Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
File:                     pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft (raw, json)
Hash identifier:          8TsJlUYTFjaam7rd2htHToi1qGYD4cDbjA747ker3Ws=
Subject key identifier:   A9:D1:A7:76:6B:C2:04:F0:25:D7:B2:35:3F:91:98:06:04:EB:79:44
Authority key identifier: A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41
Certificate issuer:       /CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
Certificate serial:       019A4F62925251C4AD76C7E274B5ADAB5937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
Manifest number:          1541
Signing time:             Tue 04 Nov 2025 15:00:51 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:51 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:51 +0000
Files and hashes:         1: pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl (hash: 2t9O6Aao17g7LU01yEyOZHu/QH2p7Xr2YKVuu/1cOcU=)
                          2: vzmyNrlx12Of6nkhjpCUrNuMnE0.roa (hash: GZnGfQJ22BwvGawBRyPMAw4FcsQFgdQkm7oclrkMSK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:92:52:51:c4:ad:76:c7:e2:74:b5:ad:ab:59:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4c7bfe415604f6136ceaa216356495bf6d5cc41
        Validity
            Not Before: Nov  4 15:00:51 2025 GMT
            Not After : Nov  5 15:00:51 2025 GMT
        Subject: CN=a9d1a7766bc204f025d7b2353f91980604eb7944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:0d:c1:d3:69:a8:6b:70:e5:bc:82:b2:24:
                    d5:b6:c0:70:e5:07:60:bf:eb:c8:cb:14:2d:0f:fd:
                    a2:0d:db:42:05:31:a6:80:3e:ab:56:58:6b:73:e7:
                    2a:d3:40:9b:37:da:36:e3:4c:81:08:d6:a6:64:93:
                    48:75:a8:ba:ad:89:ea:77:9d:d6:fa:b0:73:0b:aa:
                    a3:9b:1a:62:0d:ac:27:65:3d:3b:a5:28:dc:07:33:
                    a5:d0:47:00:a9:15:6d:1e:4a:34:c2:bd:88:d9:da:
                    36:c8:21:df:d4:ba:8e:7b:0d:02:52:1c:7f:7c:05:
                    6e:03:68:da:79:fd:4c:18:af:57:0f:07:0d:38:b2:
                    06:95:3e:5d:97:e0:9c:25:8d:d7:34:80:af:1b:32:
                    b8:64:47:8d:f5:2c:db:63:5e:fb:d6:c5:37:0f:43:
                    67:97:99:e2:53:0e:7c:e0:76:f5:37:a0:25:bc:a6:
                    f7:ea:f9:66:72:0b:f8:c6:c8:dc:d5:16:e0:ff:dc:
                    1f:0e:12:f7:ba:a9:0e:1d:b6:48:ba:6c:d2:e3:4b:
                    35:be:f1:02:a8:3e:2f:86:2c:da:b3:1f:d3:89:fa:
                    5c:73:1c:2c:d1:64:9c:e9:49:bd:11:9f:d7:1d:95:
                    2a:2f:17:1a:26:e2:88:51:61:98:9a:c2:d3:25:63:
                    98:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D1:A7:76:6B:C2:04:F0:25:D7:B2:35:3F:91:98:06:04:EB:79:44
            X509v3 Authority Key Identifier:
                keyid:A4:C7:BF:E4:15:60:4F:61:36:CE:AA:21:63:56:49:5B:F6:D5:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMe_5BVgT2E2zqohY1ZJW_bVzEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/07cd4d-7d35-44e1-aba3-c9b220a4d6f0/1/pMe_5BVgT2E2zqohY1ZJW_bVzEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2d:82:b6:5d:4f:e7:8e:06:c1:c8:9b:b6:07:b9:4f:b6:3d:
         73:8d:0a:6f:44:7f:6d:d3:85:c8:5b:26:01:b9:c2:14:17:17:
         e6:ac:79:b5:9e:21:af:45:2a:75:c0:ce:c0:ff:7d:d6:e2:80:
         c5:9f:ca:2c:d9:90:86:84:0b:16:5a:78:3d:ad:d8:a7:3e:91:
         ca:ae:72:21:d1:b5:5c:ce:6c:b9:86:ff:d5:fd:1d:bc:52:61:
         6d:fc:e9:1c:c7:15:9e:8e:ab:f1:a8:ff:01:e4:81:b8:1d:77:
         26:31:6a:a9:ce:22:29:56:cd:72:2f:cb:a3:a5:fc:8f:33:ac:
         93:83:1e:8d:49:a6:ca:42:0e:98:52:07:6e:96:b2:88:9d:d4:
         17:f2:02:51:e4:57:d3:db:b6:5a:eb:2b:58:ce:4a:3e:a1:c3:
         19:9f:12:0b:9b:75:64:72:31:e0:76:19:3e:c0:b9:92:e4:7a:
         34:02:00:83:39:06:dd:0b:cd:d4:8e:b4:45:79:bf:ae:31:6f:
         14:c1:8e:d7:f2:0b:2d:82:a9:82:08:33:08:3f:e2:2e:e4:99:
         17:26:1c:b8:1e:bd:a8:d1:7a:b5:82:69:e6:22:c2:53:a1:bd:
         4f:38:1b:8c:a5:84:cd:23:26:70:ca:00:ae:27:e3:83:a8:9c:
         bc:9b:c1:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYpJSUcStdsfidLWtq1k3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YzdiZmU0MTU2MDRmNjEzNmNlYWEyMTYzNTY0OTViZjZk
NWNjNDEwHhcNMjUxMTA0MTUwMDUxWhcNMjUxMTA1MTUwMDUxWjAzMTEwLwYDVQQD
EyhhOWQxYTc3NjZiYzIwNGYwMjVkN2IyMzUzZjkxOTgwNjA0ZWI3OTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKYNwdNpqGtw5byCsiTVtsBw5Qdg
v+vIyxQtD/2iDdtCBTGmgD6rVlhrc+cq00CbN9o240yBCNamZJNIdai6rYnqd53W
+rBzC6qjmxpiDawnZT07pSjcBzOl0EcAqRVtHko0wr2I2do2yCHf1LqOew0CUhx/
fAVuA2jaef1MGK9XDwcNOLIGlT5dl+CcJY3XNICvGzK4ZEeN9SzbY1771sU3D0Nn
l5niUw584Hb1N6AlvKb36vlmcgv4xsjc1Rbg/9wfDhL3uqkOHbZIumzS40s1vvEC
qD4vhizasx/Tifpccxws0WSc6Um9EZ/XHZUqLxcaJuKIUWGYmsLTJWOYHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnRp3ZrwgTwJdeyNT+RmAYE63lEMB8GA1UdIwQY
MBaAFKTHv+QVYE9hNs6qIWNWSVv21cxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wN2NkNGQtN2QzNS00NGUxLWFiYTMt
YzliMjIwYTRkNmYwLzEvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wN2NkNGQtN2QzNS00NGUxLWFiYTMtYzliMjIwYTRkNmYw
LzEvcE1lXzVCVmdUMkUyenFvaFkxWkpXX2JWekVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbi2Ctl1P
544Gwcibtge5T7Y9c40Kb0R/bdOFyFsmAbnCFBcX5qx5tZ4hr0UqdcDOwP991uKA
xZ/KLNmQhoQLFlp4Pa3Ypz6Ryq5yIdG1XM5suYb/1f0dvFJhbfzpHMcVno6r8aj/
AeSBuB13JjFqqc4iKVbNci/Lo6X8jzOsk4MejUmmykIOmFIHbpayiJ3UF/ICUeRX
09u2WusrWM5KPqHDGZ8SC5t1ZHIx4HYZPsC5kuR6NAIAgzkG3QvN1I60RXm/rjFv
FMGO1/ILLYKpgggzCD/iLuSZFyYcuB69qNF6tYJp5iLCU6G9TzgbjKWEzSMmcMoA
rifjg6icvJvBXw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:29 2025 by rpki-client