Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
File:                     8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json)
Hash identifier:          AJbqa39auExu6fezeYcMBnpaDDvAO91PJpqil2JJfYY=
Subject key identifier:   C9:75:E1:99:11:D6:06:E5:E6:1B:05:33:50:BE:A0:1C:1F:6F:17:35
Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Certificate issuer:       /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Certificate serial:       0199FDD9007A9AD85483B78C91B1D3EC71C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
Manifest number:          0E43
Signing time:             Sun 19 Oct 2025 19:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:21 +0000
Files and hashes:         1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: Tjbbbhvye6NGhojourJwtdUNRSNDnoHyjnyGx9bmBUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:00:7a:9a:d8:54:83:b7:8c:91:b1:d3:ec:71:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
        Validity
            Not Before: Oct 19 19:01:21 2025 GMT
            Not After : Oct 20 19:01:21 2025 GMT
        Subject: CN=c975e19911d606e5e61b053350bea01c1f6f1735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:81:60:d0:be:26:19:31:bc:09:b7:b8:54:
                    c7:df:76:56:2c:c4:3a:97:fe:91:76:fe:dd:41:d3:
                    8d:38:ba:39:01:a2:84:1c:72:82:f7:cc:e3:9e:12:
                    21:2a:97:2f:f9:9f:e4:c5:af:ee:4d:b1:4d:94:91:
                    22:01:80:d2:e4:52:76:6c:8c:fa:1b:c1:ea:4f:8d:
                    d6:a7:ed:2b:80:03:a3:84:8b:57:d1:cf:5a:06:80:
                    ab:d1:70:17:0f:5b:be:48:33:14:ee:8f:70:76:b8:
                    29:7d:45:cf:13:3c:62:70:08:a0:53:47:c0:97:01:
                    b9:bd:be:85:66:21:66:97:22:d9:0c:19:a1:6e:d8:
                    3e:6f:d1:8d:3c:fe:57:9e:8d:fa:8e:e7:27:f9:97:
                    cc:c1:19:a9:d8:8d:4a:29:76:38:f2:5f:d1:66:38:
                    05:a9:32:f8:06:73:eb:76:48:6c:c3:d4:8c:6f:39:
                    c2:cd:c6:b6:53:cc:03:88:e4:88:2a:7d:bb:88:ad:
                    47:9b:7e:f8:07:99:52:5c:6b:70:29:e1:e4:8d:97:
                    f4:be:8d:a1:eb:d1:ca:ba:ca:72:0d:0c:cb:92:46:
                    80:1a:b2:b7:9f:5e:13:1f:09:3a:b8:ee:17:29:61:
                    b2:ea:da:58:43:82:60:31:c9:f4:fe:f7:f6:90:0e:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:75:E1:99:11:D6:06:E5:E6:1B:05:33:50:BE:A0:1C:1F:6F:17:35
            X509v3 Authority Key Identifier:
                keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:53:a2:27:fc:6e:d8:5f:d6:39:1e:2b:76:72:6c:8f:c7:ce:
         1b:43:0a:ef:20:18:4d:28:42:0d:06:1e:95:6e:57:19:f3:7c:
         a5:44:f2:dc:be:2a:87:f2:0e:5d:00:6e:a8:5d:61:c2:95:17:
         fa:a0:f5:00:55:5c:cf:51:d2:48:3e:d1:67:9d:1e:e5:da:d4:
         b4:c6:11:8b:8f:4b:98:e1:a9:57:5e:2a:3c:98:8f:69:7b:bc:
         78:b4:7d:d2:f1:a7:39:ca:b1:c7:0b:e8:fc:28:b5:1d:0c:fe:
         d0:b7:4a:3c:8d:1b:63:0a:3c:cb:04:22:e6:a5:30:f1:df:a8:
         ca:b1:11:04:c8:75:e7:d4:e3:be:d8:67:61:0b:d0:03:43:fb:
         1d:ba:f7:84:a9:cd:c1:46:64:9a:30:2a:25:4e:ee:ce:d4:cf:
         51:57:93:1f:f9:db:a1:e9:db:df:86:4c:89:1a:3d:53:93:c1:
         57:5a:8f:57:bf:be:92:80:70:39:38:40:1c:3c:b5:9e:19:44:
         d4:97:a0:2c:3f:25:19:80:04:b7:c9:b2:46:4c:f3:60:ec:8a:
         58:41:0f:74:58:2c:18:c2:d7:3b:b7:c2:62:16:bc:51:1f:83:
         3a:7b:19:d2:ce:f9:d4:40:08:43:47:86:ee:41:8d:2d:1a:c4:
         b8:2f:31:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92QB6mthUg7eMkbHT7HHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGExODcxNWRiY2I0ODUzNjhmYWZlOTliOGFlMmM5ZjA0
YWY3NjMwHhcNMjUxMDE5MTkwMTIxWhcNMjUxMDIwMTkwMTIxWjAzMTEwLwYDVQQD
EyhjOTc1ZTE5OTExZDYwNmU1ZTYxYjA1MzM1MGJlYTAxYzFmNmYxNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjO6BYNC+JhkxvAm3uFTH33ZWLMQ6
l/6Rdv7dQdONOLo5AaKEHHKC98zjnhIhKpcv+Z/kxa/uTbFNlJEiAYDS5FJ2bIz6
G8HqT43Wp+0rgAOjhItX0c9aBoCr0XAXD1u+SDMU7o9wdrgpfUXPEzxicAigU0fA
lwG5vb6FZiFmlyLZDBmhbtg+b9GNPP5Xno36jucn+ZfMwRmp2I1KKXY48l/RZjgF
qTL4BnPrdkhsw9SMbznCzca2U8wDiOSIKn27iK1Hm374B5lSXGtwKeHkjZf0vo2h
69HKuspyDQzLkkaAGrK3n14THwk6uO4XKWGy6tpYQ4JgMcn0/vf2kA6AxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl14ZkR1gbl5hsFM1C+oBwfbxc1MB8GA1UdIwQY
MBaAFPBKGHFdvLSFNo+v6ZuK4snwSvdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTIt
MGY0MTAwN2E0Y2UwLzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wNDJkOGItNjUxMC00N2MyLTk1YTItMGY0MTAwN2E0Y2Uw
LzEvOEVvWWNWMjh0SVUyajZfcG00cml5ZkJLOTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVOiJ/xu
2F/WOR4rdnJsj8fOG0MK7yAYTShCDQYelW5XGfN8pUTy3L4qh/IOXQBuqF1hwpUX
+qD1AFVcz1HSSD7RZ50e5drUtMYRi49LmOGpV14qPJiPaXu8eLR90vGnOcqxxwvo
/Ci1HQz+0LdKPI0bYwo8ywQi5qUw8d+oyrERBMh159TjvthnYQvQA0P7Hbr3hKnN
wUZkmjAqJU7uztTPUVeTH/nboenb34ZMiRo9U5PBV1qPV7++koBwOThAHDy1nhlE
1JegLD8lGYAEt8myRkzzYOyKWEEPdFgsGMLXO7fCYha8UR+DOnsZ0s751EAIQ0eG
7kGNLRrEuC8xLg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:31 2025 by rpki-client