Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
File:                     rl8yMzCqPoI4TGOgFadR5U7chVI.mft (raw, json)
Hash identifier:          wnC00FN956GdvKiQzvUEltigCt2SVRLUm5zs45nFbwE=
Subject key identifier:   31:74:C3:05:43:17:1E:1E:63:7A:35:B5:51:22:06:DA:A5:3B:14:DA
Authority key identifier: AE:5F:32:33:30:AA:3E:82:38:4C:63:A0:15:A7:51:E5:4E:DC:85:52
Certificate issuer:       /CN=ae5f323330aa3e82384c63a015a751e54edc8552
Certificate serial:       0199FBEB549A50A3876471C0843AAC432FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
Manifest number:          C6
Signing time:             Sun 19 Oct 2025 10:02:07 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:07 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:07 +0000
Files and hashes:         1: rl8yMzCqPoI4TGOgFadR5U7chVI.crl (hash: aaZjGTVMXP5iUxLikqUO7kS08NhHOQvJhN8k6LbL5TQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:54:9a:50:a3:87:64:71:c0:84:3a:ac:43:2f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae5f323330aa3e82384c63a015a751e54edc8552
        Validity
            Not Before: Oct 19 10:02:07 2025 GMT
            Not After : Oct 20 10:02:07 2025 GMT
        Subject: CN=3174c30543171e1e637a35b5512206daa53b14da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:4f:3a:1c:8a:a4:83:ea:a8:a4:27:3c:06:
                    7a:5d:43:51:85:5a:eb:7c:e6:9a:a3:a5:18:d9:23:
                    06:d4:09:7e:68:7d:c4:d9:c2:76:36:29:f6:6e:83:
                    85:ec:bb:da:e7:88:7e:8f:8b:57:44:ab:41:c1:5f:
                    14:2d:49:f1:f3:e9:b5:1f:82:3c:97:50:b0:ed:8c:
                    16:fd:b3:05:ec:c0:8b:df:8f:4a:23:fb:70:74:ba:
                    9e:4d:42:26:dd:52:75:18:4d:ad:4d:56:78:ba:1d:
                    6a:90:74:f3:cc:6e:45:5d:0a:f2:79:d2:0f:d8:cf:
                    ba:2b:50:1f:06:e7:77:db:4f:aa:6d:89:50:dd:1b:
                    f0:66:3d:8f:ca:30:a7:79:fe:f0:b5:30:9b:20:e5:
                    bf:e0:88:fb:b8:8d:f2:2e:5a:5b:7c:0d:ed:b0:cd:
                    08:f5:60:95:f9:bb:82:f3:d6:21:51:b3:51:b5:9c:
                    7d:41:88:48:db:48:f0:e4:fc:76:fd:4c:54:bd:7d:
                    50:9b:6a:ae:03:a2:47:9f:fd:1b:0b:61:02:b6:29:
                    87:3b:9d:5c:32:49:8c:97:ae:06:15:0c:ad:cf:93:
                    23:29:0a:4c:d9:9c:c3:69:2c:24:1b:c0:52:61:9d:
                    93:2b:81:f8:5d:9a:4c:20:da:9a:3b:23:23:54:fa:
                    1f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:74:C3:05:43:17:1E:1E:63:7A:35:B5:51:22:06:DA:A5:3B:14:DA
            X509v3 Authority Key Identifier:
