Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
File:                     J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft (raw, json)
Hash identifier:          5J8nCoO8u6Cq2P25MgjqELlb6hFQvcENmVwnlndy+z4=
Subject key identifier:   26:69:83:EC:35:41:FD:5A:94:5F:BF:0E:68:8F:46:F0:76:59:9A:37
Authority key identifier: 27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B
Certificate issuer:       /CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
Certificate serial:       019A72CA43640CE79AD254A80C30D2737885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
Manifest number:          077C
Signing time:             Tue 11 Nov 2025 12:00:49 +0000
Manifest this update:     Tue 11 Nov 2025 12:00:49 +0000
Manifest next update:     Wed 12 Nov 2025 12:00:49 +0000
Files and hashes:         1: J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl (hash: VPkwhV+vc77YoIWLsJOVwiINnXU/fTCieoUeH5YPA/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:ca:43:64:0c:e7:9a:d2:54:a8:0c:30:d2:73:78:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2783790350870fdb5b2674bc61c8d8fd62d7719b
        Validity
            Not Before: Nov 11 12:00:49 2025 GMT
            Not After : Nov 12 12:00:49 2025 GMT
        Subject: CN=266983ec3541fd5a945fbf0e688f46f076599a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:17:79:1f:a6:f6:7d:64:16:66:54:60:48:
                    ed:26:ef:6d:f8:81:d1:3b:c1:42:37:26:6b:4f:f9:
                    d1:90:55:c2:34:f8:2e:e2:87:22:79:00:e6:80:ef:
                    6a:d0:2f:fc:1f:86:16:20:24:7f:36:f4:59:72:93:
                    72:0a:39:a8:60:a4:ae:4e:26:4e:ea:e6:c8:44:39:
                    9e:91:3e:64:1e:b7:f1:29:13:ba:b0:06:28:5b:fe:
                    e5:29:47:90:63:a1:f0:5a:55:57:f0:c2:8b:a9:b7:
                    cc:02:be:81:5e:92:87:0c:cb:79:50:2a:26:e3:06:
                    eb:d9:22:a1:f5:e8:fe:d1:7a:e0:93:fd:b3:68:77:
                    fc:6c:7e:3b:91:e7:da:98:0e:5a:ca:46:e2:88:06:
                    3e:9d:ba:ef:81:98:67:58:a3:e2:be:90:4c:ae:f8:
                    44:c1:2e:c0:cd:74:ed:9c:f0:d4:3c:54:f8:5c:5e:
                    d6:e4:54:ff:44:75:03:22:db:b0:4d:da:5d:df:85:
                    3d:fd:85:93:4e:8d:9b:b0:75:19:38:3b:74:a2:06:
                    50:cc:72:fe:39:b6:73:f1:7e:8c:42:d6:58:3d:a3:
                    15:7a:6d:39:89:22:82:e5:45:49:48:33:41:86:08:
                    1b:cc:f7:9a:56:2c:86:a1:ec:ba:50:e3:50:8d:ae:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:69:83:EC:35:41:FD:5A:94:5F:BF:0E:68:8F:46:F0:76:59:9A:37
            X509v3 Authority Key Identifier:
