Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File:                     ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier:          ppb7+lChpzKdxA1XWr6/dp2NPxMGtePVZqhL33+qn6k=
Subject key identifier:   E7:14:B7:C2:E0:E0:EF:D5:F1:99:E4:96:33:99:77:C1:AC:92:28:14
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer:       /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial:       0199FC5897A27F0BD8105A9B5D87C367FA9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 12:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:28 +0000
Files and hashes:         1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
                          2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: ZK2AhZK8A7Oo96Os4LexfvMNaFWy9GKcvSL+XfH7gzU=)
                          3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:97:a2:7f:0b:d8:10:5a:9b:5d:87:c3:67:fa:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
        Validity
            Not Before: Oct 19 12:01:28 2025 GMT
            Not After : Oct 20 12:01:28 2025 GMT
        Subject: CN=e714b7c2e0e0efd5f199e496339977c1ac922814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:8d:c5:fe:99:f2:f8:b0:2a:d7:bc:7f:b7:
                    51:eb:e1:23:06:4b:bb:f9:6b:11:19:a4:24:ba:2b:
                    d1:1b:6c:23:20:24:fa:32:28:48:36:d2:ab:95:f8:
                    73:cd:91:4c:d5:41:71:e6:6a:5c:94:43:f0:b5:a8:
                    c8:41:ca:02:26:52:df:d3:5e:81:81:bc:fc:8d:02:
                    e9:ab:2e:89:37:d1:68:5b:ef:53:29:7d:e8:10:e8:
                    8e:46:30:07:b7:98:af:ef:e5:93:1f:4e:b2:5c:2e:
                    25:05:46:1f:de:95:23:f4:73:a5:34:a7:79:88:d7:
                    bb:08:1e:0b:8c:a9:ae:29:f2:29:7f:29:84:71:ed:
                    b1:a9:ad:3e:2d:a4:2f:60:22:d1:1d:c6:db:d7:46:
                    83:52:40:54:21:10:c9:20:9b:b1:8d:84:d5:fc:f8:
                    5c:c8:20:db:d5:8c:f7:6c:57:f8:34:d6:4d:41:d4:
                    45:b3:dd:64:e3:3d:ab:cd:50:15:82:5c:96:93:e3:
                    95:5c:3c:66:36:96:68:5c:7c:ea:3e:71:a8:95:25:
                    cb:3c:a4:08:e0:ec:3d:bf:50:fa:f7:4d:db:1a:68:
                    1d:28:1b:e2:ac:01:ca:58:7e:26:28:f7:8c:1c:f6:
                    a7:6e:16:bc:e1:0c:cf:e9:ac:cf:5e:a8:73:f1:ab:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:14:B7:C2:E0:E0:EF:D5:F1:99:E4:96:33:99:77:C1:AC:92:28:14
            X509v3 Authority Key Identifier:
                keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:04:7b:c6:66:d8:c2:d4:b3:ca:25:1d:61:cd:ca:ef:9d:a5:
         97:56:f3:a6:c5:22:c7:e6:81:7a:fe:11:30:bb:2e:6b:e3:7c:
         2f:9b:64:b4:17:d9:52:76:4b:9c:81:18:49:0d:da:ff:c6:1e:
         8b:15:aa:b2:09:8d:47:04:2a:ef:23:cf:3e:24:37:9c:91:87:
         61:e5:df:50:98:89:db:16:85:ca:ba:45:c1:72:3a:fd:5e:02:
         4a:65:10:b5:41:69:b5:ac:75:22:c2:2a:79:c5:7a:58:c8:c1:
         8a:72:26:84:0e:36:3a:19:cf:ec:d9:c3:fc:16:d3:43:c0:c9:
         e2:25:eb:59:15:75:38:28:2a:69:12:d1:25:4a:12:13:5c:98:
         b0:08:6c:90:56:ed:b6:16:f3:4b:ca:55:60:81:d8:2b:2e:92:
         7a:c4:a2:e6:a5:f5:95:86:f3:2c:36:b7:5e:5a:a0:88:a3:b7:
         d4:f0:e1:86:44:22:d3:d7:c3:49:46:e5:ee:07:f3:0e:e9:ca:
         a3:7b:5d:25:09:00:9f:ce:1b:24:ba:d0:1b:e8:ac:fe:81:51:
         a8:d0:07:10:3a:bf:c9:a9:58:fe:46:0c:49:53:e3:83:bc:06:
         ad:19:e8:41:74:95:9a:d9:2a:25:63:70:30:80:7a:49:c2:40:
         05:d4:fb:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJeifwvYEFqbXYfDZ/qaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZGNjNzc2YjJiZjU5NWJmNGIzZTYwYmJhNDI0NWYwMTIw
YTIxNzYwHhcNMjUxMDE5MTIwMTI4WhcNMjUxMDIwMTIwMTI4WjAzMTEwLwYDVQQD
EyhlNzE0YjdjMmUwZTBlZmQ1ZjE5OWU0OTYzMzk5NzdjMWFjOTIyODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom+Nxf6Z8viwKte8f7dR6+EjBku7
+WsRGaQkuivRG2wjICT6MihINtKrlfhzzZFM1UFx5mpclEPwtajIQcoCJlLf016B
gbz8jQLpqy6JN9FoW+9TKX3oEOiORjAHt5iv7+WTH06yXC4lBUYf3pUj9HOlNKd5
iNe7CB4LjKmuKfIpfymEce2xqa0+LaQvYCLRHcbb10aDUkBUIRDJIJuxjYTV/Phc
yCDb1Yz3bFf4NNZNQdRFs91k4z2rzVAVglyWk+OVXDxmNpZoXHzqPnGolSXLPKQI
4Ow9v1D6903bGmgdKBvirAHKWH4mKPeMHPanbha84QzP6azPXqhz8avbwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcUt8Lg4O/V8ZnkljOZd8GskigUMB8GA1UdIwQY
MBaAFHXcx3ayv1lb9LPmC7pCRfASCiF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQt
NjQ1NDAyMDVlY2Y0LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81ODFjNWQtYmM5Yi00MGE2LWE1YTQtNjQ1NDAyMDVlY2Y0
LzEvZGR6SGRyS19XVnYwcy1ZTHVrSkY4QklLSVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1QR7xmbY
wtSzyiUdYc3K752ll1bzpsUix+aBev4RMLsua+N8L5tktBfZUnZLnIEYSQ3a/8Ye
ixWqsgmNRwQq7yPPPiQ3nJGHYeXfUJiJ2xaFyrpFwXI6/V4CSmUQtUFptax1IsIq
ecV6WMjBinImhA42OhnP7NnD/BbTQ8DJ4iXrWRV1OCgqaRLRJUoSE1yYsAhskFbt
thbzS8pVYIHYKy6SesSi5qX1lYbzLDa3XlqgiKO31PDhhkQi09fDSUbl7gfzDunK
o3tdJQkAn84bJLrQG+is/oFRqNAHEDq/yalY/kYMSVPjg7wGrRnoQXSVmtkqJWNw
MIB6ScJABdT7iQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:34 2025 by rpki-client