Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
File:                     R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft (raw, json)
Hash identifier:          EDwRijaCGy1H43JE/SOVers5ZyceCoqCH62fox98/gk=
Subject key identifier:   0C:1B:D9:82:F2:8B:5F:D5:18:DD:45:04:64:AB:22:16:03:31:CC:F8
Authority key identifier: 47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4
Certificate issuer:       /CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
Certificate serial:       0199FBEC2B1BF5420FED1F0978518AA81CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
Manifest number:          06A1
Signing time:             Sun 19 Oct 2025 10:03:02 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:02 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:02 +0000
Files and hashes:         1: KwW0a13v-16rO2m-BTqCxx8rpAo.roa (hash: krFsjsEBadu6bDJqG1OXIARdZJq+ewHj8q4uQfOufeM=)
                          2: R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl (hash: wLchqSM31kJO3ZbX0jwJh6YgEKmHQ7ETA4bwqNyPxlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:2b:1b:f5:42:0f:ed:1f:09:78:51:8a:a8:1c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47662f9ff6b643c467a2b434b76f825ebb66fed4
        Validity
            Not Before: Oct 19 10:03:02 2025 GMT
            Not After : Oct 20 10:03:02 2025 GMT
        Subject: CN=0c1bd982f28b5fd518dd450464ab22160331ccf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bb:fb:f6:33:18:81:be:cf:cc:88:71:2b:3f:
                    ae:13:d2:ca:62:29:42:62:fa:18:98:f3:e9:d4:85:
                    3b:02:c1:b4:39:09:60:e5:4e:d2:7f:d7:37:de:97:
                    41:dd:28:ef:64:4d:57:34:5a:4f:d1:ef:51:1d:a9:
                    6b:ce:b4:fa:a3:c4:f3:00:a6:bf:c4:f8:24:ca:86:
                    57:2d:50:67:8b:9b:7a:b8:4a:87:7f:03:fc:63:73:
                    cc:6f:36:66:78:e1:6d:50:c5:75:1f:fc:6e:02:b0:
                    a4:3e:39:b4:e8:55:29:47:08:c9:97:f7:a0:b9:22:
                    51:8a:b0:d7:bf:ea:eb:e7:fe:f0:88:64:1e:6a:7f:
                    84:97:8d:78:22:66:23:4b:af:10:76:24:60:ea:fe:
                    84:df:26:2d:e5:f8:de:f2:7f:82:5f:0c:7e:3e:01:
                    4f:45:25:ce:f3:4d:7b:8c:a7:3a:bb:69:7a:0c:73:
                    56:03:0b:ab:b2:39:71:65:1f:7d:9e:c3:69:b2:58:
                    f2:2e:9e:db:20:3d:3e:7a:74:d2:cd:8e:e2:45:84:
                    dc:8b:f7:52:ed:6a:de:10:7f:ba:87:5b:19:de:33:
                    08:c1:5e:63:12:96:19:6f:06:bc:a0:16:fa:63:a8:
                    c4:72:a7:6e:c1:05:00:6f:1f:d2:aa:c5:cf:06:df:
                    3d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1B:D9:82:F2:8B:5F:D5:18:DD:45:04:64:AB:22:16:03:31:CC:F8
            X509v3 Authority Key Identifier:
                keyid:47:66:2F:9F:F6:B6:43:C4:67:A2:B4:34:B7:6F:82:5E:BB:66:FE:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/b5f177-bbdd-40cf-87e5-b0b4c4f2fd90/1/R2Yvn_a2Q8RnorQ0t2-CXrtm_tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:49:be:50:cf:7d:41:66:e6:0c:cd:b8:d7:da:8d:24:7b:ee:
         23:f6:33:29:e8:2f:c2:ff:db:9a:6e:92:6f:5a:ef:59:06:91:
         34:ec:f0:f8:ac:30:bf:75:d3:26:7b:80:c8:94:59:56:51:c3:
         46:6c:ae:77:c2:1c:8a:f4:f4:52:b8:28:81:be:04:39:99:aa:
         f5:62:11:8b:a6:17:ef:d0:4d:5c:ed:ae:26:97:bd:da:e6:51:
         93:23:07:c7:2a:1f:e5:57:a4:62:38:d4:58:db:d1:b3:c9:45:
         84:26:e8:18:d9:26:32:ea:68:50:74:b4:47:c5:54:3e:37:48:
         56:b9:7b:07:eb:11:d6:c0:0c:ca:3d:1e:fa:1a:8c:2e:df:ae:
         7d:12:f3:94:a1:7c:5c:7f:ed:1a:21:e4:ca:95:ea:a6:9b:3a:
         e7:9a:c9:e9:70:b0:7f:f4:58:7e:eb:95:8e:fb:e2:97:6d:40:
         1e:af:ab:67:44:e0:14:47:33:ee:92:1a:2e:62:ca:0f:5f:36:
         42:0d:96:28:88:de:47:e7:c8:63:f7:27:2c:67:1f:d9:fc:6d:
         94:b9:2a:af:f7:9e:f6:a7:88:d7:20:9c:14:4d:c6:01:93:5b:
         8c:54:ab:1d:c4:5b:01:cc:34:11:44:54:4d:a3:bb:48:a0:31:
         69:75:34:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77Csb9UIP7R8JeFGKqBz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjYyZjlmZjZiNjQzYzQ2N2EyYjQzNGI3NmY4MjVlYmI2
NmZlZDQwHhcNMjUxMDE5MTAwMzAyWhcNMjUxMDIwMTAwMzAyWjAzMTEwLwYDVQQD
EygwYzFiZDk4MmYyOGI1ZmQ1MThkZDQ1MDQ2NGFiMjIxNjAzMzFjY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbv79jMYgb7PzIhxKz+uE9LKYilC
YvoYmPPp1IU7AsG0OQlg5U7Sf9c33pdB3SjvZE1XNFpP0e9RHalrzrT6o8TzAKa/
xPgkyoZXLVBni5t6uEqHfwP8Y3PMbzZmeOFtUMV1H/xuArCkPjm06FUpRwjJl/eg
uSJRirDXv+rr5/7wiGQean+El414ImYjS68QdiRg6v6E3yYt5fje8n+CXwx+PgFP
RSXO8017jKc6u2l6DHNWAwursjlxZR99nsNpsljyLp7bID0+enTSzY7iRYTci/dS
7WreEH+6h1sZ3jMIwV5jEpYZbwa8oBb6Y6jEcqduwQUAbx/SqsXPBt89BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwb2YLyi1/VGN1FBGSrIhYDMcz4MB8GA1UdIwQY
MBaAFEdmL5/2tkPEZ6K0NLdvgl67Zv7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iNWYxNzctYmJkZC00MGNmLTg3ZTUt
YjBiNGM0ZjJmZDkwLzEvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iNWYxNzctYmJkZC00MGNmLTg3ZTUtYjBiNGM0ZjJmZDkw
LzEvUjJZdm5fYTJROFJub3JRMHQyLUNYcnRtX3RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUm+UM99
QWbmDM2419qNJHvuI/YzKegvwv/bmm6Sb1rvWQaRNOzw+Kwwv3XTJnuAyJRZVlHD
Rmyud8IcivT0Urgogb4EOZmq9WIRi6YX79BNXO2uJpe92uZRkyMHxyof5VekYjjU
WNvRs8lFhCboGNkmMupoUHS0R8VUPjdIVrl7B+sR1sAMyj0e+hqMLt+ufRLzlKF8
XH/tGiHkypXqpps655rJ6XCwf/RYfuuVjvvil21AHq+rZ0TgFEcz7pIaLmLKD182
Qg2WKIjeR+fIY/cnLGcf2fxtlLkqr/ee9qeI1yCcFE3GAZNbjFSrHcRbAcw0EURU
TaO7SKAxaXU0yg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:27 2025 by rpki-client