                keyid:27:83:79:03:50:87:0F:DB:5B:26:74:BC:61:C8:D8:FD:62:D7:71:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4N5A1CHD9tbJnS8YcjY_WLXcZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dd88e2-d7d9-467f-b5b4-ecc5fba08340/1/J4N5A1CHD9tbJnS8YcjY_WLXcZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3c:97:05:5e:61:2b:20:9a:0b:15:b9:18:c9:93:0f:70:b3:
         42:fb:74:ef:b3:f1:73:0c:0c:fc:fc:04:4c:3e:04:ff:fd:82:
         40:4a:af:f4:24:8d:01:a6:c5:c6:a6:36:02:c9:db:43:32:3d:
         9d:f9:8f:d1:85:5d:8e:76:01:73:e3:1d:81:1e:12:ab:90:a6:
         f3:b2:4b:fc:7b:85:58:b5:0a:47:a1:e4:57:6f:fb:80:35:21:
         45:4a:2b:f6:bf:3d:93:ea:1b:14:ba:5f:ee:c7:05:08:85:e3:
         07:3a:54:2f:ef:98:50:2f:0f:7a:bf:20:bd:83:70:9b:f9:88:
         dd:1c:a8:e6:49:a1:6e:ed:11:8e:dd:d1:cc:c1:ac:1e:14:06:
         18:12:11:fc:2d:fb:99:59:cf:36:5a:1d:1d:89:b4:21:f1:a3:
         6a:6d:92:5a:7f:52:d7:ee:e5:7f:90:2c:53:9b:cd:9e:ba:68:
         ad:4a:d7:c9:39:59:42:29:52:dd:00:95:f6:34:76:ce:dc:39:
         85:08:d7:e6:bd:e4:b4:e6:52:73:59:21:52:74:2b:59:b8:70:
         73:ee:b9:f7:7e:52:f9:47:8f:70:c7:74:23:0e:73:47:a6:5e:
         ac:05:40:88:50:eb:3d:83:7d:86:15:5a:06:76:48:72:42:7b:
         07:f7:c2:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyykNkDOea0lSoDDDSc3iFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODM3OTAzNTA4NzBmZGI1YjI2NzRiYzYxYzhkOGZkNjJk
NzcxOWIwHhcNMjUxMTExMTIwMDQ5WhcNMjUxMTEyMTIwMDQ5WjAzMTEwLwYDVQQD
EygyNjY5ODNlYzM1NDFmZDVhOTQ1ZmJmMGU2ODhmNDZmMDc2NTk5YTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJYXeR+m9n1kFmZUYEjtJu9t+IHR
O8FCNyZrT/nRkFXCNPgu4ocieQDmgO9q0C/8H4YWICR/NvRZcpNyCjmoYKSuTiZO
6ubIRDmekT5kHrfxKRO6sAYoW/7lKUeQY6HwWlVX8MKLqbfMAr6BXpKHDMt5UCom
4wbr2SKh9ej+0Xrgk/2zaHf8bH47kefamA5aykbiiAY+nbrvgZhnWKPivpBMrvhE
wS7AzXTtnPDUPFT4XF7W5FT/RHUDItuwTdpd34U9/YWTTo2bsHUZODt0ogZQzHL+
ObZz8X6MQtZYPaMVem05iSKC5UVJSDNBhggbzPeaViyGoey6UONQja4PvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZpg+w1Qf1alF+/DmiPRvB2WZo3MB8GA1UdIwQY
MBaAFCeDeQNQhw/bWyZ0vGHI2P1i13GbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kZDg4ZTItZDdkOS00NjdmLWI1YjQt
ZWNjNWZiYTA4MzQwLzEvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kZDg4ZTItZDdkOS00NjdmLWI1YjQtZWNjNWZiYTA4MzQw
LzEvSjRONUExQ0hEOXRiSm5TOFljallfV0xYY1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDyXBV5h
KyCaCxW5GMmTD3CzQvt077PxcwwM/PwETD4E//2CQEqv9CSNAabFxqY2AsnbQzI9
nfmP0YVdjnYBc+MdgR4Sq5Cm87JL/HuFWLUKR6HkV2/7gDUhRUor9r89k+obFLpf
7scFCIXjBzpUL++YUC8Per8gvYNwm/mI3Ryo5kmhbu0Rjt3RzMGsHhQGGBIR/C37
mVnPNlodHYm0IfGjam2SWn9S1+7lf5AsU5vNnrporUrXyTlZQilS3QCV9jR2ztw5
hQjX5r3ktOZSc1khUnQrWbhwc+65935S+UePcMd0Iw5zR6ZerAVAiFDrPYN9hhVa
BnZIckJ7B/fCPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:06 2025 by rpki-client