Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
File:                     _FXgUz76pWJPU4uS7RqXP-_4l1E.mft (raw, json)
Hash identifier:          vAkl4C5v0KGutklloRp7B/M6FtH8uQb+nlK94srMMcQ=
Subject key identifier:   05:F8:2D:BD:34:80:BD:AC:84:51:53:B4:FC:A3:44:6F:62:53:FE:B5
Authority key identifier: FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51
Certificate issuer:       /CN=fc55e0533efaa5624f538b92ed1a973feff89751
Certificate serial:       019A0CA67A633AF925B31A646AF21C88CFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
Manifest number:          11D5
Signing time:             Wed 22 Oct 2025 16:00:28 +0000
Manifest this update:     Wed 22 Oct 2025 16:00:28 +0000
Manifest next update:     Thu 23 Oct 2025 16:00:28 +0000
Files and hashes:         1: _FXgUz76pWJPU4uS7RqXP-_4l1E.crl (hash: g47iiU6k2kUosK2EasTHnSXg9+NUJgXWi1AO+D+pqmY=)
                          2: yh5VzgeOwtUgAcziSiqUhcW6kK8.roa (hash: hvI53ao0Y2iffOi0mRz/DzGNpvNOk5YefpCNLUXPIjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0c:a6:7a:63:3a:f9:25:b3:1a:64:6a:f2:1c:88:cf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc55e0533efaa5624f538b92ed1a973feff89751
        Validity
            Not Before: Oct 22 16:00:28 2025 GMT
            Not After : Oct 23 16:00:28 2025 GMT
        Subject: CN=05f82dbd3480bdac845153b4fca3446f6253feb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:59:f3:ee:a4:6a:0c:29:3f:36:b4:fb:70:
                    ed:c7:c3:dd:bc:fe:6e:94:03:66:ce:6d:3b:00:32:
                    b2:51:a1:f3:cc:eb:fa:d7:31:7b:8a:74:84:80:63:
                    56:35:1a:a6:85:c1:7e:98:95:e6:17:d3:60:f6:0c:
                    27:ff:08:54:49:6c:de:5b:94:ee:dd:5a:b9:0a:ad:
                    92:b0:83:43:1e:ab:2c:1d:c5:d3:fd:cb:33:ca:bd:
                    7e:ef:5d:6b:ed:c7:2c:f4:37:d1:50:83:c1:fc:fb:
                    75:68:e1:0a:7b:51:0f:b9:b0:b7:24:3d:5e:21:a7:
                    d4:ac:13:49:56:15:b8:49:6a:a7:40:ef:ef:78:37:
                    47:5d:ad:07:aa:9a:6a:56:43:26:8c:0a:2b:a4:03:
                    42:27:50:7e:db:4c:8d:6c:6e:0b:a7:eb:6e:9b:d0:
                    d3:11:53:46:0f:aa:f1:45:c4:21:be:28:d7:ce:85:
                    07:aa:c8:92:7f:ab:d6:54:cd:00:5c:24:a8:a3:1a:
                    c9:0a:74:18:2b:7b:4e:b6:6a:1a:d9:f0:96:06:e5:
                    68:38:30:b7:f7:d8:7b:c8:40:32:c8:bb:2b:d2:71:
                    fe:52:06:9b:0a:f9:20:d8:91:ca:46:09:ee:ca:8a:
                    ab:b0:53:41:27:89:01:f3:71:17:6c:98:c8:cb:d9:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F8:2D:BD:34:80:BD:AC:84:51:53:B4:FC:A3:44:6F:62:53:FE:B5
            X509v3 Authority Key Identifier:
                keyid:FC:55:E0:53:3E:FA:A5:62:4F:53:8B:92:ED:1A:97:3F:EF:F8:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FXgUz76pWJPU4uS7RqXP-_4l1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5e753d-c33d-47a3-8e82-a52862b44563/1/_FXgUz76pWJPU4uS7RqXP-_4l1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:a9:c7:c3:ee:b8:32:22:a1:a3:93:5c:5a:66:e5:e7:1c:ba:
         59:23:df:e7:29:1a:3d:2d:94:56:96:a2:46:2a:b5:d1:6e:6f:
         19:26:99:f5:a3:1a:8d:09:47:1e:03:22:8d:84:39:bc:41:c4:
         17:4b:02:c3:33:f5:58:56:a2:ee:c1:8d:92:7b:90:ad:b5:33:
         30:09:a9:46:ff:3f:02:51:f5:60:b7:60:ba:bc:0c:74:fa:a2:
         18:86:60:44:ea:39:65:64:1a:29:6d:06:04:be:cf:3c:70:6c:
         b3:83:26:90:fb:7b:e4:27:ea:05:83:fb:b5:f4:bf:2a:35:e3:
         94:50:6e:3c:a2:e5:82:d7:66:a4:e6:bd:c6:91:3c:9b:05:26:
         60:00:c7:ae:dc:7c:42:4f:62:6c:56:b5:e5:af:b5:f1:c7:20:
         3e:f4:20:ae:37:1d:8c:eb:fb:05:31:0d:8d:d3:f0:57:3e:49:
         9c:86:3e:40:20:f5:a5:33:0f:8c:8f:6e:45:d6:d4:89:e3:ed:
         43:e7:6e:c7:24:0e:77:70:42:ff:70:96:fa:07:09:c7:7b:4c:
         2f:6c:21:30:16:62:f9:a6:34:98:29:b0:c2:e0:da:0e:78:e0:
         60:a7:e0:71:02:d0:b0:af:fa:c2:de:fa:b1:71:a5:98:a3:cb:
         df:77:0c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMpnpjOvklsxpkavIciM/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNTVlMDUzM2VmYWE1NjI0ZjUzOGI5MmVkMWE5NzNmZWZm
ODk3NTEwHhcNMjUxMDIyMTYwMDI4WhcNMjUxMDIzMTYwMDI4WjAzMTEwLwYDVQQD
EygwNWY4MmRiZDM0ODBiZGFjODQ1MTUzYjRmY2EzNDQ2ZjYyNTNmZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M9Z8+6kagwpPza0+3Dtx8PdvP5u
lANmzm07ADKyUaHzzOv61zF7inSEgGNWNRqmhcF+mJXmF9Ng9gwn/whUSWzeW5Tu
3Vq5Cq2SsINDHqssHcXT/cszyr1+711r7ccs9DfRUIPB/Pt1aOEKe1EPubC3JD1e
IafUrBNJVhW4SWqnQO/veDdHXa0HqppqVkMmjAorpANCJ1B+20yNbG4Lp+tum9DT
EVNGD6rxRcQhvijXzoUHqsiSf6vWVM0AXCSooxrJCnQYK3tOtmoa2fCWBuVoODC3
99h7yEAyyLsr0nH+UgabCvkg2JHKRgnuyoqrsFNBJ4kB83EXbJjIy9npowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAX4Lb00gL2shFFTtPyjRG9iU/61MB8GA1UdIwQY
MBaAFPxV4FM++qViT1OLku0alz/v+JdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODIt
YTUyODYyYjQ0NTYzLzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81ZTc1M2QtYzMzZC00N2EzLThlODItYTUyODYyYjQ0NTYz
LzEvX0ZYZ1V6NzZwV0pQVTR1UzdScVhQLV80bDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw6nHw+64
MiKho5NcWmbl5xy6WSPf5ykaPS2UVpaiRiq10W5vGSaZ9aMajQlHHgMijYQ5vEHE
F0sCwzP1WFai7sGNknuQrbUzMAmpRv8/AlH1YLdgurwMdPqiGIZgROo5ZWQaKW0G
BL7PPHBss4MmkPt75CfqBYP7tfS/KjXjlFBuPKLlgtdmpOa9xpE8mwUmYADHrtx8
Qk9ibFa15a+18ccgPvQgrjcdjOv7BTENjdPwVz5JnIY+QCD1pTMPjI9uRdbUiePt
Q+duxyQOd3BC/3CW+gcJx3tML2whMBZi+aY0mCmwwuDaDnjgYKfgcQLQsK/6wt76
sXGlmKPL33cM/w==
-----END CERTIFICATE-----
Generated at Wed Oct 22 20:38:19 2025 by rpki-client