Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
File:                     82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft (raw, json)
Hash identifier:          mu+snwFTUYphnXFGDWdyT5isUt8G5ykzbud2mS0VKak=
Subject key identifier:   B8:43:DF:AC:3D:B1:9C:69:40:56:91:F4:BA:6D:7F:F7:CB:0F:35:46
Authority key identifier: F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64
Certificate issuer:       /CN=f36f9cbaff653b60134b46aa70e79117098a7c64
Certificate serial:       019A26D3F5E4E7913E3500200FB0C7EC761E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
Manifest number:          11FE
Signing time:             Mon 27 Oct 2025 18:00:16 +0000
Manifest this update:     Mon 27 Oct 2025 18:00:16 +0000
Manifest next update:     Tue 28 Oct 2025 18:00:16 +0000
Files and hashes:         1: 4Ocvr5gePs8rQXUxhPB4UFZ5TcY.roa (hash: FS134QCSv+f7Sa1190NHb4XIoYMRMPf9uXBwxQKSXX0=)
                          2: 82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl (hash: 7KxkYvLCtAPkY/wIwv4eX8jsSL36QBXNvZBIT8Rd6kM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 15:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:26:d3:f5:e4:e7:91:3e:35:00:20:0f:b0:c7:ec:76:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f36f9cbaff653b60134b46aa70e79117098a7c64
        Validity
            Not Before: Oct 27 18:00:16 2025 GMT
            Not After : Oct 28 18:00:16 2025 GMT
        Subject: CN=b843dfac3db19c69405691f4ba6d7ff7cb0f3546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5e:5a:b2:65:cb:30:4d:84:80:11:cb:23:1c:
                    a6:f3:ee:85:22:87:94:4a:ae:13:d9:ff:72:d7:23:
                    80:dc:22:be:6d:2a:0f:eb:eb:de:e5:8b:7d:8c:7f:
                    68:1a:04:84:a0:7e:7f:32:6f:88:e1:47:18:8b:d6:
                    33:12:ed:cf:bf:3d:56:1f:1f:63:c2:1d:6c:0e:92:
                    de:8b:7c:3b:8b:73:42:53:fd:6f:32:38:a2:86:ad:
                    a0:cb:93:c8:8d:9b:d5:63:f3:a3:c6:74:4d:23:f8:
                    fb:d4:61:47:98:22:4a:09:d2:f8:71:2a:b6:0b:bc:
                    f3:42:df:40:00:b4:2e:4c:89:97:d0:92:24:73:18:
                    fa:c5:eb:8b:bc:49:b7:14:f9:ec:d3:f4:3c:29:d2:
                    fa:44:34:af:ef:69:ad:3d:3a:39:d3:0e:e5:04:f3:
                    38:e5:89:0a:f1:f5:55:20:04:86:cc:6c:d3:08:51:
                    23:b3:b5:41:a0:87:35:d5:cc:57:1b:1b:5a:fc:7f:
                    11:7c:9b:fb:ec:5d:57:af:03:5a:57:e1:6a:c3:0b:
                    76:a1:56:bb:6c:9e:61:53:e7:52:d8:3b:39:62:ac:
                    00:3b:1d:04:cc:c6:d2:33:87:a9:fd:ac:31:51:0f:
                    4d:c4:68:e5:8d:60:16:a5:ff:eb:a1:d1:08:fa:1b:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:43:DF:AC:3D:B1:9C:69:40:56:91:F4:BA:6D:7F:F7:CB:0F:35:46
            X509v3 Authority Key Identifier:
