Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File:                     zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier:          eCMqhRA2bMYHK026U5DRi9A8Wmn/4nVC6NZG3ntDpPY=
Subject key identifier:   61:70:88:0F:2A:BF:B5:B2:E5:B8:CF:DA:B9:FB:D9:F0:AA:AF:3D:83
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer:       /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial:       0199FAA0CFA326E359A869365685571CEF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 04:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:06 +0000
Files and hashes:         1: 2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa (hash: SriKAtzLJClJ8RYlJnsDDGPLefd9t0TyrlM6Ndh0w6s=)
                          2: HSDe33dztyDbbAh5edeiMrBstpw.roa (hash: hMHbKz19ucgy7N1gbQNpI/GP1wKSKMSFktFakjiCIw4=)
                          3: QRtKZhH9f2q5Qs4y3jok3HnjFK0.roa (hash: kTYNUIGwJLwA+YttUf3vVXejkVq8FL+41G3GFzyW8/w=)
                          4: jjYT0ual1nIv5rmaeDjlNg2jdtU.roa (hash: OjHVmf3z6fImr8f0+RF/L2hzt0WZmr2JT7HoyHilItc=)
                          5: vGoHfriPki42R6sM4AGNaZ6Sim4.roa (hash: QcwTT5U/Z4Mw3Ga8Qis4P0Rl1OjYiRfOAUfd5c277Jw=)
                          6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: z4jmHWrI4aV11uPqck6ksPaP6kdidtwJ7Y9EjJtcEsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:cf:a3:26:e3:59:a8:69:36:56:85:57:1c:ef:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
        Validity
            Not Before: Oct 19 04:01:06 2025 GMT
            Not After : Oct 20 04:01:06 2025 GMT
        Subject: CN=6170880f2abfb5b2e5b8cfdab9fbd9f0aaaf3d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:69:1a:4b:0c:08:18:87:99:29:5b:da:6d:c4:
                    a2:d3:60:93:1b:82:b6:c1:42:5e:7f:68:1a:ce:69:
                    ff:f5:f6:ef:2b:95:8e:ee:02:88:15:ac:47:24:5e:
                    39:69:57:49:6f:66:08:9a:68:08:e5:a2:04:c8:ec:
                    97:52:24:03:5a:00:72:87:fa:d8:64:5d:04:4d:61:
                    17:30:40:3e:49:c4:62:8d:9e:aa:d8:53:0b:3c:53:
                    a9:4f:f1:9d:a4:b6:77:be:f6:fd:7e:cb:18:17:b9:
                    91:c0:4a:54:92:44:24:ff:3b:fc:10:5c:35:65:b3:
                    88:8c:2a:77:ad:3f:b9:78:46:d1:da:14:a9:4e:9e:
                    57:c5:4c:51:d4:ff:39:21:47:63:d3:ea:52:43:22:
                    e7:64:92:bd:a7:88:94:5a:ba:a1:38:4c:64:c4:3d:
                    ff:0c:53:7a:5b:06:52:c1:4f:2b:a9:43:0f:25:92:
                    e4:fd:9b:3b:69:20:50:65:8c:70:d9:3e:51:bc:e3:
                    be:49:6e:ab:d3:75:b2:62:30:2c:6f:a6:83:78:1c:
                    0d:5e:17:a3:00:cd:97:90:0a:af:52:f1:71:21:ff:
                    e0:2a:fe:e2:e3:7f:83:53:e7:f2:d6:fd:80:18:54:
