Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File:                     w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier:          QQhXREaMERlYskSDn4OuLKP9Ak88wd0yrbEqNWtZyP8=
Subject key identifier:   55:F4:5D:D5:D1:E8:AF:86:B7:AB:71:7E:71:C5:E2:B5:21:D7:FD:30
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer:       /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial:       0199FCC677ABA5C9A52F015D4C2BFF5FB5AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 14:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:29 +0000
Files and hashes:         1: VvJo0lhVWVTAqGHGg1amh53Ljec.roa (hash: GwM4oNfSgsrgVocC2bDhcn2ZlYGWFP0EuCABmBUvrpo=)
                          2: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: dB4l+QzbJ1KF5l1DkpL2ARiAw/A7JPv4ImIhIqmJQzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:77:ab:a5:c9:a5:2f:01:5d:4c:2b:ff:5f:b5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
        Validity
            Not Before: Oct 19 14:01:29 2025 GMT
            Not After : Oct 20 14:01:29 2025 GMT
        Subject: CN=55f45dd5d1e8af86b7ab717e71c5e2b521d7fd30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:d1:32:40:41:9c:3d:2a:c9:62:95:63:10:
                    ff:45:c9:0f:64:41:1a:30:f1:a3:1d:6a:6a:14:c9:
                    fc:35:5d:01:1b:07:6c:b7:98:24:ee:d7:9d:72:4e:
                    1d:8c:6d:49:b8:97:2e:59:b7:34:da:ca:23:d1:42:
                    2a:cc:0b:f8:e5:95:e9:a3:71:1c:4d:06:1e:f7:c1:
                    36:ec:c5:d2:58:3f:38:8a:63:c0:9d:1e:5b:0d:e8:
                    5d:3b:5f:95:70:8a:42:e2:8f:7a:a8:52:a8:ee:9b:
                    4b:57:b0:29:19:a3:31:b7:cf:7f:04:ff:36:52:61:
                    ed:b2:61:4e:cf:1d:d3:a5:f0:84:6e:c6:e9:e5:0c:
                    0b:00:8d:c6:35:b0:a9:ef:09:e7:a6:02:d4:17:a8:
                    a9:10:03:ee:8d:81:8a:c7:76:34:e9:d6:4e:d8:1e:
                    43:3d:b1:ac:74:cd:ab:cd:2f:1f:5b:be:64:9f:05:
                    e2:3b:26:9b:81:ea:63:b6:12:b9:91:ba:25:6d:73:
                    bb:d8:57:08:4b:5e:b3:64:71:ca:df:70:1a:27:67:
                    77:0e:34:b8:67:01:03:19:11:35:99:f1:2e:a1:af:
                    d0:ee:86:51:c3:e5:5e:3a:38:4d:9b:3b:0e:bb:f0:
                    ef:9b:f6:0f:ce:90:42:89:7c:53:58:93:45:04:01:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F4:5D:D5:D1:E8:AF:86:B7:AB:71:7E:71:C5:E2:B5:21:D7:FD:30
            X509v3 Authority Key Identifier:
                keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:66:02:99:f3:89:b2:75:ea:70:1d:ed:4b:b1:29:b4:a6:
         1d:c7:9c:fa:bb:29:6a:8a:20:12:13:25:33:84:74:b4:c6:d3:
         97:07:47:e5:ad:13:ec:27:d1:45:1a:d3:4e:4d:50:e9:f8:04:
         95:81:5f:06:fb:1e:9a:6c:b2:34:22:7c:e8:7a:46:6b:ab:f6:
         71:42:c2:d4:b6:06:3e:db:d7:8b:4c:e8:ff:ff:7f:94:cd:da:
         22:cc:3b:24:e4:6c:65:17:e0:30:82:14:81:c6:d0:cd:06:b6:
         dc:d4:f6:89:e0:d8:5e:5e:ce:c2:e8:9b:71:bc:66:3b:94:a7:
         b5:06:28:96:79:45:46:ca:0d:6e:ef:99:66:d8:4d:de:0f:0a:
         86:c6:94:6d:9f:29:e1:b5:38:e5:bf:c6:6c:63:2f:41:5e:4a:
         f0:67:5e:8f:bb:56:75:55:37:06:5f:dd:11:49:20:fe:39:49:
         79:22:21:a3:45:e2:6f:f2:ce:7b:b2:6e:ef:a0:38:d6:c6:22:
         38:dd:28:c9:02:cc:ef:03:82:b6:01:f7:5c:df:4e:93:01:4f:
         2a:a4:44:44:cd:a6:6c:b2:4a:1a:c4:a4:29:be:a7:47:a4:9c:
         fc:c9:40:37:2c:53:0a:8f:a0:0f:18:a9:98:0a:56:4b:d9:97:
         7f:2c:e7:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnerpcmlLwFdTCv/X7WuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNjgwNmVhMDYyZjYwNTM4NDEyODhiNDQ2ZTJlMGRlZDVi
MmYyZTcwHhcNMjUxMDE5MTQwMTI5WhcNMjUxMDIwMTQwMTI5WjAzMTEwLwYDVQQD
Eyg1NWY0NWRkNWQxZThhZjg2YjdhYjcxN2U3MWM1ZTJiNTIxZDdmZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaTRMkBBnD0qyWKVYxD/RckPZEEa
MPGjHWpqFMn8NV0BGwdst5gk7tedck4djG1JuJcuWbc02soj0UIqzAv45ZXpo3Ec
TQYe98E27MXSWD84imPAnR5bDehdO1+VcIpC4o96qFKo7ptLV7ApGaMxt89/BP82
UmHtsmFOzx3TpfCEbsbp5QwLAI3GNbCp7wnnpgLUF6ipEAPujYGKx3Y06dZO2B5D
PbGsdM2rzS8fW75knwXiOyabgepjthK5kbolbXO72FcIS16zZHHK33AaJ2d3DjS4
ZwEDGRE1mfEuoa/Q7oZRw+VeOjhNmzsOu/Dvm/YPzpBCiXxTWJNFBAGeoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX0XdXR6K+Gt6txfnHF4rUh1/0wMB8GA1UdIwQY
MBaAFMNoBuoGL2BThBKItEbi4N7VsvLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zNjNiYTctODllMy00OTVmLWFhMmUt
YzFlYjczZmZkNDE2LzEvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zNjNiYTctODllMy00OTVmLWFhMmUtYzFlYjczZmZkNDE2
LzEvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWxmApnz
ibJ16nAd7UuxKbSmHcec+rspaoogEhMlM4R0tMbTlwdH5a0T7CfRRRrTTk1Q6fgE
lYFfBvsemmyyNCJ86HpGa6v2cULC1LYGPtvXi0zo//9/lM3aIsw7JORsZRfgMIIU
gcbQzQa23NT2ieDYXl7OwuibcbxmO5SntQYolnlFRsoNbu+ZZthN3g8KhsaUbZ8p
4bU45b/GbGMvQV5K8Gdej7tWdVU3Bl/dEUkg/jlJeSIho0Xib/LOe7Ju76A41sYi
ON0oyQLM7wOCtgH3XN9OkwFPKqRERM2mbLJKGsSkKb6nR6Sc/MlANyxTCo+gDxip
mApWS9mXfyzn7g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:06 2025 by rpki-client