Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File:                     Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier:          dU5v/NjBP7+4WMs9g1LgnIFW4myRNStcPdf79ak7bLU=
Subject key identifier:   3B:C7:B5:6D:CE:0D:9A:74:AC:25:86:A0:C6:64:14:B3:0D:36:2B:85
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer:       /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial:       019A03A45D66CE7109DBAE6BF675AC887503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number:          16E8
Signing time:             Mon 20 Oct 2025 22:01:34 +0000
Manifest this update:     Mon 20 Oct 2025 22:01:34 +0000
Manifest next update:     Tue 21 Oct 2025 22:01:34 +0000
Files and hashes:         1: XH3IImnZQORJDcY8K4c1sqi8npk.roa (hash: o40iI1L0Dj1I3pYOBYI+Dt7Aw45pOymMFxf/GGvdYFY=)
                          2: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: F1Z5bj3DKhKxTTkHRRdOruRu9UT5k1aAOUpDjp050NE=)
                          3: iXJOEjsOn5QC56oWOinXWEqS8Pw.roa (hash: jHJ0wtuFjDDxH8Gh1uDFMh4KEFYRZhcEVsJ0/xmH1ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:a4:5d:66:ce:71:09:db:ae:6b:f6:75:ac:88:75:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
        Validity
            Not Before: Oct 20 22:01:34 2025 GMT
            Not After : Oct 21 22:01:34 2025 GMT
        Subject: CN=3bc7b56dce0d9a74ac2586a0c66414b30d362b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:e2:cc:36:b1:0f:2a:31:2a:28:b1:3b:29:
                    a1:6d:8a:2a:ec:41:ec:df:0a:66:de:2e:74:b1:14:
                    b7:56:27:37:8e:2c:4a:c3:0f:77:4f:97:8d:39:8c:
                    b9:8e:6c:b8:a8:07:b8:be:72:a6:bd:32:f5:01:38:
                    1d:fd:47:45:1a:6a:8a:21:9c:96:1c:c5:ad:f9:3c:
                    f4:75:2d:94:3e:34:25:23:bc:c7:2a:02:c3:b1:d3:
                    d7:57:47:6d:7c:15:bb:7b:f4:8f:50:a2:91:12:3a:
                    7b:00:6e:2d:08:82:16:5b:b9:31:17:1a:5a:3d:da:
                    89:92:a4:2d:12:08:f6:39:54:f5:03:fe:2c:01:7a:
                    cf:69:f7:74:6c:b2:09:f6:c2:de:39:fa:f5:2f:80:
                    ff:21:60:ca:7a:f3:2d:21:dc:a1:09:9e:79:9a:22:
                    bc:bb:04:7c:a6:ed:4a:7b:9f:f7:97:e5:d4:d9:53:
                    27:4e:ea:26:26:83:1f:ae:ee:ca:97:f1:6f:5b:eb:
                    31:41:13:80:c0:4f:c1:e2:f3:45:a2:1b:de:23:5d:
                    5d:3d:df:c2:05:8b:54:b1:60:e3:52:81:f9:00:8e:
                    5f:2d:72:68:65:be:f9:7f:f5:58:2c:f4:78:c8:93:
                    52:64:38:e9:75:52:82:f1:ff:a2:2b:38:34:96:eb:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C7:B5:6D:CE:0D:9A:74:AC:25:86:A0:C6:64:14:B3:0D:36:2B:85
            X509v3 Authority Key Identifier:
                keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3a:40:98:32:00:16:f4:4d:e2:47:44:71:7d:4e:fe:f1:46:
         77:a5:89:02:71:90:9a:ab:2c:a0:a8:2e:67:6b:9c:fc:e2:54:
         ce:f0:f2:c5:59:0a:20:a5:af:84:67:5c:e1:f9:2d:d2:67:06:
         7c:1f:0c:d6:4a:ed:7f:18:c8:79:4d:69:06:cd:bb:e1:93:a9:
         c6:bc:64:b0:61:88:fd:a3:43:91:88:62:fd:7f:7f:29:2b:4c:
         8e:1d:80:fb:b2:3d:1a:a5:17:30:e2:94:9c:73:93:8f:2b:c6:
         ad:4c:5b:e3:42:28:88:1b:5e:b6:7d:7b:85:83:e4:99:4e:1e:
         09:e3:bd:1c:e2:f0:f0:58:e1:72:a7:ab:b7:23:81:d3:62:e3:
         f8:dd:86:a9:02:bf:80:5e:ed:2b:a9:f8:a8:56:cd:68:59:55:
         8f:63:cd:c8:68:6c:61:58:c8:f4:67:d9:01:52:5d:29:df:ee:
         0b:d7:4a:df:e8:98:c2:70:d0:15:e6:31:1c:a9:8b:a8:4a:95:
         1f:b8:51:ca:6f:75:92:7a:34:8d:65:5f:7b:d5:61:6c:05:d5:
         c8:28:a9:4f:42:ee:cd:41:d2:ff:3c:39:0b:49:2d:0c:f2:0f:
         38:85:83:a1:4a:34:5b:9c:43:84:6f:09:11:4c:46:bd:fe:e3:
         9e:b5:f3:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDpF1mznEJ265r9nWsiHUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYjgyNzcyYWYzZDYxMWI5OWIxYmE2ZTNlYjZjYmZkMTY5
NjUzNjMwHhcNMjUxMDIwMjIwMTM0WhcNMjUxMDIxMjIwMTM0WjAzMTEwLwYDVQQD
EygzYmM3YjU2ZGNlMGQ5YTc0YWMyNTg2YTBjNjY0MTRiMzBkMzYyYjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnujizDaxDyoxKiixOymhbYoq7EHs
3wpm3i50sRS3Vic3jixKww93T5eNOYy5jmy4qAe4vnKmvTL1ATgd/UdFGmqKIZyW
HMWt+Tz0dS2UPjQlI7zHKgLDsdPXV0dtfBW7e/SPUKKREjp7AG4tCIIWW7kxFxpa
PdqJkqQtEgj2OVT1A/4sAXrPafd0bLIJ9sLeOfr1L4D/IWDKevMtIdyhCZ55miK8
uwR8pu1Ke5/3l+XU2VMnTuomJoMfru7Kl/FvW+sxQROAwE/B4vNFohveI11dPd/C
BYtUsWDjUoH5AI5fLXJoZb75f/VYLPR4yJNSZDjpdVKC8f+iKzg0lusqdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvHtW3ODZp0rCWGoMZkFLMNNiuFMB8GA1UdIwQY
MBaAFGO4J3KvPWEbmbG6bj62y/0WllNjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTdnbmNxODlZUnVac2JwdVByYkxfUmFXVTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jYjBkOTEtODI3MC00NTUwLThmYWMt
MGNlMjAzOGFhYTdiLzEvWTdnbmNxODlZUnVac2JwdVByYkxfUmFXVTJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jYjBkOTEtODI3MC00NTUwLThmYWMtMGNlMjAzOGFhYTdi
LzEvWTdnbmNxODlZUnVac2JwdVByYkxfUmFXVTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDpAmDIA
FvRN4kdEcX1O/vFGd6WJAnGQmqssoKguZ2uc/OJUzvDyxVkKIKWvhGdc4fkt0mcG
fB8M1krtfxjIeU1pBs274ZOpxrxksGGI/aNDkYhi/X9/KStMjh2A+7I9GqUXMOKU
nHOTjyvGrUxb40IoiBtetn17hYPkmU4eCeO9HOLw8FjhcqertyOB02Lj+N2GqQK/
gF7tK6n4qFbNaFlVj2PNyGhsYVjI9GfZAVJdKd/uC9dK3+iYwnDQFeYxHKmLqEqV
H7hRym91kno0jWVfe9VhbAXVyCipT0LuzUHS/zw5C0ktDPIPOIWDoUo0W5xDhG8J
EUxGvf7jnrXzNw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:09:05 2025 by rpki-client