Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File:                     01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier:          D93jefrHDVmkX8+ChTd3OVVnIzwsvPowugFmoDV5H8I=
Subject key identifier:   FB:67:C9:D8:81:47:90:00:D8:DF:F9:4F:7A:A5:34:67:71:46:69:F5
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer:       /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial:       0199FC8F8CC224E55132E87F71DF0EAFE728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number:          05EC
Signing time:             Sun 19 Oct 2025 13:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:30 +0000
Files and hashes:         1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: BQNXdc5JXUFxF10pf8UTmkTW4mkWA0fy4kJTdbqBVho=)
                          2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:8c:c2:24:e5:51:32:e8:7f:71:df:0e:af:e7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
        Validity
            Not Before: Oct 19 13:01:30 2025 GMT
            Not After : Oct 20 13:01:30 2025 GMT
        Subject: CN=fb67c9d881479000d8dff94f7aa53467714669f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:8b:d7:0f:f7:7c:27:d8:73:a6:06:93:83:
                    1b:fc:1a:56:ad:df:c6:79:2e:95:28:37:e7:63:47:
                    a8:39:26:c4:23:50:71:90:14:43:34:f3:57:19:7b:
                    6a:61:bf:0b:92:7b:33:19:a3:18:83:05:8e:ae:b9:
                    d4:ac:ca:fa:19:6e:4e:36:67:a8:9c:2b:3e:47:17:
                    6d:94:5f:35:fe:32:a0:79:51:b4:87:ce:40:28:55:
                    0b:66:dd:59:f6:31:dd:4e:ab:70:ef:71:18:69:d3:
                    c8:9d:69:2d:fe:55:e1:cf:2d:04:8f:5c:ac:b9:ac:
                    b0:7d:d5:5e:3a:b5:51:4b:b7:1f:dc:c5:fe:86:40:
                    0b:fb:12:74:38:74:48:6f:3f:e9:d9:05:89:19:0c:
                    cb:49:d9:39:f2:8f:6f:83:99:03:2b:02:66:78:ce:
                    31:fe:70:0b:66:2b:17:86:67:b7:35:2d:43:27:b3:
                    7d:cb:c0:0a:ea:75:17:36:42:2b:b3:e3:2d:df:c8:
                    50:c0:d5:db:f2:fc:56:90:14:2f:f0:10:cd:d7:e8:
                    bc:96:a1:14:e1:85:17:45:52:16:e3:98:45:65:87:
                    ef:89:28:fb:5a:b4:41:c6:8a:50:55:9e:ed:50:50:
                    de:e9:47:70:15:08:bd:28:da:a6:c9:0d:99:1d:97:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:67:C9:D8:81:47:90:00:D8:DF:F9:4F:7A:A5:34:67:71:46:69:F5
            X509v3 Authority Key Identifier:
                keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3a:be:65:51:30:dd:39:40:80:96:62:e0:ce:7e:da:ce:a6:
         95:37:0c:ca:9d:ee:fe:9e:be:35:7a:98:03:9b:8c:c9:2a:a0:
         8f:ae:0d:e3:ff:7b:81:60:c6:68:02:85:c4:48:30:8e:a5:af:
         7b:dd:72:d5:7b:4b:24:98:da:01:e7:11:ee:f2:ee:35:08:2e:
         29:55:55:ba:b1:af:a7:53:d8:db:17:0f:e2:10:30:f7:60:31:
         ab:3e:83:7f:be:27:9b:0a:d8:57:fc:7d:73:a6:83:1b:18:36:
         aa:29:fe:99:ad:30:44:72:41:9d:84:50:4d:db:55:be:84:60:
         ff:ee:f0:8f:de:e4:e5:08:ec:fa:a1:e2:ae:e2:f6:b9:37:8d:
         e5:ff:eb:b5:e1:5f:43:a7:04:a8:2e:b2:3f:20:40:d3:0c:40:
         30:79:ab:62:32:ac:6a:61:6f:34:98:3e:ba:47:27:45:cc:eb:
         82:d0:57:18:ea:82:79:ac:1d:53:0f:89:53:ed:f5:ee:db:d8:
         5c:f9:0b:15:ff:41:45:4c:bb:0b:7c:cf:d4:eb:2e:31:75:6f:
         5b:40:cb:13:7f:3e:0d:53:8a:42:59:78:60:89:26:45:3b:2f:
         1b:bc:16:b4:a0:66:c8:2b:31:cd:b1:f4:2d:42:db:5f:b2:d6:
         40:db:e9:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j4zCJOVRMuh/cd8Or+coMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTBiMzU3ZGNkZWU2OGZiZWJkYzU1NTNkYjMyNDljNmU4
Mjk2YzcwHhcNMjUxMDE5MTMwMTMwWhcNMjUxMDIwMTMwMTMwWjAzMTEwLwYDVQQD
EyhmYjY3YzlkODgxNDc5MDAwZDhkZmY5NGY3YWE1MzQ2NzcxNDY2OWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3mL1w/3fCfYc6YGk4Mb/BpWrd/G
eS6VKDfnY0eoOSbEI1BxkBRDNPNXGXtqYb8LknszGaMYgwWOrrnUrMr6GW5ONmeo
nCs+RxdtlF81/jKgeVG0h85AKFULZt1Z9jHdTqtw73EYadPInWkt/lXhzy0Ej1ys
uaywfdVeOrVRS7cf3MX+hkAL+xJ0OHRIbz/p2QWJGQzLSdk58o9vg5kDKwJmeM4x
/nALZisXhme3NS1DJ7N9y8AK6nUXNkIrs+Mt38hQwNXb8vxWkBQv8BDN1+i8lqEU
4YUXRVIW45hFZYfviSj7WrRBxopQVZ7tUFDe6UdwFQi9KNqmyQ2ZHZdTfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtnydiBR5AA2N/5T3qlNGdxRmn1MB8GA1UdIwQY
MBaAFNNQs1fc3uaPvr3FVT2zJJxugpbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYt
ZmZlZDUzZjQ1ZGVkLzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYjU2OTYtZTc3Ni00MDIxLWJhZGYtZmZlZDUzZjQ1ZGVk
LzEvMDFDelY5emU1by0tdmNWVlBiTWtuRzZDbHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjq+ZVEw
3TlAgJZi4M5+2s6mlTcMyp3u/p6+NXqYA5uMySqgj64N4/97gWDGaAKFxEgwjqWv
e91y1XtLJJjaAecR7vLuNQguKVVVurGvp1PY2xcP4hAw92Axqz6Df74nmwrYV/x9
c6aDGxg2qin+ma0wRHJBnYRQTdtVvoRg/+7wj97k5Qjs+qHiruL2uTeN5f/rteFf
Q6cEqC6yPyBA0wxAMHmrYjKsamFvNJg+ukcnRczrgtBXGOqCeawdUw+JU+317tvY
XPkLFf9BRUy7C3zP1OsuMXVvW0DLE38+DVOKQll4YIkmRTsvG7wWtKBmyCsxzbH0
LULbX7LWQNvp/g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:31 2025 by rpki-client