Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
File:                     mogMjbFaBDs74WXi2DG6oEerAKw.mft (raw, json)
Hash identifier:          RAWH4uD+hlJF9Erv5DqngEQOI8d4xNBi+x2mQmIq0jw=
Subject key identifier:   8F:7F:01:3F:68:14:43:E2:D8:43:D1:B2:79:DF:B7:8A:45:15:C5:24
Authority key identifier: 9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC
Certificate issuer:       /CN=9a880c8db15a043b3be165e2d831baa047ab00ac
Certificate serial:       019A4F623111DC4B5FE434FA73518878E556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
Manifest number:          09EA
Signing time:             Tue 04 Nov 2025 15:00:26 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:26 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:26 +0000
Files and hashes:         1: mogMjbFaBDs74WXi2DG6oEerAKw.crl (hash: nqBGgmtQD2uS7MVDMGxYcaNh258O/9fXjsGnBD8q4GI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:31:11:dc:4b:5f:e4:34:fa:73:51:88:78:e5:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a880c8db15a043b3be165e2d831baa047ab00ac
        Validity
            Not Before: Nov  4 15:00:26 2025 GMT
            Not After : Nov  5 15:00:26 2025 GMT
        Subject: CN=8f7f013f681443e2d843d1b279dfb78a4515c524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d0:b6:a9:2e:f7:e1:7b:2b:c2:92:1b:dd:7c:
                    57:d0:4b:7f:cd:38:7e:a6:47:1e:cb:9a:d8:a7:da:
                    ba:3d:56:26:60:27:f1:73:68:0d:d3:9d:10:13:95:
                    9b:b6:8e:e3:70:00:13:48:77:08:50:14:d4:f7:25:
                    c4:6c:bb:a9:10:20:2a:df:67:fd:d5:4b:cf:38:63:
                    7c:3d:0a:59:e0:8d:10:c8:8c:7b:57:08:a4:13:34:
                    8f:09:80:1d:1c:d0:ad:98:9e:7f:c3:37:a9:d4:e3:
                    32:b8:28:d2:af:95:3a:4b:15:b0:90:09:e1:d2:3e:
                    f6:7a:ba:59:18:ff:84:ca:28:ce:a7:2f:7a:bb:0d:
                    a8:3a:16:f4:c7:9f:4d:22:8f:e1:e9:62:4a:6d:bc:
                    b4:26:a0:00:f7:28:a1:0c:62:d7:dd:1b:16:36:7c:
                    e8:63:0e:b6:da:59:4f:fc:b9:1f:af:e8:63:73:e7:
                    92:ab:54:71:53:c5:40:83:ab:dd:03:32:d9:f1:21:
                    8d:ba:79:e6:d7:ba:87:04:1a:7f:e1:2a:41:97:5d:
                    15:0a:c8:88:89:2b:5d:71:5d:70:50:0b:67:a9:14:
                    09:08:90:f5:2c:1c:7d:fc:e7:55:46:f9:24:a2:ae:
                    1c:e0:1c:46:3d:76:86:70:e3:2a:4c:74:aa:e6:14:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7F:01:3F:68:14:43:E2:D8:43:D1:B2:79:DF:B7:8A:45:15:C5:24
            X509v3 Authority Key Identifier:
