Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
File:                     ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json)
Hash identifier:          uT8/a8VTB6Tl8Dw1D55J0/FD2mtnuWA3ohdNhB6LygU=
Subject key identifier:   FA:C0:E2:76:77:BF:10:B8:D7:57:F7:9A:CC:1B:50:1B:00:C5:E9:18
Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B
Certificate issuer:       /CN=654364d0c6c93df28027488afcbfcf329726392b
Certificate serial:       0199FBEAF51FE1EFCD06C1697BDF927C9961
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
Manifest number:          0A75
Signing time:             Sun 19 Oct 2025 10:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:43 +0000
Files and hashes:         1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: +cndEIU+m7/exDC9dXzNgABvWzf1vEXxVk45bNGaCNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f5:1f:e1:ef:cd:06:c1:69:7b:df:92:7c:99:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b
        Validity
            Not Before: Oct 19 10:01:43 2025 GMT
            Not After : Oct 20 10:01:43 2025 GMT
        Subject: CN=fac0e27677bf10b8d757f79acc1b501b00c5e918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ad:8a:05:21:9c:0e:2b:fe:a6:51:da:b7:05:
                    db:54:4c:22:62:2f:12:04:8b:10:f5:2f:af:24:a5:
                    2f:38:39:ba:14:6b:9b:d6:01:20:3f:a7:f4:50:e3:
                    fc:33:74:fb:11:82:68:a9:00:bf:7e:99:fa:26:69:
                    19:40:bc:6e:7d:66:19:03:ba:a1:13:c1:13:3f:c3:
                    f3:a3:31:8a:cd:0d:6a:b3:cb:11:52:ec:a7:a1:26:
                    06:71:c4:ba:51:79:03:7d:77:b8:60:f4:bf:f3:d1:
                    e8:7f:c6:1e:81:e4:f1:8b:8c:cc:2a:9b:4b:03:5a:
                    0a:63:67:a8:5d:a9:5f:2c:0e:8b:50:20:96:2f:4a:
                    ff:00:e8:82:77:ca:2d:4c:01:0f:cf:84:d7:85:9f:
                    c1:e0:89:a0:f1:c9:22:2c:10:e9:af:ca:e8:f2:f6:
                    3f:e9:e0:93:46:ea:32:5b:7c:0f:53:f0:e2:3f:e9:
                    42:9f:b3:a6:7c:a9:ae:63:5b:60:7f:94:2f:96:1e:
                    b1:a9:8d:3a:3c:61:b8:df:42:b2:37:5a:a8:20:c0:
                    c7:f1:40:76:cd:c2:02:8a:80:33:ac:ec:1f:71:cc:
                    5e:93:c6:60:99:e4:44:d3:e2:d1:49:a7:96:32:71:
                    0a:2e:49:2b:f8:82:a7:bd:ea:72:ac:da:20:59:e6:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C0:E2:76:77:BF:10:B8:D7:57:F7:9A:CC:1B:50:1B:00:C5:E9:18
            X509v3 Authority Key Identifier:
                keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:73:cb:57:a6:34:34:f3:db:3d:e2:1f:b9:31:95:78:1b:c6:
         bd:67:76:b3:09:ad:f1:5e:6e:8f:66:f2:0e:9a:7f:e0:90:87:
         2d:6f:82:19:8d:eb:9e:9c:87:b1:07:f5:9e:25:85:d2:a6:d1:
         1b:fd:ba:89:fb:71:21:25:16:71:a4:c5:1d:50:97:ae:cb:43:
         5f:c5:04:bc:d8:8d:f8:47:13:3b:ac:e8:07:38:42:94:3a:df:
         97:13:cc:a9:ff:88:46:9c:e2:bc:d2:75:68:44:f1:c5:d7:f3:
         20:ce:f3:d0:6d:04:26:61:b6:58:b8:ee:24:5e:55:08:34:80:
         fd:00:61:ff:4b:d2:a2:8b:ea:79:b5:fc:52:b0:60:3c:57:26:
         4d:91:af:d4:84:2d:71:e4:ec:58:2c:7a:3c:e7:31:d8:a6:4b:
         00:1c:ee:8b:e9:87:ae:56:dc:d4:07:3d:27:6f:17:01:de:5c:
         77:12:70:17:8a:49:21:bb:d1:26:71:f8:a8:87:59:5a:32:2e:
         2f:c0:8d:22:56:18:c4:33:90:2e:93:50:49:68:fa:5e:28:e0:
         e1:89:25:23:d4:68:f2:30:11:f9:28:5f:56:b6:c3:bf:38:65:
         e1:eb:9f:99:52:12:f7:97:9d:36:b2:ca:a8:5f:bf:fc:61:9a:
         f5:98:9e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76vUf4e/NBsFpe9+SfJlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDM2NGQwYzZjOTNkZjI4MDI3NDg4YWZjYmZjZjMyOTcy
NjM5MmIwHhcNMjUxMDE5MTAwMTQzWhcNMjUxMDIwMTAwMTQzWjAzMTEwLwYDVQQD
EyhmYWMwZTI3Njc3YmYxMGI4ZDc1N2Y3OWFjYzFiNTAxYjAwYzVlOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q2KBSGcDiv+plHatwXbVEwiYi8S
BIsQ9S+vJKUvODm6FGub1gEgP6f0UOP8M3T7EYJoqQC/fpn6JmkZQLxufWYZA7qh
E8ETP8PzozGKzQ1qs8sRUuynoSYGccS6UXkDfXe4YPS/89Hof8YegeTxi4zMKptL
A1oKY2eoXalfLA6LUCCWL0r/AOiCd8otTAEPz4TXhZ/B4Img8ckiLBDpr8ro8vY/
6eCTRuoyW3wPU/DiP+lCn7OmfKmuY1tgf5Qvlh6xqY06PGG430KyN1qoIMDH8UB2
zcICioAzrOwfccxek8ZgmeRE0+LRSaeWMnEKLkkr+IKnvepyrNogWeYj5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrA4nZ3vxC411f3mswbUBsAxekYMB8GA1UdIwQY
MBaAFGVDZNDGyT3ygCdIivy/zzKXJjkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZjlhYjEtZWFiMS00NmNjLTg4ZTct
YjZlOGVhOTEyNDgwLzEvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zZjlhYjEtZWFiMS00NmNjLTg4ZTctYjZlOGVhOTEyNDgw
LzEvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHPLV6Y0
NPPbPeIfuTGVeBvGvWd2swmt8V5uj2byDpp/4JCHLW+CGY3rnpyHsQf1niWF0qbR
G/26iftxISUWcaTFHVCXrstDX8UEvNiN+EcTO6zoBzhClDrflxPMqf+IRpzivNJ1
aETxxdfzIM7z0G0EJmG2WLjuJF5VCDSA/QBh/0vSoovqebX8UrBgPFcmTZGv1IQt
ceTsWCx6POcx2KZLABzui+mHrlbc1Ac9J28XAd5cdxJwF4pJIbvRJnH4qIdZWjIu
L8CNIlYYxDOQLpNQSWj6Xijg4YklI9Ro8jAR+ShfVrbDvzhl4eufmVIS95edNrLK
qF+//GGa9ZieNw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:02 2025 by rpki-client