Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File:                     cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier:          BITW6jqvrcW00XxgGrREkCT1DbkTJ/KMyweC8kvBOEk=
Subject key identifier:   94:4B:29:D0:6F:54:E4:D4:26:71:57:66:54:8F:01:3C:7E:7F:5C:37
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer:       /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial:       019A00A38EF1B721145689BAFCEB86EB1A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number:          090B
Signing time:             Mon 20 Oct 2025 08:01:50 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:50 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:50 +0000
Files and hashes:         1: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: qFo77DpMCuScbfIGzs+Qf30WOBLYAmzmN440uV2MHFM=)
                          2: d0b72ny8wPnM19_QwF_mbcUjDN0.roa (hash: SMFsSG0c6aEdE5nra06sYeY6XybcAZuUprO34jcJsEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:8e:f1:b7:21:14:56:89:ba:fc:eb:86:eb:1a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
        Validity
            Not Before: Oct 20 08:01:50 2025 GMT
            Not After : Oct 21 08:01:50 2025 GMT
        Subject: CN=944b29d06f54e4d426715766548f013c7e7f5c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:77:b1:0f:04:86:73:da:93:81:d7:14:55:
                    95:87:53:08:37:4b:87:e4:ff:3d:69:46:26:df:3b:
                    82:3c:65:7a:56:3e:85:e8:46:85:a4:b1:80:38:2c:
                    40:a4:54:0d:73:0d:24:8d:e2:13:87:77:48:b3:e2:
                    50:23:21:ef:b9:fe:2e:ba:63:ce:28:d6:26:1a:b3:
                    5b:c8:ac:58:52:05:f3:1f:ef:b5:58:06:44:1a:18:
                    92:71:9b:b6:3b:64:8a:d2:67:e1:ef:80:14:dd:fe:
                    47:87:f0:37:4b:f4:24:47:f9:01:55:bd:ae:e7:ed:
                    d8:38:de:ef:fc:28:ef:c7:a0:8e:9a:77:dd:ae:6e:
                    01:a3:2a:78:79:0c:e0:b2:b0:89:6d:a8:3d:d5:23:
                    fd:20:c7:78:ae:3c:1f:ed:77:dc:bc:30:6b:22:14:
                    c6:9d:c5:bd:e1:6c:1f:99:01:b8:42:ec:84:22:56:
                    0c:2b:b0:5c:93:40:aa:4b:9c:81:37:3b:fc:db:33:
                    97:33:3e:ce:0a:8a:b6:31:6c:6f:c7:66:9d:50:90:
                    98:ef:90:32:1a:57:3a:94:63:b3:05:07:cc:3f:00:
                    93:58:8b:45:52:d0:bc:71:47:29:6b:af:d2:43:c7:
                    17:0b:0a:d2:11:02:57:51:c9:2b:cf:e0:c7:e0:48:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4B:29:D0:6F:54:E4:D4:26:71:57:66:54:8F:01:3C:7E:7F:5C:37
            X509v3 Authority Key Identifier:
                keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d2:69:41:f0:ef:43:d7:cb:bf:c8:37:02:58:3f:0c:6c:4b:
         30:db:02:9d:61:c0:06:13:c9:9e:bc:d1:02:18:fe:3b:ad:06:
         47:b6:e5:70:07:fd:c9:1d:89:49:af:71:d5:0c:9d:45:45:07:
         88:7c:24:05:97:48:29:de:8e:47:0a:3d:6e:57:36:8f:45:9c:
         f3:0f:c6:0d:d7:a7:4c:17:00:18:c2:44:ab:be:ea:43:78:92:
         53:ed:1c:73:23:11:19:da:90:99:7a:31:96:9e:7d:f7:27:48:
         4c:68:f5:91:16:70:3a:84:e6:68:d4:14:4a:8e:68:75:ef:74:
         61:70:82:bd:8f:1b:be:45:05:5a:2d:0a:1d:1d:09:9b:fc:f6:
         ad:9b:25:21:23:d2:17:ed:75:fc:85:2d:18:d7:17:f0:e8:c5:
         3c:e8:39:63:4c:d8:52:f6:21:5a:f8:08:bc:b9:74:ee:14:04:
         16:e4:25:72:06:dc:35:0b:98:6f:c2:29:5c:30:de:fe:78:18:
         a7:00:0d:68:2a:dc:bc:37:2d:b4:b4:1c:fc:74:50:af:86:c6:
         26:05:e1:60:ea:5c:24:6a:d9:7c:6f:09:97:72:06:56:c0:22:
         28:98:38:d0:aa:39:f5:52:0f:f0:9d:84:3e:c5:1e:bf:f8:cb:
         4d:d1:60:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo47xtyEUVom6/OuG6xoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy
Y2UxNGEwHhcNMjUxMDIwMDgwMTUwWhcNMjUxMDIxMDgwMTUwWjAzMTEwLwYDVQQD
Eyg5NDRiMjlkMDZmNTRlNGQ0MjY3MTU3NjY1NDhmMDEzYzdlN2Y1YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzil3sQ8EhnPak4HXFFWVh1MIN0uH
5P89aUYm3zuCPGV6Vj6F6EaFpLGAOCxApFQNcw0kjeITh3dIs+JQIyHvuf4uumPO
KNYmGrNbyKxYUgXzH++1WAZEGhiScZu2O2SK0mfh74AU3f5Hh/A3S/QkR/kBVb2u
5+3YON7v/Cjvx6COmnfdrm4Boyp4eQzgsrCJbag91SP9IMd4rjwf7XfcvDBrIhTG
ncW94WwfmQG4QuyEIlYMK7Bck0CqS5yBNzv82zOXMz7OCoq2MWxvx2adUJCY75Ay
Glc6lGOzBQfMPwCTWItFUtC8cUcpa6/SQ8cXCwrSEQJXUckrz+DH4EjwIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRLKdBvVOTUJnFXZlSPATx+f1w3MB8GA1UdIwQY
MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct
OTY4ZDBjN2YyMmJiLzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi
LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9JpQfDv
Q9fLv8g3Alg/DGxLMNsCnWHABhPJnrzRAhj+O60GR7blcAf9yR2JSa9x1QydRUUH
iHwkBZdIKd6ORwo9blc2j0Wc8w/GDdenTBcAGMJEq77qQ3iSU+0ccyMRGdqQmXox
lp599ydITGj1kRZwOoTmaNQUSo5ode90YXCCvY8bvkUFWi0KHR0Jm/z2rZslISPS
F+11/IUtGNcX8OjFPOg5Y0zYUvYhWvgIvLl07hQEFuQlcgbcNQuYb8IpXDDe/ngY
pwANaCrcvDcttLQc/HRQr4bGJgXhYOpcJGrZfG8Jl3IGVsAiKJg40Ko59VIP8J2E
PsUev/jLTdFglg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:27 2025 by rpki-client