Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
File:                     Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft (raw, json)
Hash identifier:          Dol7qSXYFNQOEVjuX7bEq1vRop9DN4PDUXGlJFlHq3s=
Subject key identifier:   69:9D:24:54:74:91:AB:C2:8E:15:F2:FB:0D:C0:82:B8:95:F6:BF:58
Authority key identifier: 03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62
Certificate issuer:       /CN=031ec4ae1d04dae14015c627fa396b3efce56062
Certificate serial:       0199FB7C7BEE4870A0159808993A61A08829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
Manifest number:          DC
Signing time:             Sun 19 Oct 2025 08:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:03 +0000
Files and hashes:         1: 70r8S8c1wwixC_sIEZkSOztxf88.roa (hash: eJiBHCKsSAZefBJB8YdkbTzjCLj4a33JNeZglPrz6E4=)
                          2: Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl (hash: FWi07Fk+oACQ2IqJhBT030apOQWL7m5bm+/Znop1UIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:7b:ee:48:70:a0:15:98:08:99:3a:61:a0:88:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=031ec4ae1d04dae14015c627fa396b3efce56062
        Validity
            Not Before: Oct 19 08:01:03 2025 GMT
            Not After : Oct 20 08:01:03 2025 GMT
        Subject: CN=699d24547491abc28e15f2fb0dc082b895f6bf58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:90:2f:0a:66:ec:d1:49:43:ca:ae:d4:b7:
                    ab:5f:4d:4d:27:67:fa:e3:8d:6f:3c:d6:87:e7:c0:
                    7c:08:2f:1a:12:3c:4c:50:8f:e4:98:de:c5:fd:1f:
                    6c:4a:f3:bd:d3:5d:c9:a7:b6:8b:88:83:30:6e:91:
                    b0:7f:5f:73:fa:52:b3:91:78:d5:09:63:f7:77:1a:
                    21:67:98:10:74:dd:79:7f:27:d1:17:ec:0f:19:b8:
                    b9:23:c7:4a:d8:6d:aa:33:18:34:53:c7:35:1e:86:
                    3c:e8:d7:35:ec:94:8d:37:a1:d5:8f:12:fc:f3:ab:
                    75:46:08:6d:31:85:c0:9c:c3:16:3f:99:40:7f:12:
                    1d:df:31:cd:82:f9:1d:39:c6:00:37:ac:24:a4:33:
                    5e:5e:92:40:77:6a:42:1c:99:8a:e2:0b:a7:e9:5e:
                    4a:c4:7c:a6:ea:af:1c:d5:ca:be:51:ac:31:5b:4e:
                    75:9a:f3:5b:7a:3e:f2:cb:40:8d:16:64:2c:5b:69:
                    fb:f9:e8:08:3e:04:c4:c7:7c:ed:0e:e4:73:ba:ec:
                    52:76:4b:4f:5e:05:2d:7a:57:15:1a:0a:e1:24:4d:
                    ff:34:f1:02:0f:27:53:b9:4a:31:8d:a1:7f:4f:23:
                    13:47:82:00:34:7e:6a:24:ca:a1:f0:22:43:d5:7a:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9D:24:54:74:91:AB:C2:8E:15:F2:FB:0D:C0:82:B8:95:F6:BF:58
            X509v3 Authority Key Identifier:
