Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
File:                     _h7q315_VCD2dKjrh7tLE3fNvWQ.mft (raw, json)
Hash identifier:          c9cvGLaQF1dkzAubACc75F+ER/McGBtSuXzES5SOw4I=
Subject key identifier:   D2:97:C8:82:6B:F1:F9:89:5C:CE:8E:A5:64:5E:44:F1:37:13:1D:1E
Authority key identifier: FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64
Certificate issuer:       /CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64
Certificate serial:       019A2108B93331C58CA0AA66E7652F842018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
Manifest number:          0359
Signing time:             Sun 26 Oct 2025 15:00:10 +0000
Manifest this update:     Sun 26 Oct 2025 15:00:10 +0000
Manifest next update:     Mon 27 Oct 2025 15:00:10 +0000
Files and hashes:         1: _h7q315_VCD2dKjrh7tLE3fNvWQ.crl (hash: pcFLDT+z1EwdMEnGkSfFXoQ6Bmo5gRNN13Nn2OSDZ/E=)
                          2: doL4Cn2ma0kPf9AhJrRKrVG3Az0.roa (hash: SUzYz5u/F8jt5TpzuvWgvwZ7xHoIJE9Sk3avrITgKS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:08:b9:33:31:c5:8c:a0:aa:66:e7:65:2f:84:20:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1eeadf5e7f5420f674a8eb87bb4b1377cdbd64
        Validity
            Not Before: Oct 26 15:00:10 2025 GMT
            Not After : Oct 27 15:00:10 2025 GMT
        Subject: CN=d297c8826bf1f9895cce8ea5645e44f137131d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:2f:bf:c1:7b:22:27:71:c2:c0:fc:1b:20:
                    4c:df:46:50:a0:2b:6b:9e:39:f2:a1:1c:57:28:84:
                    69:e2:6a:4c:db:e0:8a:48:26:90:9f:34:04:21:19:
                    ad:e0:e8:c4:3a:f8:5d:17:4d:de:c7:65:0a:6c:b8:
                    3d:ca:6b:5e:10:b7:69:cc:c5:23:13:ea:e6:bc:f3:
                    e6:3e:b6:c3:16:33:0e:fb:2e:21:b0:05:fd:02:e0:
                    c9:95:11:07:1e:6d:7a:00:a8:e4:9c:70:10:d6:f0:
                    2a:51:5f:bb:dc:47:88:54:15:8f:17:61:b0:a4:00:
                    c9:43:f5:46:d7:3b:10:8c:a5:ce:84:ba:b8:30:78:
                    a8:81:20:b9:c6:3f:10:67:71:70:1a:b2:40:7e:27:
                    ea:ed:3d:67:b8:d6:5c:88:ef:e9:8c:b9:fb:5c:a9:
                    9e:1f:37:7a:75:56:bd:dd:fc:ce:62:00:b4:ba:96:
                    49:5e:b8:3b:c2:b3:c1:83:83:da:e1:cc:4c:75:c8:
                    35:2b:da:d9:75:5f:1d:10:91:a0:5b:44:2c:ad:df:
                    06:a2:5d:6c:01:8c:96:76:ab:f7:6a:e0:4c:63:3c:
                    7b:53:a7:7d:fe:08:7f:9b:65:96:9e:53:78:4d:ef:
                    2e:4e:f5:77:2e:af:18:ce:d7:73:81:86:8a:db:1c:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:97:C8:82:6B:F1:F9:89:5C:CE:8E:A5:64:5E:44:F1:37:13:1D:1E
            X509v3 Authority Key Identifier:
