Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          h15NrWUj9TcOHl+NUzpXVIMiYz+DhOIyA6iF9JqyNxI=
Subject key identifier:   29:79:12:23:90:A1:F0:56:8E:EE:62:3B:66:BD:90:7A:3E:96:20:21
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       0199FFC7E71D51C0E2578BAE311B531A858C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          16F5
Signing time:             Mon 20 Oct 2025 04:01:54 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:54 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:54 +0000
Files and hashes:         1: C_ziNaXKn4VDpbrAEu9weVF52JA.roa (hash: uW9Tu1YIQ5nRvRVJvhMOdJvsptWQiAhpmFSnfRGl4eY=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: SA8ai85E25pZYt/6gZmS7pgy3GRLoE/zFsHaY9sMqC4=)
                          3: X0VOPwSHvzkDEaI9vdnqoeKICu4.roa (hash: QYZRUmSjoVGFNA4mKmXvECcmo9Gvd4pgJxevI7UENLo=)
                          4: h8Rooww-YtXgZdj5PaYT_SFfSvw.roa (hash: u6xVJHYA1uzH6xbwrO/RW/GLLxj+VO2zqxgk0PQuKro=)
                          5: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:e7:1d:51:c0:e2:57:8b:ae:31:1b:53:1a:85:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Oct 20 04:01:54 2025 GMT
            Not After : Oct 21 04:01:54 2025 GMT
        Subject: CN=2979122390a1f0568eee623b66bd907a3e962021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:df:e7:90:f9:a0:a2:0f:23:bb:14:ab:51:
                    f8:db:ed:6b:86:51:9d:86:1d:de:35:4c:10:9a:c3:
                    e7:e0:8b:46:88:b4:92:c6:ca:0f:7a:2e:d1:25:7e:
                    30:6e:50:86:70:a1:d7:de:fe:31:50:66:a3:78:c2:
                    27:29:c5:52:b2:c0:4a:b1:02:9e:ab:21:d8:d6:ac:
                    6e:74:b7:60:de:65:34:5b:93:d3:a3:ce:f1:89:e1:
                    77:21:5a:03:0d:1a:aa:56:3f:f8:df:7a:48:54:86:
                    08:ea:80:c9:23:1e:b7:eb:2b:85:d4:33:db:d6:a6:
                    8b:37:4b:fd:52:81:1c:8f:d6:7f:b9:f3:ff:ad:5d:
                    4f:83:c0:5a:be:9e:be:48:77:33:56:99:1d:e7:97:
                    ad:dd:c1:87:37:14:c0:f4:32:53:0b:db:11:54:9c:
                    b1:62:67:01:3e:63:c1:3d:39:1e:bf:b7:97:69:98:
                    f3:b9:fd:0b:5a:51:8a:28:a3:61:41:b6:f2:bc:e2:
                    2a:a4:f7:67:f7:1c:e3:1d:e5:19:4c:fc:a7:31:61:
                    70:85:57:49:da:7a:8e:99:43:45:58:56:db:e2:ea:
                    e7:b7:ef:f6:dd:7a:47:93:92:a3:f2:2a:0e:ba:d3:
                    d7:e6:57:13:a4:03:9d:d6:57:37:23:6f:c1:10:c4:
                    f9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:79:12:23:90:A1:F0:56:8E:EE:62:3B:66:BD:90:7A:3E:96:20:21
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8c:d3:ee:d8:c6:7b:9e:b6:5f:8b:c9:17:84:e9:99:68:79:
         fa:9d:e2:24:d1:af:74:88:c4:ad:2f:77:78:32:d6:55:77:ae:
         5b:41:43:fa:b5:e3:d4:7c:bd:54:8d:d5:04:1b:ef:6b:96:d4:
         31:a9:42:13:88:54:01:28:2a:de:d2:f8:63:26:95:39:91:df:
         e2:61:bc:3a:43:72:87:40:99:35:cc:b8:e9:8d:5f:ef:cf:72:
         08:cd:33:c1:cd:56:6e:bd:66:c2:19:45:db:50:5d:0a:75:e7:
         77:9a:96:48:a2:32:2d:1c:2d:87:1a:ca:2f:9c:e1:d5:a2:bd:
         d7:fc:62:6f:68:b3:06:1c:21:72:33:04:8b:d0:b5:fe:4c:2a:
         d9:ed:fa:6a:8a:d1:68:e5:ab:ad:16:d9:94:3f:15:ee:36:5a:
         3d:16:85:70:41:66:42:47:61:aa:89:28:b3:e7:4e:d4:79:44:
         48:5d:16:6a:b0:90:ef:50:1a:47:00:90:77:cd:b5:de:67:00:
         c2:f2:9b:4b:e7:5d:d7:db:51:10:66:b6:d0:5d:29:b9:ca:2a:
         bf:6c:2f:eb:08:88:f5:2e:2d:6a:e5:85:e2:f5:ef:8d:38:ea:
         ef:ee:bd:52:e6:e6:6c:f5:d3:e7:dd:b3:6a:3a:e3:82:21:98:
         1e:03:0d:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x+cdUcDiV4uuMRtTGoWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2
YWEzMmUwHhcNMjUxMDIwMDQwMTU0WhcNMjUxMDIxMDQwMTU0WjAzMTEwLwYDVQQD
EygyOTc5MTIyMzkwYTFmMDU2OGVlZTYyM2I2NmJkOTA3YTNlOTYyMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjXf55D5oKIPI7sUq1H42+1rhlGd
hh3eNUwQmsPn4ItGiLSSxsoPei7RJX4wblCGcKHX3v4xUGajeMInKcVSssBKsQKe
qyHY1qxudLdg3mU0W5PTo87xieF3IVoDDRqqVj/433pIVIYI6oDJIx636yuF1DPb
1qaLN0v9UoEcj9Z/ufP/rV1Pg8Bavp6+SHczVpkd55et3cGHNxTA9DJTC9sRVJyx
YmcBPmPBPTkev7eXaZjzuf0LWlGKKKNhQbbyvOIqpPdn9xzjHeUZTPynMWFwhVdJ
2nqOmUNFWFbb4urnt+/23XpHk5Kj8ioOutPX5lcTpAOd1lc3I2/BEMT5KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCl5EiOQofBWju5iO2a9kHo+liAhMB8GA1UdIwQY
MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt
YjBiYWQxOGYwMmQwLzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw
LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYzT7tjG
e562X4vJF4TpmWh5+p3iJNGvdIjErS93eDLWVXeuW0FD+rXj1Hy9VI3VBBvva5bU
MalCE4hUASgq3tL4YyaVOZHf4mG8OkNyh0CZNcy46Y1f789yCM0zwc1Wbr1mwhlF
21BdCnXnd5qWSKIyLRwthxrKL5zh1aK91/xib2izBhwhcjMEi9C1/kwq2e36aorR
aOWrrRbZlD8V7jZaPRaFcEFmQkdhqokos+dO1HlESF0WarCQ71AaRwCQd8213mcA
wvKbS+dd19tREGa20F0pucoqv2wv6wiI9S4tauWF4vXvjTjq7+69UubmbPXT592z
ajrjgiGYHgMN+Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:20:17 2025 by rpki-client