Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
File:                     T-uUV-xRnoI3hncQvMgvow6uZ8A.mft (raw, json)
Hash identifier:          hNUNNamcoFwU9p17Sej+vRyt0t7wHmVLhoaOmoxFs9Q=
Subject key identifier:   DA:D8:B1:A6:28:9B:F4:6D:12:B9:5E:44:89:DA:D6:81:D1:51:61:CA
Authority key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Certificate issuer:       /CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Certificate serial:       0199FCC69AA38CD2AB406271EAD467E48922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 14:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:38 +0000
Files and hashes:         1: DMobrS7vy2moYzGxgBwp5Xf3ALI.roa (hash: FXiETzyRXvUDm+4e6t+4D5feOq7eyRK3o1W4hSbV9WQ=)
                          2: M_KXgx_JXGIc6tpaSDgr0M5BMPw.roa (hash: X3pXFD/5xK/MixjNA4bRNTqRZIbmtfbltIvMKrIW70U=)
                          3: T-uUV-xRnoI3hncQvMgvow6uZ8A.crl (hash: CslZm2DXS8qDyqbUWCyRFx3m/Sb2NW9tN6/yoyxZgKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:9a:a3:8c:d2:ab:40:62:71:ea:d4:67:e4:89:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
        Validity
            Not Before: Oct 19 14:01:38 2025 GMT
            Not After : Oct 20 14:01:38 2025 GMT
        Subject: CN=dad8b1a6289bf46d12b95e4489dad681d15161ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a4:71:4d:d2:6e:b1:82:3f:9b:53:65:4a:39:
                    fd:16:43:ae:1f:16:58:88:8f:20:e8:31:83:9b:99:
                    57:59:0b:f7:1d:7e:d9:76:99:7e:0d:25:3a:f5:d9:
                    1c:2b:70:7c:79:3f:ba:3c:8c:48:06:84:e7:5c:c6:
                    df:a6:2c:c4:cd:ea:c4:fa:55:56:a3:fb:4d:23:47:
                    c7:2b:eb:f5:ba:5f:94:3c:8d:0f:5b:7d:0d:e7:77:
                    e3:54:d5:c8:3d:b2:12:26:19:df:10:4d:f8:0c:0d:
                    8e:f4:1c:60:89:2e:47:a8:18:97:a2:b4:0c:ef:c0:
                    d7:49:70:8a:e1:12:87:dd:ce:e1:ec:3f:58:11:28:
                    98:2f:fe:39:67:c5:18:aa:d6:dd:92:af:a3:58:ff:
                    5e:14:1b:81:82:6e:39:1b:73:9f:9e:dc:0b:0a:b0:
                    ab:e1:10:50:a6:c2:f7:14:b7:3b:5e:b6:49:b3:6f:
                    93:91:93:5e:a9:52:35:0f:65:cc:65:97:73:fc:96:
                    9d:d5:f9:3b:29:32:ce:44:46:1c:64:a9:fc:65:f8:
                    a7:25:5f:a5:f6:f9:99:5c:b7:4c:e0:15:36:fd:9e:
                    c6:b7:50:f8:1f:e2:a8:4f:3e:c0:c7:b4:a5:e7:25:
                    48:db:a1:a5:6d:3b:01:6b:bb:f2:54:34:bc:22:9e:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D8:B1:A6:28:9B:F4:6D:12:B9:5E:44:89:DA:D6:81:D1:51:61:CA
