Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
File:                     uRnpYSLyg4FcGlb-zDSUR6KInNk.mft (raw, json)
Hash identifier:          +sfImUKuf0PT213v1L1HvqK9eQXTdT/14AHCCY6uXVU=
Subject key identifier:   4D:FC:3A:CE:36:4F:A7:84:13:2E:60:6F:AC:7C:6A:1E:70:48:1B:90
Authority key identifier: B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9
Certificate issuer:       /CN=b919e96122f283815c1a56fecc349447a2889cd9
Certificate serial:       019A503E3D893CFA2EEFB0F434D5B4D396EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
Manifest number:          11C5
Signing time:             Tue 04 Nov 2025 19:00:47 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:47 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:47 +0000
Files and hashes:         1: 1-MaedZu_m2J3pWIOqbXmZ-5pEX0.roa (hash: dPci77SNKVZK5CdTXGzc0O0bUg3hSGh13BoBG3kcUXI=)
                          2: uRnpYSLyg4FcGlb-zDSUR6KInNk.crl (hash: 9Gc8hId6z97Y+8UBJhEhz+ugtVFmhhMUlrE/zPj1mGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:3d:89:3c:fa:2e:ef:b0:f4:34:d5:b4:d3:96:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b919e96122f283815c1a56fecc349447a2889cd9
        Validity
            Not Before: Nov  4 19:00:47 2025 GMT
            Not After : Nov  5 19:00:47 2025 GMT
        Subject: CN=4dfc3ace364fa784132e606fac7c6a1e70481b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:3c:3c:3c:2c:2e:88:64:ae:48:63:4c:48:
                    74:a4:ae:e0:e5:19:3a:cc:b0:cc:8b:47:46:5d:84:
                    a9:da:a0:d3:57:55:70:07:9e:67:d4:61:c3:8b:22:
                    27:97:c6:8d:8e:7c:a1:3a:04:38:c3:05:7b:85:09:
                    1e:23:95:c8:ef:e0:e1:09:e7:e3:2d:93:32:a6:e0:
                    31:fd:4e:b9:ba:7a:fd:b5:29:ce:08:72:cd:af:82:
                    7a:33:ca:1f:53:52:36:56:f7:d3:14:27:48:33:39:
                    65:c5:9e:6c:77:96:a5:17:fc:e3:17:1a:2a:4d:2e:
                    d8:38:ff:12:d5:6d:8a:95:5e:b1:4c:8f:f6:15:11:
                    7e:9e:bb:83:70:2e:83:c4:e7:47:81:23:6d:fc:e0:
                    8b:6d:3d:b5:be:9c:af:42:80:da:b3:5a:aa:4d:c1:
                    ed:7b:0d:fa:ac:d6:b3:44:22:f2:c9:de:e0:dc:10:
                    8b:0e:de:fc:df:43:3d:e4:a1:bf:4a:aa:77:a5:95:
                    88:7c:09:ea:27:2b:6c:f4:c4:25:d8:d8:df:68:bc:
                    47:4a:2a:0d:bf:a2:af:1d:de:10:1e:c2:d0:45:a9:
                    4a:0a:e3:fe:52:d3:96:33:0e:7b:29:c0:7e:3f:0b:
                    f3:4a:77:92:9b:c1:c1:ae:fe:a1:c6:67:07:31:59:
                    c8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FC:3A:CE:36:4F:A7:84:13:2E:60:6F:AC:7C:6A:1E:70:48:1B:90
            X509v3 Authority Key Identifier:
