Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
File:                     meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json)
Hash identifier:          vWZIa6I7KlBr7B+2sN4588sGAWSrZiQJ4z21vNcVkKE=
Subject key identifier:   09:1A:93:F6:1E:42:5A:FE:56:77:B4:C4:74:70:70:EA:A6:FC:FB:B1
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Certificate issuer:       /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial:       019A4EF5930A2BF900598D7E7049AEBED24F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
Manifest number:          072A
Signing time:             Tue 04 Nov 2025 13:01:47 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:47 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:47 +0000
Files and hashes:         1: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: TZ0VOlElB9FCNwMGz7uEr1IiWwNzZvYABzKWeMIWIt4=)
                          2: nFnXzGX9x8WjQH0WTEkYEV58ntE.roa (hash: qp697Wbqn7eonfV2epdNmLzMoHnyKSRFdJF1JaKpdqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:93:0a:2b:f9:00:59:8d:7e:70:49:ae:be:d2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
        Validity
            Not Before: Nov  4 13:01:47 2025 GMT
            Not After : Nov  5 13:01:47 2025 GMT
        Subject: CN=091a93f61e425afe5677b4c4747070eaa6fcfbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:c3:8e:c0:1a:54:d5:f5:95:41:df:98:ad:
                    84:b7:1d:15:5e:61:c0:80:e2:ac:84:31:b5:d2:e1:
                    1d:34:e3:df:29:a4:82:8b:31:0d:c9:0c:d2:e4:28:
                    e3:83:ed:4c:e5:c2:27:9c:64:e3:0c:56:68:c6:df:
                    eb:4e:7c:01:23:f4:dc:af:4f:ad:01:38:85:98:e0:
                    95:1a:6c:16:55:19:c7:f5:e1:4e:1c:42:a6:26:2d:
                    0d:f4:68:ba:f3:17:1b:3b:25:c1:db:4c:37:13:f5:
                    95:ef:b7:fb:ca:12:b7:77:82:f3:35:f9:51:03:5b:
                    4f:60:5f:da:d5:aa:c0:eb:14:12:19:b5:a5:25:7b:
                    68:dd:fd:57:6f:ce:0d:a0:13:ac:06:23:67:03:50:
                    dd:db:04:f8:6d:b2:d6:f1:c7:e2:2f:64:1e:9f:b2:
                    f3:0e:c9:54:c8:c0:92:85:2a:83:55:83:f8:7a:61:
                    9a:94:a8:e1:3c:c8:b2:ab:23:75:cb:0b:a1:c0:ea:
                    a7:62:e9:7e:9c:47:6b:80:39:42:a9:00:de:f5:30:
                    2a:00:6b:6b:ac:42:16:67:b9:2f:f9:4f:ee:80:9e:
                    78:96:35:2c:1a:a6:69:78:a4:cc:8a:ec:83:97:13:
                    4d:4d:c6:38:57:9e:76:67:b7:79:dc:ee:c7:8c:4d:
                    6c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:93:F6:1E:42:5A:FE:56:77:B4:C4:74:70:70:EA:A6:FC:FB:B1
            X509v3 Authority Key Identifier:
                keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:e9:57:57:86:ea:09:60:e5:82:1a:ef:67:db:66:a9:cf:
         6e:10:9f:8e:9b:a3:b2:e3:06:ac:fa:95:64:11:f9:88:62:a4:
         5a:0e:8c:03:dc:48:74:c8:1d:04:44:99:35:38:e3:54:11:b9:
         3e:ab:78:49:cb:d6:5b:ea:40:55:3f:12:38:c0:68:77:9a:86:
         ab:bd:97:ed:75:d1:e6:b6:75:59:5a:f4:77:4b:b4:bb:6b:30:
         3f:a1:30:4e:d4:56:e7:35:d1:87:b2:ce:ce:b4:b4:d5:4c:a6:
         89:cf:1c:f5:fb:b5:46:a2:17:74:ef:7f:54:86:bd:11:bb:f4:
         9e:6a:6a:fe:d5:ee:5e:13:e5:bb:e2:49:6e:21:d5:0c:f7:d2:
         af:8f:dd:ec:5f:1e:5f:03:1c:87:e2:4a:25:aa:d8:33:51:a5:
         20:78:5d:2f:84:3d:76:71:5b:05:35:56:54:5d:03:ca:df:bf:
         87:e8:bb:00:20:db:f8:f2:c8:8f:bc:cf:34:6c:e1:27:f3:59:
         d1:74:8b:16:67:63:24:04:a7:e6:6a:5b:e3:2a:70:ab:d7:31:
         7b:be:f1:c2:1e:31:d6:d7:7b:90:dd:aa:1c:bc:e1:1d:0e:bb:
         63:3e:18:64:ad:fa:a8:28:ae:bf:63:27:82:9f:e5:7d:23:98:
         2c:e1:37:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9ZMKK/kAWY1+cEmuvtJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTg3ZDU2NGNjYjg2MTFlMTQwYTdiMmJmMjYwYzRhMjIy
YjU5ZDYwHhcNMjUxMTA0MTMwMTQ3WhcNMjUxMTA1MTMwMTQ3WjAzMTEwLwYDVQQD
EygwOTFhOTNmNjFlNDI1YWZlNTY3N2I0YzQ3NDcwNzBlYWE2ZmNmYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z3DjsAaVNX1lUHfmK2Etx0VXmHA
gOKshDG10uEdNOPfKaSCizENyQzS5Cjjg+1M5cInnGTjDFZoxt/rTnwBI/Tcr0+t
ATiFmOCVGmwWVRnH9eFOHEKmJi0N9Gi68xcbOyXB20w3E/WV77f7yhK3d4LzNflR
A1tPYF/a1arA6xQSGbWlJXto3f1Xb84NoBOsBiNnA1Dd2wT4bbLW8cfiL2Qen7Lz
DslUyMCShSqDVYP4emGalKjhPMiyqyN1ywuhwOqnYul+nEdrgDlCqQDe9TAqAGtr
rEIWZ7kv+U/ugJ54ljUsGqZpeKTMiuyDlxNNTcY4V552Z7d53O7HjE1sFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkak/YeQlr+Vne0xHRwcOqm/PuxMB8GA1UdIwQY
MBaAFJnofVZMy4YR4UCnsr8mDEoiK1nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jY2IxNjItOTQ5Yi00ODM3LWI1ODAt
Y2Y1MWQ4ZTRjMTRiLzEvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jY2IxNjItOTQ5Yi00ODM3LWI1ODAtY2Y1MWQ4ZTRjMTRi
LzEvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXvpV1eG
6glg5YIa72fbZqnPbhCfjpujsuMGrPqVZBH5iGKkWg6MA9xIdMgdBESZNTjjVBG5
Pqt4ScvWW+pAVT8SOMBod5qGq72X7XXR5rZ1WVr0d0u0u2swP6EwTtRW5zXRh7LO
zrS01Uymic8c9fu1RqIXdO9/VIa9Ebv0nmpq/tXuXhPlu+JJbiHVDPfSr4/d7F8e
XwMch+JKJarYM1GlIHhdL4Q9dnFbBTVWVF0Dyt+/h+i7ACDb+PLIj7zPNGzhJ/NZ
0XSLFmdjJASn5mpb4ypwq9cxe77xwh4x1td7kN2qHLzhHQ67Yz4YZK36qCiuv2Mn
gp/lfSOYLOE3wg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:39:36 2025 by rpki-client