                keyid:AE:5F:32:33:30:AA:3E:82:38:4C:63:A0:15:A7:51:E5:4E:DC:85:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:df:f6:89:ff:09:b6:3b:12:f5:93:04:d7:f5:01:dc:46:a5:
         7b:06:f0:dd:3d:b8:b3:9b:0f:f4:7e:f9:e9:4d:a1:d5:d0:b9:
         0c:d9:16:96:3b:9f:d1:af:18:81:d2:c3:fe:79:26:6d:c1:bc:
         3a:22:cc:5c:30:3c:0a:ee:68:b5:06:ab:5d:2b:20:b3:32:e2:
         41:a4:0c:ac:85:94:09:1d:92:ac:41:d0:2a:10:2a:a4:12:6e:
         52:de:37:3c:d1:3a:50:13:50:15:b7:13:04:c3:fb:d2:f4:2d:
         95:30:58:d6:e1:e0:de:03:6c:ff:be:3b:11:2d:16:a9:86:d3:
         7c:ab:a1:15:e1:95:36:3b:13:10:17:d0:3e:07:e2:44:b9:a2:
         38:8d:9f:5f:0c:9d:02:bb:18:c2:21:c9:a2:6e:e3:77:4a:a0:
         6e:86:c5:25:b1:af:ef:ab:fb:a2:64:57:89:37:f6:6d:8d:93:
         a6:77:ef:36:ea:bf:ed:ec:82:10:aa:0c:47:d3:37:49:70:96:
         22:62:de:5f:91:44:c0:ee:29:8c:88:c6:31:05:2f:00:14:27:
         e6:3b:52:8f:e5:ec:56:0c:32:43:73:4a:c4:f5:4d:7f:47:ec:
         34:a5:4b:a0:42:c9:3c:fe:a2:15:a2:20:04:f3:06:b1:b6:39:
         3a:81:56:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn761SaUKOHZHHAhDqsQy/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNWYzMjMzMzBhYTNlODIzODRjNjNhMDE1YTc1MWU1NGVk
Yzg1NTIwHhcNMjUxMDE5MTAwMjA3WhcNMjUxMDIwMTAwMjA3WjAzMTEwLwYDVQQD
EygzMTc0YzMwNTQzMTcxZTFlNjM3YTM1YjU1MTIyMDZkYWE1M2IxNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLJPOhyKpIPqqKQnPAZ6XUNRhVrr
fOaao6UY2SMG1Al+aH3E2cJ2Nin2boOF7Lva54h+j4tXRKtBwV8ULUnx8+m1H4I8
l1Cw7YwW/bMF7MCL349KI/twdLqeTUIm3VJ1GE2tTVZ4uh1qkHTzzG5FXQryedIP
2M+6K1AfBud320+qbYlQ3RvwZj2PyjCnef7wtTCbIOW/4Ij7uI3yLlpbfA3tsM0I
9WCV+buC89YhUbNRtZx9QYhI20jw5Px2/UxUvX1Qm2quA6JHn/0bC2ECtimHO51c
MkmMl64GFQytz5MjKQpM2ZzDaSwkG8BSYZ2TK4H4XZpMINqaOyMjVPof+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDF0wwVDFx4eY3o1tVEiBtqlOxTaMB8GA1UdIwQY
MBaAFK5fMjMwqj6COExjoBWnUeVO3IVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmw4eU16Q3FQb0k0VEdPZ0ZhZFI1VTdjaFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMTY3NDAtYTJhNS00YjJjLWIyZGYt
MDc4NjcyZGEyNzk0LzEvcmw4eU16Q3FQb0k0VEdPZ0ZhZFI1VTdjaFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mMTY3NDAtYTJhNS00YjJjLWIyZGYtMDc4NjcyZGEyNzk0
LzEvcmw4eU16Q3FQb0k0VEdPZ0ZhZFI1VTdjaFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqt/2if8J
tjsS9ZME1/UB3Ealewbw3T24s5sP9H756U2h1dC5DNkWljuf0a8YgdLD/nkmbcG8
OiLMXDA8Cu5otQarXSsgszLiQaQMrIWUCR2SrEHQKhAqpBJuUt43PNE6UBNQFbcT
BMP70vQtlTBY1uHg3gNs/747ES0WqYbTfKuhFeGVNjsTEBfQPgfiRLmiOI2fXwyd
ArsYwiHJom7jd0qgbobFJbGv76v7omRXiTf2bY2TpnfvNuq/7eyCEKoMR9M3SXCW
ImLeX5FEwO4pjIjGMQUvABQn5jtSj+XsVgwyQ3NKxPVNf0fsNKVLoELJPP6iFaIg
BPMGsbY5OoFWmg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:07 2025 by rpki-client