Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
File:                     7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json)
Hash identifier:          /7HPvegnvFBjjdTlrMoa9QrmuwoToqFqcgbNH1Fse68=
Subject key identifier:   0B:96:69:48:D5:A0:73:3F:23:47:A4:C3:A9:A5:4B:BB:C6:F0:97:A0
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Certificate issuer:       /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial:       0199FBEBF38FE1F60A4CB2C65A3C8CC0A09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
Manifest number:          051B
Signing time:             Sun 19 Oct 2025 10:02:48 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:48 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:48 +0000
Files and hashes:         1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: RoJj41ThaqzTuh/v/CXpw9zZFQk7Qx+MVkNrfzdQYIk=)
                          2: tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa (hash: A+tnxsTWmCeZid4USiunoHsPUSXZ+9POOmWlZ50vqKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f3:8f:e1:f6:0a:4c:b2:c6:5a:3c:8c:c0:a0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
        Validity
            Not Before: Oct 19 10:02:48 2025 GMT
            Not After : Oct 20 10:02:48 2025 GMT
        Subject: CN=0b966948d5a0733f2347a4c3a9a54bbbc6f097a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1f:4a:37:31:ea:9a:20:b0:bc:be:11:ee:49:
                    29:3c:01:ce:3b:45:ac:9d:51:b1:d5:3b:3a:d1:3e:
                    f7:47:76:2c:43:96:5a:61:03:cc:e8:aa:f4:c8:13:
                    81:aa:fa:11:6a:3b:5d:82:42:b0:30:e0:6a:c6:ae:
                    79:42:29:67:df:b6:3f:fa:ae:b8:43:79:02:15:c3:
                    26:3e:08:80:96:4a:4e:6a:19:24:55:2c:a7:dd:2e:
                    7c:5a:d5:cb:e1:c3:1b:b0:f1:e8:15:26:75:21:2a:
                    ab:fb:db:cc:cc:f8:e3:1d:e9:44:06:c6:08:fa:37:
                    65:03:a6:66:ed:54:21:28:fa:f7:e8:f8:49:fd:65:
                    96:9f:44:27:82:e9:a2:06:ef:12:e3:b1:5f:96:cc:
                    e4:0c:bb:8f:d7:e5:88:69:9a:88:5e:b5:d6:56:87:
                    bd:ae:be:73:ab:94:61:38:b3:94:c8:ea:13:28:01:
                    82:16:45:4f:a0:0f:90:af:75:a2:68:31:b3:2d:7f:
                    73:18:90:b8:6f:e4:35:44:b4:b4:4d:c0:cc:cb:70:
                    ac:84:d7:9e:3d:f2:ae:ce:c9:47:a3:43:26:43:b7:
                    3f:78:fc:84:bd:b9:64:ea:1d:4f:44:e3:5e:1c:e5:
                    a6:b4:8a:3d:e7:0c:18:6b:b6:48:b3:b1:00:50:b8:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:96:69:48:D5:A0:73:3F:23:47:A4:C3:A9:A5:4B:BB:C6:F0:97:A0
            X509v3 Authority Key Identifier:
                keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:29:bc:f1:11:15:8f:dd:f0:fa:d9:e1:b9:b6:b4:6f:d0:d6:
         67:4b:f1:cd:52:c6:1f:98:65:1f:55:68:22:35:0d:37:5a:59:
         58:6c:55:6c:a4:b5:17:aa:b8:3a:51:89:33:ee:77:09:ee:58:
         45:68:40:3b:64:90:ba:1d:10:16:d7:3a:fa:73:ad:35:c7:eb:
         02:d8:cc:8d:9d:51:8b:e1:db:f6:87:9d:f2:2c:3e:d3:7f:49:
         ce:94:6b:91:2b:49:0a:98:ff:91:7d:4d:8b:7f:b7:b3:e7:fb:
         ee:09:0e:8e:c1:46:3d:a6:f5:d1:d5:45:a7:a2:49:00:7c:47:
         91:78:37:ed:cd:c8:c0:c7:eb:d7:00:07:9b:b0:3b:b2:39:15:
         68:b1:0c:2b:8d:e9:60:fc:33:ba:af:af:8a:88:7a:cd:ca:21:
         87:eb:a7:f9:4d:fd:a7:ea:55:48:aa:cf:23:33:37:95:76:f0:
         fe:38:a6:03:7d:70:6a:fe:ea:7a:92:40:c9:3b:1d:e5:d5:e8:
         16:ae:f1:a6:01:b8:ec:8c:a8:c8:23:99:3b:75:b5:9d:ae:9e:
         33:76:ad:6a:68:5e:6b:4a:8d:e1:86:9f:fb:0e:4f:41:af:5d:
         7e:b4:3a:db:06:f3:9b:98:be:1b:c7:21:a9:c2:60:9b:7b:ee:
         16:4f:7d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/OP4fYKTLLGWjyMwKCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNzcyYzJmYTIzYmU2ZmE4ZTI4YWVhNGE3MTVkNWFjMzFm
MGNjOWYwHhcNMjUxMDE5MTAwMjQ4WhcNMjUxMDIwMTAwMjQ4WjAzMTEwLwYDVQQD
EygwYjk2Njk0OGQ1YTA3MzNmMjM0N2E0YzNhOWE1NGJiYmM2ZjA5N2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR9KNzHqmiCwvL4R7kkpPAHOO0Ws
nVGx1Ts60T73R3YsQ5ZaYQPM6Kr0yBOBqvoRajtdgkKwMOBqxq55Qiln37Y/+q64
Q3kCFcMmPgiAlkpOahkkVSyn3S58WtXL4cMbsPHoFSZ1ISqr+9vMzPjjHelEBsYI
+jdlA6Zm7VQhKPr36PhJ/WWWn0QngumiBu8S47FflszkDLuP1+WIaZqIXrXWVoe9
rr5zq5RhOLOUyOoTKAGCFkVPoA+Qr3WiaDGzLX9zGJC4b+Q1RLS0TcDMy3CshNee
PfKuzslHo0MmQ7c/ePyEvblk6h1PRONeHOWmtIo95wwYa7ZIs7EAULg8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuWaUjVoHM/I0ekw6mlS7vG8JegMB8GA1UdIwQY
MBaAFO13LC+iO+b6jiiupKcV1awx8MyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYt
OGZhMDk4NzQxMTNlLzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83OTA2NDgtZGQ5MC00NGViLTlhOGYtOGZhMDk4NzQxMTNl
LzEvN1hjc0w2STc1dnFPS0s2a3B4WFZyREh3eko4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmim88REV
j93w+tnhuba0b9DWZ0vxzVLGH5hlH1VoIjUNN1pZWGxVbKS1F6q4OlGJM+53Ce5Y
RWhAO2SQuh0QFtc6+nOtNcfrAtjMjZ1Ri+Hb9oed8iw+039JzpRrkStJCpj/kX1N
i3+3s+f77gkOjsFGPab10dVFp6JJAHxHkXg37c3IwMfr1wAHm7A7sjkVaLEMK43p
YPwzuq+vioh6zcohh+un+U39p+pVSKrPIzM3lXbw/jimA31wav7qepJAyTsd5dXo
Fq7xpgG47IyoyCOZO3W1na6eM3atamhea0qN4Yaf+w5PQa9dfrQ62wbzm5i+G8ch
qcJgm3vuFk99cQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:27 2025 by rpki-client