Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File:                     aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier:          DvUu9I8E9/IAYj8v0VSxBhMdsGABPFhyx7s3SRG2h0E=
Subject key identifier:   E3:A6:48:84:18:72:EC:38:60:C2:57:C3:FA:8E:35:46:62:F4:6B:66
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer:       /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial:       0199FAD79F29CF810FC2E945133C53E1E85D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number:          1674
Signing time:             Sun 19 Oct 2025 05:00:58 +0000
Manifest this update:     Sun 19 Oct 2025 05:00:58 +0000
Manifest next update:     Mon 20 Oct 2025 05:00:58 +0000
Files and hashes:         1: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: jedWvJLmBUN22k/7yv1OnSAuT8OwiR4vnSXPZL75e5w=)
                          2: lwjpFv3HgemxBJqe9gi4ArggD88.roa (hash: 7p7Zr7Ya8mUheMjW/Ww4B8S5/Cc2CZ+iZfLnhmKVtRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:9f:29:cf:81:0f:c2:e9:45:13:3c:53:e1:e8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
        Validity
            Not Before: Oct 19 05:00:58 2025 GMT
            Not After : Oct 20 05:00:58 2025 GMT
        Subject: CN=e3a648841872ec3860c257c3fa8e354662f46b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ad:00:ff:1e:13:5c:4b:63:c3:71:bf:11:97:
                    70:d7:1c:29:73:4b:5f:cb:44:81:7d:54:b8:7f:69:
                    a2:ce:0e:93:24:a4:18:b2:8f:73:cd:88:eb:83:78:
                    26:e5:cc:f6:a2:c0:bd:f9:c1:b5:0a:a8:05:4c:b5:
                    18:45:a7:9e:26:47:52:04:b2:dc:b1:9e:27:bd:bd:
                    71:bc:ef:01:73:bf:f8:77:f0:b9:f5:38:fd:0e:31:
                    b6:35:7a:ac:85:4e:a1:08:16:d4:20:a2:15:8d:59:
                    0e:a7:07:d7:e1:db:e1:61:cf:4c:42:39:c9:b4:99:
                    27:e2:87:23:77:20:21:22:12:00:eb:28:8f:53:de:
                    41:f1:4c:8d:c1:ca:57:dc:f4:b5:c8:7d:3c:da:0a:
                    b1:11:8a:66:1d:d0:aa:99:da:cb:dd:6d:67:45:fb:
                    37:ef:13:d0:af:ea:7d:b9:68:68:81:56:20:f0:c2:
                    e8:54:c6:a6:f2:44:4b:75:ab:ef:dd:ee:2f:7f:b9:
                    fb:90:71:ef:0c:7c:bd:66:5e:65:36:33:c2:c3:09:
                    57:ed:09:0d:32:66:fc:10:9d:ec:b6:9e:18:d3:76:
                    3d:2d:56:9b:0a:ce:93:9a:e9:d2:fb:9b:e8:2e:bc:
                    80:ea:23:34:8c:81:b5:08:38:43:46:a4:48:a8:51:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:48:84:18:72:EC:38:60:C2:57:C3:FA:8E:35:46:62:F4:6B:66
            X509v3 Authority Key Identifier:
                keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:75:fd:c9:55:8b:d9:98:9a:a1:a9:3c:35:77:8b:f7:be:c6:
         f4:29:66:8f:6f:e6:7b:3b:ba:70:60:c8:ba:77:94:b7:b6:b9:
         8d:6f:e8:80:38:79:22:06:ce:81:c9:8b:48:08:f9:bb:1e:3b:
         9e:92:7c:68:7d:4b:b7:a6:04:60:5e:10:6a:e4:63:9a:5a:7a:
         79:73:27:91:21:55:58:ee:3b:46:98:7e:b8:78:2b:2b:cf:ca:
         0a:97:e3:0d:93:3a:3e:02:f5:29:7d:bc:7d:65:28:a2:44:eb:
         e3:51:3f:c6:64:cc:74:21:42:51:3a:9c:f4:1f:22:42:38:c6:
         77:cd:cd:a5:b6:61:85:db:d1:b2:22:69:41:06:25:22:74:8c:
         43:1d:96:da:cc:e4:12:6d:54:98:b2:29:19:fe:86:06:a0:51:
         dd:1e:7e:4f:e8:ba:95:f6:64:10:0c:2b:c8:ff:78:6e:d8:ba:
         f4:c3:0c:9e:6d:f6:68:c6:68:c6:ca:a2:63:f6:bf:70:fa:c3:
         26:b9:09:7e:a9:59:7c:16:2d:5e:03:6a:ed:b2:5b:bb:6d:e5:
         37:25:dc:74:56:9c:5a:9d:45:b2:66:fa:fc:50:d5:aa:ed:d9:
         62:8f:ca:e7:f6:e0:bc:14:c7:ea:7b:e3:2c:a5:d5:0e:23:67:
         68:ba:7a:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6158pz4EPwulFEzxT4ehdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4N2Q5YjU2MmJhNDcyNjE4ZjkzOThlMjY1Y2EwZTcxMDhm
Njg3YTMwHhcNMjUxMDE5MDUwMDU4WhcNMjUxMDIwMDUwMDU4WjAzMTEwLwYDVQQD
EyhlM2E2NDg4NDE4NzJlYzM4NjBjMjU3YzNmYThlMzU0NjYyZjQ2YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7K0A/x4TXEtjw3G/EZdw1xwpc0tf
y0SBfVS4f2mizg6TJKQYso9zzYjrg3gm5cz2osC9+cG1CqgFTLUYRaeeJkdSBLLc
sZ4nvb1xvO8Bc7/4d/C59Tj9DjG2NXqshU6hCBbUIKIVjVkOpwfX4dvhYc9MQjnJ
tJkn4ocjdyAhIhIA6yiPU95B8UyNwcpX3PS1yH082gqxEYpmHdCqmdrL3W1nRfs3
7xPQr+p9uWhogVYg8MLoVMam8kRLdavv3e4vf7n7kHHvDHy9Zl5lNjPCwwlX7QkN
Mmb8EJ3stp4Y03Y9LVabCs6TmunS+5voLryA6iM0jIG1CDhDRqRIqFGWvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOmSIQYcuw4YMJXw/qONUZi9GtmMB8GA1UdIwQY
MBaAFGh9m1YrpHJhj5OY4mXKDnEI9oejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQt
NjA1ZDEzNTEzNmY3LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODljMWYtOGRjYi00MzhiLThhZmQtNjA1ZDEzNTEzNmY3
LzEvYUgyYlZpdWtjbUdQazVqaVpjb09jUWoyaDZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3X9yVWL
2Ziaoak8NXeL977G9Clmj2/mezu6cGDIuneUt7a5jW/ogDh5IgbOgcmLSAj5ux47
npJ8aH1Lt6YEYF4QauRjmlp6eXMnkSFVWO47Rph+uHgrK8/KCpfjDZM6PgL1KX28
fWUookTr41E/xmTMdCFCUTqc9B8iQjjGd83NpbZhhdvRsiJpQQYlInSMQx2W2szk
Em1UmLIpGf6GBqBR3R5+T+i6lfZkEAwryP94bti69MMMnm32aMZoxsqiY/a/cPrD
JrkJfqlZfBYtXgNq7bJbu23lNyXcdFacWp1Fsmb6/FDVqu3ZYo/K5/bgvBTH6nvj
LKXVDiNnaLp6hg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:13 2025 by rpki-client