                keyid:B9:19:E9:61:22:F2:83:81:5C:1A:56:FE:CC:34:94:47:A2:88:9C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRnpYSLyg4FcGlb-zDSUR6KInNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e0ef59-08b8-4d6d-8738-5cec36ff8e73/1/uRnpYSLyg4FcGlb-zDSUR6KInNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e0:1a:54:c0:de:37:c0:72:0a:d9:ee:c3:8d:6d:ff:76:ea:
         fc:d9:dc:82:19:01:e2:f6:5d:44:01:e5:9a:b8:05:ec:9b:7b:
         ad:86:83:9c:7d:8d:3d:d8:d5:44:bc:15:1f:42:09:b1:17:a7:
         c2:7a:9e:01:cd:0d:65:a7:f6:6d:73:22:fe:f6:f8:f7:68:2e:
         cd:46:a6:4d:66:58:9e:b7:62:9e:6e:e4:2c:b8:34:fd:67:68:
         74:d2:08:47:a9:8f:88:5a:02:1c:dd:40:67:62:c2:38:43:71:
         a9:dc:a8:e9:9f:b0:60:1a:ac:18:44:18:ec:e2:40:5a:04:f5:
         52:3f:af:7d:a5:64:9c:23:fb:cd:6d:19:5d:67:e8:fb:e1:1c:
         c0:90:06:36:d1:1d:1b:46:aa:01:9b:8a:fd:cc:f7:42:66:6b:
         95:ed:d3:9e:d5:8a:20:c9:01:bf:01:b0:2e:55:55:82:1e:72:
         fb:4d:06:3a:11:03:bf:52:b2:3f:5c:02:c8:cc:20:83:49:ab:
         44:b7:0c:f7:c3:8a:73:04:f8:6b:ec:62:ce:6b:38:39:ef:91:
         7b:05:74:a1:99:99:0e:9c:92:8e:f3:65:60:ef:49:2a:19:38:
         bc:19:42:1a:be:0b:c9:ec:9a:eb:37:11:bb:af:42:c1:89:b4:
         0c:69:40:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPj2JPPou77D0NNW005bqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTllOTYxMjJmMjgzODE1YzFhNTZmZWNjMzQ5NDQ3YTI4
ODljZDkwHhcNMjUxMTA0MTkwMDQ3WhcNMjUxMTA1MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg0ZGZjM2FjZTM2NGZhNzg0MTMyZTYwNmZhYzdjNmExZTcwNDgxYjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA48PDwsLohkrkhjTEh0pK7g5Rk6
zLDMi0dGXYSp2qDTV1VwB55n1GHDiyInl8aNjnyhOgQ4wwV7hQkeI5XI7+DhCefj
LZMypuAx/U65unr9tSnOCHLNr4J6M8ofU1I2VvfTFCdIMzllxZ5sd5alF/zjFxoq
TS7YOP8S1W2KlV6xTI/2FRF+nruDcC6DxOdHgSNt/OCLbT21vpyvQoDas1qqTcHt
ew36rNazRCLyyd7g3BCLDt7830M95KG/Sqp3pZWIfAnqJyts9MQl2NjfaLxHSioN
v6KvHd4QHsLQRalKCuP+UtOWMw57KcB+PwvzSneSm8HBrv6hxmcHMVnIawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE38Os42T6eEEy5gb6x8ah5wSBuQMB8GA1UdIwQY
MBaAFLkZ6WEi8oOBXBpW/sw0lEeiiJzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3Mzgt
NWNlYzM2ZmY4ZTczLzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9lMGVmNTktMDhiOC00ZDZkLTg3MzgtNWNlYzM2ZmY4ZTcz
LzEvdVJucFlTTHlnNEZjR2xiLXpEU1VSNktJbk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuAaVMDe
N8ByCtnuw41t/3bq/NncghkB4vZdRAHlmrgF7Jt7rYaDnH2NPdjVRLwVH0IJsRen
wnqeAc0NZaf2bXMi/vb492guzUamTWZYnrdinm7kLLg0/WdodNIIR6mPiFoCHN1A
Z2LCOENxqdyo6Z+wYBqsGEQY7OJAWgT1Uj+vfaVknCP7zW0ZXWfo++EcwJAGNtEd
G0aqAZuK/cz3QmZrle3TntWKIMkBvwGwLlVVgh5y+00GOhEDv1KyP1wCyMwgg0mr
RLcM98OKcwT4a+xizms4Oe+RewV0oZmZDpySjvNlYO9JKhk4vBlCGr4Lyeya6zcR
u69CwYm0DGlAdQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:26:08 2025 by rpki-client