                keyid:F3:6F:9C:BA:FF:65:3B:60:13:4B:46:AA:70:E7:91:17:09:8A:7C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82-cuv9lO2ATS0aqcOeRFwmKfGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/adf329-09c5-4bb8-af6c-d95ab99fb0c5/1/82-cuv9lO2ATS0aqcOeRFwmKfGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c5:6f:bc:a4:04:d5:03:fc:d2:f3:73:53:d5:f3:d0:4c:16:
         47:db:b7:80:de:53:29:3d:c3:c8:24:27:da:93:23:8b:b5:2b:
         44:5e:4a:ce:66:39:49:25:2c:23:5d:a0:ee:68:6f:6f:b7:74:
         3e:a9:94:ae:14:5d:b9:a1:ce:dd:a4:e9:da:8c:b2:d1:ef:7e:
         6e:c9:73:02:a2:0b:c9:54:b4:35:fb:35:51:f7:2c:15:7b:fc:
         fb:bb:8e:2e:5f:aa:94:5c:ef:6c:04:b7:b0:27:19:1c:03:1d:
         22:da:dd:b7:35:0e:c1:95:d2:c1:e4:8b:3f:ac:c5:23:c5:92:
         33:35:d2:c8:7c:a7:da:67:07:89:2d:44:47:df:04:83:02:15:
         f6:1b:79:b1:56:22:b6:ba:1a:60:bc:60:8e:5e:29:02:0c:8f:
         16:2c:a7:9f:09:9b:57:21:31:74:18:85:a4:80:39:fa:15:2a:
         88:20:15:3e:7d:83:e6:dc:ae:d1:33:02:4b:93:e7:57:7b:8e:
         ad:42:eb:41:c7:af:65:4f:21:db:bc:ac:12:22:cc:22:95:a5:
         a4:78:93:9a:ff:76:12:66:30:14:4d:7c:d0:d5:6b:59:7f:7a:
         1e:51:d7:69:12:fe:3c:56:40:d4:c3:bb:70:d0:81:31:3d:b3:
         74:3d:17:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom0/Xk55E+NQAgD7DH7HYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNmY5Y2JhZmY2NTNiNjAxMzRiNDZhYTcwZTc5MTE3MDk4
YTdjNjQwHhcNMjUxMDI3MTgwMDE2WhcNMjUxMDI4MTgwMDE2WjAzMTEwLwYDVQQD
EyhiODQzZGZhYzNkYjE5YzY5NDA1NjkxZjRiYTZkN2ZmN2NiMGYzNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF5asmXLME2EgBHLIxym8+6FIoeU
Sq4T2f9y1yOA3CK+bSoP6+ve5Yt9jH9oGgSEoH5/Mm+I4UcYi9YzEu3Pvz1WHx9j
wh1sDpLei3w7i3NCU/1vMjiihq2gy5PIjZvVY/OjxnRNI/j71GFHmCJKCdL4cSq2
C7zzQt9AALQuTImX0JIkcxj6xeuLvEm3FPns0/Q8KdL6RDSv72mtPTo50w7lBPM4
5YkK8fVVIASGzGzTCFEjs7VBoIc11cxXGxta/H8RfJv77F1XrwNaV+Fqwwt2oVa7
bJ5hU+dS2Ds5YqwAOx0EzMbSM4ep/awxUQ9NxGjljWAWpf/rodEI+htBewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhD36w9sZxpQFaR9Lptf/fLDzVGMB8GA1UdIwQY
MBaAFPNvnLr/ZTtgE0tGqnDnkRcJinxkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMt
ZDk1YWI5OWZiMGM1LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZGYzMjktMDljNS00YmI4LWFmNmMtZDk1YWI5OWZiMGM1
LzEvODItY3V2OWxPMkFUUzBhcWNPZVJGd21LZkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcVvvKQE
1QP80vNzU9Xz0EwWR9u3gN5TKT3DyCQn2pMji7UrRF5KzmY5SSUsI12g7mhvb7d0
PqmUrhRduaHO3aTp2oyy0e9+bslzAqILyVS0Nfs1UfcsFXv8+7uOLl+qlFzvbAS3
sCcZHAMdItrdtzUOwZXSweSLP6zFI8WSMzXSyHyn2mcHiS1ER98EgwIV9ht5sVYi
troaYLxgjl4pAgyPFiynnwmbVyExdBiFpIA5+hUqiCAVPn2D5tyu0TMCS5PnV3uO
rULrQcevZU8h27ysEiLMIpWlpHiTmv92EmYwFE180NVrWX96HlHXaRL+PFZA1MO7
cNCBMT2zdD0XNA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:02:36 2025 by rpki-client