Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File:                     X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier:          0WnK99zS/aDfjMu5LiBO6xr4uPtx4ZP1GjzodfHP4WM=
Subject key identifier:   A0:74:7A:D2:BD:CA:1C:DF:DF:8C:B8:13:33:2C:87:86:57:2C:03:F7
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer:       /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial:       019A4EF51CA15EC8A6608B81C7616F05A1E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number:          0B33
Signing time:             Tue 04 Nov 2025 13:01:17 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:17 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:17 +0000
Files and hashes:         1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: BfI1QVRoFeCHteF0NJ50Ja+okdobHHn/q8yQYeiCi4M=)
                          2: zbAgIhB9UBueLLgs2g8PDDqXLXM.roa (hash: Zu8ptrGKP7ppJOnD5tDff+kFIkcbbAr6zSQsVh6Ogok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:1c:a1:5e:c8:a6:60:8b:81:c7:61:6f:05:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
        Validity
            Not Before: Nov  4 13:01:17 2025 GMT
            Not After : Nov  5 13:01:17 2025 GMT
        Subject: CN=a0747ad2bdca1cdfdf8cb813332c8786572c03f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:dc:13:fd:19:23:d0:61:3e:c0:54:32:ad:
                    7a:5f:82:3d:f2:10:29:4a:84:46:90:8c:26:de:02:
                    ca:1e:09:b0:63:8e:81:c0:47:e8:9c:e7:c9:0f:91:
                    1e:55:b6:39:0d:ff:a9:a7:5f:5c:c0:bd:7d:62:0c:
                    df:3a:9b:92:e8:12:ff:f0:fb:58:05:d4:3f:6d:c8:
                    3d:41:07:57:1d:04:ef:02:58:60:2f:1f:21:d0:55:
                    6e:fb:c0:80:54:96:79:71:9f:60:b8:d6:d7:b5:ef:
                    5d:6e:71:c9:f7:36:ba:c9:ca:2e:51:fa:e1:68:71:
                    3e:8d:1c:67:6f:94:4f:ed:ff:ae:7e:ce:86:89:74:
                    6f:dc:33:51:80:13:5e:91:ab:f3:f6:25:07:cc:7e:
                    1a:ff:c5:5d:0e:8a:e1:cc:c0:28:5b:48:a1:6d:cc:
                    3c:32:40:00:58:e8:78:b6:f0:b0:8f:0e:31:9f:1e:
                    f2:5f:d6:04:a9:58:b3:d6:38:66:bf:33:47:7d:65:
                    7a:30:89:e1:9d:fb:a8:59:42:eb:4d:83:3a:e1:0b:
                    d9:ff:45:27:95:5d:e2:72:59:23:9c:ea:66:a9:6d:
                    5a:f8:d9:de:df:52:69:bd:a5:ce:5c:53:ca:79:6f:
                    7f:eb:2d:be:7f:0c:c6:63:0c:09:1a:5a:35:d5:31:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:7A:D2:BD:CA:1C:DF:DF:8C:B8:13:33:2C:87:86:57:2C:03:F7
            X509v3 Authority Key Identifier:
                keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:be:88:58:5e:c4:b0:6e:50:6e:dd:e9:ff:07:e7:a0:28:c3:
         d9:e5:e5:29:d5:f9:ea:b9:5e:16:f5:c4:53:5f:1e:5d:96:97:
         98:88:dc:72:a0:28:c1:99:61:6d:33:75:95:07:c6:3e:ed:5f:
         e4:a0:52:1b:5c:04:00:12:af:18:10:ab:69:ef:84:84:9d:8f:
         df:63:dc:28:d3:de:73:4c:4c:64:0b:60:9b:7d:89:7d:5e:c9:
         25:1b:36:df:6b:a7:19:7a:da:90:38:ea:5d:a0:99:28:cf:a1:
         2b:5d:15:f2:04:c6:de:c2:87:37:b6:b5:52:df:8a:92:11:44:
         f1:bb:39:f5:e2:12:46:35:51:bd:1c:57:b3:00:45:75:92:02:
         6d:0d:e8:0a:c8:24:51:7d:4a:64:99:cd:ff:69:2b:2d:1f:df:
         45:0e:d3:57:b8:7b:1e:2e:2d:31:0e:a6:89:e1:33:50:6c:0d:
         16:ed:88:df:1a:07:e2:02:62:8a:3c:bc:a5:6d:61:2f:2f:03:
         be:f0:9f:31:29:8f:ca:88:23:d8:42:d1:9b:24:39:83:8e:cf:
         94:9e:7c:8f:32:78:0e:cb:c5:70:c8:41:17:c6:c1:af:ce:c9:
         4a:5a:c2:4d:df:a1:de:d6:49:fe:33:42:83:8c:d6:da:f9:ca:
         e5:15:1b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9RyhXsimYIuBx2FvBaHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTdiNmFlZjBiZDI0MTEzMDRlNGYzYzY5NTdjODJlYjI1
NjdjZDMwHhcNMjUxMTA0MTMwMTE3WhcNMjUxMTA1MTMwMTE3WjAzMTEwLwYDVQQD
EyhhMDc0N2FkMmJkY2ExY2RmZGY4Y2I4MTMzMzJjODc4NjU3MmMwM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZLcE/0ZI9BhPsBUMq16X4I98hAp
SoRGkIwm3gLKHgmwY46BwEfonOfJD5EeVbY5Df+pp19cwL19YgzfOpuS6BL/8PtY
BdQ/bcg9QQdXHQTvAlhgLx8h0FVu+8CAVJZ5cZ9guNbXte9dbnHJ9za6ycouUfrh
aHE+jRxnb5RP7f+ufs6GiXRv3DNRgBNekavz9iUHzH4a/8VdDorhzMAoW0ihbcw8
MkAAWOh4tvCwjw4xnx7yX9YEqViz1jhmvzNHfWV6MInhnfuoWULrTYM64QvZ/0Un
lV3iclkjnOpmqW1a+Nne31JpvaXOXFPKeW9/6y2+fwzGYwwJGlo11TEkSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB0etK9yhzf34y4EzMsh4ZXLAP3MB8GA1UdIwQY
MBaAFF+ntq7wvSQRME5PPGlXyC6yVnzTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAt
YjNlNDNkMzA1Yjg5LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAtYjNlNDNkMzA1Yjg5
LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGb6IWF7E
sG5Qbt3p/wfnoCjD2eXlKdX56rleFvXEU18eXZaXmIjccqAowZlhbTN1lQfGPu1f
5KBSG1wEABKvGBCrae+EhJ2P32PcKNPec0xMZAtgm32JfV7JJRs232unGXrakDjq
XaCZKM+hK10V8gTG3sKHN7a1Ut+KkhFE8bs59eISRjVRvRxXswBFdZICbQ3oCsgk
UX1KZJnN/2krLR/fRQ7TV7h7Hi4tMQ6mieEzUGwNFu2I3xoH4gJiijy8pW1hLy8D
vvCfMSmPyogj2ELRmyQ5g47PlJ58jzJ4DsvFcMhBF8bBr87JSlrCTd+h3tZJ/jNC
g4zW2vnK5RUbxQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:58 2025 by rpki-client