Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File:                     1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier:          QI9BeLAHjY7yA54KoOMNilpwPUwQONz6Vcuz/1GgRLc=
Subject key identifier:   82:01:E7:BE:6E:72:37:BF:76:E4:D0:DC:CE:A4:76:EF:8E:55:FD:C9
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer:       /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial:       019A5375F5196D24BBF2D963D1A8E9C9E04B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number:          0363
Signing time:             Wed 05 Nov 2025 10:00:30 +0000
Manifest this update:     Wed 05 Nov 2025 10:00:30 +0000
Manifest next update:     Thu 06 Nov 2025 10:00:30 +0000
Files and hashes:         1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: 0Eox8mgIUQmSYCgfbFM9RGP1E9altnx6wgmQqoMgcqI=)
                          2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:75:f5:19:6d:24:bb:f2:d9:63:d1:a8:e9:c9:e0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
        Validity
            Not Before: Nov  5 10:00:30 2025 GMT
            Not After : Nov  6 10:00:30 2025 GMT
        Subject: CN=8201e7be6e7237bf76e4d0dccea476ef8e55fdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:66:a9:48:05:66:29:fa:c3:40:c1:41:4e:0a:
                    0d:70:a5:0b:75:4b:5c:da:d8:aa:9f:e7:8e:4b:43:
                    86:7f:2b:2d:0c:c8:30:9f:97:a4:ce:92:ef:85:d6:
                    c5:f2:44:9e:73:34:c7:fc:22:52:1d:31:8f:a6:89:
                    5a:13:3a:8f:40:f6:f4:d3:e1:ec:c5:88:c1:88:3c:
                    b2:57:a0:f0:a5:e2:06:9c:6f:00:c7:70:eb:ba:b1:
                    94:a5:74:a1:e6:8d:e2:b2:0b:f8:ef:11:05:17:2f:
                    5d:1f:ca:90:88:39:10:de:c0:46:09:a2:f3:43:97:
                    6e:bc:ab:6c:38:96:70:90:2a:f1:b9:e7:66:4f:8d:
                    db:7d:60:61:25:07:b3:23:49:80:b7:ff:13:43:fb:
                    c3:83:79:98:27:2b:58:37:3d:41:cf:09:d8:42:ef:
                    78:6b:e8:19:dd:09:ff:02:11:17:da:a8:ad:99:de:
                    18:05:96:93:9f:9f:96:d9:6c:8c:b1:87:43:cb:0c:
                    9d:b3:25:84:31:b0:ca:63:ac:e8:5f:a5:c8:72:b2:
                    e7:c4:5a:0f:c2:a4:29:79:ca:ca:b0:28:d3:10:be:
                    91:a7:4a:3d:c6:ee:74:7e:e5:69:b0:f0:a7:1e:5b:
                    c9:4f:64:54:7d:c6:da:6a:88:d8:46:0b:74:4c:5b:
                    e7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:E7:BE:6E:72:37:BF:76:E4:D0:DC:CE:A4:76:EF:8E:55:FD:C9
            X509v3 Authority Key Identifier:
                keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1b:40:a8:ef:b7:1b:4d:82:41:38:b1:5b:f6:10:a5:7e:63:
         de:5b:f5:ec:5e:c0:1a:d7:84:69:ef:ce:b6:ba:5c:d5:39:ea:
         2f:8e:0a:b1:7c:d8:77:7d:82:7e:0d:45:60:ec:36:50:55:b7:
         c7:1b:b5:5e:e4:d4:ca:6d:bd:0c:3b:01:00:75:01:f8:a1:70:
         86:7f:d3:8a:72:5c:e1:17:1a:25:32:d0:6c:ab:be:18:fc:2e:
         a7:6b:50:a4:ae:53:e4:75:e9:11:d8:51:cf:d0:a2:7b:f0:37:
         0c:09:60:30:a8:06:6c:d3:24:ef:1c:6a:f5:64:97:82:7c:35:
         37:7b:af:62:06:ca:78:3e:65:9b:42:9a:6f:cf:fe:53:fb:d3:
         8a:6a:f5:11:c0:94:c8:54:78:ac:c5:d3:21:d7:64:50:46:ef:
         08:47:a8:78:d3:a3:40:92:e0:87:a9:84:3b:1c:64:06:92:d1:
         9d:2b:a1:6f:9f:db:11:37:05:3b:08:c0:81:43:60:ef:5c:99:
         4b:ca:ba:36:44:c4:d4:5d:00:9d:26:23:4a:45:60:43:2f:07:
         88:62:1d:41:73:de:62:ee:84:a8:71:f9:cd:bb:17:50:d8:29:
         a3:21:e2:d1:e5:81:d8:5f:33:9a:c1:5c:a8:11:6b:a7:b0:07:
         83:3b:49:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdfUZbSS78tlj0ajpyeBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZGU0M2NkMWY4YWY0NWM2ODk4NjdkOWY1YTg4MWEyYWVj
MzRiMzEwHhcNMjUxMTA1MTAwMDMwWhcNMjUxMTA2MTAwMDMwWjAzMTEwLwYDVQQD
Eyg4MjAxZTdiZTZlNzIzN2JmNzZlNGQwZGNjZWE0NzZlZjhlNTVmZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWapSAVmKfrDQMFBTgoNcKULdUtc
2tiqn+eOS0OGfystDMgwn5ekzpLvhdbF8kSeczTH/CJSHTGPpolaEzqPQPb00+Hs
xYjBiDyyV6DwpeIGnG8Ax3DrurGUpXSh5o3isgv47xEFFy9dH8qQiDkQ3sBGCaLz
Q5duvKtsOJZwkCrxuedmT43bfWBhJQezI0mAt/8TQ/vDg3mYJytYNz1BzwnYQu94
a+gZ3Qn/AhEX2qitmd4YBZaTn5+W2WyMsYdDywydsyWEMbDKY6zoX6XIcrLnxFoP
wqQpecrKsCjTEL6Rp0o9xu50fuVpsPCnHlvJT2RUfcbaaojYRgt0TFvn5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIB575ucje/duTQ3M6kdu+OVf3JMB8GA1UdIwQY
MBaAFNXeQ80fivRcaJhn2fWogaKuw0sxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNjA4YjAtZTdjYS00YjNiLTkwMmYt
NGQwYTdlYzA3Nzg2LzEvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNjA4YjAtZTdjYS00YjNiLTkwMmYtNGQwYTdlYzA3Nzg2
LzEvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxtAqO+3
G02CQTixW/YQpX5j3lv17F7AGteEae/Otrpc1TnqL44KsXzYd32Cfg1FYOw2UFW3
xxu1XuTUym29DDsBAHUB+KFwhn/TinJc4RcaJTLQbKu+GPwup2tQpK5T5HXpEdhR
z9Cie/A3DAlgMKgGbNMk7xxq9WSXgnw1N3uvYgbKeD5lm0Kab8/+U/vTimr1EcCU
yFR4rMXTIddkUEbvCEeoeNOjQJLgh6mEOxxkBpLRnSuhb5/bETcFOwjAgUNg71yZ
S8q6NkTE1F0AnSYjSkVgQy8HiGIdQXPeYu6EqHH5zbsXUNgpoyHi0eWB2F8zmsFc
qBFrp7AHgztJ7w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:39 2025 by rpki-client