            X509v3 Authority Key Identifier:
                keyid:4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e4:d9:01:0c:f1:7b:22:79:62:28:a1:6a:58:08:0c:63:37:
         af:73:93:a8:9b:f8:9b:a4:18:aa:ca:29:71:ff:a3:a5:c1:bd:
         71:c3:e5:27:17:83:7b:8a:e8:9b:a7:18:8e:d6:01:2a:38:61:
         f1:ff:b3:36:45:c2:a1:90:33:91:7e:7a:42:22:f0:0b:fd:69:
         21:f4:1f:e3:f1:1f:d3:51:58:03:26:4b:1e:9a:17:45:af:5c:
         88:54:af:1b:d6:2e:26:8e:48:ca:83:7a:16:9b:e8:18:54:55:
         f5:d4:e3:1f:2a:ba:7f:ab:22:97:b5:b6:6a:72:27:47:fb:f4:
         61:ce:ec:31:d5:02:5d:11:2e:81:37:70:2c:b4:05:95:e9:a6:
         b4:4b:36:20:fd:8e:5b:48:fa:c4:f3:93:e6:cb:f2:79:e3:0d:
         bf:d0:9e:ed:1a:5a:d0:27:76:27:7a:f8:5d:a0:47:a5:55:cc:
         73:28:0c:6c:db:16:76:1c:f0:4f:01:6c:90:1b:b9:2a:2a:c1:
         bd:e0:4b:07:d9:71:78:2f:0f:1b:0e:ba:83:dc:ad:55:d5:59:
         38:30:8f:1d:73:21:b4:8b:46:a0:86:2c:aa:33:95:84:3f:aa:
         f3:c0:02:88:3d:75:a3:f7:e1:6a:09:da:e5:a2:fa:e4:72:f2:
         a9:14:28:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpqjjNKrQGJx6tRn5IkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZWI5NDU3ZWM1MTllODIzNzg2NzcxMGJjYzgyZmEzMGVh
ZTY3YzAwHhcNMjUxMDE5MTQwMTM4WhcNMjUxMDIwMTQwMTM4WjAzMTEwLwYDVQQD
EyhkYWQ4YjFhNjI4OWJmNDZkMTJiOTVlNDQ4OWRhZDY4MWQxNTE2MWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16RxTdJusYI/m1NlSjn9FkOuHxZY
iI8g6DGDm5lXWQv3HX7Zdpl+DSU69dkcK3B8eT+6PIxIBoTnXMbfpizEzerE+lVW
o/tNI0fHK+v1ul+UPI0PW30N53fjVNXIPbISJhnfEE34DA2O9BxgiS5HqBiXorQM
78DXSXCK4RKH3c7h7D9YESiYL/45Z8UYqtbdkq+jWP9eFBuBgm45G3OfntwLCrCr
4RBQpsL3FLc7XrZJs2+TkZNeqVI1D2XMZZdz/Jad1fk7KTLOREYcZKn8ZfinJV+l
9vmZXLdM4BU2/Z7Gt1D4H+KoTz7Ax7Sl5yVI26GlbTsBa7vyVDS8Ip6CVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrYsaYom/RtErleRIna1oHRUWHKMB8GA1UdIwQY
MBaAFE/rlFfsUZ6CN4Z3ELzIL6MOrmfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAt
NWYxMjM1NTVjZmIxLzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iOGY1MGUtNDc1Zi00YjQ3LTg1YzAtNWYxMjM1NTVjZmIx
LzEvVC11VVYteFJub0kzaG5jUXZNZ3ZvdzZ1WjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOTZAQzx
eyJ5YiihalgIDGM3r3OTqJv4m6QYqsopcf+jpcG9ccPlJxeDe4rom6cYjtYBKjhh
8f+zNkXCoZAzkX56QiLwC/1pIfQf4/Ef01FYAyZLHpoXRa9ciFSvG9YuJo5IyoN6
FpvoGFRV9dTjHyq6f6sil7W2anInR/v0Yc7sMdUCXREugTdwLLQFlemmtEs2IP2O
W0j6xPOT5svyeeMNv9Ce7Rpa0Cd2J3r4XaBHpVXMcygMbNsWdhzwTwFskBu5KirB
veBLB9lxeC8PGw66g9ytVdVZODCPHXMhtItGoIYsqjOVhD+q88ACiD11o/fhagna
5aL65HLyqRQolQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:46 2025 by rpki-client