Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
File:                     2ZaAKfEkCW6rlV35t6gciMszOgU.mft (raw, json)
Hash identifier:          hi1hR6IA1nZjDflAhlEJMo4FR3/0RnHhWGyP9nS9uwU=
Subject key identifier:   15:AB:4A:9F:DB:C4:6E:50:D4:43:7E:D4:07:9F:74:C5:43:E5:BA:66
Authority key identifier: D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05
Certificate issuer:       /CN=d9968029f124096eab955df9b7a81c88cb333a05
Certificate serial:       019A0035038A0D05E7BF2EC61BFC41226405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
Manifest number:          0E98
Signing time:             Mon 20 Oct 2025 06:01:05 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:05 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:05 +0000
Files and hashes:         1: 2ZaAKfEkCW6rlV35t6gciMszOgU.crl (hash: VsIu+PM0va8iryd306PgJZGSXdvHU4qeID/lg2XmxQk=)
                          2: anoG2QxpBajiR81r5Nnqj0baENo.roa (hash: KO9yPbtejqfpWJpsarLnmq3okmJ48dSkW7G2+vLUOFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:03:8a:0d:05:e7:bf:2e:c6:1b:fc:41:22:64:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9968029f124096eab955df9b7a81c88cb333a05
        Validity
            Not Before: Oct 20 06:01:05 2025 GMT
            Not After : Oct 21 06:01:05 2025 GMT
        Subject: CN=15ab4a9fdbc46e50d4437ed4079f74c543e5ba66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:0e:21:b1:02:05:c9:65:c8:67:b1:ef:3a:
                    ba:8e:a7:6d:e3:be:33:dc:81:ed:88:ed:db:c7:62:
                    e4:2e:82:c3:fb:f9:3f:9f:1a:fc:d1:c4:b5:11:1f:
                    98:31:a2:63:a4:44:2c:b5:8b:6e:45:2e:b4:9b:18:
                    7d:fc:43:77:e8:96:69:0c:48:7f:0f:d4:96:4d:d6:
                    90:4b:26:f4:41:60:13:08:f0:d2:da:62:08:77:38:
                    c5:fc:af:06:d5:83:d7:4d:4d:cd:2a:ba:4c:f2:ea:
                    f8:0e:bb:4b:b7:d1:81:59:81:04:ab:7a:d0:26:3c:
                    5a:d9:fa:20:4a:89:33:bc:df:fd:06:a0:ee:fb:94:
                    70:28:9a:e5:b9:94:2a:aa:4b:d3:d3:11:c7:d4:71:
                    53:ab:04:5d:65:d5:51:04:f9:78:5b:26:db:8b:7e:
                    40:fb:54:8b:b3:b7:ed:24:4f:c4:ff:1b:38:58:20:
                    e2:fa:8e:d0:92:c8:d7:00:63:d5:1e:12:e2:1a:a2:
                    61:dd:ac:1f:c8:ee:0d:ce:a2:98:d6:70:0c:a3:aa:
                    04:bd:0c:e0:7c:45:1e:28:f6:01:2e:19:82:9d:67:
                    97:00:4d:5d:fa:53:39:9e:a2:2e:66:7f:62:78:f4:
                    de:1c:bf:a3:ae:6e:ad:09:da:2e:7f:22:d7:15:1e:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AB:4A:9F:DB:C4:6E:50:D4:43:7E:D4:07:9F:74:C5:43:E5:BA:66
            X509v3 Authority Key Identifier:
