Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
File:                     TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json)
Hash identifier:          IhuqHpQqCaYg5vohdXNDLuVxbaZGFA4J4VGHCru7V0o=
Subject key identifier:   25:DF:86:90:B4:63:62:2C:CD:E1:B1:E4:31:3D:F6:53:E9:32:7F:91
Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Certificate issuer:       /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Certificate serial:       019A4FCFC859992369D251D2C7D99D6C445C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
Manifest number:          0F0B
Signing time:             Tue 04 Nov 2025 17:00:08 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:08 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:08 +0000
Files and hashes:         1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: b5dxt3QZTVr44b/UuXT9bUWvbikLpf1XvxZY10vMqGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:cf:c8:59:99:23:69:d2:51:d2:c7:d9:9d:6c:44:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
        Validity
            Not Before: Nov  4 17:00:08 2025 GMT
            Not After : Nov  5 17:00:08 2025 GMT
        Subject: CN=25df8690b463622ccde1b1e4313df653e9327f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:87:2e:e2:a9:38:25:f2:0f:88:d8:9e:f4:
                    7d:39:6c:d4:08:95:04:39:49:f1:a0:1a:3a:85:b8:
                    0c:4a:a3:e5:30:b1:2f:68:df:9a:dd:24:8e:44:fd:
                    91:63:3d:24:ae:d8:61:fa:aa:3e:6d:cd:a0:38:35:
                    f5:13:b4:89:1b:a2:3d:61:fc:54:2c:95:26:56:b2:
                    36:a7:35:5a:90:aa:b5:1c:6c:f3:6f:af:29:d5:ea:
                    45:b7:d9:26:0b:58:f3:c1:f7:46:e4:52:ab:9b:27:
                    8d:35:f6:02:bf:63:8c:16:3c:93:08:86:b8:23:8b:
                    d8:81:21:6a:05:5a:4c:53:5e:d1:89:c7:a9:97:13:
                    87:57:e3:2e:41:65:bb:6b:83:95:15:68:49:49:6b:
                    5f:51:03:35:81:f1:2f:38:d2:63:0e:f1:d2:72:a1:
                    4c:96:40:cc:17:5a:44:fc:5d:dc:a9:5c:38:f0:67:
                    c2:54:33:68:66:fe:11:9e:f8:4a:7e:2f:bc:e3:a5:
                    6e:47:c8:2e:91:43:2f:d2:46:40:5d:3a:e0:4c:05:
                    b9:98:c0:a3:dd:23:d5:1e:a3:5c:88:5b:ae:aa:ca:
                    08:ec:d7:b7:70:61:21:6a:a8:c6:6f:92:8e:c6:c2:
                    71:fa:86:fd:85:05:a9:f5:96:74:1e:f1:7d:bf:7b:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DF:86:90:B4:63:62:2C:CD:E1:B1:E4:31:3D:F6:53:E9:32:7F:91
            X509v3 Authority Key Identifier:
                keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:13:00:7e:ce:ab:09:6d:67:a8:73:55:ad:88:c9:bc:88:
         23:1a:e6:56:7d:28:5b:60:50:fd:6b:34:b5:33:32:61:d3:a3:
         55:20:4c:b1:a4:bb:0b:b5:a3:dc:0e:c1:1d:f2:e7:6f:a0:e6:
         c8:51:b1:61:82:fe:22:24:ef:f3:20:3a:cb:84:ba:c3:7a:09:
         2e:c4:f2:f2:bf:bd:14:c0:66:f7:d7:e0:0b:7e:83:85:76:ae:
         f9:54:35:2e:b5:a8:7f:79:cb:59:52:1d:c6:cb:0e:dd:1b:bb:
         40:97:41:4e:db:b6:05:d7:f1:d5:31:5c:e8:97:25:2d:ce:57:
         e8:7e:1a:93:1d:16:ed:de:44:43:f6:cc:7a:e8:42:14:40:c7:
         4a:7a:b7:15:0d:2c:1c:ad:e0:58:48:fb:4c:13:aa:33:7e:9d:
         40:f0:35:35:d8:bd:9d:c2:4d:04:a2:ce:37:4e:99:9a:69:3b:
         61:28:24:7e:a6:a8:82:95:c3:70:2a:b5:47:9e:3d:e8:42:69:
         e3:a5:a3:a6:5d:76:82:a9:4a:5d:83:ed:1a:8d:da:f9:24:d8:
         d2:f4:b8:09:90:56:93:ef:3b:0e:95:4d:43:ee:b2:9f:52:e5:
         82:be:f1:93:f8:ef:06:45:f5:fa:e5:fa:c3:c4:19:ee:19:3c:
         dc:be:b9:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz8hZmSNp0lHSx9mdbERcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGU5MGE0NmNkOTJmOGZmY2IxOTI0YjkzYjcxZDFiYWQz
MTMwMTIwHhcNMjUxMTA0MTcwMDA4WhcNMjUxMTA1MTcwMDA4WjAzMTEwLwYDVQQD
EygyNWRmODY5MGI0NjM2MjJjY2RlMWIxZTQzMTNkZjY1M2U5MzI3ZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7OHLuKpOCXyD4jYnvR9OWzUCJUE
OUnxoBo6hbgMSqPlMLEvaN+a3SSORP2RYz0krthh+qo+bc2gODX1E7SJG6I9YfxU
LJUmVrI2pzVakKq1HGzzb68p1epFt9kmC1jzwfdG5FKrmyeNNfYCv2OMFjyTCIa4
I4vYgSFqBVpMU17RiceplxOHV+MuQWW7a4OVFWhJSWtfUQM1gfEvONJjDvHScqFM
lkDMF1pE/F3cqVw48GfCVDNoZv4RnvhKfi+846VuR8gukUMv0kZAXTrgTAW5mMCj
3SPVHqNciFuuqsoI7Ne3cGEhaqjGb5KOxsJx+ob9hQWp9ZZ0HvF9v3vBcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXfhpC0Y2IszeGx5DE99lPpMn+RMB8GA1UdIwQY
MBaAFExOkKRs2S+P/LGSS5O3HRutMTASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYt
YzQ1NzI4YzU2ZjNiLzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9jMjdlZWMtNzE0MS00NTc1LTlhNmYtYzQ1NzI4YzU2ZjNi
LzEvVEU2UXBHelpMNF84c1pKTGs3Y2RHNjB4TUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABO8TAH7O
qwltZ6hzVa2IybyIIxrmVn0oW2BQ/Ws0tTMyYdOjVSBMsaS7C7Wj3A7BHfLnb6Dm
yFGxYYL+IiTv8yA6y4S6w3oJLsTy8r+9FMBm99fgC36DhXau+VQ1LrWof3nLWVId
xssO3Ru7QJdBTtu2Bdfx1TFc6JclLc5X6H4akx0W7d5EQ/bMeuhCFEDHSnq3FQ0s
HK3gWEj7TBOqM36dQPA1Ndi9ncJNBKLON06Zmmk7YSgkfqaogpXDcCq1R5496EJp
46Wjpl12gqlKXYPtGo3a+STY0vS4CZBWk+87DpVNQ+6yn1Llgr7xk/jvBkX1+uX6
w8QZ7hk83L65sA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:01:17 2025 by rpki-client