Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
File:                     dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json)
Hash identifier:          mvW87nHg7l6sfgNkuEfPV1HPHdpboAqaLyFNWGk9Rks=
Subject key identifier:   E2:DE:EB:9E:61:CD:1D:A8:5A:D9:14:E0:00:85:C5:0A:04:FD:AB:32
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       0199FCC61C34F4832D07BE8CFBA9BC4CF6A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
Manifest number:          0377
Signing time:             Sun 19 Oct 2025 14:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:05 +0000
Files and hashes:         1: 6zamDTUBwAsnOFkspEkx8jbI6wY.roa (hash: dvRTh/kPMauvkj5ufzVensqKmDYCodFR0kOnwH7zmxk=)
                          2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: wYwDsGx8x9UpsVcepWHPmipcGIlfTnDY9hCgJhPzpk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:1c:34:f4:83:2d:07:be:8c:fb:a9:bc:4c:f6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Oct 19 14:01:05 2025 GMT
            Not After : Oct 20 14:01:05 2025 GMT
        Subject: CN=e2deeb9e61cd1da85ad914e00085c50a04fdab32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:f4:ac:74:d7:fb:85:a9:ba:3e:a6:b7:9c:
                    29:b0:f0:99:65:bd:c6:10:34:ef:5d:ac:cf:2e:8d:
                    ae:68:59:4d:60:53:df:74:d4:33:80:b1:6b:ff:37:
                    47:96:f6:18:33:f5:c9:50:c9:47:79:97:f3:20:1e:
                    6b:c0:67:8b:c0:ae:ad:d2:7d:c6:ae:94:2a:72:75:
                    ec:11:02:b7:3a:51:b9:66:41:a5:9e:68:b5:1f:6f:
                    7c:1f:b1:0b:57:5a:a7:d4:dd:62:0b:94:c0:00:2f:
                    fa:00:74:e9:07:dd:ca:7a:95:c4:7d:35:0a:f0:cb:
                    12:ba:44:f3:9e:2e:d1:5e:74:f2:5d:a9:54:53:ca:
                    6c:a5:64:d6:67:77:85:86:89:46:dd:3a:93:13:eb:
                    1f:2e:fd:7b:38:b1:f9:21:6b:03:42:61:90:84:44:
                    31:e2:40:3b:bc:d5:c7:9c:16:e4:42:46:6e:76:5a:
                    96:9f:d4:69:9c:f5:e7:f5:86:5f:60:bf:9b:ea:6b:
                    11:a1:a0:d0:28:02:10:19:a7:e3:84:c4:15:e3:3f:
                    e0:cd:6c:88:d5:06:8e:6b:be:53:a2:51:54:65:44:
                    50:be:6a:a6:1d:72:d8:01:cf:ce:70:48:15:c5:e6:
                    69:28:03:18:26:21:50:9a:d7:a3:e5:34:27:85:92:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DE:EB:9E:61:CD:1D:A8:5A:D9:14:E0:00:85:C5:0A:04:FD:AB:32
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c1:2a:29:63:4d:0d:49:e9:26:5a:dd:a7:0d:9c:c5:e1:b7:
         2b:90:37:1c:5d:62:fd:25:2b:56:ce:b2:03:d9:2b:eb:8e:c3:
         fd:2a:f9:16:0b:e0:11:49:7d:b6:19:ad:d0:ae:97:2c:9e:51:
         5c:e8:e6:75:6c:a6:11:ab:30:b8:34:4a:b7:51:d1:bc:ce:aa:
         11:fb:ea:eb:46:a7:e3:d3:1b:60:ac:29:06:96:c4:af:83:ab:
         af:3f:a6:08:01:46:73:2c:5d:e6:c5:4f:2b:e3:4d:7a:36:19:
         9c:2f:f9:a4:bd:e6:57:6f:ae:40:65:04:db:2e:7b:5a:02:57:
         24:58:3d:81:d6:61:93:59:45:6e:6b:a8:50:36:a7:3a:85:5b:
         b7:60:8d:29:15:f1:9e:97:30:88:6e:7d:3a:9b:d7:f3:5d:7c:
         a3:fd:8d:32:2c:d2:46:79:01:4b:3a:a1:39:92:0b:0e:e7:a7:
         5a:83:6b:8f:6b:b8:e8:36:4a:e3:60:ee:ec:e6:f5:b9:a1:b7:
         26:5f:e8:4e:83:8c:28:2b:00:d7:35:b7:70:75:21:98:9a:81:
         e5:9e:e1:de:b4:b9:79:e0:0e:6b:bd:a8:75:e9:64:5f:83:be:
         a3:bb:8e:9d:53:24:35:eb:2a:41:c0:bb:a0:15:c8:79:16:94:
         20:cc:b3:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xhw09IMtB76M+6m8TPakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDBiYjU1ODJlNzRkNjFlOTBjODAyODNiYTliOThiYTY1
Y2QyZGMwHhcNMjUxMDE5MTQwMTA1WhcNMjUxMDIwMTQwMTA1WjAzMTEwLwYDVQQD
EyhlMmRlZWI5ZTYxY2QxZGE4NWFkOTE0ZTAwMDg1YzUwYTA0ZmRhYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa/0rHTX+4Wpuj6mt5wpsPCZZb3G
EDTvXazPLo2uaFlNYFPfdNQzgLFr/zdHlvYYM/XJUMlHeZfzIB5rwGeLwK6t0n3G
rpQqcnXsEQK3OlG5ZkGlnmi1H298H7ELV1qn1N1iC5TAAC/6AHTpB93KepXEfTUK
8MsSukTzni7RXnTyXalUU8pspWTWZ3eFholG3TqTE+sfLv17OLH5IWsDQmGQhEQx
4kA7vNXHnBbkQkZudlqWn9RpnPXn9YZfYL+b6msRoaDQKAIQGafjhMQV4z/gzWyI
1QaOa75TolFUZURQvmqmHXLYAc/OcEgVxeZpKAMYJiFQmtej5TQnhZLx1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLe655hzR2oWtkU4ACFxQoE/asyMB8GA1UdIwQY
MBaAFHUAu1WC501h6QyAKDupuYumXNLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjNiYjUtZjhiMS00Y2I0LWJkNDgt
YmIzZDQ5MzBlNDU5LzEvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xNjNiYjUtZjhiMS00Y2I0LWJkNDgtYmIzZDQ5MzBlNDU5
LzEvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8EqKWNN
DUnpJlrdpw2cxeG3K5A3HF1i/SUrVs6yA9kr647D/Sr5FgvgEUl9thmt0K6XLJ5R
XOjmdWymEaswuDRKt1HRvM6qEfvq60an49MbYKwpBpbEr4Orrz+mCAFGcyxd5sVP
K+NNejYZnC/5pL3mV2+uQGUE2y57WgJXJFg9gdZhk1lFbmuoUDanOoVbt2CNKRXx
npcwiG59OpvX8118o/2NMizSRnkBSzqhOZILDuenWoNrj2u46DZK42Du7Ob1uaG3
Jl/oToOMKCsA1zW3cHUhmJqB5Z7h3rS5eeAOa72odelkX4O+o7uOnVMkNesqQcC7
oBXIeRaUIMyzog==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:33 2025 by rpki-client