Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File:                     h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier:          v75unvO0m4KJi39SYhKJLWCYV8AKQOIItH915Dw04N0=
Subject key identifier:   97:11:8B:2E:B0:53:E3:2B:4F:1B:A0:20:E4:C8:7C:35:67:BA:93:1E
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer:       /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial:       0199FF598AFD8243D3EA645E5E0A7245E31F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number:          07DC
Signing time:             Mon 20 Oct 2025 02:01:22 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:22 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:22 +0000
Files and hashes:         1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: xqCqpA+EwmQGU/G5T+rI1kFTV40IfWaj3fUfG/lpVR0=)
                          2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:8a:fd:82:43:d3:ea:64:5e:5e:0a:72:45:e3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
        Validity
            Not Before: Oct 20 02:01:22 2025 GMT
            Not After : Oct 21 02:01:22 2025 GMT
        Subject: CN=97118b2eb053e32b4f1ba020e4c87c3567ba931e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:64:95:08:53:78:cb:d8:3c:5c:ed:25:e6:
                    96:9b:ab:6f:4d:0a:ef:ca:6d:b4:df:7a:02:95:58:
                    d3:2e:3e:36:8b:2b:27:0e:91:cd:5d:c1:34:57:65:
                    48:21:fe:76:93:4a:75:1d:04:f5:fa:ba:6c:6c:2d:
                    56:41:9c:63:07:d8:e7:68:17:34:d9:04:41:fd:a6:
                    d2:7a:0b:37:6c:ab:af:1c:67:4a:96:60:9b:9b:d2:
                    1d:62:c8:32:cd:ea:13:40:6e:81:a2:de:a4:3f:70:
                    11:d1:ed:9d:73:0f:b1:47:44:ef:7c:4b:7c:75:b4:
                    e9:3a:ef:52:5f:a1:b1:ff:ac:ca:5a:5f:37:4a:ab:
                    e9:9e:ac:a7:a8:cd:eb:63:69:23:16:74:e8:35:d3:
                    37:46:ec:33:90:e1:95:4d:b2:20:ee:97:cf:bd:d0:
                    a0:58:0e:e2:86:f5:50:a2:8f:4f:ea:16:a4:d3:85:
                    f9:b8:65:9a:44:99:09:11:5f:fd:4c:c6:43:c1:bb:
                    58:49:f6:e5:78:80:80:81:a1:ae:41:3f:1b:97:8a:
                    60:6b:5c:a1:3a:00:84:3e:14:39:08:84:ee:23:80:
                    5c:ba:ec:ef:a7:36:3b:9b:ce:cb:27:cd:45:42:7a:
                    97:bb:48:06:7d:e1:7b:c5:84:d5:e7:e9:36:89:f2:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:11:8B:2E:B0:53:E3:2B:4F:1B:A0:20:E4:C8:7C:35:67:BA:93:1E
            X509v3 Authority Key Identifier:
                keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4f:bc:ff:d2:50:fa:d8:d3:b1:ad:4e:93:e3:68:66:6e:b5:
         78:61:55:07:22:c4:fe:7e:6a:c0:5d:cf:fd:81:91:a8:3b:2c:
         41:5d:62:ad:b6:34:80:9c:fb:f8:2c:38:0e:26:e8:95:e7:68:
         9f:64:fc:9a:5d:d0:1d:ed:f6:c8:6b:4e:fb:6a:65:ad:4e:dc:
         8d:98:65:d9:6d:a7:54:3c:89:4d:7b:45:af:71:7b:de:01:dd:
         64:dd:71:59:bd:9a:b7:4f:4c:62:91:0d:11:22:dd:04:84:24:
         6b:f7:53:e0:26:9d:d9:28:06:67:77:bf:78:ac:46:0d:12:bf:
         1a:8f:4a:4d:93:2a:ed:66:07:de:a1:c0:a2:cb:d3:c3:2d:f2:
         df:f8:8f:b7:71:3f:16:fa:7f:f2:3e:65:45:53:28:68:7d:6d:
         17:00:c3:0b:30:c8:03:a7:0c:65:f7:03:6c:c5:df:d7:43:92:
         80:75:49:a6:d4:05:3b:9f:ad:94:60:0f:79:fa:f4:b3:dc:b5:
         09:d3:74:f2:fa:62:dc:43:c2:7d:e5:62:a5:9f:f8:a9:00:c0:
         5e:bc:89:f0:61:a6:66:78:93:67:c6:3d:b7:3f:f9:99:74:60:
         af:09:f8:ed:dc:55:cf:e3:a3:6f:fc:65:5a:b3:c3:14:2b:70:
         10:d2:36:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WYr9gkPT6mReXgpyReMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGMzZGNjY2JmMDJiYTg1MDFhYjFjNzA2ZDMxZTEzN2Zk
ZGY0MWQwHhcNMjUxMDIwMDIwMTIyWhcNMjUxMDIxMDIwMTIyWjAzMTEwLwYDVQQD
Eyg5NzExOGIyZWIwNTNlMzJiNGYxYmEwMjBlNGM4N2MzNTY3YmE5MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRxklQhTeMvYPFztJeaWm6tvTQrv
ym2033oClVjTLj42iysnDpHNXcE0V2VIIf52k0p1HQT1+rpsbC1WQZxjB9jnaBc0
2QRB/abSegs3bKuvHGdKlmCbm9IdYsgyzeoTQG6Bot6kP3AR0e2dcw+xR0TvfEt8
dbTpOu9SX6Gx/6zKWl83SqvpnqynqM3rY2kjFnToNdM3RuwzkOGVTbIg7pfPvdCg
WA7ihvVQoo9P6hak04X5uGWaRJkJEV/9TMZDwbtYSfbleICAgaGuQT8bl4pga1yh
OgCEPhQ5CITuI4BcuuzvpzY7m87LJ81FQnqXu0gGfeF7xYTV5+k2ifIcpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcRiy6wU+MrTxugIOTIfDVnupMeMB8GA1UdIwQY
MBaAFIdMPczL8CuoUBqxxwbTHhN/3fQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzct
YTA0NzYyMDk1ZWU2LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85OTNkMzgtMjE4OC00YTdiLWJjMzctYTA0NzYyMDk1ZWU2
LzEvaDB3OXpNdndLNmhRR3JISEJ0TWVFM19kOUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAok+8/9JQ
+tjTsa1Ok+NoZm61eGFVByLE/n5qwF3P/YGRqDssQV1irbY0gJz7+Cw4Diboledo
n2T8ml3QHe32yGtO+2plrU7cjZhl2W2nVDyJTXtFr3F73gHdZN1xWb2at09MYpEN
ESLdBIQka/dT4Cad2SgGZ3e/eKxGDRK/Go9KTZMq7WYH3qHAosvTwy3y3/iPt3E/
Fvp/8j5lRVMoaH1tFwDDCzDIA6cMZfcDbMXf10OSgHVJptQFO5+tlGAPefr0s9y1
CdN08vpi3EPCfeVipZ/4qQDAXryJ8GGmZniTZ8Y9tz/5mXRgrwn47dxVz+Ojb/xl
WrPDFCtwENI2Sg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:09 2025 by rpki-client