Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File:                     7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier:          7K+F/pw4yh1GbDhzmQMlFf8Kj08DnqSLM3L3Up2/fVk=
Subject key identifier:   4C:F2:45:2C:9D:B9:E0:DF:09:9B:6D:98:3B:B7:E1:2A:6B:AE:D3:A6
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer:       /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial:       0199FFC8B0C3A191FC7B74C4D6048F95F325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number:          0CD8
Signing time:             Mon 20 Oct 2025 04:02:46 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:46 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:46 +0000
Files and hashes:         1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: 4Yp2hKzBx8rKRWq92le2SkSyoxgtO/+e2YGxund8kyM=)
                          2: YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa (hash: at6X5FWtDhfqKory2gk30h0rP9dNBcyxgRSPjmnHkpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:b0:c3:a1:91:fc:7b:74:c4:d6:04:8f:95:f3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
        Validity
            Not Before: Oct 20 04:02:46 2025 GMT
            Not After : Oct 21 04:02:46 2025 GMT
        Subject: CN=4cf2452c9db9e0df099b6d983bb7e12a6baed3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:67:ed:dd:fa:52:da:27:37:5b:f3:68:22:
                    72:97:25:cc:11:f9:c9:b6:bf:39:17:08:17:f6:2c:
                    66:bd:85:d8:2e:65:cd:df:50:46:a5:06:2e:12:ee:
                    f9:76:f0:de:15:44:58:c7:90:3b:e9:7e:2e:02:25:
                    32:72:42:d1:6e:46:32:9c:e6:50:e8:cb:97:45:db:
                    f6:28:24:2a:05:5b:ba:c6:89:ee:3d:a2:70:ed:cb:
                    c8:33:2c:c4:14:a5:6b:b9:07:d5:d5:96:36:4e:37:
                    46:b0:18:05:87:de:ea:af:3a:21:94:4f:0c:d8:ac:
                    50:e4:26:98:45:9a:a2:54:74:4e:59:3d:2f:2d:d8:
                    df:1b:f5:42:f6:ba:4c:8c:9c:6c:19:53:29:cd:94:
                    7b:10:d9:e1:6f:c3:c0:30:b2:d7:17:10:d3:e8:bf:
                    94:e1:7e:b6:4a:66:24:d4:bb:a9:43:90:2c:9a:b7:
                    79:b8:57:c3:98:ad:e9:e8:b9:20:6f:46:6e:54:45:
                    ab:eb:9d:0a:04:1e:d4:27:6f:f2:ef:df:a7:41:57:
                    f0:9a:89:9c:bb:05:47:1c:9d:55:78:93:06:b6:8f:
                    f6:51:0a:a7:3d:78:e0:cd:eb:86:4c:a5:54:da:ae:
                    33:e7:41:94:9b:cf:6e:b9:aa:63:90:6c:f1:ee:65:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F2:45:2C:9D:B9:E0:DF:09:9B:6D:98:3B:B7:E1:2A:6B:AE:D3:A6
            X509v3 Authority Key Identifier:
                keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:20:d7:59:ef:73:c8:c4:bd:28:f9:84:5e:c1:2d:b4:fd:bc:
         6e:02:d0:f9:ea:44:1d:78:9c:06:2a:11:cd:00:30:7f:cc:0c:
         8b:c2:de:17:d0:11:2e:bf:c0:51:e7:a9:81:8e:07:b8:9a:a7:
         97:b1:1f:8a:8e:46:a1:c1:1f:75:a4:37:ef:6c:4d:c1:0f:81:
         cd:ad:39:35:e8:47:56:bb:ed:67:02:29:18:2b:ae:2b:b2:76:
         15:53:df:c2:f0:a7:d5:9f:d0:b0:41:3b:e7:42:29:f2:b2:47:
         94:c1:2f:05:b0:b2:fc:03:ac:5d:9b:a5:fa:74:4d:59:e2:e1:
         b9:bf:ef:d5:59:f7:21:1b:f2:60:b7:8a:36:a0:50:22:6b:02:
         43:ed:8d:84:14:f6:19:7c:13:f9:e9:b1:b1:83:1a:7a:d3:bf:
         eb:8b:2f:70:94:54:e8:ab:c9:6d:73:50:09:4f:9d:03:d6:7c:
         2b:8a:9b:8c:1f:d0:59:37:7d:76:3e:ea:78:84:ed:af:24:00:
         84:d4:37:52:d9:89:7d:dc:cd:b6:6b:21:d1:76:50:49:e5:73:
         3a:0c:11:5f:74:b5:0d:6c:d0:69:82:dd:b7:74:b2:ef:59:40:
         73:94:df:07:3d:77:79:aa:c9:de:fc:05:85:aa:ab:bf:45:40:
         72:80:e3:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yLDDoZH8e3TE1gSPlfMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmI1M2NhMzA3MDQzNDI3ZWY0ZWFjODljNzdjMWJhMTNm
NmYwMmUwHhcNMjUxMDIwMDQwMjQ2WhcNMjUxMDIxMDQwMjQ2WjAzMTEwLwYDVQQD
Eyg0Y2YyNDUyYzlkYjllMGRmMDk5YjZkOTgzYmI3ZTEyYTZiYWVkM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva9n7d36UtonN1vzaCJylyXMEfnJ
tr85FwgX9ixmvYXYLmXN31BGpQYuEu75dvDeFURYx5A76X4uAiUyckLRbkYynOZQ
6MuXRdv2KCQqBVu6xonuPaJw7cvIMyzEFKVruQfV1ZY2TjdGsBgFh97qrzohlE8M
2KxQ5CaYRZqiVHROWT0vLdjfG/VC9rpMjJxsGVMpzZR7ENnhb8PAMLLXFxDT6L+U
4X62SmYk1LupQ5Asmrd5uFfDmK3p6Lkgb0ZuVEWr650KBB7UJ2/y79+nQVfwmomc
uwVHHJ1VeJMGto/2UQqnPXjgzeuGTKVU2q4z50GUm89uuapjkGzx7mX95QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzyRSydueDfCZttmDu34SprrtOmMB8GA1UdIwQY
MBaAFO1rU8owcENCfvTqyJx3wboT9vAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hMjhkZGUtOGVkNi00ZDNkLTliYTAt
NmQ2MTVmM2UxNGY1LzEvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hMjhkZGUtOGVkNi00ZDNkLTliYTAtNmQ2MTVmM2UxNGY1
LzEvN1d0VHlqQndRMEotOU9ySW5IZkJ1aFAyOEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByDXWe9z
yMS9KPmEXsEttP28bgLQ+epEHXicBioRzQAwf8wMi8LeF9ARLr/AUeepgY4HuJqn
l7Efio5GocEfdaQ372xNwQ+Bza05NehHVrvtZwIpGCuuK7J2FVPfwvCn1Z/QsEE7
50Ip8rJHlMEvBbCy/AOsXZul+nRNWeLhub/v1Vn3IRvyYLeKNqBQImsCQ+2NhBT2
GXwT+emxsYMaetO/64svcJRU6KvJbXNQCU+dA9Z8K4qbjB/QWTd9dj7qeITtryQA
hNQ3UtmJfdzNtmsh0XZQSeVzOgwRX3S1DWzQaYLdt3Sy71lAc5TfBz13earJ3vwF
haqrv0VAcoDjBw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:20:16 2025 by rpki-client