Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
File:                     d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft (raw, json)
Hash identifier:          XevW/BNFbuMZVcJ7A+C0ry+VYTAoAgw3XDpYLSYOA2Q=
Subject key identifier:   A0:84:26:52:52:D7:9A:C2:BC:31:7F:B5:98:97:31:C1:56:C5:95:4F
Authority key identifier: 77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
Certificate issuer:       /CN=77c15521fed90d114e7635310b307f553f57d26c
Certificate serial:       0199FFC82AEA85656E55F428638DD9016A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
Manifest number:          0ECD
Signing time:             Mon 20 Oct 2025 04:02:12 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:12 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:12 +0000
Files and hashes:         1: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl (hash: zLz7ZJeGgkBu3BF4NsMalWClh4ZtYuOtg9txdRsXE2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:2a:ea:85:65:6e:55:f4:28:63:8d:d9:01:6a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c15521fed90d114e7635310b307f553f57d26c
        Validity
            Not Before: Oct 20 04:02:12 2025 GMT
            Not After : Oct 21 04:02:12 2025 GMT
        Subject: CN=a084265252d79ac2bc317fb5989731c156c5954f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8c:a4:0e:5d:75:5e:58:12:54:60:b0:a2:02:
                    fa:55:a5:2d:bf:5f:3e:94:8b:23:84:f2:f3:4b:2e:
                    19:6f:0d:93:05:44:ce:a2:02:da:84:d3:cc:66:97:
                    6b:02:8e:89:c6:5b:03:a3:61:b7:45:47:f3:a2:fb:
                    13:c1:d0:0f:a9:30:7e:31:b9:02:95:c8:c4:23:4e:
                    80:46:a2:4e:16:da:1d:52:80:2b:ae:c3:b8:f1:c2:
                    d2:95:bf:2d:14:f7:38:d5:4b:6d:b1:43:0f:de:05:
                    bd:a4:2c:4a:51:e0:b4:22:21:8c:0c:ab:b9:0a:ac:
                    f0:46:fd:a9:89:45:a7:96:a8:cc:e5:25:c9:8d:2f:
                    e0:fd:11:e1:b1:68:42:42:c8:b8:52:74:f8:df:e8:
                    92:2a:11:25:13:6c:ec:42:1f:d1:e8:db:62:c3:b6:
                    48:1c:12:9b:6c:f2:e2:7f:83:9d:29:98:fa:41:f2:
                    d7:5b:d2:80:6f:49:db:c6:55:a4:cd:11:42:d5:b8:
                    3c:ab:11:8b:1d:95:4a:6f:3e:31:1c:7a:61:7e:7c:
                    23:fd:82:33:53:f1:28:b8:55:21:9b:73:5c:0b:77:
                    5f:fa:bd:58:51:0a:af:3f:67:21:fa:e1:13:8a:9e:
                    fa:ca:59:6a:20:fe:8c:42:2e:fb:0c:d5:49:4a:77:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:26:52:52:D7:9A:C2:BC:31:7F:B5:98:97:31:C1:56:C5:95:4F
            X509v3 Authority Key Identifier:
                keyid:77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8d:6b:65:48:15:18:5b:b2:67:45:40:24:86:f4:1b:b6:d4:
         26:07:84:13:66:e7:bc:25:2f:0e:9e:ef:29:8a:d0:8d:83:52:
         f4:c1:27:cb:e1:46:f5:09:fd:40:7a:87:d6:5a:6f:3d:87:1c:
         9f:a1:74:e5:e3:be:b3:f7:4a:72:e0:fb:08:d2:da:c4:ae:48:
         71:5a:a8:33:40:61:76:25:61:80:d4:c1:71:4a:6f:c7:b8:17:
         41:c1:1a:79:b7:ef:ad:fd:7c:f0:cf:45:81:fc:fd:e5:5f:81:
         bc:9d:3e:b9:82:26:c6:ad:3c:bd:65:e6:4f:9d:4f:bf:c1:b4:
         33:0d:1d:3a:8c:c2:3c:f3:95:cc:6d:d8:2f:0c:84:ba:f6:e6:
         cd:eb:50:b9:90:0b:6d:16:9c:9c:9e:48:97:33:04:f2:e8:5b:
         57:3b:a1:81:5f:32:83:02:b1:1f:41:b7:0b:9b:31:5c:ef:b2:
         9f:e2:b0:c2:a1:ac:d7:ba:c8:75:7c:97:39:e9:c0:b4:f4:1d:
         d2:e8:14:df:a9:15:fd:6c:1c:16:8f:01:49:23:13:3c:df:f3:
         7c:07:23:f1:03:f7:db:68:ad:c3:05:01:ae:57:af:fe:e0:41:
         55:96:4d:e4:f9:9a:7e:8e:c7:06:f5:42:4b:1a:c8:c4:0a:a1:
         a7:8e:2e:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yCrqhWVuVfQoY43ZAWqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzE1NTIxZmVkOTBkMTE0ZTc2MzUzMTBiMzA3ZjU1M2Y1
N2QyNmMwHhcNMjUxMDIwMDQwMjEyWhcNMjUxMDIxMDQwMjEyWjAzMTEwLwYDVQQD
EyhhMDg0MjY1MjUyZDc5YWMyYmMzMTdmYjU5ODk3MzFjMTU2YzU5NTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYykDl11XlgSVGCwogL6VaUtv18+
lIsjhPLzSy4Zbw2TBUTOogLahNPMZpdrAo6JxlsDo2G3RUfzovsTwdAPqTB+MbkC
lcjEI06ARqJOFtodUoArrsO48cLSlb8tFPc41UttsUMP3gW9pCxKUeC0IiGMDKu5
CqzwRv2piUWnlqjM5SXJjS/g/RHhsWhCQsi4UnT43+iSKhElE2zsQh/R6Ntiw7ZI
HBKbbPLif4OdKZj6QfLXW9KAb0nbxlWkzRFC1bg8qxGLHZVKbz4xHHphfnwj/YIz
U/EouFUhm3NcC3df+r1YUQqvP2ch+uETip76yllqIP6MQi77DNVJSndfvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCEJlJS15rCvDF/tZiXMcFWxZVPMB8GA1UdIwQY
MBaAFHfBVSH+2Q0RTnY1MQswf1U/V9JsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhGVklmN1pEUkZPZGpVeEN6Ql9WVDlYMG13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wZWRiMzgtYzBmOC00NDFiLWFjYmYt
NjFiMGUzNjljOGZkLzEvZDhGVklmN1pEUkZPZGpVeEN6Ql9WVDlYMG13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8wZWRiMzgtYzBmOC00NDFiLWFjYmYtNjFiMGUzNjljOGZk
LzEvZDhGVklmN1pEUkZPZGpVeEN6Ql9WVDlYMG13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoY1rZUgV
GFuyZ0VAJIb0G7bUJgeEE2bnvCUvDp7vKYrQjYNS9MEny+FG9Qn9QHqH1lpvPYcc
n6F05eO+s/dKcuD7CNLaxK5IcVqoM0BhdiVhgNTBcUpvx7gXQcEaebfvrf188M9F
gfz95V+BvJ0+uYImxq08vWXmT51Pv8G0Mw0dOozCPPOVzG3YLwyEuvbmzetQuZAL
bRacnJ5IlzME8uhbVzuhgV8ygwKxH0G3C5sxXO+yn+KwwqGs17rIdXyXOenAtPQd
0ugU36kV/WwcFo8BSSMTPN/zfAcj8QP322itwwUBrlev/uBBVZZN5Pmafo7HBvVC
SxrIxAqhp44uMQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:19:43 2025 by rpki-client