Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File:                     jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier:          YWRL4tTkKgQzqoEHeITg1r/Z3mtdDdnuotc2u0UhSbo=
Subject key identifier:   A1:D1:D4:BA:B8:74:69:96:1F:3E:E6:3E:07:E8:58:28:FC:EF:16:BC
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer:       /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial:       0199FFFE42BFCCAFFAEBECB2A1E546DADC0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 05:01:17 +0000
Manifest this update:     Mon 20 Oct 2025 05:01:17 +0000
Manifest next update:     Tue 21 Oct 2025 05:01:17 +0000
Files and hashes:         1: 1vKogvAJ7aYG5PR2yXnQrWioZSo.roa (hash: 7AslTVaGAxs89CrI0ewnWcmXXnAy3y2uVc1NOrkGAHw=)
                          2: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
                          3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
                          4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: iEgSUSgajH5dtEqcsnQ9jHmzBOPHk+EhdSKrK11YsRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:fe:42:bf:cc:af:fa:eb:ec:b2:a1:e5:46:da:dc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
        Validity
            Not Before: Oct 20 05:01:17 2025 GMT
            Not After : Oct 21 05:01:17 2025 GMT
        Subject: CN=a1d1d4bab87469961f3ee63e07e85828fcef16bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:99:f0:53:fa:1c:1c:b1:b2:50:96:5f:3b:
                    dc:a8:b0:14:46:10:80:c4:fd:6c:6f:de:de:de:ea:
                    25:83:46:bf:81:33:26:29:76:5e:c3:49:7f:a6:64:
                    3d:e1:3c:8f:1a:51:b4:e9:75:cd:d1:64:bb:75:b8:
                    5d:09:4a:de:f5:d5:e7:16:17:99:d5:aa:32:fd:41:
                    03:94:db:d5:45:5c:78:ab:47:2c:57:b4:ab:3b:32:
                    d1:63:dd:15:39:1d:7f:26:d4:bb:13:1a:f5:d4:48:
                    ab:42:86:e1:0e:c8:4e:a0:d7:cc:a9:72:e1:1b:40:
                    e8:4d:f5:c0:5b:c1:59:50:be:69:2d:a0:07:70:92:
                    4a:f1:22:d6:c5:61:29:b2:d0:c2:7a:3f:4b:e8:bb:
                    a7:43:86:3e:72:f8:62:bb:df:97:02:16:0a:01:ca:
                    9e:ac:f5:82:d6:6f:0c:38:08:7d:68:59:c3:b7:36:
                    68:ac:a8:eb:ac:99:41:0e:6d:19:22:48:7d:68:76:
                    02:4a:e0:9b:c1:47:ad:dc:a0:4b:ef:24:5a:6d:26:
                    8a:ff:2c:37:8b:f0:d6:72:96:4b:54:5b:7d:7c:0c:
                    8e:76:93:5d:28:79:cb:e4:4b:2c:10:b8:08:6b:fa:
                    ce:6a:44:af:24:ea:26:6d:9f:d3:4e:3c:39:48:3a:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D1:D4:BA:B8:74:69:96:1F:3E:E6:3E:07:E8:58:28:FC:EF:16:BC
            X509v3 Authority Key Identifier:
                keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:68:84:23:f5:ee:f9:dd:2b:d5:3c:7c:67:3c:29:37:49:9d:
         ea:4f:90:d4:1d:77:3b:fb:a5:94:d8:67:70:32:48:d3:6e:e4:
         00:fc:8a:5d:8f:ba:d0:2c:c7:26:64:2b:d1:e4:44:9b:d6:40:
         ad:ac:da:6b:34:7e:4f:80:97:ed:d6:60:f8:69:22:55:a2:e5:
         8d:54:5e:75:36:aa:73:eb:0d:5c:20:e2:45:59:90:ce:c9:fe:
         36:ea:9b:93:75:3c:e4:29:91:07:21:29:05:36:b2:dc:aa:9d:
         6e:22:0e:cb:2f:2c:ce:ab:98:c3:b8:96:4e:36:e0:13:bb:97:
         d7:a4:7e:0a:4d:22:f4:46:02:ff:a1:7e:0f:3c:41:4a:8c:ba:
         e6:81:2c:e3:d1:5b:74:43:53:23:e0:fe:bc:d8:37:91:2e:0e:
         03:72:b7:75:d0:52:f3:a1:f3:24:71:c5:6b:c3:c3:0e:cf:89:
         1c:75:c9:2a:2f:8f:2b:6e:51:38:bd:36:22:73:80:03:c7:5f:
         74:af:1f:0b:43:ba:95:bb:6e:c3:d9:84:07:25:43:dd:c6:be:
         79:b4:ae:26:4b:08:83:22:d1:8d:2b:0c:cf:be:46:72:88:ef:
         5e:c2:b2:87:2f:8d:7a:3f:18:44:c9:cb:27:f5:1a:c3:44:4a:
         e8:16:b6:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//kK/zK/66+yyoeVG2twNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNzcwMTNlNDg4YTA5YzcwOWI2MzIyNDZkOTQwNWRhNDU4
YzU1MzgwHhcNMjUxMDIwMDUwMTE3WhcNMjUxMDIxMDUwMTE3WjAzMTEwLwYDVQQD
EyhhMWQxZDRiYWI4NzQ2OTk2MWYzZWU2M2UwN2U4NTgyOGZjZWYxNmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRuZ8FP6HByxslCWXzvcqLAURhCA
xP1sb97e3uolg0a/gTMmKXZew0l/pmQ94TyPGlG06XXN0WS7dbhdCUre9dXnFheZ
1aoy/UEDlNvVRVx4q0csV7SrOzLRY90VOR1/JtS7Exr11EirQobhDshOoNfMqXLh
G0DoTfXAW8FZUL5pLaAHcJJK8SLWxWEpstDCej9L6LunQ4Y+cvhiu9+XAhYKAcqe
rPWC1m8MOAh9aFnDtzZorKjrrJlBDm0ZIkh9aHYCSuCbwUet3KBL7yRabSaK/yw3
i/DWcpZLVFt9fAyOdpNdKHnL5EssELgIa/rOakSvJOombZ/TTjw5SDoqiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHR1Lq4dGmWHz7mPgfoWCj87xa8MB8GA1UdIwQY
MBaAFIx3AT5IignHCbYyJG2UBdpFjFU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgt
MDIxMjk1MzNhMzNkLzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgtMDIxMjk1MzNhMzNk
LzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmiEI/Xu
+d0r1Tx8ZzwpN0md6k+Q1B13O/ullNhncDJI027kAPyKXY+60CzHJmQr0eREm9ZA
razaazR+T4CX7dZg+GkiVaLljVRedTaqc+sNXCDiRVmQzsn+Nuqbk3U85CmRByEp
BTay3KqdbiIOyy8szquYw7iWTjbgE7uX16R+Ck0i9EYC/6F+DzxBSoy65oEs49Fb
dENTI+D+vNg3kS4OA3K3ddBS86HzJHHFa8PDDs+JHHXJKi+PK25ROL02InOAA8df
dK8fC0O6lbtuw9mEByVD3ca+ebSuJksIgyLRjSsMz75GcojvXsKyhy+Nej8YRMnL
J/Uaw0RK6Ba26g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:16 2025 by rpki-client