Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File:                     1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier:          HwHO7sHDEKEOMwYNp9GvGR1+Zybsr252hGTk8fCsV9Y=
Subject key identifier:   01:45:29:4F:86:F0:FB:78:F2:41:13:9E:28:A9:F3:82:93:BE:9A:43
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer:       /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial:       0199FD349B1DD79EB40A46453B060999BCC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number:          16EB
Signing time:             Sun 19 Oct 2025 16:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:47 +0000
Files and hashes:         1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=)
                          2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: Uw47CtbG0XB2o6cLSzYhUk/1J6597uiRHDmAiPPL7Ek=)
                          3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=)
                          4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=)
                          5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:9b:1d:d7:9e:b4:0a:46:45:3b:06:09:99:bc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
        Validity
            Not Before: Oct 19 16:01:47 2025 GMT
            Not After : Oct 20 16:01:47 2025 GMT
        Subject: CN=0145294f86f0fb78f241139e28a9f38293be9a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:e8:01:07:f5:d3:11:34:88:eb:33:da:5d:
                    be:93:60:c2:bd:8d:18:3d:85:9f:25:be:23:67:22:
                    22:4f:37:98:2d:e0:74:29:3b:6b:ca:b2:77:e2:fd:
                    73:90:e0:27:a4:2e:34:a4:31:01:78:2d:4b:bd:3e:
                    38:a1:b0:a5:1b:b2:ff:ba:61:cc:11:58:57:8f:6f:
                    99:19:36:04:bd:25:fd:a4:83:b6:da:f6:03:c7:59:
                    48:ef:f7:12:ae:06:17:c7:68:9c:53:f3:6f:fb:4f:
                    d6:2c:b8:d0:28:6e:5d:7d:25:e5:d1:b5:12:f1:1c:
                    e1:e9:15:3e:13:4a:98:46:1b:1a:b4:8b:95:4a:a5:
                    57:da:f8:2b:f2:5a:a6:52:10:75:a1:77:3a:5a:e3:
                    2d:5d:46:c5:a1:b3:8e:8f:4f:5d:12:82:0c:1f:96:
                    e6:61:ee:17:af:6f:3e:29:2b:d1:64:b4:da:fc:ba:
                    7e:7b:ba:88:a1:1e:b5:2b:ee:05:7c:ce:d5:a2:ba:
                    32:71:5e:a7:57:a9:ed:e1:fd:e6:29:98:8e:85:df:
                    d9:f8:51:f6:38:3d:86:08:54:2d:b1:fa:4d:7e:c5:
                    c8:fa:2f:6c:5e:09:08:94:1e:84:2a:ad:55:de:48:
                    73:c2:99:c6:06:fe:85:bd:af:e6:fa:b4:5e:39:82:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:45:29:4F:86:F0:FB:78:F2:41:13:9E:28:A9:F3:82:93:BE:9A:43
            X509v3 Authority Key Identifier:
                keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f7:6b:af:51:91:0e:19:af:69:90:8e:97:43:5f:49:17:10:
         a7:8e:8e:aa:ae:dc:ea:95:9e:18:50:67:79:1c:76:6c:3f:d0:
         c8:88:5b:f3:dc:07:36:e5:02:3a:81:f0:b5:f2:86:8c:d5:3f:
         68:90:27:f7:f9:ee:b5:2f:89:be:af:7c:04:8c:46:51:d6:ea:
         74:66:e2:7c:20:21:7a:2b:70:c6:0d:8f:61:45:f5:e8:8e:67:
         64:88:dd:b6:b1:57:70:10:44:a1:10:ba:5b:6a:49:a7:a3:be:
         64:7d:72:fc:79:79:63:be:0b:61:7e:d2:79:30:a2:46:50:27:
         bf:a5:cd:99:b7:5b:6d:00:a2:81:c0:7a:61:35:78:d0:bb:79:
         56:c8:c9:20:54:e0:15:2e:d2:03:39:2f:1c:40:3b:74:5a:5b:
         1a:32:5d:98:ea:8f:ab:3a:1e:f5:25:bb:84:f7:bc:00:51:df:
         42:17:7f:b2:1f:44:2b:6a:38:95:9d:a8:12:58:19:45:78:27:
         3a:26:cb:01:89:84:f4:d0:48:42:23:b3:2d:40:0f:80:de:38:
         15:12:cb:c5:0f:a4:2a:f8:ce:03:68:89:50:e8:1a:40:1d:cf:
         d9:f4:01:5d:42:dd:80:f3:7a:ae:7a:ec:82:ea:64:11:d0:d5:
         ee:39:94:81
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn9NJsd1560CkZFOwYJmbzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWQ1NDM2MjRmOGQzMjgxZWM5NzA0NThlZTc1MmYxMGE0
MjQ1MjkwHhcNMjUxMDE5MTYwMTQ3WhcNMjUxMDIwMTYwMTQ3WjAzMTEwLwYDVQQD
EygwMTQ1Mjk0Zjg2ZjBmYjc4ZjI0MTEzOWUyOGE5ZjM4MjkzYmU5YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ufoAQf10xE0iOsz2l2+k2DCvY0Y
PYWfJb4jZyIiTzeYLeB0KTtryrJ34v1zkOAnpC40pDEBeC1LvT44obClG7L/umHM
EVhXj2+ZGTYEvSX9pIO22vYDx1lI7/cSrgYXx2icU/Nv+0/WLLjQKG5dfSXl0bUS
8Rzh6RU+E0qYRhsatIuVSqVX2vgr8lqmUhB1oXc6WuMtXUbFobOOj09dEoIMH5bm
Ye4Xr28+KSvRZLTa/Lp+e7qIoR61K+4FfM7VoroycV6nV6nt4f3mKZiOhd/Z+FH2
OD2GCFQtsfpNfsXI+i9sXgkIlB6EKq1V3khzwpnGBv6Fva/m+rReOYLLXwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAFFKU+G8Pt48kETniip84KTvppDMB8GA1UdIwQY
MBaAFPitVDYk+NMoHslwRY7nUvEKQkUpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LMVVOaVQ0MHlnZXlYQkZqdWRTOFFwQ1JTay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvYWYxZjY0LWMzNWYtNDdlOC04N2M5
LThhMTFiNDcxOWQ4Mi8xLzEtSzFVTmlUNDB5Z2V5WEJGanVkUzhRcENSU2subWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzIwL2FmMWY2NC1jMzVmLTQ3ZTgtODdjOS04YTExYjQ3MTlk
ODIvMS8xLUsxVU5pVDQweWdleVhCRmp1ZFM4UXBDUlNrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPdr
r1GRDhmvaZCOl0NfSRcQp46Oqq7c6pWeGFBneRx2bD/QyIhb89wHNuUCOoHwtfKG
jNU/aJAn9/nutS+Jvq98BIxGUdbqdGbifCAheitwxg2PYUX16I5nZIjdtrFXcBBE
oRC6W2pJp6O+ZH1y/Hl5Y74LYX7SeTCiRlAnv6XNmbdbbQCigcB6YTV40Lt5VsjJ
IFTgFS7SAzkvHEA7dFpbGjJdmOqPqzoe9SW7hPe8AFHfQhd/sh9EK2o4lZ2oElgZ
RXgnOibLAYmE9NBIQiOzLUAPgN44FRLLxQ+kKvjOA2iJUOgaQB3P2fQBXULdgPN6
rnrsgupkEdDV7jmUgQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:21 2025 by rpki-client