Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File:                     f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier:          LGg0iQNZtYJYuLKZMUGZ5QTFqSMDejJsgFLwr2ZQLKI=
Subject key identifier:   8C:1B:6A:65:A4:69:87:ED:CB:65:58:F4:6F:A9:6F:9B:EE:45:66:6A
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer:       /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial:       019A00DA34945950C9B9A628DB1B75E87BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number:          145D
Signing time:             Mon 20 Oct 2025 09:01:31 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:31 +0000
Manifest next update:     Tue 21 Oct 2025 09:01:31 +0000
Files and hashes:         1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: K5Ss+iEF24OQ/CUH0C6+dnfAjVuohBE4iPYrII1UP2g=)
                          2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:da:34:94:59:50:c9:b9:a6:28:db:1b:75:e8:7b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
        Validity
            Not Before: Oct 20 09:01:31 2025 GMT
            Not After : Oct 21 09:01:31 2025 GMT
        Subject: CN=8c1b6a65a46987edcb6558f46fa96f9bee45666a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:7d:0a:04:fe:b1:49:ac:6f:02:7c:ec:2e:
                    24:cc:8e:c5:98:08:d3:57:37:e0:eb:c0:87:5e:46:
                    b4:b9:bf:e0:81:6b:16:2a:be:94:03:ea:54:94:d2:
                    19:d9:4c:76:0e:0b:52:b2:ab:e7:69:5d:cd:af:4d:
                    1e:24:db:f5:18:e0:cc:51:29:3d:bd:51:3b:bd:17:
                    78:27:6a:b3:0d:ae:91:48:e6:43:d7:fd:22:f0:08:
                    fa:f6:33:ec:12:c5:ef:9b:2b:75:24:8f:8d:48:f3:
                    0d:9b:12:6b:f3:ef:38:25:1d:55:00:a3:a9:db:77:
                    c2:e9:0e:8f:d2:e0:32:8b:30:25:b3:e8:4e:58:48:
                    3f:40:09:76:7c:f8:4b:61:0d:7e:0e:c1:f4:a2:c8:
                    3c:da:ff:d1:e8:04:84:48:05:53:04:eb:d5:85:f3:
                    bf:79:c7:e9:3f:53:6a:74:f3:77:d8:b7:ad:92:fa:
                    17:5c:66:0d:1c:d1:b0:9c:7f:f6:23:b6:d5:b3:c8:
                    b3:7a:5c:0a:17:65:e9:45:4a:c8:cb:48:78:18:a4:
                    87:be:4a:80:7b:a7:02:f8:e2:28:32:18:39:60:02:
                    b2:f1:cf:b2:49:db:cc:f7:5f:00:23:31:ec:ea:32:
                    21:2f:e5:91:cc:60:c5:e2:ab:bf:59:10:d5:db:e2:
                    e6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1B:6A:65:A4:69:87:ED:CB:65:58:F4:6F:A9:6F:9B:EE:45:66:6A
            X509v3 Authority Key Identifier:
                keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:de:53:d9:0d:ed:2b:84:37:2d:1a:69:36:af:09:4f:e6:4d:
         08:e6:30:12:08:53:dd:8b:bd:a4:22:60:8b:38:bc:d8:91:54:
         18:e3:7a:20:f9:99:89:cb:e9:c6:77:62:6f:26:c9:f6:05:ca:
         5e:25:e9:66:de:5b:a9:51:46:c3:a7:b4:0a:da:1e:dd:b1:9e:
         ca:28:e2:c7:87:32:bb:81:dc:8e:48:6f:f6:79:47:71:e8:b3:
         7a:e4:c6:63:f0:dc:d6:59:d9:5a:d2:f4:74:55:83:02:5e:ed:
         86:39:71:a6:74:93:a2:aa:ea:5e:67:dd:d6:87:55:95:14:09:
         e8:ce:79:6e:b8:af:93:61:dd:4c:db:67:13:f6:8c:b7:c6:53:
         13:f1:12:98:9b:ee:07:7f:37:1b:2c:9b:9e:31:ca:2b:5d:75:
         12:75:54:e3:42:7d:10:b2:7a:e0:ea:bb:df:b9:10:4d:03:d7:
         b8:75:5d:38:cf:b8:7d:2b:fb:4b:43:df:2d:d7:08:96:37:6e:
         ca:e9:9c:50:00:e7:20:45:5f:ea:a8:a2:bb:45:85:f0:12:56:
         b3:69:39:6c:4f:71:d8:54:b1:b6:64:ab:91:7a:de:b5:50:60:
         63:4e:4f:23:71:7e:7b:8c:e8:f2:41:ac:58:7d:ce:73:b3:cb:
         a3:00:bb:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2jSUWVDJuaYo2xt16HvXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNThiYzA4NjQxMmY0ZDJjNTRmYTA3MDJkOTJjZTI1NDk2
Y2U0NzkwHhcNMjUxMDIwMDkwMTMxWhcNMjUxMDIxMDkwMTMxWjAzMTEwLwYDVQQD
Eyg4YzFiNmE2NWE0Njk4N2VkY2I2NTU4ZjQ2ZmE5NmY5YmVlNDU2NjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbl9CgT+sUmsbwJ87C4kzI7FmAjT
Vzfg68CHXka0ub/ggWsWKr6UA+pUlNIZ2Ux2DgtSsqvnaV3Nr00eJNv1GODMUSk9
vVE7vRd4J2qzDa6RSOZD1/0i8Aj69jPsEsXvmyt1JI+NSPMNmxJr8+84JR1VAKOp
23fC6Q6P0uAyizAls+hOWEg/QAl2fPhLYQ1+DsH0osg82v/R6ASESAVTBOvVhfO/
ecfpP1NqdPN32LetkvoXXGYNHNGwnH/2I7bVs8izelwKF2XpRUrIy0h4GKSHvkqA
e6cC+OIoMhg5YAKy8c+ySdvM918AIzHs6jIhL+WRzGDF4qu/WRDV2+LmEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwbamWkaYfty2VY9G+pb5vuRWZqMB8GA1UdIwQY
MBaAFH9YvAhkEvTSxU+gcC2SziVJbOR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjkt
NTAxMGQwNWY5OWE4LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjktNTAxMGQwNWY5OWE4
LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY95T2Q3t
K4Q3LRppNq8JT+ZNCOYwEghT3Yu9pCJgizi82JFUGON6IPmZicvpxndibybJ9gXK
XiXpZt5bqVFGw6e0Ctoe3bGeyijix4cyu4Hcjkhv9nlHceizeuTGY/Dc1lnZWtL0
dFWDAl7thjlxpnSToqrqXmfd1odVlRQJ6M55brivk2HdTNtnE/aMt8ZTE/ESmJvu
B383GyybnjHKK111EnVU40J9ELJ64Oq737kQTQPXuHVdOM+4fSv7S0PfLdcIljdu
yumcUADnIEVf6qiiu0WF8BJWs2k5bE9x2FSxtmSrkXretVBgY05PI3F+e4zo8kGs
WH3Oc7PLowC7fQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:20:51 2025 by rpki-client