Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
File:                     RK4A_ueCEKsEi0QODLKn9AyduMw.mft (raw, json)
Hash identifier:          8c+ynwMJgZwYRjZdBe76/XaOgJMHqDlbvOEt4LA9lWA=
Subject key identifier:   5B:5D:05:1E:4C:DF:C8:CC:30:02:5E:5D:65:9D:21:0D:89:79:CE:58
Authority key identifier: 44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
Certificate issuer:       /CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Certificate serial:       0199FD340187B98DE5712FD941D47E3EA26F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
Manifest number:          0B0C
Signing time:             Sun 19 Oct 2025 16:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:07 +0000
Files and hashes:         1: RK4A_ueCEKsEi0QODLKn9AyduMw.crl (hash: petW+q8D94xpPuythlbJlJva82ewn6vktgaw/g8HnyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:01:87:b9:8d:e5:71:2f:d9:41:d4:7e:3e:a2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
        Validity
            Not Before: Oct 19 16:01:07 2025 GMT
            Not After : Oct 20 16:01:07 2025 GMT
        Subject: CN=5b5d051e4cdfc8cc30025e5d659d210d8979ce58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:de:56:0c:f1:f1:3e:0d:9f:97:cd:d8:62:
                    e8:c7:e6:da:e4:c3:c4:2e:e6:d9:83:a7:61:4b:04:
                    82:57:6d:35:0a:ea:70:11:3f:8d:72:f2:d2:27:79:
                    47:5a:f7:52:d0:d2:3e:53:df:7d:57:8d:6b:17:48:
                    07:94:53:b0:a9:9a:36:fc:02:97:a4:f6:95:9a:a9:
                    a4:52:cb:5d:ad:e3:cb:15:15:4a:bb:2b:ba:7b:c3:
                    0c:95:64:25:b4:f6:0a:b6:41:a9:8d:af:00:47:d6:
                    1f:dc:c3:38:19:27:f3:b5:de:d6:8b:26:aa:e6:8a:
                    6c:4a:f2:65:dc:cb:c8:29:dc:22:d6:e3:ab:07:98:
                    eb:d2:da:c4:9a:70:8a:c4:45:33:d7:11:c3:88:b6:
                    74:f2:6a:9a:71:82:1c:a5:2e:8a:70:9e:23:81:5e:
                    1b:c5:17:58:aa:67:02:93:6c:d1:3f:89:10:3f:19:
                    0f:90:c5:90:e3:64:c7:cd:73:6e:f4:68:c5:0e:b5:
                    a7:8a:21:cb:ee:f8:b0:b9:df:c8:97:f0:a1:6b:a0:
                    34:7b:6f:1d:2c:49:9c:94:23:b9:d2:e0:26:74:73:
                    81:f5:82:ee:19:af:52:28:c9:f8:27:ef:57:63:91:
                    72:65:e9:2b:42:c5:39:ab:c8:fa:7d:56:78:57:1c:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5D:05:1E:4C:DF:C8:CC:30:02:5E:5D:65:9D:21:0D:89:79:CE:58
            X509v3 Authority Key Identifier:
                keyid:44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4d:17:1a:d4:07:cb:92:11:f2:c3:c5:c4:d8:9d:a8:65:9c:
         9d:98:9b:3f:1b:d1:9f:fe:b1:c3:b0:c0:a5:8e:ad:4a:bd:cf:
         45:8e:9f:6c:b3:b4:f3:01:29:72:8c:69:f8:1b:3d:d6:c6:87:
         c8:4d:34:b3:c9:73:4e:fa:72:f9:6b:f5:c1:cd:6b:7c:d0:77:
         2c:c5:75:d6:82:3a:3f:47:ab:81:e9:47:01:f8:19:2b:53:5d:
         cb:f7:a8:1b:b8:b3:4b:06:cf:5d:c4:cd:c9:e4:2d:71:86:d8:
         6e:93:1d:3e:6e:1c:db:9d:e1:fe:54:f5:7e:9c:ac:ce:03:f5:
         e1:a8:4e:91:68:eb:79:04:00:a6:14:77:15:84:9a:bb:77:59:
         1b:5d:82:ed:f4:83:7f:27:a4:af:81:dd:7a:c1:e2:e6:87:81:
         84:44:36:d3:e4:9e:c7:5c:89:6c:23:da:a5:1f:14:6d:cf:dd:
         00:e1:2d:db:c3:40:b7:d6:34:1c:50:c3:fe:6b:b8:7f:42:28:
         57:f2:a5:72:9a:dd:40:ab:ab:f4:b2:42:27:8b:84:75:fd:6a:
         51:e7:e3:b1:ef:e9:53:a9:6d:02:18:8e:37:f2:d9:ee:03:5f:
         dd:75:fe:1f:52:33:f9:70:45:1e:c9:4f:11:0d:91:e2:f0:8f:
         11:71:b6:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NAGHuY3lcS/ZQdR+PqJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWUwMGZlZTc4MjEwYWIwNDhiNDQwZTBjYjJhN2Y0MGM5
ZGI4Y2MwHhcNMjUxMDE5MTYwMTA3WhcNMjUxMDIwMTYwMTA3WjAzMTEwLwYDVQQD
Eyg1YjVkMDUxZTRjZGZjOGNjMzAwMjVlNWQ2NTlkMjEwZDg5NzljZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsybeVgzx8T4Nn5fN2GLox+ba5MPE
LubZg6dhSwSCV201CupwET+NcvLSJ3lHWvdS0NI+U999V41rF0gHlFOwqZo2/AKX
pPaVmqmkUstdrePLFRVKuyu6e8MMlWQltPYKtkGpja8AR9Yf3MM4GSfztd7Wiyaq
5opsSvJl3MvIKdwi1uOrB5jr0trEmnCKxEUz1xHDiLZ08mqacYIcpS6KcJ4jgV4b
xRdYqmcCk2zRP4kQPxkPkMWQ42THzXNu9GjFDrWniiHL7viwud/Il/Cha6A0e28d
LEmclCO50uAmdHOB9YLuGa9SKMn4J+9XY5FyZekrQsU5q8j6fVZ4VxyUTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtdBR5M38jMMAJeXWWdIQ2Jec5YMB8GA1UdIwQY
MBaAFESuAP7nghCrBItEDgyyp/QMnbjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi80MTVlMzktNmNjYS00NGUzLWJiYjkt
NmZjOWE1NzE4NzA2LzEvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi80MTVlMzktNmNjYS00NGUzLWJiYjktNmZjOWE1NzE4NzA2
LzEvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE0XGtQH
y5IR8sPFxNidqGWcnZibPxvRn/6xw7DApY6tSr3PRY6fbLO08wEpcoxp+Bs91saH
yE00s8lzTvpy+Wv1wc1rfNB3LMV11oI6P0ergelHAfgZK1Ndy/eoG7izSwbPXcTN
yeQtcYbYbpMdPm4c253h/lT1fpyszgP14ahOkWjreQQAphR3FYSau3dZG12C7fSD
fyekr4HdesHi5oeBhEQ20+Sex1yJbCPapR8Ubc/dAOEt28NAt9Y0HFDD/mu4f0Io
V/KlcprdQKur9LJCJ4uEdf1qUefjse/pU6ltAhiON/LZ7gNf3XX+H1Iz+XBFHslP
EQ2R4vCPEXG2bg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:59 2025 by rpki-client