Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File:                     pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier:          3xPIjXRxgIuQFKmfYM6Fhcb/DUYlQsgZV7FPk0VVrnM=
Subject key identifier:   26:3D:F8:EB:69:93:B7:12:B2:7B:7C:28:2C:49:9B:BC:4A:41:8A:CD
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer:       /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial:       019967376A105A9FE375250AB6F10D7FED25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number:          063D
Signing time:             Sat 20 Sep 2025 13:01:48 +0000
Manifest this update:     Sat 20 Sep 2025 13:01:48 +0000
Manifest next update:     Sun 21 Sep 2025 13:01:48 +0000
Files and hashes:         1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: pYXqVJ2PIRjuMTpVqnl+gNXplWMogMhwBcBYqizjHKA=)
                          2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Sep 2025 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:67:37:6a:10:5a:9f:e3:75:25:0a:b6:f1:0d:7f:ed:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
        Validity
            Not Before: Sep 20 13:01:48 2025 GMT
            Not After : Sep 21 13:01:48 2025 GMT
        Subject: CN=263df8eb6993b712b27b7c282c499bbc4a418acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:bf:0c:8d:4d:f5:82:1b:b9:16:79:38:1b:
                    c0:66:99:28:cd:66:2a:38:b7:c7:63:1f:a9:9d:dd:
                    cf:29:55:69:dd:88:d6:cf:72:78:bc:de:ea:2d:8b:
                    55:c6:f2:a8:f2:e6:ec:19:a9:f3:2f:8c:d2:05:81:
                    5e:56:73:82:67:b9:13:ce:68:b3:36:f7:66:49:75:
                    4a:ba:01:67:37:15:69:64:c4:b1:6a:eb:13:23:7b:
                    fd:79:d6:70:66:36:55:8e:34:ab:4d:60:fd:42:a2:
                    78:3c:ad:37:5b:e4:8b:e3:e8:d4:78:65:2c:6e:31:
                    bd:41:01:fa:9f:75:bf:70:a2:c4:2b:8b:35:34:ad:
                    60:0c:03:5d:3c:59:c2:47:1b:95:51:7e:30:0b:ce:
                    6e:50:a2:7e:b1:4e:b5:7a:4b:90:bb:d1:82:0a:3b:
                    2e:ea:70:81:33:32:cd:77:7a:b6:4f:17:e7:fb:ea:
                    f0:ec:d8:58:97:fd:d2:16:28:ec:b7:0f:13:12:73:
                    8e:fe:c9:b8:0d:cc:8e:c2:e0:95:9f:0d:ae:d3:d9:
                    5d:3c:b4:8e:dd:01:f5:cb:36:0f:d1:4f:49:10:25:
                    fc:fe:06:ba:92:d3:8f:38:31:bb:37:1a:c1:e4:0b:
                    58:26:73:8c:e4:6c:a1:9f:3f:e0:4b:16:6d:0c:25:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3D:F8:EB:69:93:B7:12:B2:7B:7C:28:2C:49:9B:BC:4A:41:8A:CD
            X509v3 Authority Key Identifier:
                keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:65:96:a1:7d:65:31:91:85:d8:2c:ad:70:14:08:64:9b:3e:
         72:97:db:bf:e6:31:43:1f:3c:f3:ab:c0:35:23:cc:db:b5:69:
         d0:c2:83:9e:13:f0:eb:36:27:b0:49:6a:5f:28:42:78:ab:d6:
         93:d0:0a:1a:69:92:e5:58:0d:fa:73:87:a8:a7:ae:8e:63:77:
         1e:3f:72:4a:94:d2:b7:4a:81:8b:17:84:f2:40:83:46:05:a4:
         76:69:07:65:bd:92:a7:b0:91:c6:98:86:e5:c8:44:58:9b:5b:
         10:5b:8a:d7:ad:fd:e8:50:3f:8b:49:75:35:40:bf:64:47:13:
         a8:c9:ba:d4:99:39:0a:65:68:77:46:33:60:24:36:76:ca:70:
         ad:f9:85:5a:f5:4a:3c:6c:3e:f3:7c:98:b5:df:3d:bf:54:f1:
         41:19:98:60:2d:89:e6:44:72:77:da:f5:7e:a8:07:c2:7d:b1:
         a6:36:99:87:ae:d1:47:30:23:c4:c0:5b:95:d3:6d:5e:c4:53:
         a1:26:2d:fc:72:e9:3f:4c:14:ca:46:1e:fc:33:a6:fb:5a:ae:
         aa:fc:a2:e6:c6:46:b0:65:16:e7:2e:b7:d5:b8:38:b1:60:db:
         99:63:59:7b:f1:13:cb:73:21:35:45:bb:b7:96:ee:6e:97:32:
         53:ff:9f:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlnN2oQWp/jdSUKtvENf+0lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTM3ODc4YzE0ZjIxNmMzMjY0OTgxOWVhNDI4YTU4MjI1
NTA0ZmIwHhcNMjUwOTIwMTMwMTQ4WhcNMjUwOTIxMTMwMTQ4WjAzMTEwLwYDVQQD
EygyNjNkZjhlYjY5OTNiNzEyYjI3YjdjMjgyYzQ5OWJiYzRhNDE4YWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H+/DI1N9YIbuRZ5OBvAZpkozWYq
OLfHYx+pnd3PKVVp3YjWz3J4vN7qLYtVxvKo8ubsGanzL4zSBYFeVnOCZ7kTzmiz
NvdmSXVKugFnNxVpZMSxausTI3v9edZwZjZVjjSrTWD9QqJ4PK03W+SL4+jUeGUs
bjG9QQH6n3W/cKLEK4s1NK1gDANdPFnCRxuVUX4wC85uUKJ+sU61ekuQu9GCCjsu
6nCBMzLNd3q2Txfn++rw7NhYl/3SFijstw8TEnOO/sm4DcyOwuCVnw2u09ldPLSO
3QH1yzYP0U9JECX8/ga6ktOPODG7NxrB5AtYJnOM5Gyhnz/gSxZtDCUypwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY9+Otpk7cSsnt8KCxJm7xKQYrNMB8GA1UdIwQY
MBaAFKSjeHjBTyFsMmSYGepCilgiVQT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAt
NGIwZTBhYzhkMjI5LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lNjA2ZmItMTA3Zi00Mjk2LTg4NzAtNGIwZTBhYzhkMjI5
LzEvcEtONGVNRlBJV3d5WkpnWjZrS0tXQ0pWQlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2WWWoX1l
MZGF2CytcBQIZJs+cpfbv+YxQx8886vANSPM27Vp0MKDnhPw6zYnsElqXyhCeKvW
k9AKGmmS5VgN+nOHqKeujmN3Hj9ySpTSt0qBixeE8kCDRgWkdmkHZb2Sp7CRxpiG
5chEWJtbEFuK16396FA/i0l1NUC/ZEcTqMm61Jk5CmVod0YzYCQ2dspwrfmFWvVK
PGw+83yYtd89v1TxQRmYYC2J5kRyd9r1fqgHwn2xpjaZh67RRzAjxMBbldNtXsRT
oSYt/HLpP0wUykYe/DOm+1quqvyi5sZGsGUW5y631bg4sWDbmWNZe/ETy3MhNUW7
t5bubpcyU/+fsw==
-----END CERTIFICATE-----
Generated at Sat Sep 20 17:22:16 2025 by rpki-client