Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File:                     c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier:          y2fAweUMmKaxfX2RNb+XhqDY/J1uMR1pJ5injnN2dXY=
Subject key identifier:   A8:71:34:A7:92:A0:F4:EB:66:9A:0D:FD:0F:A2:3C:EE:44:A6:96:53
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer:       /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial:       0199FBEAD3EE75AE23D336AFE12B2819D6AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number:          10A9
Signing time:             Sun 19 Oct 2025 10:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:34 +0000
Files and hashes:         1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: JvffVPVAT+9ys6rG9BenlqtTZFBwCNi58Z2ZsQvrfv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:d3:ee:75:ae:23:d3:36:af:e1:2b:28:19:d6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
        Validity
            Not Before: Oct 19 10:01:34 2025 GMT
            Not After : Oct 20 10:01:34 2025 GMT
        Subject: CN=a87134a792a0f4eb669a0dfd0fa23cee44a69653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b8:a2:7c:70:2b:e7:1b:23:91:c2:cf:4e:2b:
                    c6:31:99:17:ce:65:c4:1d:48:18:e5:32:30:25:9c:
                    df:f0:92:57:d6:c0:2d:11:7b:ec:8c:a1:56:41:83:
                    d8:78:2c:91:8d:1e:03:98:b6:da:78:1d:4f:ac:18:
                    b1:ab:40:8d:f9:45:98:86:60:66:44:6c:22:5b:8c:
                    b5:4b:43:25:43:4d:67:0a:98:81:ee:e4:97:07:cf:
                    cc:d0:d1:b8:2a:0a:60:56:5c:7c:80:98:82:86:1c:
                    bc:a8:11:06:95:b9:25:f7:fc:69:97:52:25:18:12:
                    17:76:9d:9b:af:95:3d:b3:7d:f9:7b:9f:0c:ed:bd:
                    27:d0:79:51:a9:b9:11:64:ce:d9:5f:65:df:b6:fb:
                    5e:be:ce:f6:2f:4f:3b:a0:84:27:3d:e4:47:56:38:
                    f6:20:84:47:d4:7e:ab:4d:b2:66:cc:8f:62:c8:76:
                    67:e3:e9:98:df:02:ba:51:8c:c8:eb:77:1c:00:72:
                    2e:0e:1d:22:99:72:a5:60:5b:37:43:8e:a3:99:3d:
                    61:95:ef:8c:65:8d:ba:c8:ee:45:ef:81:34:9c:df:
                    4a:84:a4:2b:ea:97:38:40:0a:8b:44:f8:f4:bb:4f:
                    69:a0:b1:bc:a1:e4:92:8e:7e:6e:a3:28:cc:9a:5f:
                    37:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:71:34:A7:92:A0:F4:EB:66:9A:0D:FD:0F:A2:3C:EE:44:A6:96:53
            X509v3 Authority Key Identifier:
                keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:c2:20:53:9c:d0:e4:a4:47:61:c6:93:fc:81:cb:26:3c:
         55:71:78:07:1e:4c:e3:e8:f4:fb:2e:79:b9:20:99:62:b0:6f:
         0e:1b:51:ed:ed:7f:59:75:32:bb:19:ff:ea:b1:7c:29:09:3d:
         b5:dc:34:16:a3:00:8e:c5:80:fc:f9:55:13:57:10:73:9e:12:
         e7:f5:fe:56:69:c5:ba:53:ac:c2:c0:30:2b:5c:d2:3f:b0:fa:
         5b:16:f2:21:97:d1:f8:45:74:6f:51:c3:dc:6d:ef:a3:fd:38:
         9e:95:86:64:b8:da:d6:ad:19:c9:d7:a1:e7:5e:11:f8:6d:6b:
         bd:50:8e:5b:3e:96:4b:d9:c7:d3:77:3a:21:3d:ff:7d:e6:db:
         f2:57:45:8a:95:9b:de:e7:b4:f1:00:fc:17:88:e8:35:18:12:
         a7:1f:b3:9f:68:90:a0:d8:af:3b:52:ab:93:8e:b1:a5:f3:78:
         d9:1c:7b:28:db:4b:90:59:64:18:19:8e:86:60:ea:59:63:88:
         37:47:b7:9c:23:72:4f:72:05:a8:c0:b8:d4:a1:4c:bf:9c:b7:
         c1:2d:c4:7b:29:ce:5d:42:0f:3d:af:de:75:9c:02:1b:d3:8a:
         52:62:ae:43:e8:f3:62:1a:a6:f5:49:cd:b2:4c:8f:43:b0:b4:
         40:b7:26:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tPuda4j0zav4SsoGdaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYWRlNmI2MmEzMjdhY2M0MDNmZWVjM2UxYWIxY2I2ZGUy
ZDVlMGMwHhcNMjUxMDE5MTAwMTM0WhcNMjUxMDIwMTAwMTM0WjAzMTEwLwYDVQQD
EyhhODcxMzRhNzkyYTBmNGViNjY5YTBkZmQwZmEyM2NlZTQ0YTY5NjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLiifHAr5xsjkcLPTivGMZkXzmXE
HUgY5TIwJZzf8JJX1sAtEXvsjKFWQYPYeCyRjR4DmLbaeB1PrBixq0CN+UWYhmBm
RGwiW4y1S0MlQ01nCpiB7uSXB8/M0NG4KgpgVlx8gJiChhy8qBEGlbkl9/xpl1Il
GBIXdp2br5U9s335e58M7b0n0HlRqbkRZM7ZX2Xftvtevs72L087oIQnPeRHVjj2
IIRH1H6rTbJmzI9iyHZn4+mY3wK6UYzI63ccAHIuDh0imXKlYFs3Q46jmT1hle+M
ZY26yO5F74E0nN9KhKQr6pc4QAqLRPj0u09poLG8oeSSjn5uoyjMml830wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhxNKeSoPTrZpoN/Q+iPO5EppZTMB8GA1UdIwQY
MBaAFHOt5rYqMnrMQD/uw+GrHLbeLV4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzYzbXRpb3llc3hBUC03RDRhc2N0dDR0WGd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hMWFlZjQtOWRjYS00YmMxLWE5ZTct
ODc2YjU1NjQzZDA3LzEvYzYzbXRpb3llc3hBUC03RDRhc2N0dDR0WGd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hMWFlZjQtOWRjYS00YmMxLWE5ZTctODc2YjU1NjQzZDA3
LzEvYzYzbXRpb3llc3hBUC03RDRhc2N0dDR0WGd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGrCIFOc
0OSkR2HGk/yByyY8VXF4Bx5M4+j0+y55uSCZYrBvDhtR7e1/WXUyuxn/6rF8KQk9
tdw0FqMAjsWA/PlVE1cQc54S5/X+VmnFulOswsAwK1zSP7D6WxbyIZfR+EV0b1HD
3G3vo/04npWGZLja1q0Zydeh514R+G1rvVCOWz6WS9nH03c6IT3/febb8ldFipWb
3ue08QD8F4joNRgSpx+zn2iQoNivO1Krk46xpfN42Rx7KNtLkFlkGBmOhmDqWWOI
N0e3nCNyT3IFqMC41KFMv5y3wS3EeynOXUIPPa/edZwCG9OKUmKuQ+jzYhqm9UnN
skyPQ7C0QLcmdA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:34 2025 by rpki-client