Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
File:                     AIsoBYgFTtjERuJ7ScrEVYip6YA.mft (raw, json)
Hash identifier:          XioFycTrEDFIO7Qp1/N05xe5bnCp9VlZKwbDSP1lUqU=
Subject key identifier:   A0:70:76:E1:35:32:B5:78:12:92:ED:F5:25:77:CC:F5:93:84:F2:7B
Authority key identifier: 00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80
Certificate issuer:       /CN=008b280588054ed8c446e27b49cac45588a9e980
Certificate serial:       0199FBEBB97510B0FA64B06C547CA12A6E00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
Manifest number:          119E
Signing time:             Sun 19 Oct 2025 10:02:33 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:33 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:33 +0000
Files and hashes:         1: AIsoBYgFTtjERuJ7ScrEVYip6YA.crl (hash: CnaFBnSuIn+akNNJ1vCe14MvGpF6R+bU2sm/+jmmHnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:b9:75:10:b0:fa:64:b0:6c:54:7c:a1:2a:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=008b280588054ed8c446e27b49cac45588a9e980
        Validity
            Not Before: Oct 19 10:02:33 2025 GMT
            Not After : Oct 20 10:02:33 2025 GMT
        Subject: CN=a07076e13532b5781292edf52577ccf59384f27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:86:04:01:0f:b6:d7:2a:6a:6b:df:22:0d:
                    47:07:03:e1:6c:a1:2d:ca:6f:8d:c5:65:fd:75:18:
                    ef:0f:af:fd:3b:75:29:cc:cf:ef:88:7a:48:09:02:
                    20:e1:bc:ee:e7:a9:16:05:e1:6c:d7:0f:88:25:b5:
                    6a:19:9d:55:48:4a:4a:f1:6d:b6:4c:78:56:f9:ab:
                    ab:61:79:ef:0d:da:e8:e7:9a:e6:08:85:2d:58:25:
                    3b:f4:15:6d:d8:4a:64:fa:fc:a2:e5:8c:73:12:14:
                    9a:52:e8:d4:ce:07:ef:b9:1c:80:17:29:11:3c:02:
                    b9:73:78:4a:1a:28:ce:30:43:4e:ba:68:8e:9a:07:
                    89:a2:9f:ea:11:49:19:db:73:03:23:1c:b6:60:d1:
                    d8:f7:9e:19:ad:e0:7f:bf:75:ba:44:5e:0e:cd:09:
                    df:b5:81:72:c6:d1:d4:85:4b:8b:29:44:76:87:03:
                    fc:fa:a4:e9:1f:ba:c3:de:ce:59:e3:72:20:db:47:
                    75:8e:0b:44:e6:e5:7c:19:8e:ef:7a:90:41:d5:4d:
                    c4:7a:06:4d:bc:7a:cc:9e:08:83:88:33:f3:a5:67:
                    9b:e6:bc:a9:38:69:4e:83:4c:45:17:08:ff:5a:4c:
                    12:f7:c6:b5:5e:93:82:bc:83:8b:ee:97:27:9d:27:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:70:76:E1:35:32:B5:78:12:92:ED:F5:25:77:CC:F5:93:84:F2:7B
            X509v3 Authority Key Identifier:
                keyid:00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:32:b0:99:4d:ea:04:19:a1:e4:ac:80:2d:f8:2a:19:76:
         d1:ad:63:79:70:fd:97:75:78:87:af:99:d1:b8:a9:07:d6:d4:
         4c:55:0e:ac:17:74:1a:f7:5b:45:3d:4c:8d:f2:89:d1:d4:00:
         be:69:da:be:55:fe:95:63:67:95:cb:bd:a7:22:09:f1:69:4b:
         33:e0:b8:b1:45:01:27:25:9c:c9:ac:9b:6f:fa:67:8e:89:a5:
         46:45:16:6f:4b:d9:21:78:f8:19:85:bf:43:2e:d1:57:2c:53:
         c2:fc:6d:95:e1:ab:eb:d1:36:ef:b8:76:78:e6:53:03:57:92:
         3b:e3:53:7c:a9:c0:92:ac:f4:2a:30:d7:03:3a:06:cf:34:40:
         c5:c1:31:71:27:81:4d:af:55:8f:02:4a:b7:9a:4e:b7:28:d8:
         cd:fe:f9:20:df:f4:6e:b8:2b:c4:7c:a8:74:20:41:64:ca:ee:
         31:d9:c1:2c:d4:51:2e:77:05:dc:57:54:71:ab:5b:46:a0:da:
         37:14:97:c5:81:49:99:76:df:6f:cc:32:01:7e:2f:5d:80:00:
         47:58:a4:59:04:14:72:b2:b8:82:aa:5d:a2:60:27:22:2a:8e:
         ce:7e:d8:20:44:32:25:19:1d:1c:96:5c:1c:5a:01:60:1c:41:
         2d:1a:b8:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767l1ELD6ZLBsVHyhKm4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOGIyODA1ODgwNTRlZDhjNDQ2ZTI3YjQ5Y2FjNDU1ODhh
OWU5ODAwHhcNMjUxMDE5MTAwMjMzWhcNMjUxMDIwMTAwMjMzWjAzMTEwLwYDVQQD
EyhhMDcwNzZlMTM1MzJiNTc4MTI5MmVkZjUyNTc3Y2NmNTkzODRmMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFKGBAEPttcqamvfIg1HBwPhbKEt
ym+NxWX9dRjvD6/9O3UpzM/viHpICQIg4bzu56kWBeFs1w+IJbVqGZ1VSEpK8W22
THhW+aurYXnvDdro55rmCIUtWCU79BVt2Epk+vyi5YxzEhSaUujUzgfvuRyAFykR
PAK5c3hKGijOMENOumiOmgeJop/qEUkZ23MDIxy2YNHY954ZreB/v3W6RF4OzQnf
tYFyxtHUhUuLKUR2hwP8+qTpH7rD3s5Z43Ig20d1jgtE5uV8GY7vepBB1U3EegZN
vHrMngiDiDPzpWeb5rypOGlOg0xFFwj/WkwS98a1XpOCvIOL7pcnnSfgVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBwduE1MrV4EpLt9SV3zPWThPJ7MB8GA1UdIwQY
MBaAFACLKAWIBU7YxEbie0nKxFWIqemAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNzEyZDAtYTNjYy00ZDc0LTk4OTMt
NTYzZDZiZDNmODI3LzEvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hNzEyZDAtYTNjYy00ZDc0LTk4OTMtNTYzZDZiZDNmODI3
LzEvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALukysJlN
6gQZoeSsgC34Khl20a1jeXD9l3V4h6+Z0bipB9bUTFUOrBd0GvdbRT1MjfKJ0dQA
vmnavlX+lWNnlcu9pyIJ8WlLM+C4sUUBJyWcyaybb/pnjomlRkUWb0vZIXj4GYW/
Qy7RVyxTwvxtleGr69E277h2eOZTA1eSO+NTfKnAkqz0KjDXAzoGzzRAxcExcSeB
Ta9VjwJKt5pOtyjYzf75IN/0brgrxHyodCBBZMruMdnBLNRRLncF3FdUcatbRqDa
NxSXxYFJmXbfb8wyAX4vXYAAR1ikWQQUcrK4gqpdomAnIiqOzn7YIEQyJRkdHJZc
HFoBYBxBLRq4lg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:55 2025 by rpki-client