Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
File:                     HiNCQpV7sb4SloFyH5ws0I3we6o.mft (raw, json)
Hash identifier:          ck4RXcKaPA6IUma2iqXmpkPLwiKbkJcv51bauqZG7eE=
Subject key identifier:   B6:A3:37:8B:68:F1:33:11:1F:A2:8E:2F:E4:74:3B:E1:68:AC:8B:F0
Authority key identifier: 1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA
Certificate issuer:       /CN=1e234242957bb1be129681721f9c2cd08df07baa
Certificate serial:       0199FE7DA28C40EA2AE1C3663337688F6FAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 22:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:10 +0000
Files and hashes:         1: HiNCQpV7sb4SloFyH5ws0I3we6o.crl (hash: 4VTVJv2vFylfL6Xry7/e8PClr0tLEfUot3C89AT3asA=)
                          2: LrQvGSWjZ1_u3gVVuPLp2WxRk1k.roa (hash: ZcyQD8WEBHUW25dO4BlMcUXBz86xnVBSf9fbKGrRMB8=)
                          3: _reFuWE8F3Q1MCsGcykhYwVBWKM.roa (hash: O++vwJ85mD5AXwmEuMpGVw7mWSimyoQ3mta9DBkVsW4=)
                          4: dbWbArxAw26iNluKXUrcW4Vg-TI.roa (hash: btYEfLq8/9yx4IhA4v1IAzOkYKFAL79qzcrLbl8TnGs=)
                          5: t3uSAegbFXAgvcMRKArmSOOjc88.roa (hash: 4JXslF6DFYbC7wM1C83bbrfYplmPiSougkSoNLfd1xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:a2:8c:40:ea:2a:e1:c3:66:33:37:68:8f:6f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e234242957bb1be129681721f9c2cd08df07baa
        Validity
            Not Before: Oct 19 22:01:10 2025 GMT
            Not After : Oct 20 22:01:10 2025 GMT
        Subject: CN=b6a3378b68f133111fa28e2fe4743be168ac8bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:ad:bd:d9:fe:f0:75:7c:b2:b7:12:95:08:
                    81:6a:04:01:6a:9f:44:70:d5:d0:3f:c6:b0:e6:3a:
                    e6:1c:5f:ab:a9:8d:7d:58:7b:94:8d:8f:38:e1:c8:
                    50:3f:7b:02:60:ff:90:9d:cb:60:cc:37:fd:ab:f8:
                    64:ae:e1:e5:24:b8:5a:e6:78:00:04:84:1c:fc:31:
                    db:03:f3:f3:bd:60:e4:f9:41:ae:c0:92:30:67:64:
                    db:41:25:5b:6a:30:d2:8f:99:41:6f:0f:fb:63:02:
                    64:11:e4:80:e2:eb:04:1a:2a:f5:ae:87:5e:96:50:
                    2f:63:73:69:9a:30:0d:c3:ab:98:74:11:fe:cd:10:
                    b4:5e:0c:9d:3d:74:9e:49:60:5d:d6:2c:e3:c9:ff:
                    4e:83:3c:12:a0:03:8d:22:b6:9d:64:a8:07:2e:f0:
                    24:41:80:c9:c7:7a:9c:ca:e0:64:2e:ca:d6:6a:6a:
                    e5:03:4d:63:16:f4:da:68:02:f5:51:20:ce:c5:2e:
                    52:77:8f:f1:8e:8e:8f:76:06:ae:b3:2f:89:a3:0a:
                    15:03:8a:6b:b8:e4:57:86:80:df:83:cc:7d:e9:10:
                    f7:68:cf:20:2f:15:87:a1:28:21:3b:6a:12:64:20:
                    5a:59:e8:0b:be:41:b0:d5:9a:e6:46:9c:3a:eb:71:
                    63:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:37:8B:68:F1:33:11:1F:A2:8E:2F:E4:74:3B:E1:68:AC:8B:F0
