Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File:                     4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier:          pSFoWpO+mjHSZ/x2w4xBfE9DELmar+xSr6L3ezvSE8E=
Subject key identifier:   28:C2:04:C0:9F:25:DC:E6:E7:B8:EC:23:93:83:46:E2:E5:D2:A1:D4
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer:       /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial:       0199FC8F718514A997B0285E89D4D0B612F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number:          033D
Signing time:             Sun 19 Oct 2025 13:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:23 +0000
Files and hashes:         1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: Biue0E4+JwAuJLA809Cyu3mJw+kaobCCLm9vP7E2ILM=)
                          2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:71:85:14:a9:97:b0:28:5e:89:d4:d0:b6:12:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
        Validity
            Not Before: Oct 19 13:01:23 2025 GMT
            Not After : Oct 20 13:01:23 2025 GMT
        Subject: CN=28c204c09f25dce6e7b8ec23938346e2e5d2a1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6f:35:6a:13:8b:6e:1e:d5:2a:b5:16:c1:3b:
                    82:ee:c8:66:2d:f8:8b:d8:8d:6b:a6:c0:61:c6:dc:
                    b7:12:55:94:d2:6c:02:fc:3d:8f:50:c0:c3:0d:98:
                    41:fc:c3:91:a4:6e:b2:33:ba:3d:9a:f0:15:17:c8:
                    68:f1:16:fb:99:62:12:f1:05:aa:15:73:93:49:5b:
                    60:ec:9f:44:3d:c1:a9:47:9a:81:b8:64:9e:dd:93:
                    9b:1a:e8:ed:2e:e6:2c:68:bd:f7:f9:65:56:39:41:
                    ce:49:5b:9c:c7:1f:7e:6a:88:46:e8:7f:45:1f:ba:
                    32:ba:6b:ea:7e:a0:c7:3d:f6:fc:bc:54:e5:00:46:
                    bd:a6:53:74:0b:11:4f:f8:2f:ee:d6:51:be:89:a1:
                    44:2b:6d:a2:f6:a7:1e:44:59:e0:5f:a9:ec:5e:5c:
                    29:31:ac:e1:75:63:dd:d4:f0:68:43:d7:fc:78:cb:
                    5c:7b:2c:74:99:06:56:e1:4b:78:09:88:36:40:4e:
                    d5:da:52:8d:78:31:8d:86:2e:aa:ab:2d:81:17:4b:
                    95:4c:9c:2c:74:34:be:6f:6b:97:c4:f5:b0:a8:86:
                    b3:c3:e4:79:a1:b4:90:62:d4:41:27:64:10:78:cf:
                    8b:fe:6f:5f:35:3c:84:69:13:35:f0:90:b6:7c:6f:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C2:04:C0:9F:25:DC:E6:E7:B8:EC:23:93:83:46:E2:E5:D2:A1:D4
            X509v3 Authority Key Identifier:
                keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d0:f5:c7:54:fc:f1:42:e6:45:8f:35:77:a0:0a:27:b4:9e:
         f8:9b:e4:8c:a8:3c:a6:c5:ca:d0:7b:ce:f7:c6:9e:19:97:e7:
         32:67:15:95:59:98:34:e7:ca:05:ab:f2:0f:3f:8b:f8:70:13:
         62:14:b5:20:31:f2:1c:c0:0b:61:cf:4b:75:10:18:dc:d6:bc:
         da:d3:87:a1:e7:2b:4c:7b:85:8f:99:11:85:92:79:96:88:7e:
         9f:bc:2e:8a:47:56:29:6c:63:4d:0b:05:7e:24:db:28:da:ee:
         00:f9:0d:48:09:be:25:84:84:88:ad:6c:3f:99:bb:7b:89:97:
         78:ac:97:f9:6e:8d:51:08:31:85:b7:ba:0e:49:fb:5b:12:e6:
         4f:64:37:db:f6:dd:26:60:f4:a1:6c:b6:72:af:8f:1e:cc:9e:
         d7:17:5f:4f:bb:90:60:93:19:b7:c3:b7:f4:74:30:80:2a:00:
         94:a7:9d:84:79:8a:28:9e:54:e4:b1:7c:33:f0:4c:80:e8:69:
         4d:2f:52:08:5b:f8:f5:5a:e3:aa:0d:9b:21:f4:2c:f2:24:92:
         4f:e1:6e:96:a2:14:80:d0:f0:83:ec:bb:b5:74:29:12:62:2e:
         a6:6a:64:a4:74:dc:37:1d:c7:f9:90:e3:26:c1:f0:d7:c0:e6:
         23:15:c4:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3GFFKmXsCheidTQthL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTdhZjczYzA3YTU3ODJhZjI0ODM0ZWJkZGI3NGE5Yzg5
N2M0ZmYwHhcNMjUxMDE5MTMwMTIzWhcNMjUxMDIwMTMwMTIzWjAzMTEwLwYDVQQD
EygyOGMyMDRjMDlmMjVkY2U2ZTdiOGVjMjM5MzgzNDZlMmU1ZDJhMWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG81ahOLbh7VKrUWwTuC7shmLfiL
2I1rpsBhxty3ElWU0mwC/D2PUMDDDZhB/MORpG6yM7o9mvAVF8ho8Rb7mWIS8QWq
FXOTSVtg7J9EPcGpR5qBuGSe3ZObGujtLuYsaL33+WVWOUHOSVucxx9+aohG6H9F
H7oyumvqfqDHPfb8vFTlAEa9plN0CxFP+C/u1lG+iaFEK22i9qceRFngX6nsXlwp
MazhdWPd1PBoQ9f8eMtceyx0mQZW4Ut4CYg2QE7V2lKNeDGNhi6qqy2BF0uVTJws
dDS+b2uXxPWwqIazw+R5obSQYtRBJ2QQeM+L/m9fNTyEaRM18JC2fG+8fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjCBMCfJdzm57jsI5ODRuLl0qHUMB8GA1UdIwQY
MBaAFOLnr3PAeleCrySDTr3bdKnIl8T/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDkt
MDk4ODZjMGM0NmEwLzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82NTM5OGEtMGZhYS00YjY0LWJkMDktMDk4ODZjMGM0NmEw
LzEvNHVldmM4QjZWNEt2SklOT3ZkdDBxY2lYeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtD1x1T8
8ULmRY81d6AKJ7Se+JvkjKg8psXK0HvO98aeGZfnMmcVlVmYNOfKBavyDz+L+HAT
YhS1IDHyHMALYc9LdRAY3Na82tOHoecrTHuFj5kRhZJ5loh+n7wuikdWKWxjTQsF
fiTbKNruAPkNSAm+JYSEiK1sP5m7e4mXeKyX+W6NUQgxhbe6Dkn7WxLmT2Q32/bd
JmD0oWy2cq+PHsye1xdfT7uQYJMZt8O39HQwgCoAlKedhHmKKJ5U5LF8M/BMgOhp
TS9SCFv49Vrjqg2bIfQs8iSST+FulqIUgNDwg+y7tXQpEmIupmpkpHTcNx3H+ZDj
JsHw18DmIxXEVw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:05 2025 by rpki-client