Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
File:                     Rj7duRtTj4Port9VZclg3wsQfqI.mft (raw, json)
Hash identifier:          i2E0lJdB5wZF52tm1IAr9REg0KW1tdZYWT4N47W19O0=
Subject key identifier:   0A:15:A6:23:DE:37:17:00:CD:67:2E:E3:E0:79:DD:2D:20:D0:65:69
Authority key identifier: 46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2
Certificate issuer:       /CN=463eddb91b538f83e8aedf5565c960df0b107ea2
Certificate serial:       0199FAD7C865734A77D8176FE1038C21255A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
Manifest number:          0B42
Signing time:             Sun 19 Oct 2025 05:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:09 +0000
Files and hashes:         1: Rj7duRtTj4Port9VZclg3wsQfqI.crl (hash: CrVKOjUn2YJHAF1zbyJJ4nHDOJCGx9degI07OaIzHpg=)
                          2: VDpi_TMhu0MubOzMgSkXQ1gGEVo.roa (hash: l1aEmCnDC0lAylyG2lI+yA0mAn8xNZotz2Kipdmx4J4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:c8:65:73:4a:77:d8:17:6f:e1:03:8c:21:25:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463eddb91b538f83e8aedf5565c960df0b107ea2
        Validity
            Not Before: Oct 19 05:01:09 2025 GMT
            Not After : Oct 20 05:01:09 2025 GMT
        Subject: CN=0a15a623de371700cd672ee3e079dd2d20d06569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:2a:76:69:06:75:68:4f:fa:fa:d6:7d:ec:
                    86:8e:04:76:ed:bb:4d:db:94:75:d9:0b:ce:59:53:
                    ed:7f:a4:30:bf:31:37:f9:d9:ae:a7:a7:36:f7:f0:
                    80:5f:68:57:45:a8:ab:72:d7:b7:7c:03:40:4a:d8:
                    f7:ef:6d:f6:25:a8:21:e4:05:17:ec:c0:b7:28:82:
                    77:22:62:1a:1b:dc:91:b6:27:79:76:65:b3:fd:64:
                    95:dc:dc:ef:4b:20:da:b3:45:53:07:83:2b:b9:42:
                    0a:31:57:0a:d2:d5:4b:97:03:a4:90:da:b7:ec:a6:
                    fe:d4:86:0f:6c:02:a5:3a:15:87:60:1a:98:12:0e:
                    a6:7a:67:76:e5:7d:a1:05:40:5d:66:85:51:1a:e2:
                    b4:88:7f:74:00:35:dc:e6:8e:29:4f:4f:64:84:c5:
                    75:8b:d7:21:88:bd:a5:af:33:f0:21:7a:d1:16:99:
                    60:13:62:4c:3a:9e:85:fc:24:80:ce:cd:5b:ad:2f:
                    e7:45:1c:04:49:79:13:ba:94:07:a5:40:38:48:c2:
                    74:80:f3:04:23:4c:89:c2:c0:d9:5f:14:2e:7c:da:
                    80:44:7c:99:62:6e:2f:87:79:50:23:49:40:e3:2b:
                    c5:d5:40:cd:1a:5a:95:00:f1:4d:1d:c9:cf:af:e8:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:15:A6:23:DE:37:17:00:CD:67:2E:E3:E0:79:DD:2D:20:D0:65:69
            X509v3 Authority Key Identifier:
