Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
File:                     0EtupigXnKOg5Bv_ruotM6VUYd4.mft (raw, json)
Hash identifier:          ri2zt/NlR+XUncjlyCtIOu+AtgdpXVZ8RYb2q/86PaM=
Subject key identifier:   91:34:06:7E:3A:DE:05:46:D1:4C:30:1A:77:38:99:40:72:3A:03:DF
Authority key identifier: D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE
Certificate issuer:       /CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
Certificate serial:       0199FBEAD976F9E93C20FD4EF54447865605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
Manifest number:          0192
Signing time:             Sun 19 Oct 2025 10:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:36 +0000
Files and hashes:         1: 0EtupigXnKOg5Bv_ruotM6VUYd4.crl (hash: WvLDaiwRbGiCcHikOEh9XHQ6NcDdDhmWqlN2uSLNoOE=)
                          2: 1-XjcgxPBlCdT6xkSyh2YSHlHr8c.roa (hash: TMzItRD9NOGFOwDM/LKIt7JF4ab7923oNjQ2Ls9AlQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:d9:76:f9:e9:3c:20:fd:4e:f5:44:47:86:56:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
        Validity
            Not Before: Oct 19 10:01:36 2025 GMT
            Not After : Oct 20 10:01:36 2025 GMT
        Subject: CN=9134067e3ade0546d14c301a77389940723a03df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:43:43:9d:98:df:76:e5:45:60:41:df:66:a7:
                    a9:ea:cf:be:85:24:7f:43:46:c5:53:44:36:b6:c8:
                    45:5a:2e:3c:9b:10:dd:5d:f3:b9:40:6e:e1:3e:86:
                    e2:22:d9:42:39:18:70:10:70:07:32:11:b9:fd:f0:
                    e4:8c:82:28:f8:93:5d:7a:7f:d6:95:9a:d3:9a:96:
                    c6:26:e0:59:50:73:4c:e9:c1:8c:fe:6e:f7:85:be:
                    80:cb:7a:3b:12:7b:55:47:63:b3:0b:b8:89:20:c9:
                    07:cc:c6:91:34:8e:b9:e3:de:12:0f:dd:7f:a2:3b:
                    c7:f3:02:e6:d4:80:14:e5:11:d1:cc:3d:64:f0:62:
                    d0:ca:7f:10:ab:d3:a3:34:de:c7:43:8a:0c:ae:1f:
                    3e:47:8f:4b:5c:3a:b8:40:9e:a1:ac:93:96:8c:38:
                    30:66:a7:82:7b:a9:14:0a:d6:ff:04:cf:b0:51:57:
                    0b:81:74:ad:44:2a:b5:84:ed:6c:7f:f4:14:71:e2:
                    15:23:d2:26:aa:2a:58:13:f7:ec:9a:b4:f0:ed:6d:
                    3e:9b:c9:2d:56:ba:db:0c:34:85:67:ca:f1:3b:c7:
                    8a:fc:e2:a5:71:19:87:32:4d:41:4c:78:be:91:87:
                    9d:57:10:e3:94:de:ae:c5:e9:41:29:46:16:30:50:
                    03:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:34:06:7E:3A:DE:05:46:D1:4C:30:1A:77:38:99:40:72:3A:03:DF
