Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File:                     r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier:          V7FYfIH7aJswSVMjXz4rQGDy6TA/ZWkHY2J5fediLTA=
Subject key identifier:   AE:0F:62:65:60:80:8B:23:79:5F:85:62:9D:20:0B:31:F2:55:36:FE
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer:       /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial:       0199FB457F6D31A0FD524F3B06883BBF63A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 07:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 07:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 07:00:59 +0000
Files and hashes:         1: 5ocobjXAQN7qODPTjOuuWzc3Drk.roa (hash: 14+OU8AbCkgUWRx9CUz2j/OQprhkWMpdBdWPi/5l58Y=)
                          2: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: P0TDte3eN6aJlotQuYAfj96d86WubMEBOmiSDIB6HgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:7f:6d:31:a0:fd:52:4f:3b:06:88:3b:bf:63:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
        Validity
            Not Before: Oct 19 07:00:59 2025 GMT
            Not After : Oct 20 07:00:59 2025 GMT
        Subject: CN=ae0f626560808b23795f85629d200b31f25536fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:81:55:4b:33:b7:c2:d2:2f:19:24:a3:f3:d5:
                    98:18:c7:9d:58:72:7d:50:95:2f:8d:07:7f:89:81:
                    b4:92:3f:a9:2b:48:db:9e:b6:41:0f:51:c4:11:8b:
                    96:fc:7f:9e:50:7d:03:cc:48:c0:64:7f:ff:47:77:
                    33:af:f5:cd:a9:ae:a1:95:d4:76:95:5f:b8:41:00:
                    05:84:6c:eb:61:5e:a9:89:04:85:69:5f:c8:25:9e:
                    ae:cb:e4:79:e7:cc:12:5f:c6:f2:a7:32:2c:dc:c8:
                    b9:09:d9:4d:c2:c4:9d:ef:32:6e:04:09:e2:a0:29:
                    79:23:4f:0c:0b:42:be:8a:2c:b5:e6:e9:db:e8:e8:
                    4e:df:e2:0e:b7:28:21:52:9f:a1:d3:bd:7c:00:81:
                    02:36:7b:de:ec:f6:2b:17:61:aa:5a:ff:76:08:37:
                    a4:fd:4f:ad:8b:da:54:c7:c8:6c:5c:82:bc:6f:c1:
                    3f:24:48:c2:50:75:ef:35:21:10:51:e4:e9:2a:97:
                    4c:d8:ea:83:38:96:ba:72:95:d9:cd:a4:e2:bd:9f:
                    0e:4d:d0:47:c3:cf:9a:d5:0c:b2:9a:a5:bd:21:63:
                    85:cf:56:31:64:09:1a:ce:94:67:9b:7e:6e:48:b6:
                    0f:e7:01:f8:19:83:81:ae:79:20:82:61:9d:35:ec:
                    89:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0F:62:65:60:80:8B:23:79:5F:85:62:9D:20:0B:31:F2:55:36:FE
            X509v3 Authority Key Identifier:
                keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a5:d2:94:45:bd:5f:23:e9:c4:53:46:09:02:1e:c0:78:a7:
         b9:e7:94:c3:91:51:34:1f:40:31:86:4f:48:b2:fb:f2:35:cd:
         57:0a:5a:f1:7c:99:49:af:c7:3f:98:d1:2f:d1:9a:ba:c1:7e:
         08:92:ef:92:02:21:31:05:1f:6b:ae:29:82:52:11:a0:0a:fb:
         56:a0:45:d7:02:41:db:27:2e:93:c6:c7:c4:f8:97:cf:0c:fe:
         6e:8d:eb:42:8d:9f:6e:55:f9:87:9b:d0:fd:56:33:88:e3:79:
         c2:66:a5:c2:4b:ed:dd:37:19:7c:28:af:31:08:ba:9b:3f:47:
         bc:22:69:ab:00:c5:60:a4:2f:26:87:ce:97:3f:c2:0f:75:4c:
         ab:09:70:4a:66:7f:d1:3a:7e:fb:ae:fc:ff:2d:ff:06:5e:2f:
         15:9b:5f:ae:ab:a7:38:e8:67:d4:a1:97:6e:6c:0d:de:e5:37:
         ea:8f:d9:8e:98:44:0b:af:61:95:28:49:de:06:b2:93:cc:0e:
         46:40:85:bf:86:56:f7:10:cc:48:4d:52:c9:aa:ea:c7:50:d3:
         c4:a9:e3:49:dd:d5:19:82:b9:ea:29:2b:ef:5a:22:4d:61:92:
         66:46:af:9d:ad:f2:b6:69:36:3f:9c:2e:06:3d:0c:62:db:ec:
         b0:1c:e3:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RX9tMaD9Uk87Bog7v2OnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTc5ZThmNjNlOTkxZGRmMTNlNmRlZjI3ZTAwODk5OWQ0
ZDRhZDkwHhcNMjUxMDE5MDcwMDU5WhcNMjUxMDIwMDcwMDU5WjAzMTEwLwYDVQQD
EyhhZTBmNjI2NTYwODA4YjIzNzk1Zjg1NjI5ZDIwMGIzMWYyNTUzNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oFVSzO3wtIvGSSj89WYGMedWHJ9
UJUvjQd/iYG0kj+pK0jbnrZBD1HEEYuW/H+eUH0DzEjAZH//R3czr/XNqa6hldR2
lV+4QQAFhGzrYV6piQSFaV/IJZ6uy+R558wSX8bypzIs3Mi5CdlNwsSd7zJuBAni
oCl5I08MC0K+iiy15unb6OhO3+IOtyghUp+h0718AIECNnve7PYrF2GqWv92CDek
/U+ti9pUx8hsXIK8b8E/JEjCUHXvNSEQUeTpKpdM2OqDOJa6cpXZzaTivZ8OTdBH
w8+a1QyymqW9IWOFz1YxZAkazpRnm35uSLYP5wH4GYOBrnkggmGdNeyJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4PYmVggIsjeV+FYp0gCzHyVTb+MB8GA1UdIwQY
MBaAFK/nno9j6ZHd8T5t7yfgCJmdTUrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQt
NGNhN2I0YzAyYmU5LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQtNGNhN2I0YzAyYmU5
LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6XSlEW9
XyPpxFNGCQIewHinueeUw5FRNB9AMYZPSLL78jXNVwpa8XyZSa/HP5jRL9GausF+
CJLvkgIhMQUfa64pglIRoAr7VqBF1wJB2ycuk8bHxPiXzwz+bo3rQo2fblX5h5vQ
/VYziON5wmalwkvt3TcZfCivMQi6mz9HvCJpqwDFYKQvJofOlz/CD3VMqwlwSmZ/
0Tp++678/y3/Bl4vFZtfrqunOOhn1KGXbmwN3uU36o/ZjphEC69hlShJ3gayk8wO
RkCFv4ZW9xDMSE1Syarqx1DTxKnjSd3VGYK56ikr71oiTWGSZkavna3ytmk2P5wu
Bj0MYtvssBzjGw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:39 2025 by rpki-client