Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File:                     P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier:          NS4lkn5HISoRI44TPw3Gy2QpBTaskKEBd177hf8L9zg=
Subject key identifier:   7B:BA:26:0B:99:13:52:FB:A8:40:48:51:A4:6C:57:B2:0C:0E:BD:BD
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer:       /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial:       0199FB458E6B6AFD0D9A60F5C0A85DDD8CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number:          12B0
Signing time:             Sun 19 Oct 2025 07:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:03 +0000
Files and hashes:         1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: 0up4G6mRPbT0FYCeL6MJm3mQyiOrIfdhgvLSBl42gvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:8e:6b:6a:fd:0d:9a:60:f5:c0:a8:5d:dd:8c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
        Validity
            Not Before: Oct 19 07:01:03 2025 GMT
            Not After : Oct 20 07:01:03 2025 GMT
        Subject: CN=7bba260b991352fba8404851a46c57b20c0ebdbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:fc:ea:99:ae:97:fb:df:7e:19:4a:31:d5:
                    e3:0a:2e:7b:11:da:a1:77:c9:d1:13:2b:f3:b6:3c:
                    1e:a1:d8:bd:19:0b:54:0c:de:28:0f:5e:da:91:d1:
                    71:07:32:a5:7e:4b:95:c0:ef:a2:b1:46:d0:1f:15:
                    8c:76:88:2b:c8:90:ef:c6:85:11:83:fe:89:5c:67:
                    14:09:49:9f:7e:b2:06:96:9b:99:0a:9e:b6:78:1d:
                    84:d8:93:0e:87:cd:f1:33:ed:16:f8:99:b4:98:36:
                    cd:dd:0d:29:88:14:4b:72:91:e5:22:49:26:55:5c:
                    09:45:4a:ff:77:a7:6c:a2:d0:fd:a1:2f:25:8f:92:
                    50:73:7a:0c:47:e8:e0:ad:b8:4c:42:86:84:63:99:
                    5e:00:90:e9:4b:a0:9a:a4:55:dc:2e:9e:9e:da:74:
                    c9:fd:67:09:3c:7f:fc:4d:cb:dd:0d:5f:f7:3d:c6:
                    b0:aa:b3:e4:4c:5f:b7:83:c6:73:92:7b:70:8f:13:
                    63:b1:0e:77:3b:cb:9d:0c:51:90:23:2e:80:3c:eb:
                    dc:42:72:f5:93:92:3b:b0:ba:08:9d:47:17:f4:88:
                    aa:be:9d:26:be:9c:be:8d:3d:3a:05:78:d7:2b:ba:
                    38:3e:32:02:d3:0b:b9:64:8f:40:f4:d7:94:a0:17:
                    5a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BA:26:0B:99:13:52:FB:A8:40:48:51:A4:6C:57:B2:0C:0E:BD:BD
            X509v3 Authority Key Identifier:
                keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:52:96:6d:5d:26:b2:d9:d2:29:93:fc:c5:fe:01:27:cc:17:
         5c:67:8c:0b:d0:1f:fb:8a:ca:a3:ed:5a:83:94:8b:ef:2c:d3:
         52:66:69:21:c6:3d:14:a3:73:7f:c0:50:62:ce:a8:55:5f:a5:
         97:3a:bf:49:ac:fb:77:2d:aa:44:43:de:eb:a2:03:2c:25:70:
         51:b5:8b:98:ac:b6:47:fa:88:c7:e7:a5:5a:c7:69:7a:a9:0a:
         02:b1:72:3b:5c:5a:10:bc:1f:b2:79:0c:96:4b:07:9c:01:4c:
         6e:9f:3a:30:3d:1e:21:77:b2:15:f2:4c:c9:68:fb:d9:1c:37:
         9b:ef:29:86:b0:bb:c0:97:36:93:2f:88:8d:31:44:f0:f8:8b:
         6c:7c:60:22:bd:2c:01:11:84:57:14:a8:85:27:bb:f1:77:39:
         5a:70:df:08:50:63:b3:0c:cb:ce:f0:f1:ce:b3:bf:20:69:f3:
         71:c4:aa:50:fb:38:b9:e8:99:2c:dc:de:25:08:84:15:25:41:
         79:e7:5c:29:0f:92:c3:9b:64:db:82:c8:69:15:50:fd:35:2d:
         2c:70:b1:97:69:d2:6e:99:54:b9:ec:1e:2b:fc:2e:b0:5e:c5:
         38:47:c9:30:3e:84:3b:02:f5:3e:6e:e6:34:3b:7e:e2:da:b9:
         f6:b1:dc:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RY5rav0NmmD1wKhd3YzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOWExMjEwZjUwOTkyMjM5ZDNhN2YyZTVlODAxM2I1YWI0
OTFmZmYwHhcNMjUxMDE5MDcwMTAzWhcNMjUxMDIwMDcwMTAzWjAzMTEwLwYDVQQD
Eyg3YmJhMjYwYjk5MTM1MmZiYTg0MDQ4NTFhNDZjNTdiMjBjMGViZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuH86pmul/vffhlKMdXjCi57Edqh
d8nREyvztjweodi9GQtUDN4oD17akdFxBzKlfkuVwO+isUbQHxWMdogryJDvxoUR
g/6JXGcUCUmffrIGlpuZCp62eB2E2JMOh83xM+0W+Jm0mDbN3Q0piBRLcpHlIkkm
VVwJRUr/d6dsotD9oS8lj5JQc3oMR+jgrbhMQoaEY5leAJDpS6CapFXcLp6e2nTJ
/WcJPH/8TcvdDV/3PcawqrPkTF+3g8ZzkntwjxNjsQ53O8udDFGQIy6APOvcQnL1
k5I7sLoInUcX9Iiqvp0mvpy+jT06BXjXK7o4PjIC0wu5ZI9A9NeUoBda0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHu6JguZE1L7qEBIUaRsV7IMDr29MB8GA1UdIwQY
MBaAFD+aEhD1CZIjnTp/Ll6AE7WrSR//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUt
YTg3MzRmNzAzYjk4LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUtYTg3MzRmNzAzYjk4
LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1KWbV0m
stnSKZP8xf4BJ8wXXGeMC9Af+4rKo+1ag5SL7yzTUmZpIcY9FKNzf8BQYs6oVV+l
lzq/Saz7dy2qREPe66IDLCVwUbWLmKy2R/qIx+elWsdpeqkKArFyO1xaELwfsnkM
lksHnAFMbp86MD0eIXeyFfJMyWj72Rw3m+8phrC7wJc2ky+IjTFE8PiLbHxgIr0s
ARGEVxSohSe78Xc5WnDfCFBjswzLzvDxzrO/IGnzccSqUPs4ueiZLNzeJQiEFSVB
eedcKQ+Sw5tk24LIaRVQ/TUtLHCxl2nSbplUueweK/wusF7FOEfJMD6EOwL1Pm7m
NDt+4tq59rHcRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:36 2025 by rpki-client