                keyid:46:3E:DD:B9:1B:53:8F:83:E8:AE:DF:55:65:C9:60:DF:0B:10:7E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rj7duRtTj4Port9VZclg3wsQfqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/103fc9-2cbf-40bf-9625-18762500fe25/1/Rj7duRtTj4Port9VZclg3wsQfqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:62:3e:a6:24:87:fd:b6:24:54:b9:00:fe:b3:09:6f:3c:25:
         55:73:7e:51:6b:f8:d8:1e:b5:91:9b:00:b1:02:a7:31:8e:f3:
         83:bf:2e:e2:87:64:08:45:f3:f8:22:5e:c1:5e:e7:65:2e:f8:
         48:bb:55:0b:a8:ec:6a:23:d7:7a:c5:e0:a6:ed:6c:e4:9f:87:
         e2:9e:65:a7:51:5f:cb:2d:e3:1e:0e:26:a8:66:1a:96:ca:8a:
         e1:d2:a6:87:ea:8f:09:1f:40:af:66:6b:91:02:6c:92:ba:74:
         68:91:88:4c:12:51:cc:6d:dd:42:2d:6a:a5:a7:52:ee:93:74:
         ae:43:66:6d:a6:0e:69:89:b2:ed:b0:43:3c:4e:a6:c3:ad:96:
         4b:70:90:c0:1f:2a:0c:53:68:43:55:87:76:15:be:ee:32:c6:
         40:a3:62:9e:3b:7c:dd:94:a8:d6:9d:af:c3:82:27:07:16:96:
         fe:28:b7:72:9a:66:f8:a5:4a:83:ca:0c:5d:20:73:14:d5:5d:
         0c:50:33:3f:f9:59:2c:81:f2:c5:8d:5f:ed:f6:c2:17:6b:98:
         c8:7e:a2:e4:a7:02:f2:35:f2:33:23:66:a5:f1:54:d7:10:10:
         6e:75:2b:d9:d6:f9:7c:c5:08:eb:b7:f4:5d:b2:83:90:33:da:
         2a:3f:d9:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn618hlc0p32Bdv4QOMISVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2M2VkZGI5MWI1MzhmODNlOGFlZGY1NTY1Yzk2MGRmMGIx
MDdlYTIwHhcNMjUxMDE5MDUwMTA5WhcNMjUxMDIwMDUwMTA5WjAzMTEwLwYDVQQD
EygwYTE1YTYyM2RlMzcxNzAwY2Q2NzJlZTNlMDc5ZGQyZDIwZDA2NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeQqdmkGdWhP+vrWfeyGjgR27btN
25R12QvOWVPtf6QwvzE3+dmup6c29/CAX2hXRaircte3fANAStj37232Jagh5AUX
7MC3KIJ3ImIaG9yRtid5dmWz/WSV3NzvSyDas0VTB4MruUIKMVcK0tVLlwOkkNq3
7Kb+1IYPbAKlOhWHYBqYEg6memd25X2hBUBdZoVRGuK0iH90ADXc5o4pT09khMV1
i9chiL2lrzPwIXrRFplgE2JMOp6F/CSAzs1brS/nRRwESXkTupQHpUA4SMJ0gPME
I0yJwsDZXxQufNqARHyZYm4vh3lQI0lA4yvF1UDNGlqVAPFNHcnPr+gcMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoVpiPeNxcAzWcu4+B53S0g0GVpMB8GA1UdIwQY
MBaAFEY+3bkbU4+D6K7fVWXJYN8LEH6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMDNmYzktMmNiZi00MGJmLTk2MjUt
MTg3NjI1MDBmZTI1LzEvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xMDNmYzktMmNiZi00MGJmLTk2MjUtMTg3NjI1MDBmZTI1
LzEvUmo3ZHVSdFRqNFBvcnQ5VlpjbGczd3NRZnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGI+piSH
/bYkVLkA/rMJbzwlVXN+UWv42B61kZsAsQKnMY7zg78u4odkCEXz+CJewV7nZS74
SLtVC6jsaiPXesXgpu1s5J+H4p5lp1Ffyy3jHg4mqGYalsqK4dKmh+qPCR9Ar2Zr
kQJskrp0aJGITBJRzG3dQi1qpadS7pN0rkNmbaYOaYmy7bBDPE6mw62WS3CQwB8q
DFNoQ1WHdhW+7jLGQKNinjt83ZSo1p2vw4InBxaW/ii3cppm+KVKg8oMXSBzFNVd
DFAzP/lZLIHyxY1f7fbCF2uYyH6i5KcC8jXyMyNmpfFU1xAQbnUr2db5fMUI67f0
XbKDkDPaKj/ZUQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:14 2025 by rpki-client