Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File:                     jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier:          gb77VsyANscM3pBUa0mXvKUjAl176tlL7xNUmyEWb6o=
Subject key identifier:   36:BC:60:13:4F:90:17:32:3D:A0:06:BB:E3:41:3F:93:22:3E:B5:32
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer:       /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial:       0199FC8FB74E5CFCC973B0731ED3FEFC7ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 13:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:40 +0000
Files and hashes:         1: 1tlTabk8kx23vgEK55RHhqMUGAo.roa (hash: ZiPvgitC32adDyXcop28a7N8FTyvMG9u4rZhMBMC7pc=)
                          2: GJFvvd_DhSTge6litoTaxiewidk.roa (hash: RLpkP+iqljJeiJ6QCXluN39pRk9A6A/5JPgUBEpuWhk=)
                          3: HzBkiKhuiqff_TTVGmLjYBovMzQ.roa (hash: qKqhsRRVPhaKh0NQ1lXqtQkYrgEiWm0P2Q/f/i1BnBs=)
                          4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: SAZ1IV41Wb4BBjRHRQaJdi815PRwB6ogrWhG9lcLZkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:b7:4e:5c:fc:c9:73:b0:73:1e:d3:fe:fc:7e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
        Validity
            Not Before: Oct 19 13:01:40 2025 GMT
            Not After : Oct 20 13:01:40 2025 GMT
        Subject: CN=36bc60134f9017323da006bbe3413f93223eb532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:50:38:3e:a0:02:a3:a3:c7:b4:69:57:ed:
                    ad:61:dd:1d:09:2a:eb:8c:54:9f:36:06:ac:da:68:
                    07:79:6b:43:e5:6d:2e:b7:d9:83:f3:a3:01:56:19:
                    68:f0:07:4c:04:f1:4d:ec:7a:c2:6e:22:12:06:08:
                    47:ef:87:6e:53:d7:b9:dc:dc:a7:46:b8:7e:22:14:
                    8f:35:48:46:2c:96:d6:8b:24:5a:61:7e:74:69:1d:
                    00:2f:6e:c2:18:df:4a:d7:d5:f4:3b:cc:49:2d:2f:
                    31:bd:c4:68:22:31:49:39:2b:ac:4a:51:6c:fc:c3:
                    ec:a7:35:97:5c:10:5b:4f:d5:a3:36:2d:c3:26:61:
                    43:d8:15:ca:91:e7:87:df:16:81:cb:d6:94:56:d4:
                    97:23:d5:af:8b:01:bf:30:b9:35:2d:e9:7b:a8:4f:
                    58:5d:07:0d:b0:8c:c6:6a:8d:43:08:41:83:cb:5b:
                    84:5f:18:fe:32:9e:c9:47:8d:a4:d7:a2:e1:94:af:
                    9b:95:0b:f7:ec:0a:bb:8c:1b:17:b3:1c:4a:67:e9:
                    2e:ac:6e:ff:60:de:18:d5:4f:8e:75:33:e3:9b:6b:
                    6c:78:49:72:8e:25:06:a8:99:b6:31:ad:0a:ef:ea:
                    49:68:dc:21:89:06:37:06:16:11:4f:91:1b:35:86:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BC:60:13:4F:90:17:32:3D:A0:06:BB:E3:41:3F:93:22:3E:B5:32
            X509v3 Authority Key Identifier:
                keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ab:14:15:05:48:dc:98:9a:00:29:33:92:de:f3:99:16:10:
         4d:1c:67:87:e8:f4:fa:f3:06:98:4c:19:d1:92:e4:25:4a:ac:
         c3:18:4d:0b:0d:3d:4c:f3:c5:ba:54:95:8e:0a:56:f8:21:af:
         32:d7:30:f1:49:80:4a:bd:01:dd:6f:db:02:80:8f:9c:1a:f1:
         89:e2:82:e3:5e:29:6a:e6:a6:ed:d6:ba:6f:7f:e2:10:27:19:
         2f:f7:89:1d:01:b6:24:58:fc:c2:04:b5:7c:2a:cd:66:5a:e6:
         0d:06:ea:5f:68:a1:2b:d7:a9:0e:09:ff:d8:16:64:a3:77:6e:
         27:71:6b:01:7f:23:c2:8e:78:e5:d7:1d:c5:d3:6a:89:60:26:
         13:b8:e4:ac:46:46:2c:87:34:0e:08:5c:f7:37:49:66:1c:05:
         fe:44:43:b4:86:d2:44:ed:b2:e8:11:bb:8f:58:70:b5:fd:f1:
         81:31:f0:92:8a:a8:77:c7:72:0d:27:c0:83:0f:4e:d7:b0:5e:
         f4:d5:1c:56:4b:2c:62:2a:6f:68:af:be:70:d5:d4:9c:45:55:
         50:db:a9:7a:42:bc:79:22:fc:5f:ad:ba:c6:6a:e9:ba:ef:61:
         3c:2e:b9:c0:09:c4:1a:96:39:94:e9:08:4c:32:94:a7:bd:87:
         74:7b:f3:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j7dOXPzJc7BzHtP+/H7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjUxZDA2NzA3MTVlYjY5ZWZhMmZiZmYxOTk4YzNiZGJk
OGE5ZjUwHhcNMjUxMDE5MTMwMTQwWhcNMjUxMDIwMTMwMTQwWjAzMTEwLwYDVQQD
EygzNmJjNjAxMzRmOTAxNzMyM2RhMDA2YmJlMzQxM2Y5MzIyM2ViNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9tQOD6gAqOjx7RpV+2tYd0dCSrr
jFSfNgas2mgHeWtD5W0ut9mD86MBVhlo8AdMBPFN7HrCbiISBghH74duU9e53Nyn
Rrh+IhSPNUhGLJbWiyRaYX50aR0AL27CGN9K19X0O8xJLS8xvcRoIjFJOSusSlFs
/MPspzWXXBBbT9WjNi3DJmFD2BXKkeeH3xaBy9aUVtSXI9WviwG/MLk1Lel7qE9Y
XQcNsIzGao1DCEGDy1uEXxj+Mp7JR42k16LhlK+blQv37Aq7jBsXsxxKZ+kurG7/
YN4Y1U+OdTPjm2tseElyjiUGqJm2Ma0K7+pJaNwhiQY3BhYRT5EbNYZAXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDa8YBNPkBcyPaAGu+NBP5MiPrUyMB8GA1UdIwQY
MBaAFI31HQZwcV62nvovv/GZjDvb2Kn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDkt
N2E3OTRkNWNlZDNkLzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDktN2E3OTRkNWNlZDNk
LzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6sUFQVI
3JiaACkzkt7zmRYQTRxnh+j0+vMGmEwZ0ZLkJUqswxhNCw09TPPFulSVjgpW+CGv
Mtcw8UmASr0B3W/bAoCPnBrxieKC414pauam7da6b3/iECcZL/eJHQG2JFj8wgS1
fCrNZlrmDQbqX2ihK9epDgn/2BZko3duJ3FrAX8jwo545dcdxdNqiWAmE7jkrEZG
LIc0Dghc9zdJZhwF/kRDtIbSRO2y6BG7j1hwtf3xgTHwkoqod8dyDSfAgw9O17Be
9NUcVkssYipvaK++cNXUnEVVUNupekK8eSL8X626xmrpuu9hPC65wAnEGpY5lOkI
TDKUp72HdHvzGg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:23 2025 by rpki-client