Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
File:                     ayuSHZprREq1jmbriPfBI5jqBLU.mft (raw, json)
Hash identifier:          AH/dcdJL49tVRS9yXKIRkrDusnWhJcCCSLzEbwJBzjY=
Subject key identifier:   56:90:9D:A9:88:15:F0:E7:87:AE:49:6A:52:D0:B6:87:3E:F9:66:61
Authority key identifier: 6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5
Certificate issuer:       /CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
Certificate serial:       0199FCC62D75C94FD611B884A76075067C5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
Manifest number:          01F0
Signing time:             Sun 19 Oct 2025 14:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:10 +0000
Files and hashes:         1: DLvYR1epD0kUsHEotih2SRcwg4M.roa (hash: hAXB2W+KwBdgzJrLsjH1zUhzRdV04IFcuB1LFga5vPA=)
                          2: ayuSHZprREq1jmbriPfBI5jqBLU.crl (hash: G1m+i9VgtmGs2IAtWiT6h8YRW13crp1jA+KVB1fIijM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:2d:75:c9:4f:d6:11:b8:84:a7:60:75:06:7c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2b921d9a6b444ab58e66eb88f7c12398ea04b5
        Validity
            Not Before: Oct 19 14:01:10 2025 GMT
            Not After : Oct 20 14:01:10 2025 GMT
        Subject: CN=56909da98815f0e787ae496a52d0b6873ef96661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:82:a9:1d:6b:24:13:04:b7:ee:e1:fe:20:
                    d7:38:78:14:a5:b5:83:f7:0e:6a:af:44:fc:33:e7:
                    49:c3:fc:6f:f1:7e:49:d2:b2:ef:b6:68:a2:93:1d:
                    22:fe:db:86:fd:51:6e:ed:5b:2f:ed:01:5c:fe:f5:
                    96:13:2e:5d:a1:43:cd:cf:d1:66:f2:d8:fa:19:c3:
                    48:31:84:d9:51:c5:b1:b8:3e:3c:d1:a7:ab:0b:66:
                    6b:43:fd:91:cf:78:4a:fe:da:d7:67:c2:7b:3e:d7:
                    36:63:b0:e7:30:1f:27:b6:9a:54:bf:41:88:4c:7a:
                    a2:4a:9b:22:be:eb:19:97:07:be:c4:ea:f8:12:92:
                    34:93:c2:5e:db:67:b4:44:24:99:e8:c6:89:2f:a2:
                    63:f7:f3:fc:12:0d:46:bb:0a:1c:0c:71:68:3f:6c:
                    ff:03:47:91:09:75:2d:65:df:7d:f7:d7:94:af:41:
                    23:07:61:89:d8:52:dd:70:29:f7:b9:3f:93:cc:f0:
                    63:35:3d:d8:23:fe:36:cd:27:17:04:45:bb:63:a9:
                    5a:77:f8:ef:19:b7:f9:17:20:29:cf:11:40:bb:fa:
                    05:f3:cd:9e:ed:c8:07:72:d8:c0:bf:b7:ff:33:80:
                    8a:1f:22:33:b9:12:a1:7e:e4:ae:1f:8c:67:02:3d:
                    fd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:90:9D:A9:88:15:F0:E7:87:AE:49:6A:52:D0:B6:87:3E:F9:66:61
            X509v3 Authority Key Identifier:
                keyid:6B:2B:92:1D:9A:6B:44:4A:B5:8E:66:EB:88:F7:C1:23:98:EA:04:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayuSHZprREq1jmbriPfBI5jqBLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b623a9-f4e1-4ec2-be4d-9b559529ad16/1/ayuSHZprREq1jmbriPfBI5jqBLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:94:b3:ff:04:09:f4:92:46:ff:e8:1f:65:37:5d:5d:fe:32:
         66:26:e1:1a:34:f6:18:ab:ef:1b:c0:fc:60:7f:c3:de:74:f9:
         35:f6:30:32:55:ec:4c:3b:44:b3:e6:1a:04:a4:8e:a9:f8:2e:
         ca:b7:2a:b4:f0:80:b7:13:08:e7:3b:f4:61:33:15:a3:50:11:
         ec:c5:a8:1c:d5:6d:12:92:f6:a4:eb:e0:78:1b:17:bd:4b:60:
         06:13:18:68:05:0f:ee:c4:35:0f:46:bd:2c:f8:b4:9a:3d:19:
         85:fa:55:da:ba:04:c2:da:cb:8f:7b:da:ae:8a:df:1c:0e:58:
         d7:f3:d4:37:f1:23:9f:28:5d:34:89:e5:51:f6:f1:69:ee:37:
         cf:1e:8f:d8:c1:96:a8:f9:c5:aa:2b:d9:e7:09:6b:67:ca:f0:
         64:aa:81:82:13:1f:4b:af:9c:d2:d0:22:2e:7c:47:8e:ba:6d:
         aa:a6:59:64:e7:13:4a:d0:87:9e:90:80:39:ad:d6:50:8a:6d:
         cb:9e:c6:b1:fe:eb:88:fc:c8:17:63:a6:64:96:78:31:af:c7:
         dd:6b:f6:c2:83:98:d4:d6:e3:be:2b:4c:b5:99:74:1f:a8:6c:
         1c:b2:3b:53:ac:ef:db:6d:fc:6f:83:79:68:2f:ca:c3:a5:db:
         49:77:fd:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xi11yU/WEbiEp2B1BnxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMmI5MjFkOWE2YjQ0NGFiNThlNjZlYjg4ZjdjMTIzOThl
YTA0YjUwHhcNMjUxMDE5MTQwMTEwWhcNMjUxMDIwMTQwMTEwWjAzMTEwLwYDVQQD
Eyg1NjkwOWRhOTg4MTVmMGU3ODdhZTQ5NmE1MmQwYjY4NzNlZjk2NjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYyCqR1rJBMEt+7h/iDXOHgUpbWD
9w5qr0T8M+dJw/xv8X5J0rLvtmiikx0i/tuG/VFu7Vsv7QFc/vWWEy5doUPNz9Fm
8tj6GcNIMYTZUcWxuD480aerC2ZrQ/2Rz3hK/trXZ8J7Ptc2Y7DnMB8ntppUv0GI
THqiSpsivusZlwe+xOr4EpI0k8Je22e0RCSZ6MaJL6Jj9/P8Eg1GuwocDHFoP2z/
A0eRCXUtZd9999eUr0EjB2GJ2FLdcCn3uT+TzPBjNT3YI/42zScXBEW7Y6lad/jv
Gbf5FyApzxFAu/oF882e7cgHctjAv7f/M4CKHyIzuRKhfuSuH4xnAj39DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaQnamIFfDnh65JalLQtoc++WZhMB8GA1UdIwQY
MBaAFGsrkh2aa0RKtY5m64j3wSOY6gS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQt
OWI1NTk1MjlhZDE2LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iNjIzYTktZjRlMS00ZWMyLWJlNGQtOWI1NTk1MjlhZDE2
LzEvYXl1U0hacHJSRXExam1icmlQZkJJNWpxQkxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJSz/wQJ
9JJG/+gfZTddXf4yZibhGjT2GKvvG8D8YH/D3nT5NfYwMlXsTDtEs+YaBKSOqfgu
yrcqtPCAtxMI5zv0YTMVo1AR7MWoHNVtEpL2pOvgeBsXvUtgBhMYaAUP7sQ1D0a9
LPi0mj0ZhfpV2roEwtrLj3varorfHA5Y1/PUN/EjnyhdNInlUfbxae43zx6P2MGW
qPnFqivZ5wlrZ8rwZKqBghMfS6+c0tAiLnxHjrptqqZZZOcTStCHnpCAOa3WUIpt
y57Gsf7riPzIF2OmZJZ4Ma/H3Wv2woOY1NbjvitMtZl0H6hsHLI7U6zv2238b4N5
aC/Kw6XbSXf9gw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:24:28 2025 by rpki-client