Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File:                     RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier:          /E91WRC21PpOKK6dl+8dLM2UOf9/DUPTvgUajudBXgY=
Subject key identifier:   97:3F:A1:02:ED:EC:50:CB:44:CF:72:FA:EE:69:5E:7D:91:97:1A:26
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer:       /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial:       0199FC2150843C5FDACDDA4AD1513B09360B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 11:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:05 +0000
Files and hashes:         1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=)
                          2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: onJuODfDSOOnBxoQr/ZF3WASRoeCXKqnWwURLpUhiPc=)
                          3: Rd3HOWCgIifcE20uT6ZwMTd010E.roa (hash: Iyh7ZN8yRmO6xUm0HuFbl9LY6LaOBla7JBeUoV6oKtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:50:84:3c:5f:da:cd:da:4a:d1:51:3b:09:36:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
        Validity
            Not Before: Oct 19 11:01:05 2025 GMT
            Not After : Oct 20 11:01:05 2025 GMT
        Subject: CN=973fa102edec50cb44cf72faee695e7d91971a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ba:c5:a2:00:c9:d2:8b:0b:cd:00:9d:18:cf:
                    07:83:1d:e3:19:70:33:10:d0:a6:7a:69:89:e2:66:
                    18:37:3c:fc:e2:25:f5:aa:fa:33:2b:4a:b1:4c:4b:
                    df:32:7a:2e:29:fa:b7:6d:c5:ee:38:3f:b8:34:02:
                    cc:f2:28:b8:86:9e:ff:00:6e:38:11:c6:57:3b:48:
                    89:98:31:71:d3:6d:67:b7:a7:c1:2e:43:ac:b9:70:
                    b1:fc:95:f8:56:df:16:a6:1b:0c:a9:71:39:b1:68:
                    5e:c8:08:d4:cb:57:d5:2e:f9:53:2b:f6:57:81:75:
                    28:a7:8e:a9:0b:28:c8:ef:b4:c4:ff:50:fc:fb:aa:
                    22:fb:82:82:02:09:4b:8f:e7:c2:0e:6b:fb:92:a1:
                    cd:20:3d:1f:72:2a:6d:b7:e2:93:20:78:2a:cd:90:
                    f5:90:df:95:b4:e0:66:4f:8e:52:67:ec:f6:89:50:
                    7f:93:be:5b:e7:49:4f:62:17:ca:30:f7:69:d5:76:
                    70:19:30:41:46:fd:15:45:17:3e:36:be:5a:b5:65:
                    61:10:2c:1e:a6:91:d5:5f:f7:a1:06:5f:99:05:e8:
                    a7:d7:8e:f3:1f:5f:69:6e:62:b4:51:74:9f:d9:e4:
                    ab:75:a5:03:3a:49:60:58:94:73:13:28:9a:2f:10:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3F:A1:02:ED:EC:50:CB:44:CF:72:FA:EE:69:5E:7D:91:97:1A:26
            X509v3 Authority Key Identifier:
                keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:09:01:8c:bc:23:73:c2:b4:ba:fa:ba:48:57:ff:42:03:32:
         b3:df:5e:9b:1a:4f:41:84:62:dd:11:7f:be:4e:56:37:81:3a:
         05:ce:12:db:b2:12:0c:2b:ce:8b:55:a9:36:da:7d:1b:62:6f:
         88:07:4e:f4:1d:07:e2:69:aa:45:ba:e2:ea:96:e0:51:c6:43:
         68:80:62:cb:98:f7:91:6d:2e:71:06:2e:0c:8f:47:e0:5f:b1:
         bd:69:47:5b:82:52:21:53:a9:40:3d:d5:7b:cc:96:32:37:fc:
         99:fb:01:7e:20:e6:5d:e4:ef:b0:fa:d4:53:be:86:ca:50:42:
         05:9c:e3:d5:94:88:48:6e:0e:4d:85:4c:41:f9:c4:79:8b:8a:
         0a:ae:71:85:93:49:68:fd:c1:49:83:d8:9c:28:cb:57:1c:cc:
         3e:9c:8e:b7:8b:3e:53:f4:b7:39:5d:e9:c5:8a:6c:38:f0:f7:
         9a:9d:73:4d:e5:01:f4:7b:81:ec:d1:23:f6:07:f0:56:96:70:
         8a:12:c0:cf:e2:1d:7b:b0:7d:d4:c1:6a:2a:b5:1e:4c:c2:c3:
         13:b9:84:4a:d6:76:cf:51:3a:a3:b3:fa:a0:ae:a1:22:bb:8b:
         6d:33:87:18:e4:9e:e3:14:2d:26:8d:b1:d3:cf:67:0e:6e:07:
         bc:6a:79:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVCEPF/azdpK0VE7CTYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ODgzNGM1MmFiZTMwNDI3ZjBhMjJhYTQ2ZmQzZDA4MDll
ZDQ1ODUwHhcNMjUxMDE5MTEwMTA1WhcNMjUxMDIwMTEwMTA1WjAzMTEwLwYDVQQD
Eyg5NzNmYTEwMmVkZWM1MGNiNDRjZjcyZmFlZTY5NWU3ZDkxOTcxYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LrFogDJ0osLzQCdGM8Hgx3jGXAz
ENCmemmJ4mYYNzz84iX1qvozK0qxTEvfMnouKfq3bcXuOD+4NALM8ii4hp7/AG44
EcZXO0iJmDFx021nt6fBLkOsuXCx/JX4Vt8WphsMqXE5sWheyAjUy1fVLvlTK/ZX
gXUop46pCyjI77TE/1D8+6oi+4KCAglLj+fCDmv7kqHNID0fciptt+KTIHgqzZD1
kN+VtOBmT45SZ+z2iVB/k75b50lPYhfKMPdp1XZwGTBBRv0VRRc+Nr5atWVhECwe
ppHVX/ehBl+ZBein147zH19pbmK0UXSf2eSrdaUDOklgWJRzEyiaLxDS4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJc/oQLt7FDLRM9y+u5pXn2RlxomMB8GA1UdIwQY
MBaAFEWINMUqvjBCfwoiqkb9PQgJ7UWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGIt
YTMxMTQzNDYzYmU5LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGItYTMxMTQzNDYzYmU5
LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwkBjLwj
c8K0uvq6SFf/QgMys99emxpPQYRi3RF/vk5WN4E6Bc4S27ISDCvOi1WpNtp9G2Jv
iAdO9B0H4mmqRbri6pbgUcZDaIBiy5j3kW0ucQYuDI9H4F+xvWlHW4JSIVOpQD3V
e8yWMjf8mfsBfiDmXeTvsPrUU76GylBCBZzj1ZSISG4OTYVMQfnEeYuKCq5xhZNJ
aP3BSYPYnCjLVxzMPpyOt4s+U/S3OV3pxYpsOPD3mp1zTeUB9HuB7NEj9gfwVpZw
ihLAz+Ide7B91MFqKrUeTMLDE7mEStZ2z1E6o7P6oK6hIruLbTOHGOSe4xQtJo2x
089nDm4HvGp5dQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:32 2025 by rpki-client