Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File:                     ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier:          norMPvNKk52PpW4spMnjsGPp5Huh+ht+UZ9HGJWRTu8=
Subject key identifier:   1D:02:34:A4:AF:DE:19:6E:CE:3F:54:31:CB:E7:68:B8:FE:CB:39:3A
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer:       /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial:       0199FCFD71C0DAB37A33016055E1CAA33C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 15:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:32 +0000
Files and hashes:         1: 1v8i4fKHGgVFWMzHMhW8J-xxCqk.roa (hash: 3nrn/SO1kBcjpxN/GEFTE06I2/Ei7ozh8XwfvRrFcmg=)
                          2: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: 51fXWOcCn1MCiG+KB5oAvaz7nRHIhcZN/efwU8yXHlI=)
                          3: clYhAW8kFlSaTpdGL_6AqwLYC_c.roa (hash: XEbICpC7LdXsG9DjCaajLcED5VcPq/8r93ZX2PiFgnw=)
                          4: nXVN6v3CzmLleKeTxS_kRgT2CK8.roa (hash: oJxgRFyz2Xezz+l0iWGdoRK6g6HPkdzeG09BGt4Hpn8=)
                          5: yAPFTHuBSG8S3cBogTgaLXQHsIA.roa (hash: Dghvk7oUxYxn4x3kqmECJ3G0zYv5Ok/s1CWEsFSe7A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:71:c0:da:b3:7a:33:01:60:55:e1:ca:a3:3c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Validity
            Not Before: Oct 19 15:01:32 2025 GMT
            Not After : Oct 20 15:01:32 2025 GMT
        Subject: CN=1d0234a4afde196ece3f5431cbe768b8fecb393a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:ab:f1:04:b7:26:58:78:2c:fd:99:28:a3:
                    3a:dd:5b:96:bd:a2:8a:7e:65:89:5e:11:3d:2c:10:
                    be:01:fa:b8:87:b5:6d:00:37:66:51:2e:14:cb:e2:
                    91:a6:96:03:eb:d7:9e:92:ff:4b:cb:75:4a:09:0d:
                    3b:d1:14:09:c7:28:7e:3e:8a:f0:92:ab:33:03:d6:
                    fd:2b:bd:41:a6:eb:0b:cc:5a:e0:d7:e3:28:ff:a8:
                    e6:ca:f8:d6:eb:a1:d3:f5:fc:ce:84:e2:90:f5:27:
                    d2:43:ee:c0:90:2b:73:79:f1:a8:69:1a:1c:fa:12:
                    f1:87:33:eb:45:2d:5e:e0:bd:f6:dd:85:77:e6:79:
                    d3:f5:80:e3:a9:a0:48:40:ce:40:e3:74:27:79:30:
                    13:91:dc:4d:01:ab:e4:0d:ee:9d:83:e8:52:66:90:
                    c4:76:83:26:d2:d6:e7:80:fc:20:a9:73:5b:87:7a:
                    4f:f0:e2:dd:e2:aa:d9:4b:7c:31:50:30:ed:89:02:
                    f8:c3:49:cf:d8:1b:84:ea:8b:f4:f9:00:46:93:00:
                    6d:64:67:20:87:e4:4b:72:70:bc:1e:67:d7:8f:92:
                    61:e6:c4:52:53:c6:12:49:d2:6b:6b:04:e7:2b:b5:
                    88:bc:17:93:83:2d:d4:67:b6:79:7e:50:c0:ae:8d:
                    1c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:34:A4:AF:DE:19:6E:CE:3F:54:31:CB:E7:68:B8:FE:CB:39:3A
            X509v3 Authority Key Identifier:
                keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b3:93:14:29:81:df:10:d0:59:1b:a0:80:17:c2:12:97:cf:
         8b:c7:12:04:48:7f:c9:e0:91:d7:c2:88:5e:b4:9b:fd:57:25:
         1a:bc:21:55:3b:72:2c:6a:5b:22:38:c9:8f:18:4c:40:b2:64:
         8f:91:d0:df:11:4d:64:9f:c7:d1:6b:0a:67:75:aa:08:98:b2:
         86:74:27:f3:84:b2:4a:95:78:34:bf:d1:ee:71:83:37:17:18:
         fb:71:15:2a:d3:3a:0c:01:bc:a1:8b:6e:41:0a:db:d1:48:20:
         e3:87:69:27:b7:d7:73:93:6e:b1:9f:69:97:90:5a:42:71:e0:
         77:72:ae:39:43:20:87:d7:5b:78:d6:9a:a2:fe:0d:f0:50:17:
         ef:cd:1e:94:6e:b4:09:cc:4e:24:bc:fd:01:ba:cb:31:a2:36:
         f8:4c:33:bc:3c:7e:93:78:a4:bc:2c:b3:f0:74:6b:90:18:0b:
         2c:ab:6a:98:b5:e1:5f:f5:12:0f:8e:40:4c:d6:65:98:78:97:
         00:9e:94:b6:2b:60:b4:65:a2:b3:d3:3f:a8:54:44:d6:03:94:
         6a:4f:8d:92:3a:b7:06:a2:0d:04:69:f1:fe:9d:0b:28:47:c0:
         d6:45:4e:58:c6:bc:b3:b7:f5:da:88:49:35:aa:67:a4:7f:af:
         47:ac:dc:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/XHA2rN6MwFgVeHKozwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1
MzZhMmYwHhcNMjUxMDE5MTUwMTMyWhcNMjUxMDIwMTUwMTMyWjAzMTEwLwYDVQQD
EygxZDAyMzRhNGFmZGUxOTZlY2UzZjU0MzFjYmU3NjhiOGZlY2IzOTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEGr8QS3Jlh4LP2ZKKM63VuWvaKK
fmWJXhE9LBC+Afq4h7VtADdmUS4Uy+KRppYD69eekv9Ly3VKCQ070RQJxyh+Porw
kqszA9b9K71BpusLzFrg1+Mo/6jmyvjW66HT9fzOhOKQ9SfSQ+7AkCtzefGoaRoc
+hLxhzPrRS1e4L323YV35nnT9YDjqaBIQM5A43QneTATkdxNAavkDe6dg+hSZpDE
doMm0tbngPwgqXNbh3pP8OLd4qrZS3wxUDDtiQL4w0nP2BuE6ov0+QBGkwBtZGcg
h+RLcnC8HmfXj5Jh5sRSU8YSSdJrawTnK7WIvBeTgy3UZ7Z5flDAro0cDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0CNKSv3hluzj9UMcvnaLj+yzk6MB8GA1UdIwQY
MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbOTFCmB
3xDQWRuggBfCEpfPi8cSBEh/yeCR18KIXrSb/VclGrwhVTtyLGpbIjjJjxhMQLJk
j5HQ3xFNZJ/H0WsKZ3WqCJiyhnQn84SySpV4NL/R7nGDNxcY+3EVKtM6DAG8oYtu
QQrb0Ugg44dpJ7fXc5NusZ9pl5BaQnHgd3KuOUMgh9dbeNaaov4N8FAX780elG60
CcxOJLz9AbrLMaI2+EwzvDx+k3ikvCyz8HRrkBgLLKtqmLXhX/USD45ATNZlmHiX
AJ6UtitgtGWis9M/qFRE1gOUak+Nkjq3BqINBGnx/p0LKEfA1kVOWMa8s7f12ohJ
NapnpH+vR6zcaA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:58 2025 by rpki-client