Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
File:                     jvSnYgy-f8xHKj2gKckLX72UUZw.mft (raw, json)
Hash identifier:          H4wEMbadNIL9KooP9YD6k2WXCNDoKOfijyJZLIZpdNM=
Subject key identifier:   4F:FA:C1:71:D8:1D:A6:0A:46:FA:09:E2:74:2A:76:4F:4D:9F:30:A1
Authority key identifier: 8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C
Certificate issuer:       /CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
Certificate serial:       0199FDD9F84707EC34F4BF40951C8C171AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
Manifest number:          07D2
Signing time:             Sun 19 Oct 2025 19:02:24 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:24 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:24 +0000
Files and hashes:         1: jvSnYgy-f8xHKj2gKckLX72UUZw.crl (hash: dye1zcXD4V2R60O9ZWZCPJw0TGFs7Y9mMWHOzMiVJq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:f8:47:07:ec:34:f4:bf:40:95:1c:8c:17:1a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef4a7620cbe7fcc472a3da029c90b5fbd94519c
        Validity
            Not Before: Oct 19 19:02:24 2025 GMT
            Not After : Oct 20 19:02:24 2025 GMT
        Subject: CN=4ffac171d81da60a46fa09e2742a764f4d9f30a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:b6:e4:df:57:7d:fc:2f:c3:70:70:81:35:
                    ea:a5:45:84:64:ed:08:ef:42:22:f5:26:f3:20:5f:
                    0f:d7:f2:78:8d:e8:91:f4:35:e5:af:91:f4:33:5b:
                    4f:e7:09:72:a9:4e:6c:2d:4a:b9:7d:a3:5b:d0:3e:
                    2e:8a:8f:a0:24:36:78:38:8e:46:38:9e:ef:7b:cc:
                    36:87:da:c8:90:a5:12:27:73:fa:39:2c:32:f6:0e:
                    93:ba:54:b3:36:7c:0b:86:f7:0e:32:2b:a6:49:d8:
                    36:50:35:81:ee:33:3a:32:de:43:38:67:0a:44:35:
                    61:e4:65:13:14:be:54:2c:9f:ee:14:c6:f6:92:30:
                    b5:17:13:de:c4:40:e3:7b:1e:0b:76:f1:b9:3d:51:
                    41:43:9b:ca:71:ba:d4:07:b3:9e:ee:5a:a3:74:10:
                    72:d9:5b:8b:d0:ad:29:8e:65:eb:01:d2:6d:30:44:
                    e1:d3:92:7f:38:d3:3f:f2:a2:f9:11:f5:44:33:0a:
                    06:94:11:fe:f0:69:ce:36:8b:be:10:a6:d3:99:f6:
                    26:ea:15:63:78:66:54:ac:19:1d:53:2f:9f:b2:73:
                    d8:20:59:d5:76:06:6e:5f:c0:b6:c1:08:19:c2:45:
                    89:fa:9a:0b:b6:24:e5:f2:14:bc:72:f5:11:61:de:
                    86:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FA:C1:71:D8:1D:A6:0A:46:FA:09:E2:74:2A:76:4F:4D:9F:30:A1
            X509v3 Authority Key Identifier:
