Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
File:                     tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json)
Hash identifier:          7VINzKz9iS15l+Z+NqTX9glPu6QnYov7/gpfeIsGsak=
Subject key identifier:   B6:92:14:B9:69:99:DC:62:5D:A7:9D:6A:69:63:5E:8B:08:96:E6:63
Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC
Certificate issuer:       /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
Certificate serial:       0199FEB5033BF79F7A72D732BC8B9848EC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
Manifest number:          16F6
Signing time:             Sun 19 Oct 2025 23:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:39 +0000
Files and hashes:         1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=)
                          2: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=)
                          3: EuktsmR6HvXm2m5YsC5Wyo5ecw4.roa (hash: JZi+DlaPt3ZWFPrgsMEzdF/6HYunSwsq7ugQUzVGcAU=)
                          4: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=)
                          5: Il7zmHjI6jj-0rEtM_yBLvYuye4.roa (hash: de+WYdahLIsSTArl8Hy+qPN/PBIbGPDv82xXs+xKdZY=)
                          6: WBOYQCAoKRyLsa6JAYAHwgmZIqI.roa (hash: lyZfLnKwP7kxcM63676+jKHGePevi3n5oMgldGNu5qA=)
                          7: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=)
                          8: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=)
                          9: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=)
                          10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=)
                          11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=)
                          12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: iNrJvGNqDfqlqZp8RmKN5XXKOtrs/ySAF4OzCle+wJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:03:3b:f7:9f:7a:72:d7:32:bc:8b:98:48:ec:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac
        Validity
            Not Before: Oct 19 23:01:39 2025 GMT
            Not After : Oct 20 23:01:39 2025 GMT
        Subject: CN=b69214b96999dc625da79d6a69635e8b0896e663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:b3:df:01:9f:16:03:e6:8a:d0:a4:1a:cc:
                    3f:1b:57:a3:ac:3e:f9:a4:ea:d3:7b:50:47:5c:42:
                    1f:53:c5:5a:23:b3:a2:e1:06:1c:fd:ae:c9:1e:b7:
                    0d:ca:aa:5c:c3:cc:4c:6e:f3:38:66:e6:c2:55:17:
                    8c:fc:3b:f9:c2:7e:24:a3:9e:11:77:a7:9f:71:69:
                    58:91:1e:30:3d:04:df:78:b4:5f:19:04:86:51:85:
                    58:47:2b:37:86:0b:5c:d4:43:31:78:98:50:4c:87:
                    95:30:cc:69:34:cf:b6:d5:a5:18:4d:96:bc:bc:9c:
                    18:d9:6b:72:63:7c:40:cb:b6:ab:c6:b6:d3:d0:af:
                    b4:07:59:d0:a7:ca:16:0e:51:0f:ce:5e:04:1c:9c:
                    cf:4c:ad:d8:75:0a:ab:af:d5:3b:40:6c:27:37:07:
                    79:ac:68:6f:84:9a:43:d9:f9:f6:92:59:0a:66:38:
                    80:01:1e:4e:31:af:7a:84:5b:05:df:eb:db:02:ad:
                    30:f7:a6:b2:cc:ad:69:2e:aa:58:dc:d3:bf:4e:a6:
                    ee:2e:3d:14:45:d5:53:80:ae:58:84:c8:ed:77:3f:
                    7b:7a:d2:e8:3d:d7:22:cc:44:53:cf:a9:0d:ea:19:
                    f8:25:b6:08:27:4d:d3:fa:ec:76:1c:a6:b8:ed:c8:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:92:14:B9:69:99:DC:62:5D:A7:9D:6A:69:63:5E:8B:08:96:E6:63
            X509v3 Authority Key Identifier:
                keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ca:5e:3d:28:57:6f:59:21:66:6d:39:57:59:7b:43:18:db:
         05:b7:f3:36:1e:68:95:4d:05:97:0c:17:45:2b:b1:34:b2:c3:
         c9:d7:7e:25:32:98:f0:dc:b8:59:8a:19:43:3a:b5:16:3f:8e:
         0a:0d:b2:16:12:39:aa:5d:a4:9d:33:ef:9b:78:5e:14:46:bf:
         d9:79:b7:6a:89:18:89:54:f7:3d:7f:9c:7a:8b:ca:07:cc:d0:
         7e:f5:9a:07:f8:b0:f2:3b:3a:fb:fa:78:a6:0a:b2:c4:45:11:
         c5:99:09:97:da:ad:ad:dd:9a:26:ec:10:ea:04:44:95:0f:53:
         78:00:b4:51:65:28:95:88:75:8f:66:d8:08:66:b0:d1:76:f5:
         7e:45:d7:9e:2b:bc:eb:30:31:dd:bc:64:d9:cb:84:14:14:d4:
         b1:6b:4c:a6:93:86:14:c2:17:7c:71:42:98:bb:d7:a3:d4:9e:
         7a:07:c8:22:62:1c:b4:fb:0b:ce:de:2d:be:f6:48:fa:e3:84:
         cf:5c:9c:d5:9e:fb:34:dd:58:e4:2e:00:32:2f:4c:8d:be:40:
         3b:25:b3:26:ee:4e:7d:97:47:f0:a6:2b:1e:29:15:79:6f:a2:
         96:29:45:7c:fa:17:0c:0c:a3:74:c8:05:76:9a:eb:96:cc:fd:
         9c:04:97:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tQM79596ctcyvIuYSOwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj
MGRmYWMwHhcNMjUxMDE5MjMwMTM5WhcNMjUxMDIwMjMwMTM5WjAzMTEwLwYDVQQD
EyhiNjkyMTRiOTY5OTlkYzYyNWRhNzlkNmE2OTYzNWU4YjA4OTZlNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9Sz3wGfFgPmitCkGsw/G1ejrD75
pOrTe1BHXEIfU8VaI7Oi4QYc/a7JHrcNyqpcw8xMbvM4ZubCVReM/Dv5wn4ko54R
d6efcWlYkR4wPQTfeLRfGQSGUYVYRys3hgtc1EMxeJhQTIeVMMxpNM+21aUYTZa8
vJwY2WtyY3xAy7arxrbT0K+0B1nQp8oWDlEPzl4EHJzPTK3YdQqrr9U7QGwnNwd5
rGhvhJpD2fn2klkKZjiAAR5OMa96hFsF3+vbAq0w96ayzK1pLqpY3NO/TqbuLj0U
RdVTgK5YhMjtdz97etLoPdcizERTz6kN6hn4JbYIJ03T+ux2HKa47ciYqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaSFLlpmdxiXaedamljXosIluZjMB8GA1UdIwQY
MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt
N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh
LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8pePShX
b1khZm05V1l7QxjbBbfzNh5olU0FlwwXRSuxNLLDydd+JTKY8Ny4WYoZQzq1Fj+O
Cg2yFhI5ql2knTPvm3heFEa/2Xm3aokYiVT3PX+ceovKB8zQfvWaB/iw8js6+/p4
pgqyxEURxZkJl9qtrd2aJuwQ6gRElQ9TeAC0UWUolYh1j2bYCGaw0Xb1fkXXniu8
6zAx3bxk2cuEFBTUsWtMppOGFMIXfHFCmLvXo9SeegfIImIctPsLzt4tvvZI+uOE
z1yc1Z77NN1Y5C4AMi9Mjb5AOyWzJu5OfZdH8KYrHikVeW+ililFfPoXDAyjdMgF
dprrlsz9nASXgg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:19 2025 by rpki-client