Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
File:                     FYlivF2icS8gj8ixXr3CRq9Mvs8.mft (raw, json)
Hash identifier:          2fKRDN4e/FiQpqXMAILP4cUoQ6bQbz0HPxoV4qBEsHo=
Subject key identifier:   BD:2A:9B:AB:35:EF:04:68:F4:93:81:D7:93:FB:45:2A:C3:92:65:10
Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Certificate issuer:       /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Certificate serial:       0199FCC6CCAE9D04AE21C0BBB7F46918F3DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 14:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:50 +0000
Files and hashes:         1: 7yUkmk2a1THyX00hTlndTIVmtLc.roa (hash: aTNg1uSoSZtKZaAe8w+QZyL4kY8mBpAFfSDQeH8QdZ0=)
                          2: FYlivF2icS8gj8ixXr3CRq9Mvs8.crl (hash: H6ufzDvesdb4w+Eq3FFt5HQNXlTZD9qYT44QvKtp0Ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:cc:ae:9d:04:ae:21:c0:bb:b7:f4:69:18:f3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
        Validity
            Not Before: Oct 19 14:01:50 2025 GMT
            Not After : Oct 20 14:01:50 2025 GMT
        Subject: CN=bd2a9bab35ef0468f49381d793fb452ac3926510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:dd:b2:20:87:01:ee:29:68:a9:23:7b:af:
                    55:26:35:31:54:d8:15:e2:43:ef:22:8f:d0:64:da:
                    03:94:ba:b5:d7:9b:03:36:56:3e:69:59:22:c1:c1:
                    aa:06:4b:17:ef:62:09:28:f9:95:c3:19:58:cd:d7:
                    3c:71:7a:41:da:1a:4e:bf:23:b8:f9:55:b8:d6:58:
                    26:88:6d:79:89:f0:8f:6d:88:3e:ed:9d:4b:2f:27:
                    ce:f6:4a:68:ac:17:ec:8b:5b:f7:52:40:f7:5f:0e:
                    59:1c:a8:8e:c9:50:92:20:2e:ba:a7:c1:bf:b1:22:
                    8f:83:98:e1:52:e7:52:11:cf:03:1b:e8:b9:b7:ec:
                    fb:d5:e4:92:ef:d5:db:ac:95:bd:39:82:d4:93:93:
                    ef:ed:05:da:a4:2f:3b:e7:9e:ae:9b:c6:cb:de:34:
                    4f:50:d7:48:b5:5c:f2:fc:3a:f6:f4:40:5c:7d:d0:
                    40:12:c2:a6:36:3b:9c:a6:cb:25:b4:4e:74:8f:c1:
                    d4:43:8d:50:6e:a2:a8:a1:0b:27:2f:87:c1:84:14:
                    94:35:0b:c6:05:2e:d5:3b:49:5a:55:6b:17:bd:24:
                    b8:f1:d2:1e:94:b8:22:25:cb:1b:bb:5f:70:91:ae:
                    a4:b1:4a:c0:bf:51:71:30:9b:d4:dd:64:38:c7:dc:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2A:9B:AB:35:EF:04:68:F4:93:81:D7:93:FB:45:2A:C3:92:65:10
            X509v3 Authority Key Identifier:
                keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:71:6d:3c:2b:84:4a:de:98:c7:25:38:37:a2:d4:23:07:48:
         d1:55:ad:4a:89:19:76:b9:92:2b:cd:35:ea:e9:ef:ed:92:18:
         71:8d:6b:66:d9:06:93:70:cb:d2:27:84:eb:5f:81:24:9d:74:
         25:55:8d:f7:96:bf:44:71:e0:d5:47:81:e7:36:fb:22:80:f5:
         ec:79:ae:9a:0a:b2:2b:83:38:9f:bd:1c:24:d3:ea:33:ce:e7:
         15:27:4a:20:c5:97:ed:53:81:4f:5f:4d:f6:ac:ab:2b:62:ad:
         0a:c0:08:e1:b9:16:bf:59:bf:8f:6d:6d:87:50:cc:5a:b9:1e:
         08:d7:36:0b:60:a9:77:a1:d1:56:a2:83:de:1b:43:36:70:ac:
         ca:40:15:da:7b:07:2e:df:67:45:ae:16:e8:02:27:26:6e:03:
         fe:cc:a9:72:98:cf:22:05:c4:38:e2:2b:f6:35:f1:50:bd:41:
         b8:31:3e:6a:9a:74:0e:89:ce:cc:b2:36:54:05:fc:6b:71:09:
         57:b6:d7:4a:d3:65:e1:a4:ef:40:b5:e6:fd:0e:82:03:b3:46:
         57:7c:e5:cf:b3:b6:5c:d6:40:15:a1:33:88:ee:d8:cf:ed:f4:
         22:21:da:31:86:18:b4:60:e0:ba:b9:da:dd:9c:f2:76:59:18:
         23:38:10:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xsyunQSuIcC7t/RpGPPfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ODk2MmJjNWRhMjcxMmYyMDhmYzhiMTVlYmRjMjQ2YWY0
Y2JlY2YwHhcNMjUxMDE5MTQwMTUwWhcNMjUxMDIwMTQwMTUwWjAzMTEwLwYDVQQD
EyhiZDJhOWJhYjM1ZWYwNDY4ZjQ5MzgxZDc5M2ZiNDUyYWMzOTI2NTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLXdsiCHAe4paKkje69VJjUxVNgV
4kPvIo/QZNoDlLq115sDNlY+aVkiwcGqBksX72IJKPmVwxlYzdc8cXpB2hpOvyO4
+VW41lgmiG15ifCPbYg+7Z1LLyfO9kporBfsi1v3UkD3Xw5ZHKiOyVCSIC66p8G/
sSKPg5jhUudSEc8DG+i5t+z71eSS79XbrJW9OYLUk5Pv7QXapC87556um8bL3jRP
UNdItVzy/Dr29EBcfdBAEsKmNjucpssltE50j8HUQ41QbqKooQsnL4fBhBSUNQvG
BS7VO0laVWsXvSS48dIelLgiJcsbu19wka6ksUrAv1FxMJvU3WQ4x9yw3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0qm6s17wRo9JOB15P7RSrDkmUQMB8GA1UdIwQY
MBaAFBWJYrxdonEvII/IsV69wkavTL7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81MWQ5OTktZGY2Yy00N2U4LThjMzUt
NWE2MDEzMTAwNGU4LzEvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81MWQ5OTktZGY2Yy00N2U4LThjMzUtNWE2MDEzMTAwNGU4
LzEvRllsaXZGMmljUzhnajhpeFhyM0NScTlNdnM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXFtPCuE
St6YxyU4N6LUIwdI0VWtSokZdrmSK8016unv7ZIYcY1rZtkGk3DL0ieE61+BJJ10
JVWN95a/RHHg1UeB5zb7IoD17HmumgqyK4M4n70cJNPqM87nFSdKIMWX7VOBT19N
9qyrK2KtCsAI4bkWv1m/j21th1DMWrkeCNc2C2Cpd6HRVqKD3htDNnCsykAV2nsH
Lt9nRa4W6AInJm4D/sypcpjPIgXEOOIr9jXxUL1BuDE+app0DonOzLI2VAX8a3EJ
V7bXStNl4aTvQLXm/Q6CA7NGV3zlz7O2XNZAFaEziO7Yz+30IiHaMYYYtGDgurna
3ZzydlkYIzgQ0A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:35 2025 by rpki-client