Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
File:                     2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft (raw, json)
Hash identifier:          1d1jQoyNl2Qhk/lbRJgVYLOMhRP6Wof6T+4adPSkiFU=
Subject key identifier:   03:74:AA:3F:1C:29:A2:A4:96:AC:1C:1B:DB:B8:90:5A:F2:3F:26:8A
Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E
Certificate issuer:       /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
Certificate serial:       0199FBEC23779D7BB5A87D8B964F18BAC541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
Manifest number:          100A
Signing time:             Sun 19 Oct 2025 10:03:00 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:00 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:00 +0000
Files and hashes:         1: 2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl (hash: pTUBUkETR4IYbUFe2RwTU5BK+a9tAinoh8hYVwk6/Oc=)
                          2: _wOAzM_uG9ZKvF1XTUYbhv67nVM.roa (hash: YsJJfaahevvQpOkAYhPhhrTQuZpLLWZxUc8rH3J04no=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:23:77:9d:7b:b5:a8:7d:8b:96:4f:18:ba:c5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e
        Validity
            Not Before: Oct 19 10:03:00 2025 GMT
            Not After : Oct 20 10:03:00 2025 GMT
        Subject: CN=0374aa3f1c29a2a496ac1c1bdbb8905af23f268a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:36:44:0d:cf:f5:9b:1d:f5:c7:1d:1e:45:18:
                    b3:e5:9d:f1:16:9d:c9:f3:c7:cd:c6:10:00:ab:67:
                    d9:e1:5d:25:40:76:4b:cb:9a:c7:85:a6:01:8e:25:
                    d6:fe:28:af:26:d0:a9:b5:a3:8d:05:9a:7a:ea:6f:
                    a6:79:5b:21:21:fe:4d:2c:60:32:63:e0:43:bf:53:
                    0d:b3:a8:45:52:f1:d5:3a:a1:8e:95:9d:f9:b5:ff:
                    96:c1:65:df:87:09:d3:39:ac:6a:7f:13:1b:de:d9:
                    ab:97:d9:c7:c4:19:f9:fe:5d:70:82:21:09:42:35:
                    a9:4b:83:67:3a:e6:21:97:f8:d8:67:4b:83:0b:12:
                    a6:74:89:85:54:93:64:6d:fe:4e:f7:a6:36:e3:5d:
                    21:66:f3:3f:ff:e9:61:06:d6:5d:f4:08:02:ec:53:
                    15:92:c3:12:5e:3d:4f:e5:ac:18:68:b5:c7:56:63:
                    de:55:1a:8a:bc:88:3a:48:4e:26:40:90:74:70:86:
                    1b:07:91:25:f9:10:41:03:ae:5d:ba:a3:78:76:da:
                    90:a5:13:0e:f5:dc:d1:28:54:3b:34:66:4d:c7:42:
                    f1:79:73:fc:71:a1:3c:df:b2:78:af:e5:c2:d8:98:
                    ed:ee:0a:2b:e8:52:96:66:52:24:88:47:ee:80:3b:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:74:AA:3F:1C:29:A2:A4:96:AC:1C:1B:DB:B8:90:5A:F2:3F:26:8A
            X509v3 Authority Key Identifier:
                keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2c:2b:d5:ff:a9:2a:4d:28:20:1d:50:b3:b9:9c:17:be:52:
         3e:8c:e6:e9:99:4b:ef:4f:8b:56:71:36:5a:d8:d3:1e:14:65:
         50:4d:a1:e8:26:15:d0:1e:2a:1d:97:fe:5f:ca:c0:79:92:e2:
         95:74:1b:23:b6:93:34:28:46:48:38:72:3c:68:74:ba:2a:5f:
         10:a5:7c:94:e2:92:da:2d:43:58:b7:55:c9:e4:06:97:59:04:
         a2:32:cc:52:aa:3e:85:ba:62:3a:f4:c2:2b:75:f5:fb:b7:02:
         ac:ad:93:e5:d1:da:1e:5a:37:e6:02:5f:3e:a6:00:ef:e3:71:
         6c:f2:b7:ba:dd:29:f2:ba:75:ee:ca:26:16:a8:1d:0c:42:5e:
         31:19:68:48:a0:6c:13:e8:c8:0f:55:42:f2:fd:24:16:10:df:
         61:15:0e:af:0a:5f:bd:16:7e:2b:95:bd:66:15:ea:ad:72:89:
         de:14:26:7d:21:53:cc:2f:55:2f:d9:ff:e7:80:ca:95:19:fa:
         6b:fc:5b:1e:47:83:db:9a:8b:04:f3:4c:11:fe:06:d2:eb:3f:
         5d:2b:6b:23:43:f3:ee:17:ff:87:93:0d:9e:c9:14:a4:0d:fa:
         2c:4b:5f:d3:b6:0f:ca:2f:06:46:4a:17:16:01:47:64:51:a1:
         ac:e7:ec:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77CN3nXu1qH2Llk8YusVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDg2ZjdmZTRlYjZkOTQ5YjgwMDdiNGU0MTk4Y2UxYzg3
ODMwMmUwHhcNMjUxMDE5MTAwMzAwWhcNMjUxMDIwMTAwMzAwWjAzMTEwLwYDVQQD
EygwMzc0YWEzZjFjMjlhMmE0OTZhYzFjMWJkYmI4OTA1YWYyM2YyNjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjZEDc/1mx31xx0eRRiz5Z3xFp3J
88fNxhAAq2fZ4V0lQHZLy5rHhaYBjiXW/iivJtCptaONBZp66m+meVshIf5NLGAy
Y+BDv1MNs6hFUvHVOqGOlZ35tf+WwWXfhwnTOaxqfxMb3tmrl9nHxBn5/l1wgiEJ
QjWpS4NnOuYhl/jYZ0uDCxKmdImFVJNkbf5O96Y2410hZvM//+lhBtZd9AgC7FMV
ksMSXj1P5awYaLXHVmPeVRqKvIg6SE4mQJB0cIYbB5El+RBBA65duqN4dtqQpRMO
9dzRKFQ7NGZNx0LxeXP8caE837J4r+XC2Jjt7gor6FKWZlIkiEfugDsoqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN0qj8cKaKklqwcG9u4kFryPyaKMB8GA1UdIwQY
MBaAFNlIb3/k622Um4AHtOQZjOHIeDAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQyZDItNjFkMi00MzRkLThlNWIt
ODg2YzQxNmI5MDUxLzEvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMDQyZDItNjFkMi00MzRkLThlNWItODg2YzQxNmI5MDUx
LzEvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCwr1f+p
Kk0oIB1Qs7mcF75SPozm6ZlL70+LVnE2WtjTHhRlUE2h6CYV0B4qHZf+X8rAeZLi
lXQbI7aTNChGSDhyPGh0uipfEKV8lOKS2i1DWLdVyeQGl1kEojLMUqo+hbpiOvTC
K3X1+7cCrK2T5dHaHlo35gJfPqYA7+NxbPK3ut0p8rp17somFqgdDEJeMRloSKBs
E+jID1VC8v0kFhDfYRUOrwpfvRZ+K5W9ZhXqrXKJ3hQmfSFTzC9VL9n/54DKlRn6
a/xbHkeD25qLBPNMEf4G0us/XStrI0Pz7hf/h5MNnskUpA36LEtf07YPyi8GRkoX
FgFHZFGhrOfsiA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:12 2025 by rpki-client