Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
File:                     V0zsR2DtovCf62939yFCvmmbuMM.mft (raw, json)
Hash identifier:          FJFNA+0JtN/8zD4FS3Su/QonQLzdlGWKF2GyvJePYC8=
Subject key identifier:   34:90:3A:14:B1:78:41:16:9E:E3:23:FD:A0:49:39:98:7B:71:7E:AD
Authority key identifier: 57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3
Certificate issuer:       /CN=574cec4760eda2f09feb6f77f72142be699bb8c3
Certificate serial:       0199FAD7E1801F2A0AEE085CEB707C9A4FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
Manifest number:          116B
Signing time:             Sun 19 Oct 2025 05:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:15 +0000
Files and hashes:         1: V0zsR2DtovCf62939yFCvmmbuMM.crl (hash: 6xWtp8DJJCwuYliT+tcLD87kb28PyOjuBmC9v0AtlQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:e1:80:1f:2a:0a:ee:08:5c:eb:70:7c:9a:4f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574cec4760eda2f09feb6f77f72142be699bb8c3
        Validity
            Not Before: Oct 19 05:01:15 2025 GMT
            Not After : Oct 20 05:01:15 2025 GMT
        Subject: CN=34903a14b17841169ee323fda04939987b717ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:21:c4:e7:47:20:4e:74:6b:96:d1:7b:f6:
                    42:50:be:db:d0:c6:be:ee:a0:67:81:6c:c7:a1:29:
                    5e:07:ea:ca:84:57:ca:e8:d9:a0:ee:44:89:76:56:
                    fe:0e:50:08:55:ec:d3:e0:a0:11:8d:c3:48:d5:76:
                    fa:f7:24:f0:46:3e:0c:61:21:ec:9d:64:8b:96:21:
                    24:aa:4d:56:d0:41:9f:17:c2:a0:ef:9c:2f:9e:f0:
                    2e:d0:86:a9:8a:34:dc:99:8e:2e:39:1a:6c:1a:aa:
                    9b:0f:d2:73:50:51:1e:d9:06:b0:b9:93:9f:bc:cd:
                    b6:ec:ee:69:e8:d2:ac:9d:41:6d:f8:c5:64:2b:e2:
                    1a:f0:7a:56:42:fa:c5:2e:4e:3a:02:65:ca:4f:b3:
                    e1:3e:0b:49:95:2b:f0:6c:d3:6d:fc:43:35:b3:ca:
                    4f:fe:e5:aa:13:e5:cd:aa:23:49:13:bf:52:44:5d:
                    93:76:1d:f6:0f:d4:1a:d2:9f:01:0b:c0:6a:65:53:
                    c8:26:92:f6:60:3a:f2:c5:a9:0a:59:97:58:cb:39:
                    00:6d:16:0c:f2:03:f0:60:17:c6:3b:f1:73:68:0c:
                    e9:7a:88:33:ff:58:a9:5e:c6:2c:84:22:d3:93:85:
                    2e:a5:8a:c7:af:79:dd:ed:2e:4f:78:d6:d3:69:54:
                    e3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:90:3A:14:B1:78:41:16:9E:E3:23:FD:A0:49:39:98:7B:71:7E:AD
            X509v3 Authority Key Identifier:
                keyid:57:4C:EC:47:60:ED:A2:F0:9F:EB:6F:77:F7:21:42:BE:69:9B:B8:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zsR2DtovCf62939yFCvmmbuMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9571da-efca-41d6-85f3-d6a99934c493/1/V0zsR2DtovCf62939yFCvmmbuMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6f:b8:74:e3:15:ef:21:ea:90:11:4c:bc:12:05:1b:2f:b6:
         54:b8:dc:8b:21:ba:92:6a:d6:29:21:38:2c:4e:92:c2:c1:fa:
         8a:31:e1:f5:75:64:5b:0e:9e:ac:9d:82:43:72:f8:8f:06:57:
         89:68:08:f9:dc:69:0a:b5:3d:6a:cf:63:ad:25:6c:2e:39:b7:
         46:01:2f:9e:1a:53:d3:8e:1d:83:72:15:de:8f:0a:fe:19:2d:
         64:b6:91:ac:58:9c:b0:bf:0c:cf:72:4c:a2:71:80:69:b4:d8:
         c4:14:27:96:b1:85:ec:8a:fd:84:74:39:93:6a:6c:08:82:ae:
         e9:30:db:21:91:cf:14:db:1d:d7:cb:e0:cb:53:24:dc:7f:b7:
         d5:51:fb:26:47:fb:ff:de:37:af:d9:49:7d:12:6e:26:6a:f5:
         a7:12:9a:78:18:27:84:67:59:62:da:57:a8:9f:e1:b2:08:0d:
         30:81:1b:ae:67:46:29:6d:49:78:74:1a:87:c1:61:24:f2:9d:
         e7:4d:39:b9:35:b6:b4:f1:01:95:f1:4e:28:5d:27:75:22:f2:
         d9:2c:c5:6d:87:d8:41:6a:60:a4:c4:26:58:b4:74:f4:6d:93:
         ab:16:46:4f:1c:f1:ef:9f:e7:77:72:fc:6e:54:f2:de:35:09:
         97:cd:e3:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn61+GAHyoK7ghc63B8mk+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NGNlYzQ3NjBlZGEyZjA5ZmViNmY3N2Y3MjE0MmJlNjk5
YmI4YzMwHhcNMjUxMDE5MDUwMTE1WhcNMjUxMDIwMDUwMTE1WjAzMTEwLwYDVQQD
EygzNDkwM2ExNGIxNzg0MTE2OWVlMzIzZmRhMDQ5Mzk5ODdiNzE3ZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowQhxOdHIE50a5bRe/ZCUL7b0Ma+
7qBngWzHoSleB+rKhFfK6Nmg7kSJdlb+DlAIVezT4KARjcNI1Xb69yTwRj4MYSHs
nWSLliEkqk1W0EGfF8Kg75wvnvAu0IapijTcmY4uORpsGqqbD9JzUFEe2QawuZOf
vM227O5p6NKsnUFt+MVkK+Ia8HpWQvrFLk46AmXKT7PhPgtJlSvwbNNt/EM1s8pP
/uWqE+XNqiNJE79SRF2Tdh32D9Qa0p8BC8BqZVPIJpL2YDryxakKWZdYyzkAbRYM
8gPwYBfGO/FzaAzpeogz/1ipXsYshCLTk4UupYrHr3nd7S5PeNbTaVTjMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSQOhSxeEEWnuMj/aBJOZh7cX6tMB8GA1UdIwQY
MBaAFFdM7Edg7aLwn+tvd/chQr5pm7jDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMt
ZDZhOTk5MzRjNDkzLzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC85NTcxZGEtZWZjYS00MWQ2LTg1ZjMtZDZhOTk5MzRjNDkz
LzEvVjB6c1IyRHRvdkNmNjI5Mzl5RkN2bW1idU1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALG+4dOMV
7yHqkBFMvBIFGy+2VLjciyG6kmrWKSE4LE6SwsH6ijHh9XVkWw6erJ2CQ3L4jwZX
iWgI+dxpCrU9as9jrSVsLjm3RgEvnhpT044dg3IV3o8K/hktZLaRrFicsL8Mz3JM
onGAabTYxBQnlrGF7Ir9hHQ5k2psCIKu6TDbIZHPFNsd18vgy1Mk3H+31VH7Jkf7
/943r9lJfRJuJmr1pxKaeBgnhGdZYtpXqJ/hsggNMIEbrmdGKW1JeHQah8FhJPKd
5005uTW2tPEBlfFOKF0ndSLy2SzFbYfYQWpgpMQmWLR09G2TqxZGTxzx75/nd3L8
blTy3jUJl83jbg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:31 2025 by rpki-client