Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          ux75Z2AOCj+zJrGmnADtVZZwV3esHlItIQ5OB+dU/1w=
Subject key identifier:   AB:1D:2B:36:CC:12:AA:6A:BB:54:D5:96:06:2A:F8:05:9A:5F:61:56
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       019A1B3DAF967E16F4BEE162C94EC59393DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          1686
Signing time:             Sat 25 Oct 2025 12:00:18 +0000
Manifest this update:     Sat 25 Oct 2025 12:00:18 +0000
Manifest next update:     Sun 26 Oct 2025 12:00:18 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: 2WM29Pn5Y3Psud35Ir/OwPy78eOa6rAz/+zkwagg7HQ=)
                          2: VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa (hash: TCLZUvDrgjrJ7J3tgeNK3Sq6QP0EDUXeSD5NVO6xxj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 08:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1b:3d:af:96:7e:16:f4:be:e1:62:c9:4e:c5:93:93:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: Oct 25 12:00:18 2025 GMT
            Not After : Oct 26 12:00:18 2025 GMT
        Subject: CN=ab1d2b36cc12aa6abb54d596062af8059a5f6156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:32:46:d2:67:f5:0f:f2:0d:bc:f6:24:a6:
                    b8:44:5c:a1:a2:5d:65:1e:d0:ef:7f:e7:d8:75:ae:
                    4f:64:d6:da:4c:41:78:6e:91:d9:6b:92:76:1b:1b:
                    0d:78:0e:b6:99:d1:31:7b:67:b9:d0:ab:29:3b:e6:
                    1f:93:b5:b4:70:6a:c0:58:a9:23:d7:70:f6:cf:26:
                    69:49:df:18:78:39:0a:4d:ff:5d:da:27:fc:d6:4d:
                    cd:d5:13:00:19:8b:5d:3e:c7:9a:e0:74:87:06:59:
                    8f:af:14:e9:85:3b:11:e4:c4:83:25:4b:62:73:c7:
                    73:d8:5a:c4:cc:4c:15:9c:7c:c6:70:c1:ab:22:46:
                    d6:ee:2b:79:70:ac:24:f8:03:df:23:4f:12:a8:74:
                    42:be:af:2d:03:20:80:75:53:64:12:94:65:de:40:
                    9e:42:8f:9e:c7:b0:9e:fb:89:de:cd:b0:5a:8d:81:
                    a7:49:ef:c3:54:15:35:73:e2:72:47:d5:fc:3f:96:
                    25:d3:03:c4:a9:50:0f:54:23:22:7b:73:a0:d7:57:
                    7d:7b:fe:e5:73:8c:4d:ca:f3:8c:17:32:92:5d:02:
                    63:8e:b9:67:89:10:f8:96:c9:b7:2b:e5:97:a8:38:
                    c7:02:0e:84:0c:7f:5d:1b:fc:7c:10:d5:91:b9:ed:
                    db:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1D:2B:36:CC:12:AA:6A:BB:54:D5:96:06:2A:F8:05:9A:5F:61:56
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:2c:b1:69:64:25:d9:f7:71:22:4f:76:cb:6f:6f:09:24:34:
         d7:2b:5c:cc:80:e4:44:f4:dd:b4:a9:f3:50:34:2a:3f:06:28:
         8f:a8:26:bc:06:8c:60:23:55:1f:af:5f:f8:e1:76:c9:31:26:
         c0:58:82:0a:35:6b:30:15:2b:f7:83:44:93:6f:59:fd:2f:56:
         14:6b:27:5c:4b:c4:6a:ee:91:05:bd:2f:6d:6b:ea:0a:8b:a2:
         ff:73:66:07:d7:bf:fd:fc:04:09:d9:7a:f2:ad:e0:24:4c:47:
         93:c9:70:65:6f:05:0c:aa:23:67:55:7b:63:89:57:c9:0f:aa:
         65:79:e3:bb:28:21:70:e8:5d:d0:52:76:26:9c:71:db:f3:48:
         86:23:84:f5:2a:6b:6e:39:dd:c7:28:aa:58:e3:f1:1c:47:fe:
         e2:1e:6d:f5:09:4e:b3:b0:a6:2e:d3:60:60:13:a4:a8:1b:e9:
         4f:c8:e2:06:4c:42:38:8b:87:8d:6b:b2:6d:76:14:e7:14:7d:
         77:36:20:4a:36:9a:ba:f6:b2:6a:48:88:06:64:fc:28:e1:32:
         02:3c:6d:0f:6b:de:0f:48:3f:9e:f6:9f:a9:bb:e1:93:c4:4c:
         d4:d9:44:b5:d7:f4:37:30:6c:9c:73:b5:6c:d6:ba:bf:90:f2:
         c1:b5:f9:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZobPa+Wfhb0vuFiyU7Fk5PcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YmMyOWYzNTM4NTJkMTgwZDIzNDEwOTk3ZDBmMDQ3ZWMx
Nzc4ZDMwHhcNMjUxMDI1MTIwMDE4WhcNMjUxMDI2MTIwMDE4WjAzMTEwLwYDVQQD
EyhhYjFkMmIzNmNjMTJhYTZhYmI1NGQ1OTYwNjJhZjgwNTlhNWY2MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmcyRtJn9Q/yDbz2JKa4RFyhol1l
HtDvf+fYda5PZNbaTEF4bpHZa5J2GxsNeA62mdExe2e50KspO+Yfk7W0cGrAWKkj
13D2zyZpSd8YeDkKTf9d2if81k3N1RMAGYtdPsea4HSHBlmPrxTphTsR5MSDJUti
c8dz2FrEzEwVnHzGcMGrIkbW7it5cKwk+APfI08SqHRCvq8tAyCAdVNkEpRl3kCe
Qo+ex7Ce+4nezbBajYGnSe/DVBU1c+JyR9X8P5Yl0wPEqVAPVCMie3Og11d9e/7l
c4xNyvOMFzKSXQJjjrlniRD4lsm3K+WXqDjHAg6EDH9dG/x8ENWRue3bLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsdKzbMEqpqu1TVlgYq+AWaX2FWMB8GA1UdIwQY
MBaAFPe8KfNThS0YDSNBCZfQ8EfsF3jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83ZWQwOGItNDkyZC00NGJmLTllNGUt
ZmU1NzNiMDIzZmQyLzEvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83ZWQwOGItNDkyZC00NGJmLTllNGUtZmU1NzNiMDIzZmQy
LzEvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSyxaWQl
2fdxIk92y29vCSQ01ytczIDkRPTdtKnzUDQqPwYoj6gmvAaMYCNVH69f+OF2yTEm
wFiCCjVrMBUr94NEk29Z/S9WFGsnXEvEau6RBb0vbWvqCoui/3NmB9e//fwECdl6
8q3gJExHk8lwZW8FDKojZ1V7Y4lXyQ+qZXnjuyghcOhd0FJ2Jpxx2/NIhiOE9Spr
bjndxyiqWOPxHEf+4h5t9QlOs7CmLtNgYBOkqBvpT8jiBkxCOIuHjWuybXYU5xR9
dzYgSjaauvayakiIBmT8KOEyAjxtD2veD0g/nvafqbvhk8RM1NlEtdf0NzBsnHO1
bNa6v5DywbX5iA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:02 2025 by rpki-client