Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
File:                     IVxS75fj1VeY7-g0dNIDAIK5s6I.mft (raw, json)
Hash identifier:          26scyzwgr0rB76TLy9niPffjWfgVbkAU2+O0FvztzFc=
Subject key identifier:   E6:B1:A4:F2:DA:3A:CB:6D:B2:6F:51:A3:3F:03:2B:FA:A6:C9:7E:74
Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
Certificate issuer:       /CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Certificate serial:       0199FCC6A70ECCC3B45AF74019A2C40F2262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
Manifest number:          06A0
Signing time:             Sun 19 Oct 2025 14:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:41 +0000
Files and hashes:         1: IVxS75fj1VeY7-g0dNIDAIK5s6I.crl (hash: GQqz7tm4b8hY+pqFWffeT6Kur2HP58ErGDtsIKW4Rvw=)
                          2: OVZNKEszVhAJh-vQbtUO6A7beTM.roa (hash: oJbZ8tXjE9kGmveOiLsoY0EtqEnPlkhAWmkwOC/wslw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:a7:0e:cc:c3:b4:5a:f7:40:19:a2:c4:0f:22:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2
        Validity
            Not Before: Oct 19 14:01:41 2025 GMT
            Not After : Oct 20 14:01:41 2025 GMT
        Subject: CN=e6b1a4f2da3acb6db26f51a33f032bfaa6c97e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:34:53:f5:58:2c:e0:37:9d:7d:dd:4e:2b:
                    92:f6:b5:0a:b2:a3:8d:78:27:0d:fe:19:a7:c8:8c:
                    5b:c9:57:57:59:c8:ec:6b:c5:8f:dc:14:63:fa:c8:
                    65:bc:cb:25:fb:32:8e:83:8a:51:ad:cc:59:b2:b0:
                    9d:ae:07:c9:b2:f0:85:f0:76:f9:0a:4d:20:e1:ba:
                    37:58:b3:ee:f4:f2:44:ae:ea:38:62:3b:f5:f6:52:
                    80:ff:fa:ae:23:23:00:0d:7c:7e:25:cb:61:f9:d1:
                    86:34:95:21:ce:f9:fa:f5:81:a1:4f:4e:4a:04:1f:
                    3a:0e:e8:3b:da:f5:ef:d7:0a:24:51:a7:d4:a5:37:
                    72:08:78:99:15:b7:b9:76:ea:80:94:bd:68:d3:0d:
                    6a:cf:fd:e7:15:d1:df:93:23:3a:ee:8d:97:bb:3a:
                    08:da:f9:16:bd:ba:f9:e0:86:d5:62:9a:7d:08:58:
                    92:04:1f:7b:58:4f:c0:da:0a:28:97:b4:c7:63:08:
                    f5:9e:25:f8:89:03:ed:62:84:48:97:3c:fa:f9:86:
                    48:21:83:43:f3:e9:06:78:fb:8f:8b:30:eb:2e:55:
                    24:6e:ff:28:34:4d:25:c4:a0:dd:ea:6f:1e:01:dc:
                    86:62:8d:c6:9b:ed:d5:eb:8b:57:fb:e7:1e:f5:0b:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B1:A4:F2:DA:3A:CB:6D:B2:6F:51:A3:3F:03:2B:FA:A6:C9:7E:74
            X509v3 Authority Key Identifier:
                keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:8f:84:0c:d0:fa:03:bf:a6:dd:59:c6:02:76:73:c6:73:20:
         2e:54:69:2e:0d:3a:e9:9c:2d:ac:ba:f0:60:d7:fc:82:f8:97:
         20:f0:aa:c9:cf:83:78:05:a0:65:5d:0c:e0:e6:3f:f1:14:59:
         1c:32:9f:91:56:3b:b3:f5:70:8d:f6:ef:ff:5c:28:ae:b8:39:
         d4:0c:1a:65:66:97:e5:2b:2f:0f:36:87:c5:4f:ac:91:ec:ba:
         22:5d:85:1b:59:e1:41:61:83:dd:24:1d:c7:aa:c2:af:c6:3e:
         67:1f:20:34:fd:3f:df:91:82:4d:7a:e4:d0:4d:fc:fb:c2:8e:
         8e:b1:06:e7:9b:31:6f:7e:8d:2f:b1:6e:db:51:3f:c5:87:33:
         7f:18:1f:8b:c5:44:51:dd:e9:b5:39:c5:ae:38:c3:1b:00:c7:
         44:2c:47:08:b6:70:84:55:50:ac:ac:8c:3d:ec:b1:62:f1:1f:
         74:63:06:e2:9b:76:ce:7b:d3:35:ce:cf:21:6e:6b:3e:9c:ca:
         1e:e7:79:49:a6:94:15:a5:24:f3:58:6b:8a:93:4b:89:4e:d4:
         8c:ab:c7:e8:eb:96:ed:f4:6f:8d:9d:57:2d:6c:6c:46:a3:1e:
         b2:29:a2:dc:e3:24:ec:b3:f9:7c:ee:56:ee:6b:52:d6:70:36:
         33:56:04:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xqcOzMO0WvdAGaLEDyJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNWM1MmVmOTdlM2Q1NTc5OGVmZTgzNDc0ZDIwMzAwODJi
OWIzYTIwHhcNMjUxMDE5MTQwMTQxWhcNMjUxMDIwMTQwMTQxWjAzMTEwLwYDVQQD
EyhlNmIxYTRmMmRhM2FjYjZkYjI2ZjUxYTMzZjAzMmJmYWE2Yzk3ZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp580U/VYLOA3nX3dTiuS9rUKsqON
eCcN/hmnyIxbyVdXWcjsa8WP3BRj+shlvMsl+zKOg4pRrcxZsrCdrgfJsvCF8Hb5
Ck0g4bo3WLPu9PJEruo4Yjv19lKA//quIyMADXx+Jcth+dGGNJUhzvn69YGhT05K
BB86Dug72vXv1wokUafUpTdyCHiZFbe5duqAlL1o0w1qz/3nFdHfkyM67o2XuzoI
2vkWvbr54IbVYpp9CFiSBB97WE/A2gool7THYwj1niX4iQPtYoRIlzz6+YZIIYND
8+kGePuPizDrLlUkbv8oNE0lxKDd6m8eAdyGYo3Gm+3V64tX++ce9QujBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaxpPLaOsttsm9Roz8DK/qmyX50MB8GA1UdIwQY
MBaAFCFcUu+X49VXmO/oNHTSAwCCubOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hMmYyMTEtODYxOC00M2MzLTkxMTct
N2FlZWUzYWQ3NDM2LzEvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hMmYyMTEtODYxOC00M2MzLTkxMTctN2FlZWUzYWQ3NDM2
LzEvSVZ4Uzc1ZmoxVmVZNy1nMGROSURBSUs1czZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuY+EDND6
A7+m3VnGAnZzxnMgLlRpLg066ZwtrLrwYNf8gviXIPCqyc+DeAWgZV0M4OY/8RRZ
HDKfkVY7s/Vwjfbv/1worrg51AwaZWaX5SsvDzaHxU+skey6Il2FG1nhQWGD3SQd
x6rCr8Y+Zx8gNP0/35GCTXrk0E38+8KOjrEG55sxb36NL7Fu21E/xYczfxgfi8VE
Ud3ptTnFrjjDGwDHRCxHCLZwhFVQrKyMPeyxYvEfdGMG4pt2znvTNc7PIW5rPpzK
Hud5SaaUFaUk81hripNLiU7UjKvH6OuW7fRvjZ1XLWxsRqMesimi3OMk7LP5fO5W
7mtS1nA2M1YE+A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:24 2025 by rpki-client