Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File:                     a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier:          ighMMSqGQqgkeWPErR19WOfZo7Q/49jGWiHqw+MKTrk=
Subject key identifier:   79:6A:D4:EC:5B:5C:54:10:86:46:30:59:34:3B:E5:F4:F0:AC:56:7E
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer:       /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial:       0199FAD81EE2FFCC70CB48F9B5F813AFB9B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number:          0527
Signing time:             Sun 19 Oct 2025 05:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:31 +0000
Files and hashes:         1: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: FblO8pBztzeryTyo6hat2kjGQnRuMPDAeH+Y56FNJyE=)
                          2: waNULbcRhTUiNsANSLGcB4J4itI.roa (hash: 9dW8NgonrZBc4IChXkCIdxerNGPGCgwx9gaoEJblTYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:1e:e2:ff:cc:70:cb:48:f9:b5:f8:13:af:b9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
        Validity
            Not Before: Oct 19 05:01:31 2025 GMT
            Not After : Oct 20 05:01:31 2025 GMT
        Subject: CN=796ad4ec5b5c541086463059343be5f4f0ac567e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:8b:1c:fd:86:38:20:6d:21:7e:a5:e8:f0:
                    00:37:c2:a2:d4:8d:c2:95:de:06:fa:d9:ce:5f:47:
                    9b:a1:fb:08:3d:f9:8c:a5:20:b5:ff:18:8a:38:3d:
                    19:78:4d:f2:ba:9e:2a:e4:d1:eb:3f:94:6e:f3:2d:
                    e5:ea:65:c0:dd:44:b6:58:25:cf:a8:d2:9b:15:01:
                    68:aa:46:7e:ff:b9:9f:be:d1:3d:98:e5:da:41:c8:
                    46:9f:0a:f4:47:99:7a:69:88:24:45:8d:9b:f6:7f:
                    51:7b:b7:e1:49:61:fa:6f:04:03:a2:a7:4f:22:87:
                    63:22:f1:25:ba:71:fa:42:b6:ec:82:0a:9c:33:64:
                    06:be:75:f9:fa:e0:38:e8:f1:90:5f:e4:fc:2b:52:
                    bc:c1:5c:39:72:1f:fa:75:b1:f9:36:3c:b9:ad:fa:
                    ed:3b:42:dd:d0:31:56:44:d5:42:51:55:8e:10:83:
                    92:71:c1:5f:04:6e:93:d1:e5:1d:68:99:8e:ee:cf:
                    ce:39:a6:67:19:2e:6b:83:eb:2a:65:c7:c8:e2:a1:
                    3d:f5:a7:1e:a1:e9:c1:dc:e4:d9:6c:ce:16:d9:d2:
                    83:16:85:f8:2a:5d:c5:75:50:bb:54:7e:27:28:0c:
                    59:2b:97:b0:be:c0:9d:d5:94:e5:30:d5:9b:86:62:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:D4:EC:5B:5C:54:10:86:46:30:59:34:3B:E5:F4:F0:AC:56:7E
            X509v3 Authority Key Identifier:
                keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:fc:80:9e:7e:7f:27:63:c8:26:c9:da:a7:88:ff:47:63:
         df:6a:36:a5:02:db:58:97:24:0b:7a:1b:a8:b0:04:ad:72:c3:
         3f:60:8e:b0:52:27:4a:96:de:b7:46:f3:b3:13:cc:77:70:46:
         9d:8f:48:87:77:e8:86:9f:d0:84:ab:40:c0:65:f0:f8:96:09:
         de:2c:62:1c:13:36:6d:3f:9c:9b:83:e6:56:09:c8:f2:5c:fd:
         2a:2f:ab:12:7f:12:bb:09:4b:11:26:58:50:c0:02:df:23:2e:
         8b:72:17:4f:c7:b0:c5:e2:c9:05:e8:5b:e8:30:4f:7c:ef:5d:
         78:79:5e:d7:bb:9a:25:52:23:9c:e7:7f:04:a7:45:cf:72:41:
         40:ff:fe:21:3d:9a:f6:25:c7:3c:79:bb:73:b0:cd:ff:f7:33:
         62:68:a1:02:2b:08:e1:d0:5c:3a:36:41:0f:41:eb:09:b6:7e:
         70:fc:fc:01:91:12:2c:71:c1:75:1b:e7:9e:25:28:5c:52:93:
         a3:31:6b:87:70:c3:d1:a0:35:d7:df:51:19:be:de:21:f6:ed:
         a6:d1:09:b6:d2:f7:fb:c8:8b:bf:d6:04:bc:a4:25:2c:6e:e2:
         11:6c:24:b1:bb:c6:69:0d:37:48:27:8a:2d:94:aa:af:a7:28:
         7c:6f:d4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62B7i/8xwy0j5tfgTr7m3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZjg4ZTgyYjM1YTBhZDZkMGZmMzE1NmFmMTMxOWRmYzE2
MmY4ZTgwHhcNMjUxMDE5MDUwMTMxWhcNMjUxMDIwMDUwMTMxWjAzMTEwLwYDVQQD
Eyg3OTZhZDRlYzViNWM1NDEwODY0NjMwNTkzNDNiZTVmNGYwYWM1NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLGLHP2GOCBtIX6l6PAAN8Ki1I3C
ld4G+tnOX0ebofsIPfmMpSC1/xiKOD0ZeE3yup4q5NHrP5Ru8y3l6mXA3US2WCXP
qNKbFQFoqkZ+/7mfvtE9mOXaQchGnwr0R5l6aYgkRY2b9n9Re7fhSWH6bwQDoqdP
IodjIvElunH6QrbsggqcM2QGvnX5+uA46PGQX+T8K1K8wVw5ch/6dbH5Njy5rfrt
O0Ld0DFWRNVCUVWOEIOSccFfBG6T0eUdaJmO7s/OOaZnGS5rg+sqZcfI4qE99ace
oenB3OTZbM4W2dKDFoX4Kl3FdVC7VH4nKAxZK5ewvsCd1ZTlMNWbhmK16QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlq1OxbXFQQhkYwWTQ75fTwrFZ+MB8GA1UdIwQY
MBaAFGv4joKzWgrW0P8xVq8TGd/BYvjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEt
YmZiZDU2OTRhOTRkLzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xYmNiOGQtMjBhNC00MzQ3LWI4ZGEtYmZiZDU2OTRhOTRk
LzEvYV9pT2dyTmFDdGJRX3pGV3J4TVozOEZpLU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcD8gJ5+
fydjyCbJ2qeI/0dj32o2pQLbWJckC3obqLAErXLDP2COsFInSpbet0bzsxPMd3BG
nY9Ih3fohp/QhKtAwGXw+JYJ3ixiHBM2bT+cm4PmVgnI8lz9Ki+rEn8SuwlLESZY
UMAC3yMui3IXT8ewxeLJBehb6DBPfO9deHle17uaJVIjnOd/BKdFz3JBQP/+IT2a
9iXHPHm7c7DN//czYmihAisI4dBcOjZBD0HrCbZ+cPz8AZESLHHBdRvnniUoXFKT
ozFrh3DD0aA1199RGb7eIfbtptEJttL3+8iLv9YEvKQlLG7iEWwksbvGaQ03SCeK
LZSqr6cofG/USQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:57 2025 by rpki-client