                keyid:8E:F4:A7:62:0C:BE:7F:CC:47:2A:3D:A0:29:C9:0B:5F:BD:94:51:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvSnYgy-f8xHKj2gKckLX72UUZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cb4f6e-edb2-48bb-baab-a0b08a9f05c6/1/jvSnYgy-f8xHKj2gKckLX72UUZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:28:d0:d4:27:36:08:b4:7f:ae:30:7d:ec:c5:fd:9d:b1:d5:
         9d:39:3f:4a:21:a5:64:58:5b:6d:33:5a:3a:f6:4e:0a:cc:f6:
         92:1a:9f:ee:1c:ee:32:cf:86:0a:e6:b0:e9:60:a4:3a:55:b1:
         53:6b:55:19:f9:f5:1b:17:25:a3:dc:a5:e3:8f:6c:16:b7:aa:
         ed:ca:ba:3d:d6:36:91:ff:46:33:2c:00:9c:b2:ce:4f:f7:3c:
         d1:30:15:b9:fd:86:08:5b:09:a5:9a:4e:d3:03:2f:3b:ef:4b:
         f1:38:32:4f:1f:b2:4b:fe:e4:16:25:2d:12:0a:68:29:37:4c:
         48:5c:e1:83:ee:82:09:95:7a:93:7e:d8:e7:9f:cc:9a:77:10:
         6d:de:1b:50:b8:21:a2:a7:6d:c4:c2:40:d4:d0:d4:4c:96:f9:
         9b:05:ae:52:c2:ae:73:49:0a:6f:90:8b:ad:a4:b7:38:cb:5e:
         c9:ad:79:46:49:07:54:7a:72:c9:0d:39:6c:09:01:58:b0:d4:
         bc:cc:4b:8e:90:6b:50:86:7d:3f:ef:70:a9:12:30:0f:81:3d:
         29:1b:44:b0:4c:f7:50:b2:92:e4:27:4a:4b:8e:e2:b0:1f:4d:
         7a:1a:96:b4:ce:52:70:7e:e0:a2:c3:3e:2e:14:c2:e9:f9:d2:
         e3:47:e0:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92fhHB+w09L9AlRyMFxqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjRhNzYyMGNiZTdmY2M0NzJhM2RhMDI5YzkwYjVmYmQ5
NDUxOWMwHhcNMjUxMDE5MTkwMjI0WhcNMjUxMDIwMTkwMjI0WjAzMTEwLwYDVQQD
Eyg0ZmZhYzE3MWQ4MWRhNjBhNDZmYTA5ZTI3NDJhNzY0ZjRkOWYzMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4e25N9Xffwvw3BwgTXqpUWEZO0I
70Ii9SbzIF8P1/J4jeiR9DXlr5H0M1tP5wlyqU5sLUq5faNb0D4uio+gJDZ4OI5G
OJ7ve8w2h9rIkKUSJ3P6OSwy9g6TulSzNnwLhvcOMiumSdg2UDWB7jM6Mt5DOGcK
RDVh5GUTFL5ULJ/uFMb2kjC1FxPexEDjex4LdvG5PVFBQ5vKcbrUB7Oe7lqjdBBy
2VuL0K0pjmXrAdJtMETh05J/ONM/8qL5EfVEMwoGlBH+8GnONou+EKbTmfYm6hVj
eGZUrBkdUy+fsnPYIFnVdgZuX8C2wQgZwkWJ+poLtiTl8hS8cvURYd6GzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/6wXHYHaYKRvoJ4nQqdk9NnzChMB8GA1UdIwQY
MBaAFI70p2IMvn/MRyo9oCnJC1+9lFGcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZTbllneS1mOHhIS2oyZ0tja0xYNzJVVVp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jYjRmNmUtZWRiMi00OGJiLWJhYWIt
YTBiMDhhOWYwNWM2LzEvanZTbllneS1mOHhIS2oyZ0tja0xYNzJVVVp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jYjRmNmUtZWRiMi00OGJiLWJhYWItYTBiMDhhOWYwNWM2
LzEvanZTbllneS1mOHhIS2oyZ0tja0xYNzJVVVp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOijQ1Cc2
CLR/rjB97MX9nbHVnTk/SiGlZFhbbTNaOvZOCsz2khqf7hzuMs+GCuaw6WCkOlWx
U2tVGfn1Gxclo9yl449sFreq7cq6PdY2kf9GMywAnLLOT/c80TAVuf2GCFsJpZpO
0wMvO+9L8TgyTx+yS/7kFiUtEgpoKTdMSFzhg+6CCZV6k37Y55/MmncQbd4bULgh
oqdtxMJA1NDUTJb5mwWuUsKuc0kKb5CLraS3OMteya15RkkHVHpyyQ05bAkBWLDU
vMxLjpBrUIZ9P+9wqRIwD4E9KRtEsEz3ULKS5CdKS47isB9NehqWtM5ScH7gosM+
LhTC6fnS40fgDA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:51 2025 by rpki-client