                keyid:FE:1E:EA:DF:5E:7F:54:20:F6:74:A8:EB:87:BB:4B:13:77:CD:BD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h7q315_VCD2dKjrh7tLE3fNvWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/79bdd0-c3c9-4c42-b9c5-3507dffa1ef2/1/_h7q315_VCD2dKjrh7tLE3fNvWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:20:c9:66:bf:71:c9:67:19:45:cd:92:38:94:7c:f6:52:69:
         2d:70:26:2d:a4:4d:11:26:21:e4:80:22:c1:b4:fd:3c:15:41:
         42:a1:81:60:fd:76:1b:b1:e4:ab:36:e3:cf:65:45:eb:42:da:
         94:27:d1:6f:7a:af:60:5b:7f:0e:ba:75:fa:61:a1:87:53:32:
         67:82:81:15:e4:70:e7:ca:19:0c:4d:7e:28:5a:c0:6d:b9:35:
         43:4b:c3:8c:7a:3b:41:35:91:e9:47:67:91:fa:19:0f:e6:1c:
         d7:94:99:98:99:e7:c1:a7:1d:a8:80:1e:11:55:08:28:b0:f1:
         a8:8a:92:0a:ee:79:3f:82:93:ae:9a:ae:62:78:86:59:28:52:
         ec:dc:9e:b7:c3:04:53:61:71:94:17:76:d9:ba:bc:52:52:bf:
         9c:80:3d:fb:42:81:2e:b0:c7:d0:0c:88:38:ee:37:8a:d9:ee:
         8d:63:26:c6:a8:29:fe:88:63:20:83:c9:54:13:b2:08:10:fd:
         21:07:e3:96:c6:c2:92:91:c1:27:a1:10:d5:08:49:52:53:de:
         04:7a:2e:e8:ca:81:41:ee:aa:b6:ba:dc:ee:23:03:a4:f6:f7:
         ee:28:89:f6:19:c6:f3:b8:bc:c5:65:07:c1:61:56:a9:9b:79:
         5d:72:a4:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCLkzMcWMoKpm52UvhCAYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMWVlYWRmNWU3ZjU0MjBmNjc0YThlYjg3YmI0YjEzNzdj
ZGJkNjQwHhcNMjUxMDI2MTUwMDEwWhcNMjUxMDI3MTUwMDEwWjAzMTEwLwYDVQQD
EyhkMjk3Yzg4MjZiZjFmOTg5NWNjZThlYTU2NDVlNDRmMTM3MTMxZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMUvv8F7IidxwsD8GyBM30ZQoCtr
njnyoRxXKIRp4mpM2+CKSCaQnzQEIRmt4OjEOvhdF03ex2UKbLg9ymteELdpzMUj
E+rmvPPmPrbDFjMO+y4hsAX9AuDJlREHHm16AKjknHAQ1vAqUV+73EeIVBWPF2Gw
pADJQ/VG1zsQjKXOhLq4MHiogSC5xj8QZ3FwGrJAfifq7T1nuNZciO/pjLn7XKme
Hzd6dVa93fzOYgC0upZJXrg7wrPBg4Pa4cxMdcg1K9rZdV8dEJGgW0Qsrd8Gol1s
AYyWdqv3auBMYzx7U6d9/gh/m2WWnlN4Te8uTvV3Lq8YztdzgYaK2xx+7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKXyIJr8fmJXM6OpWReRPE3Ex0eMB8GA1UdIwQY
MBaAFP4e6t9ef1Qg9nSo64e7SxN3zb1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83OWJkZDAtYzNjOS00YzQyLWI5YzUt
MzUwN2RmZmExZWYyLzEvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83OWJkZDAtYzNjOS00YzQyLWI5YzUtMzUwN2RmZmExZWYy
LzEvX2g3cTMxNV9WQ0QyZEtqcmg3dExFM2ZOdldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyDJZr9x
yWcZRc2SOJR89lJpLXAmLaRNESYh5IAiwbT9PBVBQqGBYP12G7Hkqzbjz2VF60La
lCfRb3qvYFt/Drp1+mGhh1MyZ4KBFeRw58oZDE1+KFrAbbk1Q0vDjHo7QTWR6Udn
kfoZD+Yc15SZmJnnwacdqIAeEVUIKLDxqIqSCu55P4KTrpquYniGWShS7Nyet8ME
U2FxlBd22bq8UlK/nIA9+0KBLrDH0AyIOO43itnujWMmxqgp/ohjIIPJVBOyCBD9
IQfjlsbCkpHBJ6EQ1QhJUlPeBHou6MqBQe6qtrrc7iMDpPb37iiJ9hnG87i8xWUH
wWFWqZt5XXKkIg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:25:50 2025 by rpki-client