Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File:                     1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier:          1SO75HxKCSwvSgK4rAp7Cpzt4ZXOOmm58xACPUslq38=
Subject key identifier:   83:90:7E:08:40:98:3A:F0:88:78:48:0F:2A:63:CA:EF:D3:6B:F1:BB
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer:       /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial:       019A0A134B3699CAEEE83714199529F6E48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number:          49
Signing time:             Wed 22 Oct 2025 04:00:27 +0000
Manifest this update:     Wed 22 Oct 2025 04:00:27 +0000
Manifest next update:     Thu 23 Oct 2025 04:00:27 +0000
Files and hashes:         1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: vXBLXf2Xw2CRFaYzObAoTalI767hVX26vx21LGPt3cE=)
                          2: Ito4OsKdOYk_0Vr5IgYqw7oQP_k.roa (hash: t2JFfBVsPDvYQ98nc/aNec9j3fYa1vwbxO3EDDVKTUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0a:13:4b:36:99:ca:ee:e8:37:14:19:95:29:f6:e4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
        Validity
            Not Before: Oct 22 04:00:27 2025 GMT
            Not After : Oct 23 04:00:27 2025 GMT
        Subject: CN=83907e0840983af08878480f2a63caefd36bf1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3b:9a:bd:8b:23:e4:ab:35:72:c5:c3:25:ce:
                    22:58:e1:0b:a8:28:be:ce:da:f0:39:c9:06:1b:f7:
                    88:ae:e4:bb:94:ec:f9:aa:ce:3c:8e:b3:b7:b1:9b:
                    8c:ca:05:46:44:dc:d0:0f:2e:ce:a9:c3:27:75:d5:
                    eb:27:de:b9:77:0d:65:ad:6b:ff:49:3e:0c:c2:e6:
                    11:4e:c4:fd:a0:37:00:f9:d6:a1:2c:e6:83:63:40:
                    54:c9:c8:3c:31:a4:19:dd:52:50:0c:d1:9d:e7:b7:
                    2d:8c:cf:b2:07:fa:e3:c1:3c:d6:0d:97:43:b8:05:
                    f7:a2:18:88:70:df:1a:f1:cd:54:3c:0b:76:4d:07:
                    8d:f9:f7:8c:0a:b8:73:5d:cd:33:9d:dd:1a:83:ac:
                    a4:03:9d:e9:e3:36:37:fd:b5:0c:ea:ca:e2:b9:a2:
                    04:de:a3:cc:50:8d:48:72:9d:e3:ec:bd:ed:6c:2e:
                    37:14:9e:35:cd:36:de:be:68:fa:38:d4:ad:fe:f1:
                    88:3e:79:5e:f9:50:be:12:4e:53:21:9b:81:42:b7:
                    48:2a:bf:d0:93:93:72:7c:16:88:a9:c2:05:d2:2a:
                    d6:e9:ad:aa:bb:26:d8:09:dd:2d:12:44:b8:f1:77:
                    9b:34:d7:40:c3:40:89:37:59:30:df:0b:fb:9d:1c:
                    3a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:90:7E:08:40:98:3A:F0:88:78:48:0F:2A:63:CA:EF:D3:6B:F1:BB
            X509v3 Authority Key Identifier:
                keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:12:93:fd:bb:e0:ea:df:b5:96:1c:53:3b:e1:00:05:ea:8f:
         60:b8:91:44:7a:4d:5f:a7:38:2e:a4:e7:99:91:e8:98:9f:4e:
         34:57:0a:14:e7:b1:95:7b:49:bc:59:d8:bc:44:a4:d4:1f:cd:
         68:58:da:7c:b1:8c:e8:58:09:9a:e6:70:b7:6a:d3:b5:b9:4b:
         1d:1f:53:08:ed:41:37:7a:93:77:84:ac:ac:1b:b1:cd:fd:b2:
         c7:a8:14:c1:69:e1:b8:d1:57:4d:af:0e:23:b7:13:7c:50:00:
         53:1c:7e:0d:72:c6:01:80:7b:19:f9:d9:78:c2:91:07:0c:e8:
         b2:54:52:c4:16:cb:d5:da:4c:74:08:3a:fc:6a:40:a4:e2:22:
         1a:e5:27:fb:3d:9d:6f:3a:e1:74:94:e4:94:d7:ec:c5:4b:51:
         4f:24:3f:3d:dd:f5:b1:40:4d:fb:a2:29:ba:6b:ad:3c:ca:1d:
         4a:20:0b:1b:1b:60:c3:b0:26:49:d4:bc:f2:43:ed:47:9c:43:
         93:0c:b8:37:76:54:12:82:a5:a0:99:21:ed:74:ee:fb:3c:d6:
         40:4f:d5:1e:2b:15:62:6d:f8:2d:c4:c7:91:0b:b3:ae:35:f8:
         a0:75:a2:6e:d5:ab:db:a3:4a:e0:ed:7c:87:7a:17:7f:d5:84:
         ec:8c:8b:33
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZoKE0s2mcru6DcUGZUp9uSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YmE0MWI2YWQ2ZTYzNzgwZWMzZjEyMTYwZTdjNGVkMGY3
NDY5YWMwHhcNMjUxMDIyMDQwMDI3WhcNMjUxMDIzMDQwMDI3WjAzMTEwLwYDVQQD
Eyg4MzkwN2UwODQwOTgzYWYwODg3ODQ4MGYyYTYzY2FlZmQzNmJmMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TuavYsj5Ks1csXDJc4iWOELqCi+
ztrwOckGG/eIruS7lOz5qs48jrO3sZuMygVGRNzQDy7OqcMnddXrJ965dw1lrWv/
ST4MwuYRTsT9oDcA+dahLOaDY0BUycg8MaQZ3VJQDNGd57ctjM+yB/rjwTzWDZdD
uAX3ohiIcN8a8c1UPAt2TQeN+feMCrhzXc0znd0ag6ykA53p4zY3/bUM6sriuaIE
3qPMUI1Icp3j7L3tbC43FJ41zTbevmj6ONSt/vGIPnle+VC+Ek5TIZuBQrdIKr/Q
k5NyfBaIqcIF0irW6a2quybYCd0tEkS48XebNNdAw0CJN1kw3wv7nRw62wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIOQfghAmDrwiHhIDypjyu/Ta/G7MB8GA1UdIwQY
MBaAFPi6QbatbmN4DsPxIWDnxO0PdGmsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1McEJ0cTF1WTNnT3dfRWhZT2ZFN1E5MGFhdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvODNlZTZmLWVlODMtNDQ0Yi1iZGM2
LWFlNDQ5NzlmODFkZS8xLzEtTHBCdHExdVkzZ093X0VoWU9mRTdROTBhYXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M0LzgzZWU2Zi1lZTgzLTQ0NGItYmRjNi1hZTQ0OTc5Zjgx
ZGUvMS8xLUxwQnRxMXVZM2dPd19FaFlPZkU3UTkwYWF3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtxKT
/bvg6t+1lhxTO+EABeqPYLiRRHpNX6c4LqTnmZHomJ9ONFcKFOexlXtJvFnYvESk
1B/NaFjafLGM6FgJmuZwt2rTtblLHR9TCO1BN3qTd4SsrBuxzf2yx6gUwWnhuNFX
Ta8OI7cTfFAAUxx+DXLGAYB7GfnZeMKRBwzoslRSxBbL1dpMdAg6/GpApOIiGuUn
+z2dbzrhdJTklNfsxUtRTyQ/Pd31sUBN+6IpumutPModSiALGxtgw7AmSdS88kPt
R5xDkwy4N3ZUEoKloJkh7XTu+zzWQE/VHisVYm34LcTHkQuzrjX4oHWibtWr26NK
4O18h3oXf9WE7IyLMw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 10:00:44 2025 by rpki-client