Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File:                     PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier:          9jLtcoOuE7pLxvTM92cdTNuMMkyFf2uXGhtedTvN0o4=
Subject key identifier:   3A:D9:8E:AC:00:BB:11:14:AA:77:67:8B:75:AF:FA:57:C6:3A:C7:4E
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer:       /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial:       0199FB45FCDFC97BF84AA4BC6A8304D9AB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number:          0B24
Signing time:             Sun 19 Oct 2025 07:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:31 +0000
Files and hashes:         1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: qwz/8hI9/neZavu+jSNMtVZ9INKqIN85sqCYsvh22ZU=)
                          2: flDyEgY09JcTncHiiRnZ44dc3Jg.roa (hash: U/d1Btmo0ndLftNS6W3aEjJNMxknGgzWNSoSOFVtfm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:fc:df:c9:7b:f8:4a:a4:bc:6a:83:04:d9:ab:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
        Validity
            Not Before: Oct 19 07:01:31 2025 GMT
            Not After : Oct 20 07:01:31 2025 GMT
        Subject: CN=3ad98eac00bb1114aa77678b75affa57c63ac74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:c7:ff:c3:6e:98:1a:60:9d:7b:cf:3b:71:
                    d1:dd:05:e9:20:21:cb:34:3c:13:c3:56:33:fb:0a:
                    cc:59:7a:6e:4a:2a:4e:52:1e:33:f6:bd:cc:94:c2:
                    fa:d4:d8:e3:a8:3b:c5:14:44:e9:73:1c:13:d4:b8:
                    08:f8:6c:78:ce:4e:f0:0d:87:fa:b8:a0:9f:6a:71:
                    d5:60:9c:6b:ba:3a:0e:44:6c:6e:b9:86:cb:93:a4:
                    18:9a:82:54:de:99:b7:09:4e:cd:09:f6:12:d9:c2:
                    0b:83:fa:7b:2c:5b:e3:e3:27:b0:f3:6d:56:fb:3c:
                    46:54:05:1c:2c:3c:14:db:ee:41:fe:8a:25:9c:ba:
                    02:00:79:fb:c7:9b:01:0b:b5:2d:40:49:1a:c8:db:
                    ba:d4:67:3e:23:49:e8:fa:b6:a9:ca:1a:80:84:e1:
                    8e:83:1b:e2:d7:80:00:16:b5:ee:80:37:33:48:19:
                    7a:46:21:cd:b0:76:b0:73:f3:d8:96:62:66:fb:07:
                    83:c8:94:66:93:61:b5:df:8e:97:fc:fa:46:7d:64:
                    19:f9:7d:82:84:65:c2:a8:30:70:8a:86:f2:15:01:
                    4b:5e:92:b2:92:47:a6:06:56:34:c1:52:a5:a6:f0:
                    41:c5:f3:01:f5:16:3c:f7:44:53:88:4f:30:35:0e:
                    a2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D9:8E:AC:00:BB:11:14:AA:77:67:8B:75:AF:FA:57:C6:3A:C7:4E
            X509v3 Authority Key Identifier:
                keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:49:89:8d:71:38:df:a8:92:9a:b2:50:5c:1d:7b:05:1e:3b:
         e2:65:a7:11:3d:2c:9b:07:9c:f1:13:ff:bc:68:d7:47:f1:35:
         00:a1:4a:a9:05:69:42:64:9e:fb:fe:37:6e:d4:91:3d:7c:b9:
         5b:16:10:22:1b:d4:c0:c4:a6:92:14:fe:61:59:38:5f:f3:ae:
         bf:64:3f:6a:72:d3:79:01:01:b9:f9:fd:ce:5c:fc:d4:f7:50:
         0e:1d:4f:57:b0:4b:f6:58:4d:f8:b9:f7:be:43:87:6d:7b:25:
         ee:ed:b8:19:f8:ac:b6:f4:bb:64:63:ee:1a:1e:b4:c6:9a:73:
         8b:48:d9:d0:9c:97:b3:75:e9:07:e5:44:cb:e3:01:46:dc:c3:
         56:d9:f3:47:ad:b8:07:92:5f:c3:78:f3:69:87:6a:f9:09:95:
         ad:3e:fa:8d:7d:b7:f7:ca:f1:f6:8e:92:dd:c4:ea:db:11:47:
         5f:5d:2e:6c:54:9c:87:60:90:f8:b7:db:58:77:b6:63:53:a8:
         32:20:5f:7c:84:c8:c3:d6:1c:7c:78:65:32:38:70:7f:0c:fc:
         93:29:30:1f:80:71:20:bc:c5:3d:4b:91:f4:17:6a:00:f4:72:
         7e:79:2c:0e:f2:ae:8b:4e:cc:77:8a:6a:38:bf:eb:9a:2e:7d:
         5f:c0:b4:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RfzfyXv4SqS8aoME2at+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMWNjNDAyMzQ5ZTE5MTM5MmQxZWM3NDY5YzFiYzgyNDM2
MzQ0MzkwHhcNMjUxMDE5MDcwMTMxWhcNMjUxMDIwMDcwMTMxWjAzMTEwLwYDVQQD
EygzYWQ5OGVhYzAwYmIxMTE0YWE3NzY3OGI3NWFmZmE1N2M2M2FjNzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dbH/8NumBpgnXvPO3HR3QXpICHL
NDwTw1Yz+wrMWXpuSipOUh4z9r3MlML61NjjqDvFFETpcxwT1LgI+Gx4zk7wDYf6
uKCfanHVYJxrujoORGxuuYbLk6QYmoJU3pm3CU7NCfYS2cILg/p7LFvj4yew821W
+zxGVAUcLDwU2+5B/oolnLoCAHn7x5sBC7UtQEkayNu61Gc+I0no+rapyhqAhOGO
gxvi14AAFrXugDczSBl6RiHNsHawc/PYlmJm+weDyJRmk2G1346X/PpGfWQZ+X2C
hGXCqDBwiobyFQFLXpKykkemBlY0wVKlpvBBxfMB9RY890RTiE8wNQ6iBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrZjqwAuxEUqndni3Wv+lfGOsdOMB8GA1UdIwQY
MBaAFD0cxAI0nhkTktHsdGnBvIJDY0Q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yM2RlMDYtZmM5YS00M2QzLWFjOTUt
MzdlNjRjMDdjYzg2LzEvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yM2RlMDYtZmM5YS00M2QzLWFjOTUtMzdlNjRjMDdjYzg2
LzEvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkmJjXE4
36iSmrJQXB17BR474mWnET0smwec8RP/vGjXR/E1AKFKqQVpQmSe+/43btSRPXy5
WxYQIhvUwMSmkhT+YVk4X/Ouv2Q/anLTeQEBufn9zlz81PdQDh1PV7BL9lhN+Ln3
vkOHbXsl7u24GfistvS7ZGPuGh60xppzi0jZ0JyXs3XpB+VEy+MBRtzDVtnzR624
B5Jfw3jzaYdq+QmVrT76jX2398rx9o6S3cTq2xFHX10ubFSch2CQ+LfbWHe2Y1Oo
MiBffITIw9YcfHhlMjhwfwz8kykwH4BxILzFPUuR9BdqAPRyfnksDvKui07Md4pq
OL/rmi59X8C0uA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:02 2025 by rpki-client