            X509v3 Authority Key Identifier:
                keyid:1E:23:42:42:95:7B:B1:BE:12:96:81:72:1F:9C:2C:D0:8D:F0:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HiNCQpV7sb4SloFyH5ws0I3we6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b3ae33-6d62-4093-92ec-5638526ff641/1/HiNCQpV7sb4SloFyH5ws0I3we6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:76:b8:01:7c:2c:b0:70:dd:de:3e:a8:ee:ae:70:f2:be:84:
         cf:fa:31:86:34:64:de:cc:11:3d:d6:1e:af:12:c0:0b:fb:3a:
         63:46:9a:eb:26:a5:84:ab:ee:15:b7:2b:f6:2f:de:49:2d:a8:
         dc:c9:6f:64:34:1f:98:15:f1:86:f5:1f:d8:ca:ee:58:27:e4:
         6c:72:93:8b:ba:4f:7f:2c:75:d7:eb:ec:7c:c9:c8:da:dd:9f:
         da:d7:d0:2d:9e:ff:01:3c:da:45:b4:41:e7:52:58:f0:b0:48:
         fa:5b:58:1a:da:d2:93:2b:b9:6b:ae:c4:1c:4a:e2:d4:a2:69:
         f6:ee:09:21:7a:00:e9:d5:a0:02:23:a3:95:b1:7e:3d:8e:57:
         92:a3:0e:18:0f:dd:32:2a:fe:1c:f3:10:30:c2:da:72:2e:ad:
         c2:2b:54:34:d6:72:63:24:5a:f9:59:61:16:b6:b5:ab:e5:3c:
         6d:d9:6a:2f:65:4e:5f:f2:1d:9e:dd:df:f9:dd:f8:2c:e0:1a:
         0a:43:77:6c:8a:d8:ab:0d:6d:77:78:05:e3:0d:f6:da:37:7f:
         39:df:ab:99:e0:a0:53:35:40:6e:ee:cd:d9:7c:13:04:24:27:
         9f:cd:b0:9a:a6:70:bd:77:cd:91:8b:16:e3:a6:4c:ad:6e:19:
         2b:91:4c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+faKMQOoq4cNmMzdoj2+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMjM0MjQyOTU3YmIxYmUxMjk2ODE3MjFmOWMyY2QwOGRm
MDdiYWEwHhcNMjUxMDE5MjIwMTEwWhcNMjUxMDIwMjIwMTEwWjAzMTEwLwYDVQQD
EyhiNmEzMzc4YjY4ZjEzMzExMWZhMjhlMmZlNDc0M2JlMTY4YWM4YmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8etvdn+8HV8srcSlQiBagQBap9E
cNXQP8aw5jrmHF+rqY19WHuUjY844chQP3sCYP+QnctgzDf9q/hkruHlJLha5ngA
BIQc/DHbA/PzvWDk+UGuwJIwZ2TbQSVbajDSj5lBbw/7YwJkEeSA4usEGir1rode
llAvY3NpmjANw6uYdBH+zRC0XgydPXSeSWBd1izjyf9OgzwSoAONIradZKgHLvAk
QYDJx3qcyuBkLsrWamrlA01jFvTaaAL1USDOxS5Sd4/xjo6Pdgausy+JowoVA4pr
uORXhoDfg8x96RD3aM8gLxWHoSghO2oSZCBaWegLvkGw1ZrmRpw663FjfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLajN4to8TMRH6KOL+R0O+ForIvwMB8GA1UdIwQY
MBaAFB4jQkKVe7G+EpaBch+cLNCN8HuqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMt
NTYzODUyNmZmNjQxLzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iM2FlMzMtNmQ2Mi00MDkzLTkyZWMtNTYzODUyNmZmNjQx
LzEvSGlOQ1FwVjdzYjRTbG9GeUg1d3MwSTN3ZTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXa4AXws
sHDd3j6o7q5w8r6Ez/oxhjRk3swRPdYerxLAC/s6Y0aa6yalhKvuFbcr9i/eSS2o
3MlvZDQfmBXxhvUf2MruWCfkbHKTi7pPfyx11+vsfMnI2t2f2tfQLZ7/ATzaRbRB
51JY8LBI+ltYGtrSkyu5a67EHEri1KJp9u4JIXoA6dWgAiOjlbF+PY5XkqMOGA/d
Mir+HPMQMMLaci6twitUNNZyYyRa+VlhFra1q+U8bdlqL2VOX/Idnt3f+d34LOAa
CkN3bIrYqw1td3gF4w322jd/Od+rmeCgUzVAbu7N2XwTBCQnn82wmqZwvXfNkYsW
46ZMrW4ZK5FMew==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:23:34 2025 by rpki-client