Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
File:                     RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft (raw, json)
Hash identifier:          YFBSCJJu03NAgjRVx+5qJLQxHzPxVViDHCNoS7KVpAU=
Subject key identifier:   69:9A:94:D1:9A:55:3D:D3:D4:E7:AE:7D:26:EF:E1:19:86:F2:45:74
Authority key identifier: 46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
Certificate issuer:       /CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Certificate serial:       019A7293DE85EC61FEB6B490882A319CE13F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
Manifest number:          0866
Signing time:             Tue 11 Nov 2025 11:01:24 +0000
Manifest this update:     Tue 11 Nov 2025 11:01:24 +0000
Manifest next update:     Wed 12 Nov 2025 11:01:24 +0000
Files and hashes:         1: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl (hash: MDPUZ/JhqBL16AOQ83qF56K9C6+E9LYLprsxJ1ieCQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:93:de:85:ec:61:fe:b6:b4:90:88:2a:31:9c:e1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
        Validity
            Not Before: Nov 11 11:01:24 2025 GMT
            Not After : Nov 12 11:01:24 2025 GMT
        Subject: CN=699a94d19a553dd3d4e7ae7d26efe11986f24574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:26:42:67:f0:38:0a:4b:5f:36:71:bf:65:db:
                    c6:6b:cf:22:7c:c0:27:b7:5e:26:b0:b4:ee:0d:99:
                    85:44:5a:26:83:ab:78:5b:9a:7f:c0:4a:04:f1:ff:
                    12:66:a9:ea:8f:45:9c:4d:ac:82:ef:5f:d9:ef:51:
                    64:c5:e0:c1:6f:e1:e4:a6:c5:9b:1f:b3:d1:db:3e:
                    cc:46:94:80:4d:b8:65:aa:62:90:f7:dd:e4:de:52:
                    e2:b0:40:95:44:b4:e8:b6:7b:5a:22:87:a3:62:a4:
                    d9:88:5a:23:b1:13:3e:68:1e:e0:4c:7f:65:b2:34:
                    bd:74:d5:7e:c8:22:ac:db:d6:69:04:8e:c1:91:bf:
                    ad:9a:e6:df:55:69:3f:95:39:94:b8:96:df:be:23:
                    0d:c8:bb:ce:80:ee:d6:cb:e3:1f:06:3f:14:d5:37:
                    e4:df:4f:75:7b:3f:a2:7c:67:42:c5:1c:cc:a3:34:
                    5f:d8:d1:66:5c:a6:45:86:fc:97:3c:d0:4c:d1:f6:
                    ad:30:34:10:6a:10:99:2b:82:19:9e:9c:54:4a:f7:
                    7f:5c:1b:d0:b4:32:4b:3d:39:4f:30:7d:6b:58:c5:
                    44:03:2a:9d:e4:4b:bf:84:31:66:a3:6a:df:48:44:
                    0a:0c:d5:d7:a2:7e:ce:9d:25:36:60:7c:49:c3:7a:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9A:94:D1:9A:55:3D:D3:D4:E7:AE:7D:26:EF:E1:19:86:F2:45:74
            X509v3 Authority Key Identifier:
                keyid:46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:98:e4:56:c9:e8:fa:72:fb:74:6c:5b:d5:b4:67:8e:a0:fd:
         9d:31:ff:2c:01:0c:f8:8f:70:1f:f5:22:75:c4:62:14:1e:64:
         c9:13:e2:f8:32:fe:07:31:8c:8d:7f:fd:1b:e7:1c:f6:52:79:
         9b:48:0e:86:5f:f9:c0:6c:12:d5:c9:14:18:f6:62:4b:6a:89:
         ff:53:64:22:e6:8e:2e:18:58:a9:6c:cb:fc:ba:4e:29:91:0a:
         c9:1d:fd:81:6d:4b:8b:23:23:33:3b:5d:22:e5:97:9c:63:b7:
         58:97:a0:56:6c:92:cf:66:70:b4:79:19:d3:5d:35:1e:e4:38:
         a9:97:f6:da:24:c7:1a:72:0e:a8:2b:2c:7e:c4:3f:e1:3d:15:
         6a:95:72:a0:ba:dc:62:3d:f6:d8:e9:0c:69:73:64:90:aa:85:
         e6:f7:23:b9:4c:54:c1:7e:e9:8d:fb:52:41:7c:2f:eb:9c:2f:
         2e:66:b1:d6:c4:ab:02:24:ee:37:1e:94:84:ba:bf:90:6e:be:
         34:2f:08:da:c6:d1:01:4d:4a:3b:3b:7e:e0:7f:f6:3b:de:3a:
         10:61:8b:3f:c2:be:f8:c9:e0:54:4e:fd:b9:ab:3f:c7:a9:d3:
         7a:40:d4:1a:14:f6:f5:4b:4f:5b:39:5e:b2:02:79:61:90:b4:
         83:3b:6e:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk96F7GH+trSQiCoxnOE/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NTRmM2U2OTI3ZWM0YzdjOTdkMGYyMzZhOGMyNDUzNGE3
ZmNkZDQwHhcNMjUxMTExMTEwMTI0WhcNMjUxMTEyMTEwMTI0WjAzMTEwLwYDVQQD
Eyg2OTlhOTRkMTlhNTUzZGQzZDRlN2FlN2QyNmVmZTExOTg2ZjI0NTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iZCZ/A4CktfNnG/ZdvGa88ifMAn
t14msLTuDZmFRFomg6t4W5p/wEoE8f8SZqnqj0WcTayC71/Z71FkxeDBb+HkpsWb
H7PR2z7MRpSATbhlqmKQ993k3lLisECVRLTotntaIoejYqTZiFojsRM+aB7gTH9l
sjS9dNV+yCKs29ZpBI7Bkb+tmubfVWk/lTmUuJbfviMNyLvOgO7Wy+MfBj8U1Tfk
3091ez+ifGdCxRzMozRf2NFmXKZFhvyXPNBM0fatMDQQahCZK4IZnpxUSvd/XBvQ
tDJLPTlPMH1rWMVEAyqd5Eu/hDFmo2rfSEQKDNXXon7OnSU2YHxJw3pBfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmalNGaVT3T1OeufSbv4RmG8kV0MB8GA1UdIwQY
MBaAFEZU8+aSfsTHyX0PI2qMJFNKf83UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmxUejVwSi14TWZKZlE4amFvd2tVMHBfemRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83ZmY0YTMtZDE5MS00YzZiLTgzNWEt
YjgwNTA2MjJhYTk2LzEvUmxUejVwSi14TWZKZlE4amFvd2tVMHBfemRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83ZmY0YTMtZDE5MS00YzZiLTgzNWEtYjgwNTA2MjJhYTk2
LzEvUmxUejVwSi14TWZKZlE4amFvd2tVMHBfemRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5jkVsno
+nL7dGxb1bRnjqD9nTH/LAEM+I9wH/UidcRiFB5kyRPi+DL+BzGMjX/9G+cc9lJ5
m0gOhl/5wGwS1ckUGPZiS2qJ/1NkIuaOLhhYqWzL/LpOKZEKyR39gW1LiyMjMztd
IuWXnGO3WJegVmySz2ZwtHkZ0101HuQ4qZf22iTHGnIOqCssfsQ/4T0VapVyoLrc
Yj322OkMaXNkkKqF5vcjuUxUwX7pjftSQXwv65wvLmax1sSrAiTuNx6UhLq/kG6+
NC8I2sbRAU1KOzt+4H/2O946EGGLP8K++MngVE79uas/x6nTekDUGhT29UtPWzle
sgJ5YZC0gztuOg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:24 2025 by rpki-client