Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
File:                     se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json)
Hash identifier:          gDHTdmhJ3yaN5XtdZbRR0hT3Kowc5u3YaxvL5GaHZmA=
Subject key identifier:   7B:D7:E3:2C:A0:8C:B4:02:38:E9:AA:1B:24:F5:32:35:70:D7:14:EE
Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Certificate issuer:       /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Certificate serial:       019A50E44BD2B5416712B9BC3B47F4E2418D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
Manifest number:          108C
Signing time:             Tue 04 Nov 2025 22:02:10 +0000
Manifest this update:     Tue 04 Nov 2025 22:02:10 +0000
Manifest next update:     Wed 05 Nov 2025 22:02:10 +0000
Files and hashes:         1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: Lucktxgd4ydRvbzkdqsxExSY1xLnDrqAq8Yq5zELtD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e4:4b:d2:b5:41:67:12:b9:bc:3b:47:f4:e2:41:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
        Validity
            Not Before: Nov  4 22:02:10 2025 GMT
            Not After : Nov  5 22:02:10 2025 GMT
        Subject: CN=7bd7e32ca08cb40238e9aa1b24f5323570d714ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e6:2f:d5:74:c7:62:0f:18:52:50:66:14:7f:
                    29:9a:20:11:4f:8b:ea:93:39:30:78:f1:0d:c3:9c:
                    7d:1c:ce:cd:b7:60:fd:95:24:66:3f:df:d5:c1:ff:
                    9b:f2:87:12:db:83:5e:57:95:73:1c:c4:92:ff:ae:
                    21:dc:15:8b:ea:07:2b:a1:7f:2d:60:14:21:3c:38:
                    0d:67:a1:16:e4:50:5f:7c:66:5e:c9:d8:8e:af:fa:
                    9d:49:92:e0:49:8d:fa:f1:1b:4b:e3:39:4b:76:43:
                    2b:9c:ff:85:76:d6:c8:8e:4c:4e:4f:c8:25:ad:52:
                    1e:37:ef:b8:0f:d5:82:93:8b:6b:b7:be:2e:38:13:
                    09:8a:c8:5c:ed:c6:c2:30:04:bb:48:e1:a7:80:3c:
                    3d:2b:6d:5d:1c:39:81:d9:09:35:72:27:8a:bf:f2:
                    7d:9d:53:a9:ce:d5:6a:0d:04:7e:7d:2f:6f:1e:31:
                    fe:3a:27:f3:8c:b9:58:42:b2:02:85:4f:68:ea:44:
                    99:df:63:90:d4:8d:a7:53:01:1a:0a:98:b9:4e:e8:
                    55:31:9a:f9:79:30:64:94:0c:bf:64:ee:8d:8b:38:
                    ab:7c:92:79:b9:41:0f:b2:4b:06:d3:1d:d3:e3:86:
                    89:44:15:98:e4:e9:ac:70:13:26:1c:b5:80:8f:3b:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D7:E3:2C:A0:8C:B4:02:38:E9:AA:1B:24:F5:32:35:70:D7:14:EE
            X509v3 Authority Key Identifier:
                keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3d:c9:c1:64:66:b7:86:fe:58:97:b2:73:58:09:cb:a6:13:
         72:ae:54:61:09:94:0c:91:b5:2d:2c:05:e9:83:67:57:3f:61:
         17:e8:4f:e3:6e:5a:23:c6:09:ae:45:0e:4c:8c:bc:71:e2:53:
         9d:6a:43:34:63:0f:49:02:c2:3b:f0:1e:d8:43:e0:95:e4:c0:
         76:a7:5c:2f:83:3b:e7:7b:14:24:b1:75:4f:42:23:ac:e2:cb:
         5e:3b:12:db:f0:07:48:6a:fd:72:d6:29:ff:ee:ac:97:c5:01:
         1f:bd:4e:e2:29:fb:5a:5d:17:b2:f0:db:41:30:6c:b3:3e:ec:
         1a:32:b0:41:99:91:8e:88:36:7f:be:2c:e6:eb:a6:ae:bf:fa:
         e4:ab:56:2b:d8:fc:a2:80:1b:6f:2b:7e:96:6a:79:fc:11:50:
         4d:96:8c:99:35:a2:88:5d:ad:3f:b7:16:0e:00:4f:6b:5e:71:
         97:da:fc:25:df:d8:74:78:e7:b7:14:ad:16:7d:89:ad:2d:28:
         ad:a8:39:12:55:64:d1:78:bc:51:bb:b8:51:e6:88:64:96:76:
         5f:00:2d:ef:1a:a1:48:d6:7b:52:47:d1:4f:d1:09:0d:3d:ec:
         61:00:93:15:7d:9e:96:b4:41:31:ac:2b:e5:b4:4d:92:3d:4f:
         d3:f6:a8:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5EvStUFnErm8O0f04kGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZWU2ZWMxYWYzZTg4NTU3ODBiNTdkNTBjMzNiNmM4ZWUz
MzI0YTQwHhcNMjUxMTA0MjIwMjEwWhcNMjUxMTA1MjIwMjEwWjAzMTEwLwYDVQQD
Eyg3YmQ3ZTMyY2EwOGNiNDAyMzhlOWFhMWIyNGY1MzIzNTcwZDcxNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+Yv1XTHYg8YUlBmFH8pmiART4vq
kzkwePENw5x9HM7Nt2D9lSRmP9/Vwf+b8ocS24NeV5VzHMSS/64h3BWL6gcroX8t
YBQhPDgNZ6EW5FBffGZeydiOr/qdSZLgSY368RtL4zlLdkMrnP+FdtbIjkxOT8gl
rVIeN++4D9WCk4trt74uOBMJishc7cbCMAS7SOGngDw9K21dHDmB2Qk1cieKv/J9
nVOpztVqDQR+fS9vHjH+OifzjLlYQrIChU9o6kSZ32OQ1I2nUwEaCpi5TuhVMZr5
eTBklAy/ZO6NizirfJJ5uUEPsksG0x3T44aJRBWY5OmscBMmHLWAjzvmPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvX4yygjLQCOOmqGyT1MjVw1xTuMB8GA1UdIwQY
MBaAFLHubsGvPohVeAtX1QwztsjuMySkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2U1dXdhOC1pRlY0QzFmVkRETzJ5TzR6SktRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yMGRhYjgtNGRkNi00MGY1LTljMjIt
NjUyNjQ2MzY2NjkxLzEvc2U1dXdhOC1pRlY0QzFmVkRETzJ5TzR6SktRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yMGRhYjgtNGRkNi00MGY1LTljMjItNjUyNjQ2MzY2Njkx
LzEvc2U1dXdhOC1pRlY0QzFmVkRETzJ5TzR6SktRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASj3JwWRm
t4b+WJeyc1gJy6YTcq5UYQmUDJG1LSwF6YNnVz9hF+hP425aI8YJrkUOTIy8ceJT
nWpDNGMPSQLCO/Ae2EPgleTAdqdcL4M753sUJLF1T0IjrOLLXjsS2/AHSGr9ctYp
/+6sl8UBH71O4in7Wl0XsvDbQTBssz7sGjKwQZmRjog2f74s5uumrr/65KtWK9j8
ooAbbyt+lmp5/BFQTZaMmTWiiF2tP7cWDgBPa15xl9r8Jd/YdHjntxStFn2JrS0o
rag5ElVk0Xi8Ubu4UeaIZJZ2XwAt7xqhSNZ7UkfRT9EJDT3sYQCTFX2elrRBMawr
5bRNkj1P0/aoXQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:26:56 2025 by rpki-client