                    55:90:a9:89:91:0e:f9:03:a5:85:2a:ae:38:a6:db:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:70:88:0F:2A:BF:B5:B2:E5:B8:CF:DA:B9:FB:D9:F0:AA:AF:3D:83
            X509v3 Authority Key Identifier:
                keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ea:c9:70:6a:49:85:a8:f4:96:c9:f6:b5:89:41:f1:88:2a:
         b3:e5:15:ec:25:a2:9b:3d:6b:3d:20:82:f8:08:0c:1d:20:96:
         5e:3c:0b:a6:c4:1f:b8:b3:1d:b5:e4:5b:80:93:8e:6c:35:3b:
         a6:32:c3:68:0d:32:07:32:61:44:79:65:c6:cc:b6:63:7e:e0:
         b7:8d:66:bc:b9:af:53:d4:df:17:ee:47:c3:34:67:37:09:7d:
         9c:67:95:6f:3b:08:97:e7:d9:9f:d9:af:d2:3a:dc:34:b5:04:
         0a:90:ed:89:f4:f1:70:63:14:1b:90:81:af:6a:82:a8:24:80:
         54:b3:56:f6:a2:da:2b:65:64:c8:ee:c0:27:0b:57:90:6e:13:
         29:3d:1e:b7:47:94:20:b8:a6:9e:12:df:29:fe:c5:1a:8c:bd:
         2e:c4:fc:3c:6d:43:34:50:45:f8:67:67:55:59:d6:15:89:51:
         1b:8f:ec:29:3a:61:a2:38:0d:db:62:7a:e5:b7:c1:fc:db:11:
         6b:e8:e9:3f:60:4c:60:09:27:96:92:8f:a9:69:09:f3:c6:c7:
         76:bc:54:8f:34:51:87:04:78:ab:bf:5e:f3:d5:3f:28:be:bb:
         75:9b:aa:d1:0c:9d:dd:10:90:cb:56:bc:4a:0b:51:fd:82:e0:
         30:e0:c3:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oM+jJuNZqGk2VoVXHO+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMjE1ZjU4MTU5ZWM1NzZhMjAyMjc3NmVhNjRmNjFjNWJi
MDAxOTQwHhcNMjUxMDE5MDQwMTA2WhcNMjUxMDIwMDQwMTA2WjAzMTEwLwYDVQQD
Eyg2MTcwODgwZjJhYmZiNWIyZTViOGNmZGFiOWZiZDlmMGFhYWYzZDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GkaSwwIGIeZKVvabcSi02CTG4K2
wUJef2gazmn/9fbvK5WO7gKIFaxHJF45aVdJb2YImmgI5aIEyOyXUiQDWgByh/rY
ZF0ETWEXMEA+ScRijZ6q2FMLPFOpT/GdpLZ3vvb9fssYF7mRwEpUkkQk/zv8EFw1
ZbOIjCp3rT+5eEbR2hSpTp5XxUxR1P85IUdj0+pSQyLnZJK9p4iUWrqhOExkxD3/
DFN6WwZSwU8rqUMPJZLk/Zs7aSBQZYxw2T5RvOO+SW6r03WyYjAsb6aDeBwNXhej
AM2XkAqvUvFxIf/gKv7i43+DU+fy1v2AGFRVkKmJkQ75A6WFKq44ptuCrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFwiA8qv7Wy5bjP2rn72fCqrz2DMB8GA1UdIwQY
MBaAFMwhX1gVnsV2ogIndupk9hxbsAGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAt
ODQzZWVlZTBhMjYwLzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAtODQzZWVlZTBhMjYw
LzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQerJcGpJ
haj0lsn2tYlB8Ygqs+UV7CWimz1rPSCC+AgMHSCWXjwLpsQfuLMdteRbgJOObDU7
pjLDaA0yBzJhRHllxsy2Y37gt41mvLmvU9TfF+5HwzRnNwl9nGeVbzsIl+fZn9mv
0jrcNLUECpDtifTxcGMUG5CBr2qCqCSAVLNW9qLaK2VkyO7AJwtXkG4TKT0et0eU
ILimnhLfKf7FGoy9LsT8PG1DNFBF+GdnVVnWFYlRG4/sKTphojgN22J65bfB/NsR
a+jpP2BMYAknlpKPqWkJ88bHdrxUjzRRhwR4q79e89U/KL67dZuq0Qyd3RCQy1a8
SgtR/YLgMODDNg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:42 2025 by rpki-client