Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File:                     aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier:          0jh0AeWieijwBtzd7CLMu0JwrihdGUtzSQZBmi7+CtA=
Subject key identifier:   57:63:33:23:15:82:DC:4A:6E:AF:37:A5:35:B9:E6:F3:2F:F6:53:4F
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer:       /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial:       0199FFC741C10FF3697109C59026FD57A8F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number:          16E6
Signing time:             Mon 20 Oct 2025 04:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:12 +0000
Files and hashes:         1: 1LWuminfGd450btHCMbnnbPQ_ZE.roa (hash: TISDdBpwKFkkTeSDLc72qwKWM7K/Xn5/55e5YUo0nnQ=)
                          2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: Y5q6PFrOY4hH2zErcUlOGWPuISyzbV/oLZswDieV6q8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:41:c1:0f:f3:69:71:09:c5:90:26:fd:57:a8:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
        Validity
            Not Before: Oct 20 04:01:12 2025 GMT
            Not After : Oct 21 04:01:12 2025 GMT
        Subject: CN=576333231582dc4a6eaf37a535b9e6f32ff6534f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:61:07:25:0e:36:be:51:de:79:b0:a9:c0:
                    2b:45:02:8c:7d:05:b0:88:a9:0d:19:64:95:51:7b:
                    3f:1e:a3:1d:7d:c0:d0:b3:ee:e2:f8:28:3c:9f:e9:
                    a3:a5:a7:26:00:bd:a3:cd:34:9a:94:b6:6f:37:5e:
                    f8:33:44:b6:0c:18:c2:4e:51:cf:fd:47:26:6c:43:
                    a5:11:d0:52:b7:c3:20:11:0a:6d:be:87:27:e4:33:
                    8c:b3:21:d7:66:90:b8:4f:70:63:3b:3e:a3:e1:0c:
                    e2:5a:e1:55:66:20:40:18:fe:05:9b:80:70:75:19:
                    fe:2d:4a:28:1f:3c:d2:63:4f:b1:d6:04:d5:a0:f7:
                    e7:5e:63:89:21:59:fb:de:84:59:12:a5:9e:23:fd:
                    af:57:1a:9a:fc:c9:cf:60:18:7e:dd:0c:b7:5b:ac:
                    bb:bd:99:d0:af:bd:f5:5a:59:d1:95:a4:f8:f4:5a:
                    73:78:e9:32:03:ae:65:a7:e0:b7:e8:e7:7f:4f:fd:
                    b0:1a:b3:73:c4:51:6f:68:88:d0:1b:53:54:08:89:
                    1e:e8:d4:81:f2:e9:ec:26:dd:b9:55:ed:24:cb:25:
                    9b:d0:3c:87:34:dd:f7:5a:05:36:70:34:65:b2:5d:
                    df:14:f2:4d:c6:e3:4c:0f:7e:f7:f7:fa:d0:7b:20:
                    ea:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:63:33:23:15:82:DC:4A:6E:AF:37:A5:35:B9:E6:F3:2F:F6:53:4F
            X509v3 Authority Key Identifier:
                keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:37:b5:c3:9d:8a:ab:61:95:02:97:b0:6f:b0:63:00:26:b1:
         fd:92:17:6e:b8:bb:0a:ac:14:aa:93:38:3e:4a:35:67:3d:87:
         42:60:2c:a1:3e:96:f4:b5:b2:a9:da:7f:d8:a4:1a:41:df:21:
         31:36:20:40:15:a7:55:a1:ca:f6:05:52:35:93:1b:99:13:1e:
         f2:6e:87:bc:ca:a7:b0:c8:53:87:45:7e:9d:f8:96:d5:81:18:
         5d:85:f4:60:46:a7:b0:69:ae:5d:af:1f:37:31:89:ca:68:96:
         77:73:5d:92:af:7d:c6:ea:ce:c1:ab:e9:e3:00:ad:8b:9f:05:
         fe:26:3f:0c:8b:a1:f6:8c:7d:78:cf:a8:66:98:35:39:a9:7f:
         43:7e:d1:0c:1e:41:90:6e:b5:f7:ac:23:ac:6a:2a:4d:71:cb:
         0a:2d:8f:bf:1e:be:c6:a5:61:35:f3:63:be:ec:25:8e:df:a0:
         d4:87:90:59:6e:6d:36:b5:73:9f:52:8f:ff:07:15:4a:2c:4e:
         4e:39:11:24:8f:ec:82:73:80:44:f9:ff:eb:94:65:64:be:02:
         be:9a:e6:9d:7c:0a:9d:db:a3:22:00:1f:e6:ab:80:77:07:49:
         ed:a5:21:d1:1d:80:fc:36:e8:3b:46:30:15:70:29:6f:33:19:
         82:e1:bc:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x0HBD/NpcQnFkCb9V6j1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGU1MTVjYzViZTRlMjdlOWQzZDEzZTVlMWMxMWRjNzUy
OTI3NGIwHhcNMjUxMDIwMDQwMTEyWhcNMjUxMDIxMDQwMTEyWjAzMTEwLwYDVQQD
Eyg1NzYzMzMyMzE1ODJkYzRhNmVhZjM3YTUzNWI5ZTZmMzJmZjY1MzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCNhByUONr5R3nmwqcArRQKMfQWw
iKkNGWSVUXs/HqMdfcDQs+7i+Cg8n+mjpacmAL2jzTSalLZvN174M0S2DBjCTlHP
/UcmbEOlEdBSt8MgEQptvocn5DOMsyHXZpC4T3BjOz6j4QziWuFVZiBAGP4Fm4Bw
dRn+LUooHzzSY0+x1gTVoPfnXmOJIVn73oRZEqWeI/2vVxqa/MnPYBh+3Qy3W6y7
vZnQr731WlnRlaT49FpzeOkyA65lp+C36Od/T/2wGrNzxFFvaIjQG1NUCIke6NSB
8unsJt25Ve0kyyWb0DyHNN33WgU2cDRlsl3fFPJNxuNMD3739/rQeyDqFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdjMyMVgtxKbq83pTW55vMv9lNPMB8GA1UdIwQY
MBaAFGlOUVzFvk4n6dPRPl4cEdx1KSdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYt
NTFjNzdjYzQ5MTQ2LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYtNTFjNzdjYzQ5MTQ2
LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTe1w52K
q2GVApewb7BjACax/ZIXbri7CqwUqpM4Pko1Zz2HQmAsoT6W9LWyqdp/2KQaQd8h
MTYgQBWnVaHK9gVSNZMbmRMe8m6HvMqnsMhTh0V+nfiW1YEYXYX0YEansGmuXa8f
NzGJymiWd3Ndkq99xurOwavp4wCti58F/iY/DIuh9ox9eM+oZpg1Oal/Q37RDB5B
kG6196wjrGoqTXHLCi2Pvx6+xqVhNfNjvuwljt+g1IeQWW5tNrVzn1KP/wcVSixO
TjkRJI/sgnOARPn/65RlZL4CvprmnXwKndujIgAf5quAdwdJ7aUh0R2A/DboO0Yw
FXApbzMZguG8tQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:43 2025 by rpki-client