Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
File:                     uaY9guJ4W32wBSjcVacGncUQpC8.mft (raw, json)
Hash identifier:          vhCkBhNIxP9PB2GhkOyYE7EifZt9C+I53kcCX3lCsSY=
Subject key identifier:   39:8A:DB:48:1A:5E:0D:2E:B9:0C:FD:40:52:78:9E:FB:2F:34:A8:F6
Authority key identifier: B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
Certificate issuer:       /CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Certificate serial:       0199FBB374DA57B19A3FA2B6DFEFBA4EA0E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
Manifest number:          0593
Signing time:             Sun 19 Oct 2025 09:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:06 +0000
Files and hashes:         1: uaY9guJ4W32wBSjcVacGncUQpC8.crl (hash: D+HnfIFVJuPCw30M1Jqpqdo7f+Y2VRgKLX3hpXZw5Jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:74:da:57:b1:9a:3f:a2:b6:df:ef:ba:4e:a0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
        Validity
            Not Before: Oct 19 09:01:06 2025 GMT
            Not After : Oct 20 09:01:06 2025 GMT
        Subject: CN=398adb481a5e0d2eb90cfd4052789efb2f34a8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:f4:b8:02:44:52:8a:b9:23:09:43:1f:6c:
                    91:c7:58:6a:b0:08:83:47:04:25:89:00:3e:51:f1:
                    49:53:54:da:bb:49:2d:4b:7a:78:16:68:fb:d5:6d:
                    e8:71:18:df:8f:6e:72:d2:bc:4b:79:39:e3:95:55:
                    e0:fe:75:2a:c4:a2:1a:b9:cb:89:2e:5c:b8:f4:57:
                    3e:80:d7:54:8a:5d:63:2b:6c:7d:40:cf:9c:8c:88:
                    44:9c:75:31:c1:63:4a:a0:ee:40:fe:1b:3e:b7:bb:
                    4d:14:a7:20:74:4d:55:ea:39:30:7a:45:f1:17:aa:
                    b9:e9:38:0d:bd:8b:f1:a3:bb:89:85:c2:a9:f0:62:
                    00:de:fa:16:a4:53:ae:8d:38:ec:ce:cf:3e:ef:99:
                    7a:5d:c7:4f:8f:ce:4f:1e:1f:69:ca:79:a3:a3:82:
                    b6:73:71:c9:17:60:d8:d0:4a:00:4f:72:c5:2e:75:
                    57:4b:ba:54:41:5b:3a:ba:e3:a5:78:c6:90:62:9c:
                    f1:98:3f:55:2d:9c:45:7b:67:e1:70:3a:d7:e0:90:
                    58:c0:c9:b5:ee:6a:bc:74:81:57:57:f8:c8:2e:b6:
                    8f:43:d2:31:74:41:e9:4d:c0:f3:8a:82:72:47:4f:
                    eb:dc:bc:14:db:b1:e0:ca:a5:65:6a:24:ee:90:9e:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8A:DB:48:1A:5E:0D:2E:B9:0C:FD:40:52:78:9E:FB:2F:34:A8:F6
            X509v3 Authority Key Identifier:
                keyid:B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:64:d9:2f:8d:89:a2:5a:91:af:31:f0:bf:62:a3:47:26:
         9a:23:a0:87:78:b6:34:12:12:bf:52:ae:a0:bc:f3:8a:ef:9c:
         e0:0b:43:8e:f7:78:4d:0f:db:ed:f3:3b:63:2f:f4:bf:6f:c9:
         56:e0:0f:89:d0:ee:77:f4:16:1f:9d:ff:08:e1:68:7d:0f:8f:
         c6:25:b0:5e:bb:a9:04:20:28:bb:b1:8a:4a:0b:eb:24:be:e8:
         2e:37:62:2a:a1:b7:67:fa:ba:a4:df:6c:46:6d:a6:55:82:b1:
         2c:65:98:22:9c:bf:89:e1:72:fc:c5:e2:9b:9f:10:7d:ea:20:
         c1:20:e9:f3:76:fb:86:71:e3:6a:8f:54:53:39:e5:6e:06:91:
         56:68:24:44:a7:a4:f5:af:25:77:3b:bb:89:98:3d:b2:88:ea:
         ad:39:d3:55:e1:2c:e5:34:f5:50:b9:ed:8b:ee:7a:4d:f3:20:
         53:3d:86:89:f8:58:f4:fd:99:8e:d1:30:5e:6b:67:92:62:a1:
         ed:06:a7:36:9d:8c:6c:4b:88:98:6a:f6:fd:d8:b4:07:71:2e:
         63:8b:03:28:7d:38:83:c5:37:c8:3f:21:45:a2:6b:6d:18:04:
         55:eb:46:47:6d:1f:98:fc:86:60:84:63:60:79:b9:db:3b:df:
         19:8f:93:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s3TaV7GaP6K23++6TqDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YTYzZDgyZTI3ODViN2RiMDA1MjhkYzU1YTcwNjlkYzUx
MGE0MmYwHhcNMjUxMDE5MDkwMTA2WhcNMjUxMDIwMDkwMTA2WjAzMTEwLwYDVQQD
EygzOThhZGI0ODFhNWUwZDJlYjkwY2ZkNDA1Mjc4OWVmYjJmMzRhOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDz0uAJEUoq5IwlDH2yRx1hqsAiD
RwQliQA+UfFJU1Tau0ktS3p4Fmj71W3ocRjfj25y0rxLeTnjlVXg/nUqxKIaucuJ
Lly49Fc+gNdUil1jK2x9QM+cjIhEnHUxwWNKoO5A/hs+t7tNFKcgdE1V6jkwekXx
F6q56TgNvYvxo7uJhcKp8GIA3voWpFOujTjszs8+75l6XcdPj85PHh9pynmjo4K2
c3HJF2DY0EoAT3LFLnVXS7pUQVs6uuOleMaQYpzxmD9VLZxFe2fhcDrX4JBYwMm1
7mq8dIFXV/jILraPQ9IxdEHpTcDzioJyR0/r3LwU27HgyqVlaiTukJ4O8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmK20gaXg0uuQz9QFJ4nvsvNKj2MB8GA1UdIwQY
MBaAFLmmPYLieFt9sAUo3FWnBp3FEKQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFZOWd1SjRXMzJ3QlNqY1ZhY0duY1VRcEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84YTA2ZjQtOTg2ZS00NjY5LWJkZjkt
OGVlMmY5ZGNiMWVkLzEvdWFZOWd1SjRXMzJ3QlNqY1ZhY0duY1VRcEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC84YTA2ZjQtOTg2ZS00NjY5LWJkZjktOGVlMmY5ZGNiMWVk
LzEvdWFZOWd1SjRXMzJ3QlNqY1ZhY0duY1VRcEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbh1k2S+N
iaJaka8x8L9io0cmmiOgh3i2NBISv1KuoLzziu+c4AtDjvd4TQ/b7fM7Yy/0v2/J
VuAPidDud/QWH53/COFofQ+PxiWwXrupBCAou7GKSgvrJL7oLjdiKqG3Z/q6pN9s
Rm2mVYKxLGWYIpy/ieFy/MXim58QfeogwSDp83b7hnHjao9UUznlbgaRVmgkRKek
9a8ldzu7iZg9sojqrTnTVeEs5TT1ULnti+56TfMgUz2GifhY9P2ZjtEwXmtnkmKh
7QanNp2MbEuImGr2/di0B3EuY4sDKH04g8U3yD8hRaJrbRgEVetGR20fmPyGYIRj
YHm52zvfGY+TCA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:07 2025 by rpki-client