Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
File:                     46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json)
Hash identifier:          hrM82WYbvPV7U+RxZRGITbCpvgOAXHezEaagmN9ws80=
Subject key identifier:   CD:9A:E4:54:D9:54:AB:57:88:FE:0A:BA:94:94:03:4E:D9:65:AC:E7
Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
Certificate issuer:       /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Certificate serial:       0199FC590F214D8C51917DF0DF7C2AA056C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
Manifest number:          15C4
Signing time:             Sun 19 Oct 2025 12:01:58 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:58 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:58 +0000
Files and hashes:         1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: dZva7NbYQOB4iKZUc3PjhUp9GfYHQPqnz7lruL/UZA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:0f:21:4d:8c:51:91:7d:f0:df:7c:2a:a0:56:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
        Validity
            Not Before: Oct 19 12:01:58 2025 GMT
            Not After : Oct 20 12:01:58 2025 GMT
        Subject: CN=cd9ae454d954ab5788fe0aba9494034ed965ace7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:12:f8:4c:77:c6:2b:ba:77:71:f8:7c:81:65:
                    29:85:7e:b6:16:ee:a5:bc:2c:e2:e5:72:0d:fc:af:
                    08:c1:a1:f7:00:9a:8c:e0:b7:08:c5:7b:3c:5c:83:
                    30:2d:50:c0:e6:1b:4a:6b:1c:7d:80:5b:aa:46:62:
                    a2:a3:65:77:6a:20:e9:ff:41:6a:1e:fc:63:4d:0e:
                    51:52:4b:4d:95:2b:23:cb:52:d8:89:07:de:91:6e:
                    bc:b0:36:83:e4:cf:c4:97:73:f0:44:af:1c:96:29:
                    8b:8b:0f:f4:3c:fb:7e:2e:05:6c:2a:67:e0:9c:4c:
                    8c:37:54:b7:a8:e9:09:07:8b:25:ee:fd:38:6d:3d:
                    e0:50:a2:53:18:97:33:a9:df:81:89:c2:1f:56:c3:
                    00:95:f5:e2:90:d5:c1:28:64:93:09:86:fe:e8:37:
                    b6:04:8f:57:48:ee:cb:6e:a6:1c:70:13:a6:11:c4:
                    ff:ac:ea:81:2e:05:f2:36:2c:74:ec:87:d7:a2:d3:
                    47:bb:0d:9e:cc:09:ae:c6:a8:fb:13:14:8a:1f:fd:
                    fc:42:cd:d6:57:85:e5:c7:53:63:25:64:7d:a4:f5:
                    7b:c2:ea:6e:8b:2b:2b:d7:7e:5d:ae:ac:6d:25:ea:
                    95:b9:d4:5e:10:54:c4:5f:ce:da:05:ef:2e:7c:85:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:E4:54:D9:54:AB:57:88:FE:0A:BA:94:94:03:4E:D9:65:AC:E7
            X509v3 Authority Key Identifier:
                keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:60:ee:6d:40:50:91:e9:cc:40:9f:93:ae:ad:43:ee:e6:51:
         67:35:a9:51:c3:c9:c4:e9:69:5d:5a:44:9e:7b:22:cf:b6:42:
         62:35:e5:05:e0:d4:60:39:74:5f:f0:25:4f:4d:2d:21:ad:63:
         5c:d3:72:3c:0c:0e:f0:e6:ad:d0:6a:29:1a:f2:71:b1:65:ae:
         9d:eb:af:99:19:17:a4:19:a8:5f:a5:cb:b4:6f:7e:89:e8:bc:
         de:17:30:e4:c1:ac:03:90:9e:90:a7:1e:96:29:c7:8b:0c:f7:
         e7:54:bb:6f:95:36:f5:6d:72:fe:36:58:bc:2f:74:fa:57:e9:
         7f:e9:36:a0:86:29:14:65:f5:82:6a:6e:1f:aa:59:11:5a:6b:
         bd:f7:06:cb:1a:c5:34:07:6c:78:63:c2:f1:e8:94:ef:b5:d0:
         b6:0b:5c:6b:f7:85:4a:5d:f6:18:b4:35:80:03:2a:a3:83:86:
         32:5d:39:6b:44:64:6b:63:72:a6:38:83:98:c7:d1:07:55:68:
         49:39:e5:04:5f:60:ef:cf:fe:b0:53:a2:8f:7b:41:de:75:3f:
         8c:63:49:df:19:40:cd:db:df:10:43:ea:d9:dd:d4:28:59:07:
         e3:5c:2d:70:4f:1a:0a:89:0e:c7:84:4f:6b:af:02:ad:50:9d:
         ef:6f:66:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WQ8hTYxRkX3w33wqoFbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWI2ZGIyYWMzNmU5ODkzM2FiOTlhODlhNGQ5YzE2OWVh
NWVmYmIwHhcNMjUxMDE5MTIwMTU4WhcNMjUxMDIwMTIwMTU4WjAzMTEwLwYDVQQD
EyhjZDlhZTQ1NGQ5NTRhYjU3ODhmZTBhYmE5NDk0MDM0ZWQ5NjVhY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BL4THfGK7p3cfh8gWUphX62Fu6l
vCzi5XIN/K8IwaH3AJqM4LcIxXs8XIMwLVDA5htKaxx9gFuqRmKio2V3aiDp/0Fq
HvxjTQ5RUktNlSsjy1LYiQfekW68sDaD5M/El3PwRK8climLiw/0PPt+LgVsKmfg
nEyMN1S3qOkJB4sl7v04bT3gUKJTGJczqd+BicIfVsMAlfXikNXBKGSTCYb+6De2
BI9XSO7LbqYccBOmEcT/rOqBLgXyNix07IfXotNHuw2ezAmuxqj7ExSKH/38Qs3W
V4Xlx1NjJWR9pPV7wupuiysr135drqxtJeqVudReEFTEX87aBe8ufIWgoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2a5FTZVKtXiP4KupSUA07ZZaznMB8GA1UdIwQY
MBaAFOOrbbKsNumJM6uZqJpNnBaepe+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9lZDAxYWEtMTVmYS00M2E2LThhMTUt
ZjI2ZjUwODM0ZjI5LzEvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9lZDAxYWEtMTVmYS00M2E2LThhMTUtZjI2ZjUwODM0ZjI5
LzEvNDZ0dHNxdzI2WWt6cTVtb21rMmNGcDZsNzdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWDubUBQ
kenMQJ+Trq1D7uZRZzWpUcPJxOlpXVpEnnsiz7ZCYjXlBeDUYDl0X/AlT00tIa1j
XNNyPAwO8Oat0GopGvJxsWWuneuvmRkXpBmoX6XLtG9+iei83hcw5MGsA5CekKce
linHiwz351S7b5U29W1y/jZYvC90+lfpf+k2oIYpFGX1gmpuH6pZEVprvfcGyxrF
NAdseGPC8eiU77XQtgtca/eFSl32GLQ1gAMqo4OGMl05a0Rka2NypjiDmMfRB1Vo
STnlBF9g78/+sFOij3tB3nU/jGNJ3xlAzdvfEEPq2d3UKFkH41wtcE8aCokOx4RP
a68CrVCd729mjg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:27 2025 by rpki-client