Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft
File:                     v_1vzVFt27AQL1sDI6JsDtf2jCI.mft (raw, json)
Hash identifier:          7NoYnI4lC78SzF+7xJvi9t1ODAtLvr6HwvKs2obxr6s=
Subject key identifier:   8B:2B:63:28:EE:22:3B:A3:F0:D0:ED:F4:5F:59:FD:49:2F:89:A0:6E
Authority key identifier: BF:FD:6F:CD:51:6D:DB:B0:10:2F:5B:03:23:A2:6C:0E:D7:F6:8C:22
Certificate issuer:       /CN=bffd6fcd516ddbb0102f5b0323a26c0ed7f68c22
Certificate serial:       019A2478E1A05605253DD9662BA2511CEFE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft
Manifest number:          16F3
Signing time:             Mon 27 Oct 2025 07:01:33 +0000
Manifest this update:     Mon 27 Oct 2025 07:01:33 +0000
Manifest next update:     Tue 28 Oct 2025 07:01:33 +0000
Files and hashes:         1: v_1vzVFt27AQL1sDI6JsDtf2jCI.crl (hash: Pg8z3xd3XaC4JkWAborwI8hwNhK0JMvNdOLwvtGqoMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:78:e1:a0:56:05:25:3d:d9:66:2b:a2:51:1c:ef:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffd6fcd516ddbb0102f5b0323a26c0ed7f68c22
        Validity
            Not Before: Oct 27 07:01:33 2025 GMT
            Not After : Oct 28 07:01:33 2025 GMT
        Subject: CN=8b2b6328ee223ba3f0d0edf45f59fd492f89a06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0c:d7:00:d8:9c:be:b0:78:62:a6:d7:65:74:
                    00:3a:62:74:14:5b:47:b9:0c:6d:b2:44:98:19:4b:
                    3d:0a:03:44:65:be:90:7a:a4:11:ed:31:10:e3:a0:
                    6e:76:5c:0d:3a:29:6d:5d:ee:17:49:e1:4d:7f:4f:
                    ae:c8:b9:26:d1:72:12:1a:c3:f3:dd:06:37:e6:7b:
                    c3:e7:38:5e:1c:1c:8b:1f:cc:8a:bb:9d:23:b7:76:
                    37:3b:61:dc:6d:b3:84:39:34:c2:8e:d6:da:27:9a:
                    39:c5:a3:39:86:39:4c:07:ba:6c:33:3a:86:41:a3:
                    a0:48:1f:14:af:c4:05:f1:d1:46:90:06:e1:9a:0d:
                    66:71:38:cc:82:0e:42:cd:88:99:77:0f:8e:92:88:
                    f7:e0:77:cf:fb:2c:99:a8:f0:c7:d9:fc:2c:0e:cd:
                    a6:56:a4:3d:31:c3:30:df:a1:f8:44:2e:21:a3:5c:
                    81:32:cd:bd:1a:3a:48:c7:3b:44:ef:28:21:bd:91:
                    f8:12:b9:f3:ce:7c:21:18:ac:01:94:9a:2d:43:e8:
                    e3:97:34:87:18:eb:09:dd:49:05:6d:10:26:7f:a9:
                    5f:e7:74:11:33:89:f2:79:b8:84:0e:78:41:50:ad:
                    a4:8d:7f:a4:4b:fd:2b:04:39:d1:34:d4:83:e6:5c:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2B:63:28:EE:22:3B:A3:F0:D0:ED:F4:5F:59:FD:49:2F:89:A0:6E
            X509v3 Authority Key Identifier:
                keyid:BF:FD:6F:CD:51:6D:DB:B0:10:2F:5B:03:23:A2:6C:0E:D7:F6:8C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d6:a0:f5:e3:8f:8e:60:af:5a:f1:4f:e5:18:2c:20:b0:d9:
         cf:d1:5a:5b:5e:31:98:2a:4c:45:3e:f4:98:18:32:55:13:a9:
         fa:f2:3d:b5:f8:56:d6:dd:30:12:b6:4e:96:55:f9:2d:73:d5:
         fb:e2:cb:77:90:f6:16:3d:b3:6e:ce:9d:0e:d3:88:02:eb:09:
         f0:e7:89:50:d8:d5:4a:6b:c2:2f:ac:cd:c3:9b:3d:d3:b5:fc:
         02:af:0b:88:63:b8:eb:94:f5:33:bc:aa:56:f9:0e:ae:d1:4e:
         29:0a:50:4e:e5:fa:3c:cd:a3:c8:13:e0:32:66:4e:fd:a5:19:
         57:53:82:7e:a4:2f:a1:b5:7e:97:65:7e:02:7f:69:24:c9:60:
         58:68:b4:a7:ce:2a:83:3b:ba:35:6f:8b:9e:01:df:6b:af:69:
         e1:fa:79:16:3c:03:13:b6:07:f5:bf:01:9b:67:d1:87:a8:2e:
         40:c7:e0:14:59:54:df:df:44:a1:19:72:85:87:c2:1b:47:c6:
         57:15:8d:65:4b:d7:ab:5e:df:b1:39:94:8c:e1:b1:6d:29:0d:
         36:63:4a:31:76:fa:03:30:27:79:0f:77:4e:07:36:d3:01:77:
         28:19:73:8f:2e:57:40:ff:82:5f:ff:50:28:7b:03:6c:8b:3a:
         bd:85:43:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeOGgVgUlPdlmK6JRHO/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmQ2ZmNkNTE2ZGRiYjAxMDJmNWIwMzIzYTI2YzBlZDdm
NjhjMjIwHhcNMjUxMDI3MDcwMTMzWhcNMjUxMDI4MDcwMTMzWjAzMTEwLwYDVQQD
Eyg4YjJiNjMyOGVlMjIzYmEzZjBkMGVkZjQ1ZjU5ZmQ0OTJmODlhMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQzXANicvrB4YqbXZXQAOmJ0FFtH
uQxtskSYGUs9CgNEZb6QeqQR7TEQ46BudlwNOiltXe4XSeFNf0+uyLkm0XISGsPz
3QY35nvD5zheHByLH8yKu50jt3Y3O2HcbbOEOTTCjtbaJ5o5xaM5hjlMB7psMzqG
QaOgSB8Ur8QF8dFGkAbhmg1mcTjMgg5CzYiZdw+Okoj34HfP+yyZqPDH2fwsDs2m
VqQ9McMw36H4RC4ho1yBMs29GjpIxztE7yghvZH4ErnzznwhGKwBlJotQ+jjlzSH
GOsJ3UkFbRAmf6lf53QRM4nyebiEDnhBUK2kjX+kS/0rBDnRNNSD5lzwEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsrYyjuIjuj8NDt9F9Z/UkviaBuMB8GA1UdIwQY
MBaAFL/9b81RbduwEC9bAyOibA7X9owiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl8xdnpWRnQyN0FRTDFzREk2SnNEdGYyakNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lOWUwZGUtZGYxYS00MzA2LTg3YzAt
OGFiZjFjYjlkNmNiLzEvdl8xdnpWRnQyN0FRTDFzREk2SnNEdGYyakNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lOWUwZGUtZGYxYS00MzA2LTg3YzAtOGFiZjFjYjlkNmNi
LzEvdl8xdnpWRnQyN0FRTDFzREk2SnNEdGYyakNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtag9eOP
jmCvWvFP5RgsILDZz9FaW14xmCpMRT70mBgyVROp+vI9tfhW1t0wErZOllX5LXPV
++LLd5D2Fj2zbs6dDtOIAusJ8OeJUNjVSmvCL6zNw5s907X8Aq8LiGO465T1M7yq
VvkOrtFOKQpQTuX6PM2jyBPgMmZO/aUZV1OCfqQvobV+l2V+An9pJMlgWGi0p84q
gzu6NW+LngHfa69p4fp5FjwDE7YH9b8Bm2fRh6guQMfgFFlU399EoRlyhYfCG0fG
VxWNZUvXq17fsTmUjOGxbSkNNmNKMXb6AzAneQ93Tgc20wF3KBlzjy5XQP+CX/9Q
KHsDbIs6vYVDnA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:28:44 2025 by rpki-client