Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File:                     4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier:          09sR5FxKr33BZlLT3Cp/2Pa9W7Yfqtz6WkBBnQ+G7u8=
Subject key identifier:   9A:F0:B0:3A:49:47:C0:C1:DE:3D:E8:82:A4:65:65:83:0B:B9:C0:71
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer:       /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial:       019A4EF5F59F336A0474E52FBC3CE3615CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number:          127B
Signing time:             Tue 04 Nov 2025 13:02:13 +0000
Manifest this update:     Tue 04 Nov 2025 13:02:13 +0000
Manifest next update:     Wed 05 Nov 2025 13:02:13 +0000
Files and hashes:         1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: Z0YVsvnfHprJW7s9WIn39HaliDyHXdAxvEUPHDFeRk0=)
                          2: rxnNIrhG3QldlOPtvjeA2wvjFbs.roa (hash: 2BblVg4dCI71TgTK0hUX2laI8AdtzWYFSV42O2qiwl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:f5:9f:33:6a:04:74:e5:2f:bc:3c:e3:61:5c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
        Validity
            Not Before: Nov  4 13:02:13 2025 GMT
            Not After : Nov  5 13:02:13 2025 GMT
        Subject: CN=9af0b03a4947c0c1de3de882a46565830bb9c071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:1e:ba:4a:d6:1b:d6:f4:e6:3a:13:72:85:
                    b7:cd:7c:84:cb:f6:88:c2:2e:b7:d9:85:d5:72:15:
                    cc:b2:af:28:a6:db:e9:4f:e9:ae:7e:fa:ff:0c:ff:
                    19:b3:32:08:53:84:33:4c:9c:a3:b4:ae:40:ba:5c:
                    39:af:0e:5e:5c:40:36:42:a6:6d:4d:f1:be:90:03:
                    9b:cd:99:75:5b:2e:6c:46:40:2f:58:a0:8f:3d:a5:
                    db:3e:cc:52:d3:7a:94:e0:65:b5:62:74:df:ec:41:
                    99:bb:b7:e2:29:ea:96:9a:43:56:49:bf:71:45:da:
                    b9:e6:ca:a5:cf:b6:da:2c:30:d9:c0:78:8e:82:73:
                    45:68:98:dc:8e:c8:aa:3d:a3:27:02:a3:14:6e:6a:
                    0c:d9:b4:18:d0:16:6c:1a:a1:0f:4a:61:dc:bb:e3:
                    ee:2d:44:e1:4f:27:b5:18:9f:6c:26:10:a6:bb:25:
                    35:2a:7f:32:7e:c2:8a:ed:16:57:15:0d:10:31:63:
                    11:f4:61:cb:36:60:43:a2:24:10:39:0f:1a:f0:4c:
                    43:7b:2e:37:cc:78:ae:9d:b4:a9:c7:a2:48:53:d3:
                    14:61:46:38:45:d9:a3:29:ad:3b:e8:3c:5e:d5:c8:
                    2e:04:31:42:21:59:65:4b:18:24:82:97:ac:76:01:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F0:B0:3A:49:47:C0:C1:DE:3D:E8:82:A4:65:65:83:0B:B9:C0:71
            X509v3 Authority Key Identifier:
                keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:1d:43:24:7a:8d:be:d2:e9:a8:85:ed:7c:7f:3d:d9:5e:9a:
         d8:de:fd:e7:f0:11:56:52:c5:f4:60:ab:30:8e:a6:26:53:25:
         31:cc:51:a1:a7:a0:1d:9e:37:09:0d:70:81:6a:70:51:43:ed:
         84:8d:65:d5:5b:e8:30:5a:67:14:7d:1e:11:3a:49:ce:fb:5f:
         01:a3:c2:fe:cc:bf:8a:3c:fc:72:d3:3a:70:1e:e1:6b:b7:c9:
         68:a6:aa:25:45:e1:65:bc:8a:f9:36:cd:f6:c4:a6:fc:b0:c1:
         e8:db:71:2b:28:aa:1f:63:3f:de:d6:0f:f1:a8:cb:37:77:99:
         af:b8:37:86:da:12:75:38:08:b5:49:e0:57:72:70:f6:bd:3d:
         05:ce:94:00:a0:58:01:8f:cb:9c:49:41:e4:7a:32:84:d7:31:
         91:bf:96:64:d1:0d:10:a9:d4:15:8b:1e:cf:0f:06:e8:05:07:
         f8:96:6f:0e:cf:f0:2d:27:57:23:75:26:6d:9f:df:38:ac:e6:
         b9:be:36:c1:54:b2:6f:97:f7:09:48:0f:ad:b5:bc:a0:4e:83:
         75:86:66:96:46:e6:93:5e:ec:bd:b8:39:ad:2c:b9:44:2b:d9:
         d9:73:19:46:32:9e:5c:33:f7:a8:da:46:a9:35:6a:d3:14:24:
         58:a1:32:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9fWfM2oEdOUvvDzjYVzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTQ2ZTJjNDAxNmE4ZDczOTJjODU3NDEzNGZkNDc5M2I5
NDE1YTQwHhcNMjUxMTA0MTMwMjEzWhcNMjUxMTA1MTMwMjEzWjAzMTEwLwYDVQQD
Eyg5YWYwYjAzYTQ5NDdjMGMxZGUzZGU4ODJhNDY1NjU4MzBiYjljMDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK8eukrWG9b05joTcoW3zXyEy/aI
wi632YXVchXMsq8optvpT+mufvr/DP8ZszIIU4QzTJyjtK5Aulw5rw5eXEA2QqZt
TfG+kAObzZl1Wy5sRkAvWKCPPaXbPsxS03qU4GW1YnTf7EGZu7fiKeqWmkNWSb9x
Rdq55sqlz7baLDDZwHiOgnNFaJjcjsiqPaMnAqMUbmoM2bQY0BZsGqEPSmHcu+Pu
LUThTye1GJ9sJhCmuyU1Kn8yfsKK7RZXFQ0QMWMR9GHLNmBDoiQQOQ8a8ExDey43
zHiunbSpx6JIU9MUYUY4RdmjKa076Dxe1cguBDFCIVllSxgkgpesdgFIAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrwsDpJR8DB3j3ogqRlZYMLucBxMB8GA1UdIwQY
MBaAFOPkbixAFqjXOSyFdBNP1Hk7lBWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYzgtNzQ1Ni00ZTU1LWI3NzYt
ZDhlY2UyNmFmZWMwLzEvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy81NzJlYzgtNzQ1Ni00ZTU1LWI3NzYtZDhlY2UyNmFmZWMw
LzEvNC1SdUxFQVdxTmM1TElWMEUwX1VlVHVVRmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh1DJHqN
vtLpqIXtfH892V6a2N795/ARVlLF9GCrMI6mJlMlMcxRoaegHZ43CQ1wgWpwUUPt
hI1l1VvoMFpnFH0eETpJzvtfAaPC/sy/ijz8ctM6cB7ha7fJaKaqJUXhZbyK+TbN
9sSm/LDB6NtxKyiqH2M/3tYP8ajLN3eZr7g3htoSdTgItUngV3Jw9r09Bc6UAKBY
AY/LnElB5HoyhNcxkb+WZNENEKnUFYsezw8G6AUH+JZvDs/wLSdXI3UmbZ/fOKzm
ub42wVSyb5f3CUgPrbW8oE6DdYZmlkbmk17svbg5rSy5RCvZ2XMZRjKeXDP3qNpG
qTVq0xQkWKEyQw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:40 2025 by rpki-client