Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File:                     cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier:          e1vJx3jCVVW3u73oANUnAnP2xdgS7CmvQTh6eAu2u78=
Subject key identifier:   2D:77:DC:7B:A4:9F:04:2C:FA:D6:28:9D:81:D4:3F:57:77:B8:31:3B
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer:       /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial:       0199FC218D3F3D49E05E980BCF89A5E8A503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number:          0FA8
Signing time:             Sun 19 Oct 2025 11:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:21 +0000
Files and hashes:         1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=)
                          2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: aslP7kwy5vn4cSoJeFJN3AGRkAxS5rTePF67myCyJ8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:8d:3f:3d:49:e0:5e:98:0b:cf:89:a5:e8:a5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
        Validity
            Not Before: Oct 19 11:01:21 2025 GMT
            Not After : Oct 20 11:01:21 2025 GMT
        Subject: CN=2d77dc7ba49f042cfad6289d81d43f5777b8313b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:d6:3a:7e:65:ee:22:5a:a0:6a:a9:3f:4e:
                    3e:3c:b5:99:b4:27:3d:9c:da:6d:ed:ce:45:7e:7e:
                    2b:9f:cd:25:38:dd:da:3a:54:b8:d4:03:18:de:b8:
                    61:86:94:74:4a:09:00:9f:e3:05:64:4d:14:75:91:
                    c6:3f:fa:9d:df:c2:fb:14:fe:f9:b8:cb:af:03:9e:
                    cf:82:97:61:7a:41:78:d1:5f:48:57:3e:ba:45:f4:
                    f5:96:a5:a4:ff:a4:e5:76:2b:61:04:5c:da:f2:11:
                    93:74:d9:ff:29:3a:93:fd:c2:14:ff:5c:a0:3a:6a:
                    1b:1e:67:26:7f:cc:07:5a:ba:2d:06:eb:5b:70:82:
                    86:d5:41:01:25:f8:98:98:bd:7e:85:75:15:00:f3:
                    84:24:d5:d8:c3:58:db:71:da:77:97:29:10:ac:18:
                    44:85:71:69:53:7c:96:c3:ac:c5:30:88:de:cc:12:
                    ec:83:6a:91:b9:f1:a9:f7:92:fb:1e:ae:92:36:c1:
                    f7:dd:8a:65:a3:16:34:f2:f0:78:f7:2c:5a:01:9a:
                    08:3e:88:45:79:bb:d1:4d:86:5f:4b:7b:ca:83:0a:
                    f9:1c:90:db:2b:dc:08:fe:ff:f0:ec:b5:b9:1a:9e:
                    aa:bc:c2:f7:95:e2:a0:b5:3e:5c:82:0a:0e:db:45:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:DC:7B:A4:9F:04:2C:FA:D6:28:9D:81:D4:3F:57:77:B8:31:3B
            X509v3 Authority Key Identifier:
                keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:de:38:23:41:ba:6d:e0:a2:70:2a:95:5d:c1:d6:d0:0d:c6:
         70:3f:a3:c3:85:49:9e:a3:53:9c:66:54:72:d5:41:5f:b0:c0:
         32:ef:6e:e6:1b:30:31:10:53:3d:22:1e:a8:be:ad:18:d6:51:
         13:86:b2:d8:4e:2c:f0:db:73:53:0b:51:ed:07:d3:aa:7b:66:
         ff:2e:23:d9:bc:2b:42:5b:dd:c0:c5:7e:ac:b1:1c:0a:cd:24:
         89:43:7b:40:d0:48:10:05:08:4d:17:6c:62:29:3b:54:b0:bf:
         2b:33:91:88:ef:e2:db:18:71:11:3d:c4:02:dd:68:1a:cd:8c:
         fe:ce:68:de:c9:b5:5b:ad:f4:80:f6:69:04:85:1f:b6:4e:32:
         fa:c6:3b:eb:9d:4c:6a:36:b5:3c:7e:d0:74:a1:4b:de:2b:00:
         f9:a1:7f:f7:a1:d4:87:2f:91:58:6c:f5:ec:be:84:2b:e0:e0:
         a2:10:15:a4:ff:59:ab:8a:d5:cc:74:7f:37:5f:fa:a6:0a:a2:
         dd:27:e5:74:01:73:2f:d1:61:ac:92:2c:95:05:86:05:12:50:
         c6:db:a6:94:4a:5e:37:36:fe:68:bd:4f:1c:54:a8:6c:35:62:
         14:c8:e4:64:d1:86:89:70:b3:d3:fa:e7:9f:21:09:af:61:b6:
         2e:57:02:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IY0/PUngXpgLz4ml6KUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTI1MTMxNDRmOGVhZmE4MzZjNGNkY2Y0Zjc1OGQxY2Ni
NjcyMGEwHhcNMjUxMDE5MTEwMTIxWhcNMjUxMDIwMTEwMTIxWjAzMTEwLwYDVQQD
EygyZDc3ZGM3YmE0OWYwNDJjZmFkNjI4OWQ4MWQ0M2Y1Nzc3YjgzMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHbWOn5l7iJaoGqpP04+PLWZtCc9
nNpt7c5Ffn4rn80lON3aOlS41AMY3rhhhpR0SgkAn+MFZE0UdZHGP/qd38L7FP75
uMuvA57PgpdhekF40V9IVz66RfT1lqWk/6TldithBFza8hGTdNn/KTqT/cIU/1yg
OmobHmcmf8wHWrotButbcIKG1UEBJfiYmL1+hXUVAPOEJNXYw1jbcdp3lykQrBhE
hXFpU3yWw6zFMIjezBLsg2qRufGp95L7Hq6SNsH33YploxY08vB49yxaAZoIPohF
ebvRTYZfS3vKgwr5HJDbK9wI/v/w7LW5Gp6qvML3leKgtT5cggoO20We6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC133HuknwQs+tYonYHUP1d3uDE7MB8GA1UdIwQY
MBaAFHESUTFE+Or6g2xM3PT3WNHMtnIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wMzk3YzItNTlhYi00ZmQ0LWJkODYt
YTIyZjQ1ZGViZDRlLzEvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8wMzk3YzItNTlhYi00ZmQ0LWJkODYtYTIyZjQ1ZGViZDRl
LzEvY1JKUk1VVDQ2dnFEYkV6YzlQZFkwY3kyY2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF944I0G6
beCicCqVXcHW0A3GcD+jw4VJnqNTnGZUctVBX7DAMu9u5hswMRBTPSIeqL6tGNZR
E4ay2E4s8NtzUwtR7QfTqntm/y4j2bwrQlvdwMV+rLEcCs0kiUN7QNBIEAUITRds
Yik7VLC/KzORiO/i2xhxET3EAt1oGs2M/s5o3sm1W630gPZpBIUftk4y+sY7651M
aja1PH7QdKFL3isA+aF/96HUhy+RWGz17L6EK+DgohAVpP9Zq4rVzHR/N1/6pgqi
3SfldAFzL9FhrJIslQWGBRJQxtumlEpeNzb+aL1PHFSobDViFMjkZNGGiXCz0/rn
nyEJr2G2LlcCNQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:01 2025 by rpki-client