                keyid:D9:96:80:29:F1:24:09:6E:AB:95:5D:F9:B7:A8:1C:88:CB:33:3A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZaAKfEkCW6rlV35t6gciMszOgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/27a1bc-b258-405f-9f93-6eea12205720/1/2ZaAKfEkCW6rlV35t6gciMszOgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4f:d3:61:60:20:94:9f:1c:a1:c8:1f:96:42:82:a2:d8:5b:
         66:53:cf:b8:6b:f7:74:cf:db:1c:54:ad:f7:56:b2:dd:71:4b:
         4d:5a:e2:b1:e8:b8:8a:b8:6f:06:78:38:b0:75:5b:18:47:1a:
         c6:92:12:53:fa:b8:63:05:09:70:3a:5c:b2:8d:ef:38:cb:9a:
         04:0e:73:7f:2c:d2:5c:32:fe:53:4a:91:fc:6a:72:ad:5a:12:
         49:bc:54:88:62:14:e0:24:d3:92:56:05:d7:37:af:fa:cc:f5:
         b5:fd:f3:6c:38:a1:51:31:83:e9:1b:d0:cf:49:fa:b6:d5:e4:
         49:26:db:df:ea:c6:0c:4c:ea:dd:c2:48:3b:80:eb:9e:94:c4:
         d7:f1:b9:86:f9:82:91:83:4c:97:1f:69:40:8c:ed:50:11:0c:
         24:6e:f2:e3:49:85:9d:c4:af:9c:eb:9b:98:0b:25:f3:e1:c9:
         b6:38:b2:c4:f7:be:e2:29:8c:8a:ab:d4:61:af:d8:ec:65:31:
         3a:d2:68:34:7e:b5:56:bd:52:9f:0d:59:f8:ad:59:f9:19:e9:
         db:4c:52:de:3a:42:97:45:70:bc:bb:36:7e:7b:b0:bb:84:0a:
         54:41:f7:da:7a:40:99:13:6d:9d:3f:13:bf:df:86:29:a0:7a:
         97:ba:8b:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANQOKDQXnvy7GG/xBImQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTY4MDI5ZjEyNDA5NmVhYjk1NWRmOWI3YTgxYzg4Y2Iz
MzNhMDUwHhcNMjUxMDIwMDYwMTA1WhcNMjUxMDIxMDYwMTA1WjAzMTEwLwYDVQQD
EygxNWFiNGE5ZmRiYzQ2ZTUwZDQ0MzdlZDQwNzlmNzRjNTQzZTViYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrQOIbECBcllyGex7zq6jqdt474z
3IHtiO3bx2LkLoLD+/k/nxr80cS1ER+YMaJjpEQstYtuRS60mxh9/EN36JZpDEh/
D9SWTdaQSyb0QWATCPDS2mIIdzjF/K8G1YPXTU3NKrpM8ur4DrtLt9GBWYEEq3rQ
Jjxa2fogSokzvN/9BqDu+5RwKJrluZQqqkvT0xHH1HFTqwRdZdVRBPl4Wybbi35A
+1SLs7ftJE/E/xs4WCDi+o7QksjXAGPVHhLiGqJh3awfyO4NzqKY1nAMo6oEvQzg
fEUeKPYBLhmCnWeXAE1d+lM5nqIuZn9iePTeHL+jrm6tCdoufyLXFR4MBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWrSp/bxG5Q1EN+1AefdMVD5bpmMB8GA1UdIwQY
MBaAFNmWgCnxJAluq5Vd+beoHIjLMzoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMt
NmVlYTEyMjA1NzIwLzEvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yN2ExYmMtYjI1OC00MDVmLTlmOTMtNmVlYTEyMjA1NzIw
LzEvMlphQUtmRWtDVzZybFYzNXQ2Z2NpTXN6T2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAck/TYWAg
lJ8cocgflkKCothbZlPPuGv3dM/bHFSt91ay3XFLTVrisei4irhvBng4sHVbGEca
xpISU/q4YwUJcDpcso3vOMuaBA5zfyzSXDL+U0qR/GpyrVoSSbxUiGIU4CTTklYF
1zev+sz1tf3zbDihUTGD6RvQz0n6ttXkSSbb3+rGDEzq3cJIO4DrnpTE1/G5hvmC
kYNMlx9pQIztUBEMJG7y40mFncSvnOubmAsl8+HJtjiyxPe+4imMiqvUYa/Y7GUx
OtJoNH61Vr1Snw1Z+K1Z+Rnp20xS3jpCl0VwvLs2fnuwu4QKVEH32npAmRNtnT8T
v9+GKaB6l7qLDQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:14 2025 by rpki-client