Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
File:                     z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json)
Hash identifier:          +YyMxuEBF7Ajh6icP58E+Qlf/wJmoORCozUkLQ0V27U=
Subject key identifier:   22:38:92:1E:BB:86:28:C2:74:C9:5F:F3:60:33:78:14:8C:70:1D:49
Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED
Certificate issuer:       /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
Certificate serial:       0199FBEA9C1EA7D1A9FE28DA8B6AE4BF6A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
Manifest number:          1293
Signing time:             Sun 19 Oct 2025 10:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:20 +0000
Files and hashes:         1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: VjiwPvUJtqq89YePjbtIGe98dVKngIAvo2Dsv0x8I8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:9c:1e:a7:d1:a9:fe:28:da:8b:6a:e4:bf:6a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed
        Validity
            Not Before: Oct 19 10:01:20 2025 GMT
            Not After : Oct 20 10:01:20 2025 GMT
        Subject: CN=2238921ebb8628c274c95ff3603378148c701d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0d:4a:87:50:65:36:8b:f4:01:34:b2:1c:4e:
                    87:d2:74:c1:d9:53:f6:98:de:ec:7e:4f:be:d2:ed:
                    4f:c4:76:80:34:eb:c7:2b:cc:7a:17:43:e1:65:e7:
                    3f:72:36:e2:cf:d0:90:55:26:e4:ac:78:a0:bd:6b:
                    34:8a:b0:b6:c0:d0:4d:b2:e9:0c:8f:b4:e1:95:fc:
                    8d:d9:65:21:3c:64:dc:23:03:1c:c6:ac:c2:99:22:
                    62:72:9e:a0:10:9b:26:82:86:48:92:09:de:f9:89:
                    8c:4f:1c:4a:22:0f:c2:e3:69:06:a9:c1:ad:b0:91:
                    c5:e3:7c:49:f6:ae:0a:e1:29:2c:5c:2f:30:55:00:
                    23:1e:8a:89:d6:8e:83:f6:63:4c:9a:39:d0:3a:0b:
                    23:8c:29:20:67:13:8c:db:5b:86:d0:34:c6:ba:6e:
                    7a:17:9a:5a:20:3d:5a:da:f2:2d:4c:cf:38:f9:d3:
                    af:a7:61:b0:4c:5b:ba:ed:21:d9:1b:8a:a5:e9:12:
                    45:7c:21:87:3b:27:25:18:b4:6c:2e:09:a9:f0:3f:
                    db:bc:2e:80:ad:b4:46:34:23:64:62:2f:f6:17:2f:
                    70:31:5b:72:02:02:92:1a:17:86:27:83:b8:af:eb:
                    3f:0c:b6:15:e2:5f:6b:01:3d:46:f3:e8:e2:20:09:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:38:92:1E:BB:86:28:C2:74:C9:5F:F3:60:33:78:14:8C:70:1D:49
            X509v3 Authority Key Identifier:
                keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:47:d4:31:96:0d:7f:eb:c2:20:5d:02:4b:33:41:b9:48:d7:
         40:5c:d6:5d:9c:00:f7:6b:5f:97:b3:1d:73:07:18:64:b7:e7:
         c4:80:63:42:63:dc:c3:54:31:dd:bb:9d:fa:61:86:13:d2:40:
         34:26:93:d2:bb:a5:7c:b8:49:3c:da:c5:e3:a4:2c:c6:ec:09:
         a7:4a:d8:8e:5e:51:cc:2a:ca:4f:fe:b4:0f:c7:78:0f:87:b3:
         09:04:db:79:1c:32:ec:97:b6:17:0b:99:10:c0:83:f2:bd:84:
         7b:34:9c:7c:59:88:73:1d:7e:6f:a7:ba:2d:3d:a1:4f:63:33:
         4e:41:b4:0b:08:17:96:d3:59:43:99:39:3d:3f:16:12:4e:49:
         5c:a5:aa:09:76:09:db:30:75:be:e4:55:57:03:31:c5:a1:b7:
         74:fc:6c:b1:a0:dc:06:13:45:0c:07:a2:cf:b5:8c:64:df:81:
         85:43:23:e3:6b:77:52:55:c2:e3:00:a3:f6:8b:15:e4:99:8f:
         fa:09:2a:9f:4f:62:f4:4c:ff:12:aa:44:f1:97:c1:60:f1:96:
         0a:b9:94:70:f1:17:03:78:09:11:f5:e2:5a:45:8a:1f:1c:2d:
         2a:53:5a:ea:d5:0a:15:65:50:05:20:97:07:b4:94:e5:33:d9:
         91:c7:31:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pwep9Gp/ijai2rkv2pxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZTAzNjczYjg4ZjA4YWY2MmZlNjUyYTE4ZjZmYTljODM0
YjU4ZWQwHhcNMjUxMDE5MTAwMTIwWhcNMjUxMDIwMTAwMTIwWjAzMTEwLwYDVQQD
EygyMjM4OTIxZWJiODYyOGMyNzRjOTVmZjM2MDMzNzgxNDhjNzAxZDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ1Kh1BlNov0ATSyHE6H0nTB2VP2
mN7sfk++0u1PxHaANOvHK8x6F0PhZec/cjbiz9CQVSbkrHigvWs0irC2wNBNsukM
j7ThlfyN2WUhPGTcIwMcxqzCmSJicp6gEJsmgoZIkgne+YmMTxxKIg/C42kGqcGt
sJHF43xJ9q4K4SksXC8wVQAjHoqJ1o6D9mNMmjnQOgsjjCkgZxOM21uG0DTGum56
F5paID1a2vItTM84+dOvp2GwTFu67SHZG4ql6RJFfCGHOyclGLRsLgmp8D/bvC6A
rbRGNCNkYi/2Fy9wMVtyAgKSGheGJ4O4r+s/DLYV4l9rAT1G8+jiIAnEZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCI4kh67hijCdMlf82AzeBSMcB1JMB8GA1UdIwQY
MBaAFM/gNnO4jwivYv5lKhj2+pyDS1jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mYmVlNjUtOGE4OC00ZDEzLTllYjct
N2ExMmVlZGY4ZTVjLzEvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mYmVlNjUtOGE4OC00ZDEzLTllYjctN2ExMmVlZGY4ZTVj
LzEvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkfUMZYN
f+vCIF0CSzNBuUjXQFzWXZwA92tfl7MdcwcYZLfnxIBjQmPcw1Qx3bud+mGGE9JA
NCaT0rulfLhJPNrF46QsxuwJp0rYjl5RzCrKT/60D8d4D4ezCQTbeRwy7Je2FwuZ
EMCD8r2EezScfFmIcx1+b6e6LT2hT2MzTkG0CwgXltNZQ5k5PT8WEk5JXKWqCXYJ
2zB1vuRVVwMxxaG3dPxssaDcBhNFDAeiz7WMZN+BhUMj42t3UlXC4wCj9osV5JmP
+gkqn09i9Ez/EqpE8ZfBYPGWCrmUcPEXA3gJEfXiWkWKHxwtKlNa6tUKFWVQBSCX
B7SU5TPZkccxLA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:48 2025 by rpki-client