Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File:                     61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier:          UgyTGeun3fYAXNZv7s4W0aHXFdjeSL41zpJxj5tD6cw=
Subject key identifier:   4F:38:01:5F:14:F6:B7:BB:10:8D:DB:15:E6:C2:79:8A:6F:7B:C8:EF
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer:       /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial:       0199FBEB0F25EF2D5DFB3CEF0D0AC3C3EA31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number:          0CDC
Signing time:             Sun 19 Oct 2025 10:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:49 +0000
Files and hashes:         1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: Z8iBQF694b9AuzlfHDR1JxmTBy/3vEnR1de5pN+ks4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:0f:25:ef:2d:5d:fb:3c:ef:0d:0a:c3:c3:ea:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
        Validity
            Not Before: Oct 19 10:01:49 2025 GMT
            Not After : Oct 20 10:01:49 2025 GMT
        Subject: CN=4f38015f14f6b7bb108ddb15e6c2798a6f7bc8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:c7:6e:29:95:2b:1a:3e:bb:2f:80:d8:3d:
                    62:79:dc:c7:dc:64:0b:00:d3:7e:54:7b:56:aa:88:
                    46:71:4d:6b:1e:46:61:af:e9:0b:0b:a5:cb:c6:c3:
                    ce:33:55:e8:9f:92:57:da:e8:3f:56:7b:0c:46:88:
                    fa:b9:ba:1f:40:b4:51:c0:28:9d:1b:cc:ca:3a:52:
                    9f:da:d5:35:95:82:df:86:0c:0f:c1:45:a6:25:68:
                    12:cc:81:18:f4:01:fb:48:12:c8:3e:dd:17:36:24:
                    5a:23:83:71:d4:65:5c:f8:3c:c6:ee:2a:c7:4f:70:
                    b0:05:5d:ea:57:e0:1f:eb:09:e1:52:41:4f:09:dc:
                    75:b0:ea:c9:06:13:ce:66:86:8a:77:a5:d7:e4:b6:
                    b8:68:1e:cb:e5:9e:5a:3f:85:e9:d8:87:a5:9c:3d:
                    48:0d:c6:9a:7d:cf:b7:b6:3d:58:6b:56:d5:b7:96:
                    54:76:67:0e:ea:f7:cb:a3:80:bf:37:e6:68:ba:df:
                    f3:81:ff:93:39:79:4d:de:0a:e5:47:97:af:ff:ac:
                    cd:20:a2:55:7e:93:8a:a8:be:e4:fc:78:bb:33:8c:
                    84:c9:9f:79:be:70:24:7f:23:bf:93:7c:0e:5f:47:
                    8f:87:42:71:aa:f4:af:c3:bd:8d:48:c2:f2:b4:f6:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:38:01:5F:14:F6:B7:BB:10:8D:DB:15:E6:C2:79:8A:6F:7B:C8:EF
            X509v3 Authority Key Identifier:
                keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c5:21:8e:63:38:9e:15:05:ef:c8:55:11:d1:5f:42:73:13:
         8e:37:86:b3:8d:62:32:33:3f:2d:a7:30:6c:53:10:95:c1:1d:
         26:06:46:03:5e:2b:65:0e:85:49:59:c0:9c:9f:d3:ab:73:4c:
         f1:63:1b:6a:8f:de:25:fa:40:2d:5f:ad:99:f0:c9:25:13:5a:
         84:e8:64:ea:a2:91:e1:e6:fa:3d:ec:6a:bb:75:d6:37:44:0a:
         e5:fd:ed:34:ee:f5:b6:6d:61:e1:b4:9a:87:84:ff:6d:75:cc:
         df:90:db:33:b5:0b:31:0d:f3:8e:e7:13:10:a0:8d:ea:40:26:
         e8:c2:7e:a2:83:97:3b:64:3e:6a:22:5f:55:2d:9c:9d:7c:e6:
         76:a9:88:97:0b:c6:87:85:62:19:51:9a:69:01:e4:1b:f7:f4:
         45:9c:58:e2:2e:33:5a:2d:21:4f:76:00:6f:ab:e5:2e:97:f5:
         bb:4c:f5:1c:a5:e7:41:f0:be:f0:a1:ed:59:a7:0e:c3:d0:c1:
         df:c2:3e:e3:07:52:58:93:93:5b:87:23:16:e1:0d:02:3f:83:
         d3:79:da:4b:46:b0:44:b2:15:d5:fe:d0:a6:b3:c3:19:f1:5f:
         8d:64:87:22:0c:9d:21:8b:20:56:91:ff:4e:50:c7:a2:f3:04:
         45:12:e6:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76w8l7y1d+zzvDQrDw+oxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTBiNDM5ZDQ4OGUxYjFhNjllMzU4NjA5ODYyMTk1NmMw
ZWRjN2IwHhcNMjUxMDE5MTAwMTQ5WhcNMjUxMDIwMTAwMTQ5WjAzMTEwLwYDVQQD
Eyg0ZjM4MDE1ZjE0ZjZiN2JiMTA4ZGRiMTVlNmMyNzk4YTZmN2JjOGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtknHbimVKxo+uy+A2D1iedzH3GQL
ANN+VHtWqohGcU1rHkZhr+kLC6XLxsPOM1Xon5JX2ug/VnsMRoj6ubofQLRRwCid
G8zKOlKf2tU1lYLfhgwPwUWmJWgSzIEY9AH7SBLIPt0XNiRaI4Nx1GVc+DzG7irH
T3CwBV3qV+Af6wnhUkFPCdx1sOrJBhPOZoaKd6XX5La4aB7L5Z5aP4Xp2IelnD1I
Dcaafc+3tj1Ya1bVt5ZUdmcO6vfLo4C/N+Zout/zgf+TOXlN3grlR5ev/6zNIKJV
fpOKqL7k/Hi7M4yEyZ95vnAkfyO/k3wOX0ePh0JxqvSvw72NSMLytPZJxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE84AV8U9re7EI3bFebCeYpve8jvMB8GA1UdIwQY
MBaAFOtQtDnUiOGxpp41hgmGIZVsDtx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMt
M2E3OTgwMzE0ZWEyLzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jODNlOGYtMjQ1Ny00ZThhLWE2YmMtM2E3OTgwMzE0ZWEy
LzEvNjFDME9kU0k0YkdtbmpXR0NZWWhsV3dPM0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8UhjmM4
nhUF78hVEdFfQnMTjjeGs41iMjM/LacwbFMQlcEdJgZGA14rZQ6FSVnAnJ/Tq3NM
8WMbao/eJfpALV+tmfDJJRNahOhk6qKR4eb6Pexqu3XWN0QK5f3tNO71tm1h4bSa
h4T/bXXM35DbM7ULMQ3zjucTEKCN6kAm6MJ+ooOXO2Q+aiJfVS2cnXzmdqmIlwvG
h4ViGVGaaQHkG/f0RZxY4i4zWi0hT3YAb6vlLpf1u0z1HKXnQfC+8KHtWacOw9DB
38I+4wdSWJOTW4cjFuENAj+D03naS0awRLIV1f7QprPDGfFfjWSHIgydIYsgVpH/
TlDHovMERRLmnQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:45 2025 by rpki-client