Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File:                     zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier:          wsGA4KlBLCNprwrEntCZXzu7dST1XxuJqzkawS+/9AE=
Subject key identifier:   B2:53:C1:8D:92:14:77:55:4C:51:B4:4B:6D:5F:B2:CE:CD:50:1D:4B
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer:       /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial:       0199FDD98D5F63A4B08FA990F9E29729063E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number:          0C32
Signing time:             Sun 19 Oct 2025 19:01:57 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:57 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:57 +0000
Files and hashes:         1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
                          2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: brqd6ej0L7v13ClwLRnHb5VgXx9jOJZ1uJeWbuAedy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:8d:5f:63:a4:b0:8f:a9:90:f9:e2:97:29:06:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
        Validity
            Not Before: Oct 19 19:01:57 2025 GMT
            Not After : Oct 20 19:01:57 2025 GMT
        Subject: CN=b253c18d921477554c51b44b6d5fb2cecd501d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:6d:12:bd:df:8a:a8:5f:cb:05:56:66:e7:
                    fc:75:7a:91:06:9c:de:83:d5:5b:a3:19:4f:e4:89:
                    23:67:63:20:fa:a1:fa:81:7c:a1:05:d9:f7:a9:f6:
                    84:d4:6a:be:93:02:2a:c9:e2:eb:70:71:a5:6b:7f:
                    4e:b5:4a:11:91:d9:77:26:f4:79:3e:8d:f6:13:13:
                    32:d3:6c:49:bf:5e:66:78:09:a6:f9:6c:33:7c:c6:
                    20:f9:99:df:32:9a:8c:f6:4e:39:e1:f6:ce:10:38:
                    b1:ae:a5:8c:a8:03:60:e5:18:cb:54:d6:fb:e7:d1:
                    ef:c2:73:7b:f6:c3:c5:64:9d:51:d4:91:a0:42:27:
                    ed:69:af:ed:3d:45:67:84:14:fd:c8:c4:16:0f:4d:
                    22:a5:a5:02:e1:6e:06:af:a2:3d:2c:47:02:08:db:
                    2b:32:4d:1f:c6:68:6a:5b:ff:c8:8a:24:fa:9e:c7:
                    b0:c8:0f:ee:e0:b0:48:52:43:f2:c2:26:a3:9c:cd:
                    23:93:17:05:dd:d7:f9:46:2f:37:cb:89:d1:cf:6b:
                    2e:e7:cc:42:61:b8:ef:b5:f4:fd:67:88:4b:c5:7e:
                    de:ff:56:63:3e:9f:1a:62:c3:ce:28:08:1c:e4:f4:
                    4e:05:86:8b:72:02:c1:18:d9:1d:39:88:b4:54:3d:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:53:C1:8D:92:14:77:55:4C:51:B4:4B:6D:5F:B2:CE:CD:50:1D:4B
            X509v3 Authority Key Identifier:
                keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5d:35:7d:36:78:c6:52:88:57:da:f6:45:35:63:5f:1c:19:
         21:90:e2:46:97:c7:d6:d4:3a:be:f0:2b:d0:23:59:76:5b:36:
         23:46:97:92:05:29:a6:24:4d:4d:42:da:c6:00:c6:e2:3a:12:
         c3:b8:e6:09:c3:7c:f2:ea:06:cd:76:84:ef:52:bd:3a:d3:09:
         0c:5c:79:0f:89:9d:1a:a9:38:3f:e5:c6:44:de:10:9c:47:32:
         c1:17:e0:b3:e0:09:79:cd:c2:bb:df:3c:38:31:48:31:bd:4e:
         3c:c0:db:a8:52:12:5d:d7:96:d8:70:9b:c9:8f:48:7e:7e:20:
         28:a9:3c:91:01:9a:40:99:48:e6:f2:f6:58:42:1b:84:f0:49:
         f2:8a:93:45:02:84:e9:34:e7:cc:b5:4f:f1:4f:4c:df:71:b4:
         68:a4:22:67:b6:81:d1:fd:70:7d:b5:b5:ec:f0:9e:fe:6a:c7:
         44:a0:9d:08:59:a7:ff:10:ff:81:b1:1d:61:4e:78:b8:28:e9:
         db:77:af:d6:f5:4e:92:db:43:97:c4:3c:e8:c4:bb:7d:f9:0b:
         3a:0d:71:18:e6:90:66:55:e9:4b:94:41:a4:b9:5b:c8:78:c7:
         cc:13:d2:95:c6:e6:7e:26:ca:f4:d7:23:49:c9:78:3a:0c:51:
         73:9f:2c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92Y1fY6Swj6mQ+eKXKQY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDFjZGEwMzAyYjgxM2ViMTQ1NTc5YWQ4MWY1ZWQ3ZDI5
YzAyMDkwHhcNMjUxMDE5MTkwMTU3WhcNMjUxMDIwMTkwMTU3WjAzMTEwLwYDVQQD
EyhiMjUzYzE4ZDkyMTQ3NzU1NGM1MWI0NGI2ZDVmYjJjZWNkNTAxZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfZtEr3fiqhfywVWZuf8dXqRBpze
g9VboxlP5IkjZ2Mg+qH6gXyhBdn3qfaE1Gq+kwIqyeLrcHGla39OtUoRkdl3JvR5
Po32ExMy02xJv15meAmm+WwzfMYg+ZnfMpqM9k454fbOEDixrqWMqANg5RjLVNb7
59HvwnN79sPFZJ1R1JGgQiftaa/tPUVnhBT9yMQWD00ipaUC4W4Gr6I9LEcCCNsr
Mk0fxmhqW//IiiT6nsewyA/u4LBIUkPywiajnM0jkxcF3df5Ri83y4nRz2su58xC
YbjvtfT9Z4hLxX7e/1ZjPp8aYsPOKAgc5PROBYaLcgLBGNkdOYi0VD3kmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJTwY2SFHdVTFG0S21fss7NUB1LMB8GA1UdIwQY
MBaAFM0BzaAwK4E+sUVXmtgfXtfSnAIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zZTM0ODMtMTg0NS00NDJkLWE1OWEt
ZGQ3MjU1MGQ3OGFjLzEvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zZTM0ODMtMTg0NS00NDJkLWE1OWEtZGQ3MjU1MGQ3OGFj
LzEvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF101fTZ4
xlKIV9r2RTVjXxwZIZDiRpfH1tQ6vvAr0CNZdls2I0aXkgUppiRNTULaxgDG4joS
w7jmCcN88uoGzXaE71K9OtMJDFx5D4mdGqk4P+XGRN4QnEcywRfgs+AJec3Cu988
ODFIMb1OPMDbqFISXdeW2HCbyY9Ifn4gKKk8kQGaQJlI5vL2WEIbhPBJ8oqTRQKE
6TTnzLVP8U9M33G0aKQiZ7aB0f1wfbW17PCe/mrHRKCdCFmn/xD/gbEdYU54uCjp
23ev1vVOkttDl8Q86MS7ffkLOg1xGOaQZlXpS5RBpLlbyHjHzBPSlcbmfibK9Ncj
Scl4OgxRc58slA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:31 2025 by rpki-client