Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
File:                     vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft (raw, json)
Hash identifier:          O0yv0SozgXW9gKvInEu4p6M8bTIV4vVTejFkaaoesSk=
Subject key identifier:   40:BD:48:81:64:E4:19:33:02:D9:B9:CE:D7:29:9D:D6:FB:E4:BC:99
Authority key identifier: BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6
Certificate issuer:       /CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
Certificate serial:       0199FFC80DE498FED8F6AB17E6043CEE609E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
Manifest number:          16E0
Signing time:             Mon 20 Oct 2025 04:02:04 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:04 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:04 +0000
Files and hashes:         1: vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl (hash: BIOzdIDhZz/y1I/2wrD/IRQfxcMRMULmR726uGndHas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:0d:e4:98:fe:d8:f6:ab:17:e6:04:3c:ee:60:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9f5aae9a37676ee0a7712ff310dd0b0a6f22c6
        Validity
            Not Before: Oct 20 04:02:04 2025 GMT
            Not After : Oct 21 04:02:04 2025 GMT
        Subject: CN=40bd488164e4193302d9b9ced7299dd6fbe4bc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:66:ab:b6:fe:9b:99:e6:3b:d0:1b:0c:c6:
                    fa:cc:fe:7f:00:35:04:ba:fc:71:96:53:cb:3e:af:
                    60:ae:60:3c:0d:49:33:c4:f6:19:c2:35:21:c4:75:
                    7b:9a:a2:73:bc:e5:e6:d5:1b:b8:f0:4c:3d:27:f0:
                    08:94:2d:33:19:1b:24:2c:d4:86:19:f0:e3:f7:88:
                    87:8a:59:8b:3d:b7:b1:13:67:fc:06:9c:7b:83:92:
                    ca:07:68:e0:3c:70:56:78:92:cf:a9:87:a1:5e:fc:
                    e1:20:60:bb:1f:53:04:1a:00:7e:09:f9:6b:49:59:
                    6c:5a:cd:89:16:1a:77:b3:5e:24:30:e7:10:ff:77:
                    f3:c8:a6:82:64:37:43:20:d0:19:40:c9:f4:81:49:
                    fe:45:45:af:a5:7c:36:c8:4a:2f:57:b8:6d:b6:ff:
                    78:df:8b:8d:86:79:7d:f0:9e:b9:0b:e1:d3:fd:a7:
                    f6:b9:e0:8a:d0:a3:a1:f8:d7:f6:82:e0:24:b1:c1:
                    ce:f9:80:49:78:ac:f1:ab:c8:dc:fd:86:1c:0f:cf:
                    64:96:ac:a0:30:ef:96:0b:a7:14:d7:43:fe:66:9e:
                    33:56:c3:d4:81:83:d4:73:a8:e5:29:1b:dc:b9:8a:
                    be:21:40:ce:d0:80:ef:0e:d6:ff:73:e8:e4:81:4a:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BD:48:81:64:E4:19:33:02:D9:B9:CE:D7:29:9D:D6:FB:E4:BC:99
            X509v3 Authority Key Identifier:
                keyid:BC:9F:5A:AE:9A:37:67:6E:E0:A7:71:2F:F3:10:DD:0B:0A:6F:22:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cb081-8a7d-4024-ae85-9c4cb3bd925e/1/vJ9arpo3Z27gp3Ev8xDdCwpvIsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:35:0b:57:12:d5:90:b4:97:3d:d1:cd:dc:2f:c7:a3:1e:01:
         d6:1b:89:e0:8b:a9:08:89:68:8e:79:64:d6:bf:d8:41:7a:24:
         bd:26:c7:0c:0d:04:f5:e0:40:70:5d:23:17:4f:35:e6:5e:4e:
         6a:88:b2:5c:e6:15:57:73:58:a9:ff:06:fe:97:be:ff:79:28:
         52:f0:1b:81:10:84:3b:f2:0b:fc:65:66:c0:0f:ad:ee:81:60:
         0b:aa:9a:74:83:68:0e:44:ec:d9:44:18:e0:de:b0:86:81:cd:
         a0:5a:5d:79:5e:2b:36:92:d9:41:42:f6:fb:dc:2b:3a:66:6e:
         1f:f1:6e:89:be:b6:ad:3f:e6:ed:23:c3:a2:f4:be:73:e4:ce:
         3c:b9:2a:a7:cb:a7:26:66:ac:99:f8:5d:07:ce:84:fb:b6:e6:
         2c:91:dd:a3:32:57:9b:90:a1:e8:05:2b:4f:86:ec:12:94:44:
         54:78:59:6f:e2:5d:3c:1f:8c:8d:dd:b6:84:ab:3f:29:6d:39:
         97:7d:97:43:39:0c:dd:3c:ae:b6:44:13:6c:01:cb:02:76:d4:
         22:99:35:c7:00:ff:33:1f:49:8d:f5:02:82:69:10:0a:84:e4:
         6a:56:6e:c6:a9:d8:50:11:e3:06:7f:9c:71:45:a7:95:cc:21:
         f7:b1:87:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yA3kmP7Y9qsX5gQ87mCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWY1YWFlOWEzNzY3NmVlMGE3NzEyZmYzMTBkZDBiMGE2
ZjIyYzYwHhcNMjUxMDIwMDQwMjA0WhcNMjUxMDIxMDQwMjA0WjAzMTEwLwYDVQQD
Eyg0MGJkNDg4MTY0ZTQxOTMzMDJkOWI5Y2VkNzI5OWRkNmZiZTRiYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNtmq7b+m5nmO9AbDMb6zP5/ADUE
uvxxllPLPq9grmA8DUkzxPYZwjUhxHV7mqJzvOXm1Ru48Ew9J/AIlC0zGRskLNSG
GfDj94iHilmLPbexE2f8Bpx7g5LKB2jgPHBWeJLPqYehXvzhIGC7H1MEGgB+Cflr
SVlsWs2JFhp3s14kMOcQ/3fzyKaCZDdDINAZQMn0gUn+RUWvpXw2yEovV7httv94
34uNhnl98J65C+HT/af2ueCK0KOh+Nf2guAkscHO+YBJeKzxq8jc/YYcD89klqyg
MO+WC6cU10P+Zp4zVsPUgYPUc6jlKRvcuYq+IUDO0IDvDtb/c+jkgUoEuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEC9SIFk5BkzAtm5ztcpndb75LyZMB8GA1UdIwQY
MBaAFLyfWq6aN2du4KdxL/MQ3QsKbyLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Y2IwODEtOGE3ZC00MDI0LWFlODUt
OWM0Y2IzYmQ5MjVlLzEvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82Y2IwODEtOGE3ZC00MDI0LWFlODUtOWM0Y2IzYmQ5MjVl
LzEvdko5YXJwbzNaMjdncDNFdjh4RGRDd3B2SXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDULVxLV
kLSXPdHN3C/Hox4B1huJ4IupCIlojnlk1r/YQXokvSbHDA0E9eBAcF0jF0815l5O
aoiyXOYVV3NYqf8G/pe+/3koUvAbgRCEO/IL/GVmwA+t7oFgC6qadINoDkTs2UQY
4N6whoHNoFpdeV4rNpLZQUL2+9wrOmZuH/Fuib62rT/m7SPDovS+c+TOPLkqp8un
JmasmfhdB86E+7bmLJHdozJXm5Ch6AUrT4bsEpREVHhZb+JdPB+Mjd22hKs/KW05
l32XQzkM3TyutkQTbAHLAnbUIpk1xwD/Mx9JjfUCgmkQCoTkalZuxqnYUBHjBn+c
cUWnlcwh97GHOA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:53:44 2025 by rpki-client