Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File:                     NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier:          GAxveJCpbytubjdo2n9+ndVmw0szke2erMwUgWPv52A=
Subject key identifier:   82:A7:B7:27:B1:55:8B:41:3D:80:58:6E:D4:B3:DC:0B:34:C1:C0:7D
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer:       /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial:       0199FBEB84141AA3D92C9983705A16128664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number:          11DE
Signing time:             Sun 19 Oct 2025 10:02:19 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:19 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:19 +0000
Files and hashes:         1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: 3DB4Zp1S4u2coHeUhcMjCbYBuRBJXQuCU9yj3B4Id0o=)
                          2: saaFFJdprL2UcH3v0LL3zZpp7jc.roa (hash: YyF7BBYn0BiV4oWuG7tgrnT28h9nKay6fwuXu0twrBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:84:14:1a:a3:d9:2c:99:83:70:5a:16:12:86:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
        Validity
            Not Before: Oct 19 10:02:19 2025 GMT
            Not After : Oct 20 10:02:19 2025 GMT
        Subject: CN=82a7b727b1558b413d80586ed4b3dc0b34c1c07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e7:be:78:46:32:70:21:f7:7f:81:2d:7c:1c:
                    c6:05:9f:a9:3d:35:c4:63:a7:dd:35:79:52:4d:23:
                    d8:81:a3:40:a8:57:cf:74:30:8f:09:40:fb:4d:1e:
                    e1:5d:4f:00:48:01:06:21:5b:0f:e8:40:11:c3:46:
                    fb:d7:65:b1:d9:0c:1b:54:b4:ad:90:8b:28:ab:25:
                    91:c2:5a:fc:2a:0c:a9:03:32:b7:65:60:52:f4:df:
                    17:41:b9:f7:18:24:e3:c0:30:ee:97:82:5d:d8:e1:
                    95:bf:db:e6:9d:16:09:63:24:ce:32:00:31:e1:14:
                    19:d6:ff:f3:16:9c:5b:ce:5e:c3:fb:ec:b5:6e:55:
                    62:07:33:19:31:80:74:eb:14:cc:c6:bd:c9:9d:dc:
                    7b:69:71:3b:10:b8:1a:a6:be:44:99:d0:2f:59:8e:
                    37:97:3f:80:80:cd:5d:31:f3:ef:2e:7f:9c:24:b4:
                    af:a6:11:fd:8a:d1:43:21:95:9f:67:9c:be:ca:da:
                    29:8b:1b:84:44:5e:13:e1:a4:fe:a1:03:e0:05:35:
                    85:be:aa:11:d6:cc:2b:da:ba:7e:6d:4f:0d:66:28:
                    fd:19:4b:8d:5c:cf:c0:15:fc:ad:db:b2:6b:02:1c:
                    5c:cc:2f:d2:64:fa:00:2f:86:9f:df:41:9d:5b:d5:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A7:B7:27:B1:55:8B:41:3D:80:58:6E:D4:B3:DC:0B:34:C1:C0:7D
            X509v3 Authority Key Identifier:
                keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:03:d1:63:fa:40:f2:d4:cb:ed:c5:dd:93:52:fc:3a:b2:6e:
         42:ad:56:1f:41:bd:12:fc:1f:83:b3:49:ee:39:d7:31:96:a2:
         89:78:d0:3f:c7:42:a4:6f:3f:ce:4d:82:9a:b6:e7:d9:5e:46:
         bf:fa:59:c0:7b:67:db:97:fc:29:bf:5d:af:4c:a6:54:26:40:
         10:3c:6a:a3:17:20:56:ba:a1:ea:a2:00:f1:79:64:7c:b6:12:
         95:8c:26:f0:59:dc:72:44:66:e4:7a:72:8e:ee:9e:4a:b2:74:
         bc:b3:03:f2:8d:87:c0:62:16:fe:70:21:a3:68:50:c6:2e:95:
         db:64:48:29:5b:56:3a:8e:3d:96:cf:e1:de:a1:97:d1:2d:9b:
         d0:49:a1:67:9a:c4:d2:24:a0:81:ab:dc:5a:68:9d:78:30:da:
         e2:0e:58:58:32:b2:76:d8:86:4d:5f:55:43:6c:b0:78:1e:2f:
         02:25:73:47:40:18:c8:37:36:dc:74:83:cd:6c:cb:4c:b6:1e:
         ae:53:a7:2f:bc:04:ff:20:4e:87:37:54:cd:f2:26:17:eb:0a:
         87:e3:60:2b:dd:ed:90:0e:50:22:ee:f2:96:b1:78:39:6e:e6:
         92:30:87:56:e8:d6:cf:01:9e:0c:af:e1:2b:01:b7:3a:10:3f:
         86:ab:00:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn764QUGqPZLJmDcFoWEoZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz
NGRiZTgwHhcNMjUxMDE5MTAwMjE5WhcNMjUxMDIwMTAwMjE5WjAzMTEwLwYDVQQD
Eyg4MmE3YjcyN2IxNTU4YjQxM2Q4MDU4NmVkNGIzZGMwYjM0YzFjMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ue+eEYycCH3f4EtfBzGBZ+pPTXE
Y6fdNXlSTSPYgaNAqFfPdDCPCUD7TR7hXU8ASAEGIVsP6EARw0b712Wx2QwbVLSt
kIsoqyWRwlr8KgypAzK3ZWBS9N8XQbn3GCTjwDDul4Jd2OGVv9vmnRYJYyTOMgAx
4RQZ1v/zFpxbzl7D++y1blViBzMZMYB06xTMxr3Jndx7aXE7ELgapr5EmdAvWY43
lz+AgM1dMfPvLn+cJLSvphH9itFDIZWfZ5y+ytopixuERF4T4aT+oQPgBTWFvqoR
1swr2rp+bU8NZij9GUuNXM/AFfyt27JrAhxczC/SZPoAL4af30GdW9WsdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKntyexVYtBPYBYbtSz3As0wcB9MB8GA1UdIwQY
MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt
NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy
LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgPRY/pA
8tTL7cXdk1L8OrJuQq1WH0G9Evwfg7NJ7jnXMZaiiXjQP8dCpG8/zk2Cmrbn2V5G
v/pZwHtn25f8Kb9dr0ymVCZAEDxqoxcgVrqh6qIA8XlkfLYSlYwm8FncckRm5Hpy
ju6eSrJ0vLMD8o2HwGIW/nAho2hQxi6V22RIKVtWOo49ls/h3qGX0S2b0EmhZ5rE
0iSggavcWmideDDa4g5YWDKydtiGTV9VQ2yweB4vAiVzR0AYyDc23HSDzWzLTLYe
rlOnL7wE/yBOhzdUzfImF+sKh+NgK93tkA5QIu7ylrF4OW7mkjCHVujWzwGeDK/h
KwG3OhA/hqsAeA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:10 2025 by rpki-client