Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
File:                     jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json)
Hash identifier:          p9G50pflF6JtMcNdX1dkNQ4sAs80WXyvKCKlTbyWjQo=
Subject key identifier:   96:19:70:29:51:B4:A1:FA:AC:68:7D:96:EC:90:1D:28:C4:E1:8A:B1
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Certificate issuer:       /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial:       0199FBDBA37FEBE15A7FF619AA8EAD977729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
Manifest number:          06
Signing time:             Sun 19 Oct 2025 09:44:59 +0000
Manifest this update:     Sun 19 Oct 2025 09:44:59 +0000
Manifest next update:     Mon 20 Oct 2025 09:44:59 +0000
Files and hashes:         1: 1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa (hash: NxHneWDr/Bysr9GfZGnTiOG68S5eU/eXkBxXj/MldpQ=)
                          2: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: 3UwPn2jlFDki5cJ2+VlrxJKqR82hHUaJ1U67pDrdDic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:db:a3:7f:eb:e1:5a:7f:f6:19:aa:8e:ad:97:77:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
        Validity
            Not Before: Oct 19 09:44:59 2025 GMT
            Not After : Oct 20 09:44:59 2025 GMT
        Subject: CN=9619702951b4a1faac687d96ec901d28c4e18ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:4b:8e:10:7f:36:b7:82:9a:37:63:b0:da:
                    b7:91:42:fd:2e:ef:99:78:af:c3:af:21:81:fe:cd:
                    cc:d5:dd:6f:b2:4b:34:9d:51:b4:29:a6:50:5d:5b:
                    c6:99:59:8c:1c:90:fc:6d:40:a2:ee:dc:3e:34:68:
                    9a:24:16:9b:b4:d8:d4:f5:93:a0:14:83:35:13:ea:
                    2a:be:9b:08:3e:1d:fa:e5:18:86:0b:e8:b2:04:6b:
                    f4:d7:57:71:d3:87:1c:5b:26:39:77:e5:8e:c0:e9:
                    bb:d7:68:41:40:f1:09:cc:70:7f:d5:0a:a1:0c:d4:
                    a4:fc:d5:61:56:c4:d7:fc:ba:c6:11:02:5d:2a:53:
                    31:d4:80:61:90:dd:69:92:97:36:4d:4a:ff:71:cb:
                    55:b7:c3:25:22:ca:3b:7e:1d:c3:40:01:60:bc:40:
                    4a:57:e4:86:92:c5:d6:7b:0f:2b:07:6a:56:12:93:
                    63:38:c1:a7:ea:e3:eb:2f:af:43:93:53:da:6a:e6:
                    be:26:5c:81:95:c7:cf:af:9e:99:04:0e:e4:6a:c3:
                    55:62:c8:96:67:d6:d0:93:ff:a8:0d:6b:95:df:8a:
                    f7:cf:6d:c6:39:41:55:7e:55:63:fd:b7:f9:f1:69:
                    e3:3c:0a:ff:9c:58:6f:99:4f:9d:b1:a2:cc:57:2f:
                    5f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:19:70:29:51:B4:A1:FA:AC:68:7D:96:EC:90:1D:28:C4:E1:8A:B1
            X509v3 Authority Key Identifier:
                keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e8:40:78:ff:fc:23:11:d1:f0:3a:da:9b:57:2e:db:6f:d9:
         5e:8c:d1:32:26:e1:ed:ed:ac:f9:09:c5:8e:cd:53:65:bd:22:
         fd:62:e4:a0:df:c9:a1:e7:fb:7e:97:0f:96:5b:6e:c2:12:de:
         a3:19:93:d5:db:dd:f9:26:9a:35:b8:e5:9a:6b:96:cc:2d:67:
         bc:7e:06:53:e9:29:e7:7c:cd:91:e0:e4:63:8d:d0:01:50:0b:
         0b:a5:7d:81:9d:89:cb:63:8b:45:4e:71:e1:10:10:d5:12:82:
         c0:94:61:ca:dc:b9:fb:90:84:1b:b9:a6:7d:6c:d9:d7:c8:c4:
         c9:40:9e:4b:07:bf:4c:d4:9a:11:61:13:1c:e5:26:6b:40:a4:
         a6:fe:55:78:86:21:d3:53:ba:b8:44:29:ca:98:0e:2b:29:1d:
         f3:cf:fd:12:1e:22:1a:4e:7e:c9:26:cb:b3:2d:4f:37:7b:41:
         83:af:4b:92:78:d9:7b:86:43:c8:58:0f:dd:07:13:4b:be:90:
         b7:cf:2b:34:ce:8f:bb:34:53:9b:c8:8c:92:f3:f0:5c:26:f1:
         dd:3e:97:f0:26:fe:15:27:36:8f:ca:41:c4:2e:96:36:a6:1e:
         c4:1e:bb:88:b3:f1:0e:a0:af:6e:36:5d:37:5e:8d:63:f3:28:
         ee:8b:c6:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn726N/6+Faf/YZqo6tl3cpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOGU5NzdhYmVmYTJhMWY5OTVlODljOTQ3ZmVmZDQ2MzZi
Nzk2MWMwHhcNMjUxMDE5MDk0NDU5WhcNMjUxMDIwMDk0NDU5WjAzMTEwLwYDVQQD
Eyg5NjE5NzAyOTUxYjRhMWZhYWM2ODdkOTZlYzkwMWQyOGM0ZTE4YWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM1LjhB/NreCmjdjsNq3kUL9Lu+Z
eK/DryGB/s3M1d1vsks0nVG0KaZQXVvGmVmMHJD8bUCi7tw+NGiaJBabtNjU9ZOg
FIM1E+oqvpsIPh365RiGC+iyBGv011dx04ccWyY5d+WOwOm712hBQPEJzHB/1Qqh
DNSk/NVhVsTX/LrGEQJdKlMx1IBhkN1pkpc2TUr/cctVt8MlIso7fh3DQAFgvEBK
V+SGksXWew8rB2pWEpNjOMGn6uPrL69Dk1Paaua+JlyBlcfPr56ZBA7kasNVYsiW
Z9bQk/+oDWuV34r3z23GOUFVflVj/bf58WnjPAr/nFhvmU+dsaLMVy9fXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYZcClRtKH6rGh9luyQHSjE4YqxMB8GA1UdIwQY
MBaAFI6Ol3q++iofmV6JyUf+/UY2t5YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjkt
M2MzMGEwYWQxM2Y2LzEvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mM2Q1NzItM2RjNy00YjQ2LTkyNjktM2MzMGEwYWQxM2Y2
LzEvam82WGVyNzZLaC1aWG9uSlJfNzlSamEzbGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOhAeP/8
IxHR8Dram1cu22/ZXozRMibh7e2s+QnFjs1TZb0i/WLkoN/Joef7fpcPlltuwhLe
oxmT1dvd+SaaNbjlmmuWzC1nvH4GU+kp53zNkeDkY43QAVALC6V9gZ2Jy2OLRU5x
4RAQ1RKCwJRhyty5+5CEG7mmfWzZ18jEyUCeSwe/TNSaEWETHOUma0Ckpv5VeIYh
01O6uEQpypgOKykd88/9Eh4iGk5+ySbLsy1PN3tBg69LknjZe4ZDyFgP3QcTS76Q
t88rNM6PuzRTm8iMkvPwXCbx3T6X8Cb+FSc2j8pBxC6WNqYexB67iLPxDqCvbjZd
N16NY/Mo7ovG/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:30 2025 by rpki-client