Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
File:                     uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft (raw, json)
Hash identifier:          2z7z9X4OhkZZwRmB+wbsjSKQBx2EW6stZ3q3nbQ/pIY=
Subject key identifier:   B5:8B:0E:76:F6:43:61:DF:0E:83:6B:3D:01:77:78:A4:86:53:AA:6C
Authority key identifier: B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C
Certificate issuer:       /CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
Certificate serial:       0199FC58BB3E1350188594EDE257A8753C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 12:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:37 +0000
Files and hashes:         1: B7KapZ9zf220SPymCgFVRPK86qY.roa (hash: Mp2EdhJqFvvoCvWz4DJdAt20dP8wVfqkrw01SLTIFAo=)
                          2: uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl (hash: 8WYFH44Bsd5OP8c76qHlEOkymM1cxduHHxJ9F6gNme4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:bb:3e:13:50:18:85:94:ed:e2:57:a8:75:3c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b80633fe79a6296109fdbf6475d4c2a65e2d4f1c
        Validity
            Not Before: Oct 19 12:01:37 2025 GMT
            Not After : Oct 20 12:01:37 2025 GMT
        Subject: CN=b58b0e76f64361df0e836b3d017778a48653aa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:72:b5:1b:72:95:46:2c:4e:e8:53:38:ec:
                    fd:fe:39:f1:eb:8f:f8:f1:3a:2b:27:be:1d:0e:ea:
                    3b:89:3e:e7:dc:ce:14:f3:b2:77:b9:7a:cc:3c:12:
                    7d:3d:e6:24:a9:45:2b:8a:6c:cb:f0:3b:64:61:38:
                    73:aa:6c:19:97:6e:4a:01:87:c2:1a:af:74:e7:c2:
                    61:c4:92:e3:6b:71:19:a1:66:c1:73:82:ca:55:9e:
                    2a:63:d1:0c:c0:45:55:d4:84:1d:9f:25:c4:67:ef:
                    71:25:d2:84:b7:07:29:70:0c:d0:4a:4d:36:d3:9b:
                    37:97:95:4d:f1:f3:97:9a:15:82:df:c5:a4:2c:cf:
                    97:53:b0:19:90:88:21:f1:ac:16:e8:62:2a:53:1a:
                    45:41:12:72:23:c3:ae:27:58:c8:f2:7a:23:5b:66:
                    85:21:75:9f:2e:ef:01:09:a4:d4:5d:c1:62:13:d2:
                    28:9d:81:f2:f5:71:a3:18:6f:97:92:5f:46:0e:d0:
                    fd:2c:ee:de:f8:42:5b:b3:a8:f4:c8:e0:e2:13:ca:
                    a5:88:27:13:52:75:71:75:de:ed:c6:1b:7e:da:ab:
                    5f:ca:c7:ef:b2:ef:bd:80:40:b7:a3:ad:27:fa:ed:
                    17:21:0c:9c:da:1e:af:af:38:93:77:50:25:e5:64:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8B:0E:76:F6:43:61:DF:0E:83:6B:3D:01:77:78:A4:86:53:AA:6C
            X509v3 Authority Key Identifier:
                keyid:B8:06:33:FE:79:A6:29:61:09:FD:BF:64:75:D4:C2:A6:5E:2D:4F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAYz_nmmKWEJ_b9kddTCpl4tTxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d16f59-7754-46a7-aa59-2a06ed104553/1/uAYz_nmmKWEJ_b9kddTCpl4tTxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:4f:13:6f:d4:be:d6:06:d8:9b:03:56:8b:54:bd:c4:72:
         63:92:7d:a4:bc:52:e5:00:18:43:73:84:2e:c5:71:c2:51:65:
         be:54:8c:3d:04:cc:b9:45:2e:d7:82:36:9a:4e:34:82:17:80:
         30:9b:8a:b4:a8:70:26:d0:b1:4d:ca:e5:e2:c5:96:72:9d:06:
         9b:3a:90:01:52:33:1f:e1:b0:cb:ef:43:71:e7:df:7c:ee:fe:
         6f:4f:be:e2:91:ec:91:15:69:46:09:fd:ae:f1:9e:9e:85:5d:
         f6:77:f5:f4:fe:2d:53:46:e8:9e:93:9a:d6:bc:2d:3a:e3:4a:
         48:e6:89:2a:98:51:ed:47:02:48:be:f5:eb:43:a0:6b:b4:aa:
         51:68:6b:94:7c:e0:08:3e:be:36:19:4d:72:95:f5:67:12:4b:
         2b:79:20:da:ef:3a:c2:3f:4b:eb:26:84:2a:ee:92:ce:f7:d0:
         80:8d:0c:cf:f7:64:3f:ca:4b:25:1b:23:8a:23:e3:bc:4f:0f:
         1d:3d:21:98:37:21:82:ff:c6:1a:8c:7d:dc:07:c3:66:14:97:
         57:75:df:06:96:cb:b6:85:e5:d7:26:2c:75:e3:03:c9:56:3a:
         e7:d1:91:c8:97:48:b2:f4:5d:a0:ad:8f:ae:e7:08:85:e0:1e:
         7b:28:b8:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLs+E1AYhZTt4leodTwKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDYzM2ZlNzlhNjI5NjEwOWZkYmY2NDc1ZDRjMmE2NWUy
ZDRmMWMwHhcNMjUxMDE5MTIwMTM3WhcNMjUxMDIwMTIwMTM3WjAzMTEwLwYDVQQD
EyhiNThiMGU3NmY2NDM2MWRmMGU4MzZiM2QwMTc3NzhhNDg2NTNhYTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNZytRtylUYsTuhTOOz9/jnx64/4
8TorJ74dDuo7iT7n3M4U87J3uXrMPBJ9PeYkqUUrimzL8DtkYThzqmwZl25KAYfC
Gq9058JhxJLja3EZoWbBc4LKVZ4qY9EMwEVV1IQdnyXEZ+9xJdKEtwcpcAzQSk02
05s3l5VN8fOXmhWC38WkLM+XU7AZkIgh8awW6GIqUxpFQRJyI8OuJ1jI8nojW2aF
IXWfLu8BCaTUXcFiE9IonYHy9XGjGG+Xkl9GDtD9LO7e+EJbs6j0yODiE8qliCcT
UnVxdd7txht+2qtfysfvsu+9gEC3o60n+u0XIQyc2h6vrziTd1Al5WTjmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWLDnb2Q2HfDoNrPQF3eKSGU6psMB8GA1UdIwQY
MBaAFLgGM/55pilhCf2/ZHXUwqZeLU8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMTZmNTktNzc1NC00NmE3LWFhNTkt
MmEwNmVkMTA0NTUzLzEvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kMTZmNTktNzc1NC00NmE3LWFhNTktMmEwNmVkMTA0NTUz
LzEvdUFZel9ubW1LV0VKX2I5a2RkVENwbDR0VHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsVPE2/U
vtYG2JsDVotUvcRyY5J9pLxS5QAYQ3OELsVxwlFlvlSMPQTMuUUu14I2mk40gheA
MJuKtKhwJtCxTcrl4sWWcp0GmzqQAVIzH+Gwy+9DcefffO7+b0++4pHskRVpRgn9
rvGenoVd9nf19P4tU0bonpOa1rwtOuNKSOaJKphR7UcCSL7160Oga7SqUWhrlHzg
CD6+NhlNcpX1ZxJLK3kg2u86wj9L6yaEKu6SzvfQgI0Mz/dkP8pLJRsjiiPjvE8P
HT0hmDchgv/GGox93AfDZhSXV3XfBpbLtoXl1yYsdeMDyVY659GRyJdIsvRdoK2P
rucIheAeeyi4nA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:42 2025 by rpki-client