2:f3:9b:
                    9d:fc:7c:c9:9e:91:77:92:9b:a2:a2:82:10:88:9d:
                    c1:ba:a0:b3:0a:de:f7:9b:26:a8:43:d1:cf:c2:31:
                    84:4d:bd:1f:0c:45:2d:73:c4:f2:59:12:b3:da:07:
                    1e:88:44:39:d5:6c:ba:aa:91:9d:12:f4:ce:b0:71:
                    a2:78:35:9c:b2:f9:6d:cd:ab:78:36:25:20:c6:e2:
                    e9:80:e5:d7:39:aa:49:40:de:e9:7c:f4:e2:24:2c:
                    34:ce:46:eb:f6:e9:e3:07:11:51:76:71:c9:9f:0b:
                    4b:e4:9e:7f:96:82:8a:0c:ef:9c:5b:70:84:bd:eb:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FF:7F:86:DB:D8:0C:72:EC:FD:19:D6:28:FC:98:DE:67:1D:EA:CC
            X509v3 Authority Key Identifier:
                keyid:45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:be:05:82:a4:13:90:30:a3:86:b0:fb:76:7b:2e:b5:53:b7:
         d0:95:7c:8c:d9:ce:44:4f:bd:69:bf:5c:f8:1c:44:d9:d5:f3:
         cc:ca:7a:9d:a4:72:16:03:60:e0:d0:59:6a:02:30:0f:70:7a:
         ed:ce:9a:9b:93:c6:e6:b2:3f:ea:af:7a:7a:c4:a4:60:7e:9c:
         34:17:2b:98:eb:77:be:04:1c:64:e8:8b:f3:5b:47:26:8f:86:
         4e:d3:e9:c4:59:13:16:ee:b0:f4:18:5f:4d:4a:7a:e0:b6:01:
         9e:7c:25:38:63:79:0e:52:05:48:08:1e:8a:d2:4a:5d:31:f1:
         9a:81:c4:3d:ad:6f:e4:aa:b6:a3:9a:2c:e8:84:7a:a7:ca:6e:
         ae:7d:25:1b:7b:d5:de:b6:69:53:2e:fd:10:39:5f:c6:4a:2a:
         f1:c3:f4:34:31:72:2c:a8:d5:96:ed:a6:ca:79:20:da:b1:cb:
         b4:18:99:f3:e9:f4:a1:a4:fb:35:d2:5a:13:4e:a3:b4:3e:b7:
         4b:57:0a:76:33:e9:c6:aa:9b:69:90:75:6d:2f:2a:1a:fd:52:
         bf:f0:19:bc:85:fa:df:e9:70:2d:3e:38:28:cb:ba:03:1a:0d:
         a7:76:0d:3c:de:d1:ee:82:e9:08:b8:9f:ff:cc:59:dd:47:16:
         d6:f2:8d:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R0rLuSRBXl5CaSkTWDeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1M2I4NGU4ZTBlNTYxN2MzNDI2MGQ3NjhmNDQwYTUxMzFm
MmRjZjQwHhcNMjUxMDE5MjEwMTQ4WhcNMjUxMDIwMjEwMTQ4WjAzMTEwLwYDVQQD
EyhiOGZmN2Y4NmRiZDgwYzcyZWNmZDE5ZDYyOGZjOThkZTY3MWRlYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19yHXdEsZW7js3vQ1RvEMV0dsdCX
BMJ9g0+fwe5v7/Y0sq8j/A36vXftN3MtOTw7MFBzS7dvyMLcseyG3Dnmj6ZEGaFN
jq5EuefsofxRyaJ3i9a+efBWz26mxp+JLNtlPDPN5OwbZcuUcEozuwMtRvn9I9bY
CZy8WXDt5DRuumwSGxmy85ud/HzJnpF3kpuiooIQiJ3BuqCzCt73myaoQ9HPwjGE
Tb0fDEUtc8TyWRKz2gceiEQ51Wy6qpGdEvTOsHGieDWcsvltzat4NiUgxuLpgOXX
OapJQN7pfPTiJCw0zkbr9unjBxFRdnHJnwtL5J5/loKKDO+cW3CEvevfkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj/f4bb2Axy7P0Z1ij8mN5nHerMMB8GA1UdIwQY
MBaAFEU7hOjg5WF8NCYNdo9EClEx8tz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NTk4NWItNTViNy00Y2I3LWE0ZjQt
OTk4NzgzYzY4NDFkLzEvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NTk4NWItNTViNy00Y2I3LWE0ZjQtOTk4NzgzYzY4NDFk
LzEvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqL4FgqQT
kDCjhrD7dnsutVO30JV8jNnORE+9ab9c+BxE2dXzzMp6naRyFgNg4NBZagIwD3B6
7c6am5PG5rI/6q96esSkYH6cNBcrmOt3vgQcZOiL81tHJo+GTtPpxFkTFu6w9Bhf
TUp64LYBnnwlOGN5DlIFSAgeitJKXTHxmoHEPa1v5Kq2o5os6IR6p8purn0lG3vV
3rZpUy79EDlfxkoq8cP0NDFyLKjVlu2mynkg2rHLtBiZ8+n0oaT7NdJaE06jtD63
S1cKdjPpxqqbaZB1bS8qGv1Sv/AZvIX63+lwLT44KMu6AxoNp3YNPN7R7oLpCLif
/8xZ3UcW1vKNow==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:57 2025 by rpki-client