Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File:                     DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier:          yOkA4bHpawlxaN+F7DgjieHvqNvvL5yrcfuFHGHPPhY=
Subject key identifier:   16:01:A4:85:89:A3:1E:80:60:78:A1:5A:13:00:3A:7A:F7:53:07:BE
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer:       /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial:       0199FB4587A034C9741546B72A86B6EE00EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number:          13F8
Signing time:             Sun 19 Oct 2025 07:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:01 +0000
Files and hashes:         1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: PWIlq6GBqlWZqt3kLkfssT0yNWBrCE6JVnqIL8MLUtw=)
                          2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
                          3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
                          4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:87:a0:34:c9:74:15:46:b7:2a:86:b6:ee:00:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
        Validity
            Not Before: Oct 19 07:01:01 2025 GMT
            Not After : Oct 20 07:01:01 2025 GMT
        Subject: CN=1601a48589a31e806078a15a13003a7af75307be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:6d:0d:84:3b:85:89:c3:87:d3:6a:76:e2:
                    bb:04:c3:b4:2e:be:2a:40:89:89:09:5f:21:da:7a:
                    14:47:70:dc:e7:25:4e:c7:a4:5c:50:b6:37:ab:47:
                    0a:1c:89:18:a2:7e:a5:d0:3b:14:83:b9:c1:f2:04:
                    90:76:9d:6a:f3:37:02:b4:be:29:bc:a8:dd:4b:71:
                    24:a9:55:c9:ee:ac:da:d6:36:4e:68:36:4f:f1:cf:
                    1a:13:40:1e:90:c7:19:93:3f:1a:15:1b:8f:f2:22:
                    b2:29:9c:32:ac:ec:7e:76:4f:49:3b:fe:99:eb:48:
                    77:8d:25:7d:89:92:c4:01:3d:65:56:30:f9:56:72:
                    a1:57:fa:27:a6:fd:1c:12:9f:67:f5:14:d6:1c:56:
                    c4:d9:bd:29:42:af:96:95:ce:d1:b5:7e:b7:11:89:
                    07:9f:e7:1a:1a:f2:fb:33:22:13:0b:c5:7b:ca:b1:
                    77:55:14:8e:20:4a:46:96:5f:cf:e1:e9:61:97:f5:
                    c1:dd:f0:b2:54:5a:45:bb:aa:5a:b6:44:04:1c:99:
                    44:16:fc:31:65:e8:01:72:c7:db:b0:38:29:c3:a7:
                    0f:ef:2d:a3:73:8a:fa:b3:98:a9:f2:5f:9f:f8:8c:
                    57:13:1a:b5:f1:b0:54:67:1d:5b:13:5a:18:1f:9c:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:01:A4:85:89:A3:1E:80:60:78:A1:5A:13:00:3A:7A:F7:53:07:BE
            X509v3 Authority Key Identifier:
                keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:05:04:64:9d:f6:36:0d:99:4f:13:b2:89:ae:c7:6a:48:21:
         6b:96:0e:e7:c6:6a:23:22:0b:3d:05:7c:02:41:77:59:77:a2:
         28:c9:90:fc:fa:fd:e3:aa:da:4c:b6:a2:4b:d7:30:71:05:65:
         12:2d:09:5e:96:90:d8:94:69:31:76:b1:60:f3:04:ef:14:f4:
         4e:cf:54:6f:64:4b:6f:c8:a2:dc:d4:4d:ba:da:b1:db:1a:f3:
         d2:a4:17:d2:f5:e1:55:0b:ee:f4:9b:e0:04:93:4e:12:53:bb:
         5b:b8:68:4a:af:ec:37:65:e0:35:02:76:75:bd:c3:0e:1c:52:
         65:83:17:7f:6e:c4:ff:93:3e:1b:63:e7:fd:e8:0f:a7:56:ee:
         a2:29:e7:27:b6:b7:5d:8f:1e:14:85:44:5b:bc:ee:e6:48:5b:
         db:c4:cd:0c:62:7f:e3:0c:87:b3:7f:ca:40:fb:55:2c:95:c5:
         ef:05:d0:22:b5:35:83:a0:4f:b0:21:c2:f2:81:22:b6:6b:cb:
         9d:ef:5f:ec:57:96:ce:1c:4e:7d:5e:84:89:47:1e:d5:81:83:
         6b:53:17:55:cb:2c:71:65:99:01:c6:fd:f4:15:8f:d0:b7:58:
         9d:69:c6:23:76:89:14:68:c9:17:fd:4a:b3:61:ea:de:3e:7b:
         04:c1:76:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RYegNMl0FUa3Koa27gDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDc3YWJmMGEyN2VkZTg4NmZiYzQyNDEzZDdhODljMjI2
YjExZmEwHhcNMjUxMDE5MDcwMTAxWhcNMjUxMDIwMDcwMTAxWjAzMTEwLwYDVQQD
EygxNjAxYTQ4NTg5YTMxZTgwNjA3OGExNWExMzAwM2E3YWY3NTMwN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvltDYQ7hYnDh9NqduK7BMO0Lr4q
QImJCV8h2noUR3Dc5yVOx6RcULY3q0cKHIkYon6l0DsUg7nB8gSQdp1q8zcCtL4p
vKjdS3EkqVXJ7qza1jZOaDZP8c8aE0AekMcZkz8aFRuP8iKyKZwyrOx+dk9JO/6Z
60h3jSV9iZLEAT1lVjD5VnKhV/onpv0cEp9n9RTWHFbE2b0pQq+Wlc7RtX63EYkH
n+caGvL7MyITC8V7yrF3VRSOIEpGll/P4elhl/XB3fCyVFpFu6patkQEHJlEFvwx
ZegBcsfbsDgpw6cP7y2jc4r6s5ip8l+f+IxXExq18bBUZx1bE1oYH5zgJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYBpIWJox6AYHihWhMAOnr3Uwe+MB8GA1UdIwQY
MBaAFAxHer8KJ+3ohvvEJBPXqJwiaxH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTct
MThmNGY2NmE1MGEwLzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTctMThmNGY2NmE1MGEw
LzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwUEZJ32
Ng2ZTxOyia7Hakgha5YO58ZqIyILPQV8AkF3WXeiKMmQ/Pr946raTLaiS9cwcQVl
Ei0JXpaQ2JRpMXaxYPME7xT0Ts9Ub2RLb8ii3NRNutqx2xrz0qQX0vXhVQvu9Jvg
BJNOElO7W7hoSq/sN2XgNQJ2db3DDhxSZYMXf27E/5M+G2Pn/egPp1buoinnJ7a3
XY8eFIVEW7zu5khb28TNDGJ/4wyHs3/KQPtVLJXF7wXQIrU1g6BPsCHC8oEitmvL
ne9f7FeWzhxOfV6EiUce1YGDa1MXVcsscWWZAcb99BWP0LdYnWnGI3aJFGjJF/1K
s2Hq3j57BMF2jQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:00 2025 by rpki-client