Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          rWrLR4H+q/PDUIqzjgFxftxi5IeuUxxy/ONKcH5sQaM=
Subject key identifier:   7B:A6:AD:25:D4:9A:D4:2E:80:07:95:89:A5:4E:6A:2C:B9:0E:0C:8D
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       0199FC21552D735454B3116C5CC12CE6CD75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          16F1
Signing time:             Sun 19 Oct 2025 11:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:06 +0000
Files and hashes:         1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=)
                          2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=)
                          3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=)
                          4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=)
                          5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=)
                          6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: jl0SwfEWsj1j8P5pJoDEWnEzLZxPYlp+uAetV0dk8g4=)
                          7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=)
                          8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=)
                          9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=)
                          10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=)
                          11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=)
                          12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=)
                          13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=)
                          14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=)
                          15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=)
                          16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=)
                          17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=)
                          18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=)
                          19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=)
                          20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:55:2d:73:54:54:b3:11:6c:5c:c1:2c:e6:cd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Oct 19 11:01:06 2025 GMT
            Not After : Oct 20 11:01:06 2025 GMT
        Subject: CN=7ba6ad25d49ad42e80079589a54e6a2cb90e0c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:5b:35:01:d0:45:a5:99:a7:74:95:e3:e7:
                    07:ba:da:a0:cb:cc:35:d4:81:89:0a:48:16:71:c6:
                    26:ca:70:c5:07:70:63:1a:66:d9:52:d3:40:44:86:
                    da:36:c7:f5:32:99:89:cf:d1:63:2c:38:81:40:d7:
                    a6:07:ff:be:ce:09:f8:2b:f7:82:ca:99:72:77:69:
                    2e:2c:a1:14:22:6b:53:98:4f:53:b4:44:d1:a4:09:
                    8c:29:2f:16:f4:18:dd:da:78:83:09:04:31:c1:e9:
                    48:f1:d7:9c:9b:ed:db:a3:dc:70:c2:ec:21:53:53:
                    17:ed:49:3f:b9:d8:26:d5:17:c8:43:19:df:bc:60:
                    a7:e7:d9:8e:fb:c7:c8:68:15:c5:4a:bf:72:3d:94:
                    5f:2e:b1:6f:ed:25:41:0f:34:cb:11:f3:7b:c0:22:
                    28:73:2f:98:e1:09:e6:e1:bd:d8:4d:11:7f:45:c9:
                    54:f7:d7:5f:68:bc:23:4d:b8:f9:52:1c:fb:4f:a0:
                    56:3a:2f:44:28:2b:e9:eb:b6:a7:5b:1b:a0:69:d8:
                    bc:a3:3d:a4:39:ac:78:d2:6a:c7:08:af:fe:69:7d:
                    a0:28:20:a2:60:6c:7b:77:99:0c:7e:a3:4f:0e:ad:
                    4b:72:93:d4:dc:3d:97:7d:b6:c6:66:2b:21:ce:3b:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A6:AD:25:D4:9A:D4:2E:80:07:95:89:A5:4E:6A:2C:B9:0E:0C:8D
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:07:03:b7:dc:6e:46:b2:d8:2a:39:5f:b6:58:cb:fa:dc:28:
         f5:a9:3a:1f:56:61:51:2b:39:1f:3a:af:c1:d5:34:9d:4c:5c:
         3a:98:e0:ab:6f:34:2b:39:64:4b:f8:47:b9:a0:14:45:8b:1c:
         8f:f5:0b:79:3f:6f:7d:41:0e:5c:fb:1a:b4:c1:84:d3:55:8c:
         39:80:71:bb:9d:d7:fe:1f:17:e5:2a:94:fa:d5:8b:81:73:ab:
         2d:44:6c:22:40:ae:25:d5:49:79:05:98:3c:b4:44:dd:76:de:
         5e:5b:50:97:8f:2d:12:da:24:3e:e6:18:15:b1:50:23:17:6c:
         a6:c3:77:30:00:42:8c:4d:9b:8e:b5:6d:b5:78:e5:43:93:91:
         68:9d:71:91:4f:51:99:b3:2e:c0:c4:85:42:ab:9e:7f:5c:2e:
         2d:9a:a1:ed:1f:37:38:3c:5f:72:22:71:9c:86:58:76:a7:9f:
         00:04:79:31:19:f7:84:ee:07:82:43:81:dc:d8:bb:f5:ca:9a:
         f6:e4:fa:e6:3f:61:57:d1:b2:da:ea:cd:ff:9f:1a:aa:3b:27:
         ec:c8:54:47:cd:2b:e3:9f:82:44:9c:d7:07:95:c6:ba:c1:a1:
         5f:d1:f1:2f:2b:46:59:0f:c7:3f:92:4b:61:8e:bd:07:74:c4:
         1b:e2:ff:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:56 2025 by rpki-client