Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File:                     y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier:          QHdm28KUYnqp2CadW1nkTbbUEFpiwDCDEUQPrnfubJs=
Subject key identifier:   F6:3D:EE:99:2A:9C:0D:C5:02:B0:B0:B4:36:57:2A:52:D3:C4:0F:DB
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer:       /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial:       0199FA69F3108E67C403DE6EB88771F7ADED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number:          15EE
Signing time:             Sun 19 Oct 2025 03:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:11 +0000
Files and hashes:         1: JlQN0N4As8kTE_2777wqlcFNrC8.roa (hash: gQA+8fA2lRTUYRE2yD6RworLn/rUFJdeb4rtkckOnyE=)
                          2: WD7cwf6HLxZKq0IMG8YbMTooJt0.roa (hash: JexN5Bcs7RxXPWQCAkKPWPwbZPwuEud7FpPGiuV9xSU=)
                          3: n0VCvrGvbIgBmTHfdTvtFpgH4bs.roa (hash: ukpF9blWLJ1fHC+qQnWNibfuLjVHA9hpURE/X4EaFzY=)
                          4: qObypTg-nOBL35cm5Sg2yM7Yo3s.roa (hash: rh8dBS1PUlDYnkodpVPvUZaeXyMvofP2iGR3Qp60YxQ=)
                          5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: D2M6+wsbb9iCCnK3i7PJJFnC3yd4Dof69wgP5r/qnEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:69:f3:10:8e:67:c4:03:de:6e:b8:87:71:f7:ad:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
        Validity
            Not Before: Oct 19 03:01:11 2025 GMT
            Not After : Oct 20 03:01:11 2025 GMT
        Subject: CN=f63dee992a9c0dc502b0b0b436572a52d3c40fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:52:6f:e3:03:25:0b:62:05:53:c1:4a:4c:
                    c5:cc:c3:e1:f0:40:6c:d5:b6:3a:64:30:aa:35:0d:
                    09:b4:3e:a4:1b:09:c5:86:21:f7:f4:25:1e:95:c9:
                    f7:a3:75:6f:c2:7c:db:0b:5e:17:8b:58:be:50:24:
                    8a:83:0b:d6:40:e4:b2:7f:45:4e:4f:e7:bd:3e:ff:
                    2a:a0:70:47:a2:c9:cd:19:65:89:21:5e:5e:6f:d5:
                    af:73:0c:18:17:1f:0f:da:7c:7a:35:25:0c:10:b7:
                    bf:bc:f6:a4:51:0a:08:82:26:ce:b9:ed:74:8f:d2:
                    3a:bf:de:25:e4:6c:9e:fc:b8:ba:4e:f4:2b:0b:4d:
                    ed:0b:b3:e8:cb:19:43:1b:a8:7e:ff:aa:ad:ce:73:
                    e3:39:bf:8a:c2:f5:9e:6a:9e:19:f0:e4:a3:12:00:
                    96:39:5b:44:36:a0:95:6e:d0:f6:44:9d:67:51:6c:
                    28:da:27:e1:72:94:47:65:9d:e6:21:db:69:d3:75:
                    3b:17:a9:60:09:a9:29:f8:fc:3e:60:b7:d9:76:18:
                    dc:e4:d5:54:14:ae:bd:a8:d8:39:cd:ef:bf:5e:a2:
                    1d:e6:9d:18:31:7b:19:22:9a:ba:01:79:b8:71:3e:
                    72:92:1b:dd:19:40:a0:b2:84:7e:6a:32:61:04:4a:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3D:EE:99:2A:9C:0D:C5:02:B0:B0:B4:36:57:2A:52:D3:C4:0F:DB
            X509v3 Authority Key Identifier:
                keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:50:00:6e:36:11:1d:41:87:0e:4b:c9:2c:b4:93:05:79:95:
         e2:ac:8f:eb:83:4d:2c:ea:3a:61:fa:0c:68:3e:2b:f6:11:87:
         a4:a7:ce:6a:5e:a5:65:f1:e3:2f:39:b9:66:8c:fc:e6:f9:56:
         7a:b7:e2:06:cb:76:85:d2:b5:38:7a:25:94:fc:fe:c1:06:33:
         d8:e9:4f:ed:19:80:1a:8c:fd:df:b8:45:c0:d8:a4:86:cd:d4:
         7c:a8:ba:37:77:ff:4c:69:f6:1a:6f:dc:e1:e1:cb:d1:eb:06:
         82:3d:71:13:60:7d:fb:34:ec:cf:70:1c:04:94:41:19:da:48:
         71:b3:3d:7e:3c:b3:92:ba:5d:c4:88:2d:3c:8d:e0:f4:95:ff:
         49:10:c2:ed:36:fb:06:0a:75:54:1b:dc:58:de:aa:f1:67:76:
         4a:c3:48:b1:74:ac:36:a7:01:d7:ce:04:ed:b2:a1:a0:8a:00:
         e5:b0:86:ab:8a:01:b3:f2:7b:bd:68:87:b9:74:8e:77:67:7b:
         48:4a:b8:ff:34:41:b3:3c:fb:52:2a:c6:fb:9b:1e:9b:74:e9:
         a5:45:40:5c:5f:a9:21:59:31:ce:40:a7:af:2b:f7:77:49:36:
         ed:cf:df:48:e5:f7:4c:71:08:5a:47:40:22:47:c8:a0:fc:c5:
         69:e7:67:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6afMQjmfEA95uuIdx963tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjc0Y2Q4NDY0OTMxMzhmNTIyYzU3YzAwNjViNWM2MDUx
MmRkMDkwHhcNMjUxMDE5MDMwMTExWhcNMjUxMDIwMDMwMTExWjAzMTEwLwYDVQQD
EyhmNjNkZWU5OTJhOWMwZGM1MDJiMGIwYjQzNjU3MmE1MmQzYzQwZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPJSb+MDJQtiBVPBSkzFzMPh8EBs
1bY6ZDCqNQ0JtD6kGwnFhiH39CUelcn3o3VvwnzbC14Xi1i+UCSKgwvWQOSyf0VO
T+e9Pv8qoHBHosnNGWWJIV5eb9WvcwwYFx8P2nx6NSUMELe/vPakUQoIgibOue10
j9I6v94l5Gye/Li6TvQrC03tC7PoyxlDG6h+/6qtznPjOb+KwvWeap4Z8OSjEgCW
OVtENqCVbtD2RJ1nUWwo2ifhcpRHZZ3mIdtp03U7F6lgCakp+Pw+YLfZdhjc5NVU
FK69qNg5ze+/XqId5p0YMXsZIpq6AXm4cT5ykhvdGUCgsoR+ajJhBEpEywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPY97pkqnA3FArCwtDZXKlLTxA/bMB8GA1UdIwQY
MBaAFMv3TNhGSTE49SLFfABltcYFEt0JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2Yt
OTgyZDFmMjFhMzJiLzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zNDg3ODktMzIwOC00ODQ3LTljM2YtOTgyZDFmMjFhMzJi
LzEveV9kTTJFWkpNVGoxSXNWOEFHVzF4Z1VTM1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFAAbjYR
HUGHDkvJLLSTBXmV4qyP64NNLOo6YfoMaD4r9hGHpKfOal6lZfHjLzm5Zoz85vlW
erfiBst2hdK1OHollPz+wQYz2OlP7RmAGoz937hFwNikhs3UfKi6N3f/TGn2Gm/c
4eHL0esGgj1xE2B9+zTsz3AcBJRBGdpIcbM9fjyzkrpdxIgtPI3g9JX/SRDC7Tb7
Bgp1VBvcWN6q8Wd2SsNIsXSsNqcB184E7bKhoIoA5bCGq4oBs/J7vWiHuXSOd2d7
SEq4/zRBszz7UirG+5sem3TppUVAXF+pIVkxzkCnryv3d0k27c/fSOX3THEIWkdA
IkfIoPzFaednEw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:16 2025 by rpki-client