                keyid:9A:88:0C:8D:B1:5A:04:3B:3B:E1:65:E2:D8:31:BA:A0:47:AB:00:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mogMjbFaBDs74WXi2DG6oEerAKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/28e77a-ede2-4eb7-a347-9d3f3937cc47/1/mogMjbFaBDs74WXi2DG6oEerAKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:a9:28:5d:16:29:06:bf:c0:bf:d7:56:4f:6b:f0:5b:76:
         a8:8f:de:0d:dd:ed:58:7c:2b:64:ad:6c:e9:aa:ef:a9:1a:1b:
         8a:c6:a8:d0:88:e9:46:66:e7:6f:f4:b0:5d:04:ee:5d:0a:80:
         ac:53:04:52:b2:25:9e:a5:56:c2:1f:91:27:10:d0:5a:d6:2a:
         bf:40:fb:f1:80:50:4e:18:36:7c:04:39:15:d1:94:2a:c8:36:
         5e:94:c7:b5:74:2c:f1:c5:36:8e:4a:a0:db:86:ec:3c:4d:77:
         3b:86:5d:73:24:57:df:30:ce:c0:16:88:8b:38:52:71:42:8a:
         c4:e6:00:9f:75:6f:7a:73:e8:ae:a3:1b:f2:06:4c:a3:f4:42:
         56:e3:cf:bf:1f:1a:dc:b2:80:3e:b7:c6:36:ec:ad:47:e0:25:
         a9:dd:47:65:b9:72:64:11:7f:6f:02:5f:a4:a6:44:9e:f4:fa:
         5e:f6:dd:d5:01:e5:49:3a:27:27:3b:e1:89:e9:35:fc:cf:d1:
         43:b0:b3:3a:c5:05:e1:f9:41:ea:3b:58:c3:a0:cd:75:29:7e:
         21:78:a2:5b:b1:ea:5f:f2:9d:df:85:ee:37:e4:6e:99:e0:ae:
         98:57:9e:91:2f:60:03:77:bc:21:3b:7a:7d:ec:29:dd:51:7e:
         d8:b4:5e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYjER3Etf5DT6c1GIeOVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhODgwYzhkYjE1YTA0M2IzYmUxNjVlMmQ4MzFiYWEwNDdh
YjAwYWMwHhcNMjUxMTA0MTUwMDI2WhcNMjUxMTA1MTUwMDI2WjAzMTEwLwYDVQQD
Eyg4ZjdmMDEzZjY4MTQ0M2UyZDg0M2QxYjI3OWRmYjc4YTQ1MTVjNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dC2qS734XsrwpIb3XxX0Et/zTh+
pkcey5rYp9q6PVYmYCfxc2gN050QE5Wbto7jcAATSHcIUBTU9yXEbLupECAq32f9
1UvPOGN8PQpZ4I0QyIx7VwikEzSPCYAdHNCtmJ5/wzep1OMyuCjSr5U6SxWwkAnh
0j72erpZGP+EyijOpy96uw2oOhb0x59NIo/h6WJKbby0JqAA9yihDGLX3RsWNnzo
Yw622llP/Lkfr+hjc+eSq1RxU8VAg6vdAzLZ8SGNunnm17qHBBp/4SpBl10VCsiI
iStdcV1wUAtnqRQJCJD1LBx9/OdVRvkkoq4c4BxGPXaGcOMqTHSq5hQ52wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9/AT9oFEPi2EPRsnnft4pFFcUkMB8GA1UdIwQY
MBaAFJqIDI2xWgQ7O+Fl4tgxuqBHqwCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDct
OWQzZjM5MzdjYzQ3LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yOGU3N2EtZWRlMi00ZWI3LWEzNDctOWQzZjM5MzdjYzQ3
LzEvbW9nTWpiRmFCRHM3NFdYaTJERzZvRWVyQUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/WpKF0W
KQa/wL/XVk9r8Ft2qI/eDd3tWHwrZK1s6arvqRobisao0IjpRmbnb/SwXQTuXQqA
rFMEUrIlnqVWwh+RJxDQWtYqv0D78YBQThg2fAQ5FdGUKsg2XpTHtXQs8cU2jkqg
24bsPE13O4ZdcyRX3zDOwBaIizhScUKKxOYAn3VvenPorqMb8gZMo/RCVuPPvx8a
3LKAPrfGNuytR+Alqd1HZblyZBF/bwJfpKZEnvT6Xvbd1QHlSTonJzvhiek1/M/R
Q7CzOsUF4flB6jtYw6DNdSl+IXiiW7HqX/Kd34XuN+RumeCumFeekS9gA3e8ITt6
fewp3VF+2LReGQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:11:26 2025 by rpki-client