Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
File:                     c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json)
Hash identifier:          dP4SSClvWOf8nprGaZBcg7SpQ7pH/m1oQVVG8RJUPbk=
Subject key identifier:   D1:F6:7C:67:84:A4:80:B9:D9:73:C8:97:3A:48:0C:A6:03:CE:0C:82
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Certificate issuer:       /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial:       0199FD6B34468FAE8B3D66E722D2EFEE1895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
Manifest number:          0ACA
Signing time:             Sun 19 Oct 2025 17:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:25 +0000
Files and hashes:         1: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: fnYid9AkjqAgTKrCCqJ53EU1kaTv+bPrxRNiQHSv/Jg=)
                          2: pP7tyuuRn66UIb06Z8juPizzBlI.roa (hash: vMVBYtNtS/yDZwAn3TTK359AmlCLqfTH6tG5fmDA5mE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:34:46:8f:ae:8b:3d:66:e7:22:d2:ef:ee:18:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
        Validity
            Not Before: Oct 19 17:01:25 2025 GMT
            Not After : Oct 20 17:01:25 2025 GMT
        Subject: CN=d1f67c6784a480b9d973c8973a480ca603ce0c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:6f:a8:91:2f:ed:7c:77:0f:32:06:f5:90:
                    f6:c7:83:0f:b9:91:b8:26:e6:d6:eb:78:32:75:fc:
                    e1:99:ae:1a:be:30:f1:c3:ef:19:3c:9e:8d:62:c2:
                    97:7c:21:15:c2:c2:90:ce:8b:cf:15:db:8f:8b:b2:
                    77:f4:28:1b:b1:1d:1e:3f:dc:71:83:cc:96:be:60:
                    3e:74:dc:20:9b:53:6b:89:ea:4d:56:88:30:fb:32:
                    93:92:03:e7:a5:ba:19:91:32:4f:7b:16:3a:fa:ae:
                    09:c7:fd:b6:2e:57:43:14:e6:d5:ed:94:34:c7:bc:
                    5a:e2:91:a5:8d:18:6d:11:70:14:f4:61:7f:5b:b8:
                    79:52:b4:2d:53:6b:65:e3:6d:90:0d:a1:d6:a4:26:
                    e1:b2:a5:ab:d1:1a:16:22:fd:d3:2f:42:d2:4d:26:
                    88:b1:10:4b:a1:3d:46:d9:cf:76:88:66:84:e3:e1:
                    a7:aa:ef:e2:45:8e:ef:f7:29:78:ad:b3:28:c2:e3:
                    40:93:13:6d:15:c3:ad:6a:a6:7c:9f:f3:4f:f9:29:
                    45:02:69:e1:38:95:e7:04:d6:ac:ae:fe:ea:f0:df:
                    51:5c:24:ba:41:f9:e4:94:5c:61:6f:6f:29:0f:f3:
                    fb:9c:50:3c:a6:8f:a6:5a:d4:8b:9b:6c:d8:6b:8f:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F6:7C:67:84:A4:80:B9:D9:73:C8:97:3A:48:0C:A6:03:CE:0C:82
            X509v3 Authority Key Identifier:
                keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c1:ae:cb:1d:ca:cf:3b:e3:71:63:e4:07:a0:87:48:d2:fb:
         50:ec:98:33:60:a2:f6:95:9e:cf:79:71:c5:06:47:e6:1d:ca:
         32:7a:bb:00:b9:72:13:81:91:4f:c1:58:4a:a1:cf:4e:b2:1f:
         b7:c9:04:30:2b:9d:2c:2f:41:93:db:94:1e:ac:b0:96:34:44:
         78:35:fb:af:ac:05:f9:c1:2b:86:44:3d:74:bc:a4:b9:8c:3d:
         7e:d6:0e:8f:48:06:f7:c7:95:64:2d:8f:50:11:5b:b3:4b:61:
         ef:93:31:8b:14:0b:f0:07:59:f7:50:37:9f:63:d2:ce:59:4a:
         49:7a:70:6d:dc:dd:8f:ec:6a:50:2e:f2:50:6a:87:94:b4:45:
         91:16:7e:c1:9a:64:2d:73:d8:ad:4e:88:7b:49:4a:94:09:82:
         18:d7:34:7c:e5:5d:66:a8:40:1a:5c:24:13:df:7a:6f:e4:2b:
         ea:96:c4:c3:23:f2:c1:f0:76:64:79:bc:8c:19:13:a8:3b:6a:
         5c:13:cd:86:c0:b1:53:cb:13:96:aa:a4:77:54:09:60:7d:37:
         a5:bc:86:88:eb:14:ab:6d:b3:fa:ad:3b:cf:3e:3f:f5:3c:9b:
         8d:08:ee:15:c0:4d:5b:9a:b0:0b:0b:5a:fa:65:1d:f7:14:51:
         38:80:15:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9azRGj66LPWbnItLv7hiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYjk4MWNiNmVlNzlkMmRmOGM4OWQ2YTM0YzU1NGJkZTNm
Y2M3NWYwHhcNMjUxMDE5MTcwMTI1WhcNMjUxMDIwMTcwMTI1WjAzMTEwLwYDVQQD
EyhkMWY2N2M2Nzg0YTQ4MGI5ZDk3M2M4OTczYTQ4MGNhNjAzY2UwYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3JvqJEv7Xx3DzIG9ZD2x4MPuZG4
JubW63gydfzhma4avjDxw+8ZPJ6NYsKXfCEVwsKQzovPFduPi7J39CgbsR0eP9xx
g8yWvmA+dNwgm1NriepNVogw+zKTkgPnpboZkTJPexY6+q4Jx/22LldDFObV7ZQ0
x7xa4pGljRhtEXAU9GF/W7h5UrQtU2tl422QDaHWpCbhsqWr0RoWIv3TL0LSTSaI
sRBLoT1G2c92iGaE4+Gnqu/iRY7v9yl4rbMowuNAkxNtFcOtaqZ8n/NP+SlFAmnh
OJXnBNasrv7q8N9RXCS6QfnklFxhb28pD/P7nFA8po+mWtSLm2zYa4/ImwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH2fGeEpIC52XPIlzpIDKYDzgyCMB8GA1UdIwQY
MBaAFHO5gctu550t+MidajTFVL3j/MdfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kMThiNWEtNDBlZi00Nzc5LWEwZTUt
YWE1ODFkMzc4YTdjLzEvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kMThiNWEtNDBlZi00Nzc5LWEwZTUtYWE1ODFkMzc4YTdj
LzEvYzdtQnkyN25uUzM0eUoxcU5NVlV2ZVA4eDE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsGuyx3K
zzvjcWPkB6CHSNL7UOyYM2Ci9pWez3lxxQZH5h3KMnq7ALlyE4GRT8FYSqHPTrIf
t8kEMCudLC9Bk9uUHqywljREeDX7r6wF+cErhkQ9dLykuYw9ftYOj0gG98eVZC2P
UBFbs0th75MxixQL8AdZ91A3n2PSzllKSXpwbdzdj+xqUC7yUGqHlLRFkRZ+wZpk
LXPYrU6Ie0lKlAmCGNc0fOVdZqhAGlwkE996b+Qr6pbEwyPywfB2ZHm8jBkTqDtq
XBPNhsCxU8sTlqqkd1QJYH03pbyGiOsUq22z+q07zz4/9TybjQjuFcBNW5qwCwta
+mUd9xRROIAVgw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:27:35 2025 by rpki-client