Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File:                     DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier:          z1IJoRuvF2JTCQ1NKwGFlTsj+AlJGeBQ4jcVGewL5ug=
Subject key identifier:   74:B6:C7:20:2E:95:CB:07:7D:79:3D:C1:99:83:E7:8D:BF:59:4C:F6
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer:       /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial:       0199FB45A702E65676E12CA2AE0418B43E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number:          092F
Signing time:             Sun 19 Oct 2025 07:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:09 +0000
Files and hashes:         1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: r1rPaY5LnpLp63Nr4g2hDNoPapG1lk8vhQDdlQqNouw=)
                          2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:a7:02:e6:56:76:e1:2c:a2:ae:04:18:b4:3e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
        Validity
            Not Before: Oct 19 07:01:09 2025 GMT
            Not After : Oct 20 07:01:09 2025 GMT
        Subject: CN=74b6c7202e95cb077d793dc19983e78dbf594cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:eb:23:2f:33:12:33:31:90:ab:13:26:d9:
                    7c:80:eb:17:97:b6:3f:56:71:f9:ca:9a:e1:e9:7a:
                    e1:45:03:e0:59:bf:0a:7d:6f:55:14:dd:50:2e:9f:
                    85:3a:9e:8e:ef:44:31:c9:f5:6c:e8:18:48:56:4e:
                    73:63:ee:28:b2:4f:27:ed:a3:46:cc:d6:4f:53:86:
                    5f:55:7c:a6:96:74:05:d6:65:27:9f:f9:f5:91:f6:
                    64:83:df:33:7c:8f:67:5c:2d:dd:52:84:50:38:36:
                    ab:00:40:06:3e:e6:18:9c:63:2e:be:7c:b6:07:36:
                    d3:84:cb:02:f2:44:f2:bf:36:7c:0b:67:f2:ec:da:
                    de:2b:ca:58:ca:88:56:db:f1:da:b0:2d:13:c7:63:
                    6b:07:c1:0f:87:50:a2:c0:43:48:3a:a0:24:6a:84:
                    d8:50:be:26:b8:37:f1:17:48:22:76:e5:18:17:81:
                    5c:e8:65:84:5f:ed:31:d3:e1:1e:f6:9a:e7:8b:5c:
                    60:79:55:83:fd:d5:d0:98:18:76:b6:47:81:d1:2c:
                    2e:d1:6b:12:21:38:50:db:2d:2a:6b:a6:02:80:d9:
                    73:bb:6c:34:37:08:4d:d7:ae:dd:58:37:0f:ba:ad:
                    9e:45:0b:60:06:4f:f6:28:09:9b:ff:a1:bd:08:a7:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B6:C7:20:2E:95:CB:07:7D:79:3D:C1:99:83:E7:8D:BF:59:4C:F6
            X509v3 Authority Key Identifier:
                keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:1e:fb:05:26:02:9e:f0:90:46:c2:0b:df:92:15:df:08:
         4f:8f:b7:ad:e7:0a:80:59:e2:aa:27:58:25:40:f5:7f:e6:a5:
         d0:50:35:c3:99:5c:7d:2a:c6:19:7d:63:0e:15:69:b1:c9:5c:
         18:10:1e:8f:5f:70:18:6f:49:e9:6e:c2:d5:66:ac:ef:e0:a4:
         43:a6:ec:5a:3c:75:af:e4:47:a7:44:17:68:f2:69:fa:ed:34:
         00:0f:23:b8:f7:c8:54:90:6a:4d:a5:ad:5f:26:70:49:0f:f0:
         d4:de:6a:e5:3b:c3:2d:58:0f:f3:99:b7:fe:16:ca:19:48:d8:
         8f:5e:e8:29:5a:56:57:b0:43:56:ee:80:e8:eb:a4:c6:56:c6:
         11:7b:0f:39:92:e1:d5:3d:20:06:39:73:c0:a8:f1:38:b2:c7:
         e2:91:ad:90:c4:12:f5:e3:ca:66:8f:b1:5c:50:9a:0d:00:51:
         1a:4b:a7:b2:5d:a5:2a:be:8a:6b:e2:79:b5:b6:c6:5c:82:99:
         73:6f:fa:e6:4a:d9:5a:1c:48:0c:35:ef:77:c3:39:f5:26:6a:
         55:93:f2:06:b9:36:b4:60:b7:62:14:85:f7:6a:96:c0:ca:e2:
         90:a8:49:6c:bd:f6:77:c3:a9:3b:d5:ff:d0:8d:8b:3c:b9:93:
         aa:1e:90:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RacC5lZ24SyirgQYtD5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjZkNDVmZDU2OTIxZDM0NjlkMTljNDc1NzJmMjc1Zjlk
NTUyNDIwHhcNMjUxMDE5MDcwMTA5WhcNMjUxMDIwMDcwMTA5WjAzMTEwLwYDVQQD
Eyg3NGI2YzcyMDJlOTVjYjA3N2Q3OTNkYzE5OTgzZTc4ZGJmNTk0Y2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS7rIy8zEjMxkKsTJtl8gOsXl7Y/
VnH5yprh6XrhRQPgWb8KfW9VFN1QLp+FOp6O70QxyfVs6BhIVk5zY+4osk8n7aNG
zNZPU4ZfVXymlnQF1mUnn/n1kfZkg98zfI9nXC3dUoRQODarAEAGPuYYnGMuvny2
BzbThMsC8kTyvzZ8C2fy7NreK8pYyohW2/HasC0Tx2NrB8EPh1CiwENIOqAkaoTY
UL4muDfxF0giduUYF4Fc6GWEX+0x0+Ee9prni1xgeVWD/dXQmBh2tkeB0Swu0WsS
IThQ2y0qa6YCgNlzu2w0NwhN167dWDcPuq2eRQtgBk/2KAmb/6G9CKetTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHS2xyAulcsHfXk9wZmD542/WUz2MB8GA1UdIwQY
MBaAFA4m1F/VaSHTRp0ZxHVy8nX51VJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQt
NjY1YTY5Y2I4OTAwLzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82YTFiYWEtNWY4Zi00MjBhLTkwYzQtNjY1YTY5Y2I4OTAw
LzEvRGliVVg5VnBJZE5HblJuRWRYTHlkZm5WVWtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuwe+wUm
Ap7wkEbCC9+SFd8IT4+3recKgFniqidYJUD1f+al0FA1w5lcfSrGGX1jDhVpsclc
GBAej19wGG9J6W7C1Was7+CkQ6bsWjx1r+RHp0QXaPJp+u00AA8juPfIVJBqTaWt
XyZwSQ/w1N5q5TvDLVgP85m3/hbKGUjYj17oKVpWV7BDVu6A6OukxlbGEXsPOZLh
1T0gBjlzwKjxOLLH4pGtkMQS9ePKZo+xXFCaDQBRGkunsl2lKr6Ka+J5tbbGXIKZ
c2/65krZWhxIDDXvd8M59SZqVZPyBrk2tGC3YhSF92qWwMrikKhJbL32d8OpO9X/
0I2LPLmTqh6QLA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:26 2025 by rpki-client