                keyid:03:1E:C4:AE:1D:04:DA:E1:40:15:C6:27:FA:39:6B:3E:FC:E5:60:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/421476-b808-485e-bb56-f19a2fde1e6a/1/Ax7Erh0E2uFAFcYn-jlrPvzlYGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5d:68:13:ce:f2:86:f1:85:00:a0:cb:a3:ea:b5:5f:4b:fd:
         e3:82:94:ad:0c:cc:9b:f3:37:ec:28:ea:15:74:48:17:3a:0d:
         cc:89:1c:d1:4b:a8:e7:db:92:95:dd:5d:b5:62:ee:38:23:99:
         d2:87:eb:a9:d3:0f:d3:d5:4c:fd:a7:61:eb:dd:eb:7a:48:07:
         22:cc:0a:a5:f5:ea:73:42:d0:3d:0f:f8:e9:a4:09:42:b0:6f:
         b5:b0:13:53:be:a7:14:83:78:6c:63:b9:37:8f:eb:d6:4b:cb:
         a0:3a:9b:8c:e6:73:99:81:18:f5:b4:ed:cf:05:82:b6:be:32:
         c9:0e:3c:42:06:a6:51:ef:0e:43:95:9a:4a:b3:11:06:46:bd:
         93:8c:7d:07:7f:b9:50:7d:45:f8:58:6a:bb:13:f9:2a:90:e8:
         91:3c:95:7d:b8:ec:f5:51:53:5f:98:92:25:c7:d2:ad:97:43:
         50:6e:27:25:e5:05:af:cd:42:61:42:a3:1a:c2:b9:b2:1c:6f:
         c0:d3:93:06:63:57:c9:20:d7:c0:0a:88:6a:2e:ad:99:2d:ad:
         89:1e:b1:07:05:75:71:46:e0:22:45:9f:b5:41:1d:60:a4:72:
         57:46:da:c1:26:08:14:2f:4b:68:50:90:6e:ed:ac:99:55:e5:
         74:96:19:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fHvuSHCgFZgImTphoIgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMWVjNGFlMWQwNGRhZTE0MDE1YzYyN2ZhMzk2YjNlZmNl
NTYwNjIwHhcNMjUxMDE5MDgwMTAzWhcNMjUxMDIwMDgwMTAzWjAzMTEwLwYDVQQD
Eyg2OTlkMjQ1NDc0OTFhYmMyOGUxNWYyZmIwZGMwODJiODk1ZjZiZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+CQLwpm7NFJQ8qu1LerX01NJ2f6
441vPNaH58B8CC8aEjxMUI/kmN7F/R9sSvO9013Jp7aLiIMwbpGwf19z+lKzkXjV
CWP3dxohZ5gQdN15fyfRF+wPGbi5I8dK2G2qMxg0U8c1HoY86Nc17JSNN6HVjxL8
86t1RghtMYXAnMMWP5lAfxId3zHNgvkdOcYAN6wkpDNeXpJAd2pCHJmK4gun6V5K
xHym6q8c1cq+UawxW051mvNbej7yy0CNFmQsW2n7+egIPgTEx3ztDuRzuuxSdktP
XgUtelcVGgrhJE3/NPECDydTuUoxjaF/TyMTR4IANH5qJMqh8CJD1XpIsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmdJFR0kavCjhXy+w3AgriV9r9YMB8GA1UdIwQY
MBaAFAMexK4dBNrhQBXGJ/o5az785WBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80MjE0NzYtYjgwOC00ODVlLWJiNTYt
ZjE5YTJmZGUxZTZhLzEvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80MjE0NzYtYjgwOC00ODVlLWJiNTYtZjE5YTJmZGUxZTZh
LzEvQXg3RXJoMEUydUZBRmNZbi1qbHJQdnpsWUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQl1oE87y
hvGFAKDLo+q1X0v944KUrQzMm/M37CjqFXRIFzoNzIkc0Uuo59uSld1dtWLuOCOZ
0ofrqdMP09VM/adh693rekgHIswKpfXqc0LQPQ/46aQJQrBvtbATU76nFIN4bGO5
N4/r1kvLoDqbjOZzmYEY9bTtzwWCtr4yyQ48QgamUe8OQ5WaSrMRBka9k4x9B3+5
UH1F+FhquxP5KpDokTyVfbjs9VFTX5iSJcfSrZdDUG4nJeUFr81CYUKjGsK5shxv
wNOTBmNXySDXwAqIai6tmS2tiR6xBwV1cUbgIkWftUEdYKRyV0bawSYIFC9LaFCQ
bu2smVXldJYZvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:00 2025 by rpki-client