            X509v3 Authority Key Identifier:
                keyid:D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6f:27:bd:87:35:b6:8a:a4:88:bb:0c:e3:8a:9d:7b:fd:97:
         f5:91:84:ab:a6:03:b1:b3:23:a6:8f:02:06:be:a9:00:c4:57:
         20:3a:ed:77:3f:e8:62:3b:da:f1:9f:ea:cc:84:fd:9d:e9:d2:
         c6:b5:1f:59:4f:c5:5e:c5:7a:36:31:53:8a:6e:f3:c5:e5:40:
         6e:13:b9:b5:7a:60:4b:26:0f:86:8d:37:f9:38:6a:6d:33:98:
         c2:75:9d:21:b6:ec:91:b1:41:cd:5b:26:be:f3:09:59:54:7b:
         d2:1c:1c:d6:3c:b0:88:c9:aa:21:6c:f7:f4:53:d6:c5:ce:69:
         e7:29:2f:49:9e:31:7e:c5:29:42:57:ba:e8:6e:04:45:62:38:
         24:fb:9b:b4:94:ac:de:80:d4:14:5a:94:be:5a:d1:d0:e2:7a:
         f5:ac:86:56:3e:73:83:d7:26:94:f1:e8:6a:de:72:b2:e5:05:
         ed:16:4e:20:ec:2b:85:2d:dc:90:34:b6:4a:50:a6:97:d9:6a:
         3d:14:5a:dc:44:2b:f6:2d:9b:5f:2a:6d:f8:09:6a:0d:d2:a5:
         7b:ee:5c:f3:8b:e9:ee:95:95:fd:9d:03:76:98:fb:ff:ac:73:
         5b:58:74:70:3d:6a:54:af:07:8d:5e:e8:4f:6c:38:ae:16:c0:
         3e:1c:22:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tl2+ek8IP1O9URHhlYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNGI2ZWE2MjgxNzljYTNhMGU0MWJmZmFlZWEyZDMzYTU1
NDYxZGUwHhcNMjUxMDE5MTAwMTM2WhcNMjUxMDIwMTAwMTM2WjAzMTEwLwYDVQQD
Eyg5MTM0MDY3ZTNhZGUwNTQ2ZDE0YzMwMWE3NzM4OTk0MDcyM2EwM2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUNDnZjfduVFYEHfZqep6s++hSR/
Q0bFU0Q2tshFWi48mxDdXfO5QG7hPobiItlCORhwEHAHMhG5/fDkjIIo+JNden/W
lZrTmpbGJuBZUHNM6cGM/m73hb6Ay3o7EntVR2OzC7iJIMkHzMaRNI65494SD91/
ojvH8wLm1IAU5RHRzD1k8GLQyn8Qq9OjNN7HQ4oMrh8+R49LXDq4QJ6hrJOWjDgw
ZqeCe6kUCtb/BM+wUVcLgXStRCq1hO1sf/QUceIVI9ImqipYE/fsmrTw7W0+m8kt
VrrbDDSFZ8rxO8eK/OKlcRmHMk1BTHi+kYedVxDjlN6uxelBKUYWMFAD4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE0Bn463gVG0UwwGnc4mUByOgPfMB8GA1UdIwQY
MBaAFNBLbqYoF5yjoOQb/67qLTOlVGHeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lMWU2YjMtOTMwYS00MDIyLWE4Yzct
ZWNjNzIyZjlkN2ZmLzEvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lMWU2YjMtOTMwYS00MDIyLWE4YzctZWNjNzIyZjlkN2Zm
LzEvMEV0dXBpZ1huS09nNUJ2X3J1b3RNNlZVWWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWG8nvYc1
toqkiLsM44qde/2X9ZGEq6YDsbMjpo8CBr6pAMRXIDrtdz/oYjva8Z/qzIT9nenS
xrUfWU/FXsV6NjFTim7zxeVAbhO5tXpgSyYPho03+ThqbTOYwnWdIbbskbFBzVsm
vvMJWVR70hwc1jywiMmqIWz39FPWxc5p5ykvSZ4xfsUpQle66G4ERWI4JPubtJSs
3oDUFFqUvlrR0OJ69ayGVj5zg9cmlPHoat5ysuUF7RZOIOwrhS3ckDS2SlCml9lq
PRRa3EQr9i2bXypt+AlqDdKle+5c84vp7pWV/Z0Ddpj7/6xzW1h0cD1qVK8HjV7o
T2w4rhbAPhwibw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:26 2025 by rpki-client