Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
File:                     Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft (raw, json)
Hash identifier:          CgEY5WwHswq/wbOVIOxVrn5P5dfU2vrpX4jNYGakZ0o=
Subject key identifier:   1D:86:93:DD:DB:30:29:88:BC:BA:66:EE:20:1D:7D:DF:97:EC:7B:78
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Certificate issuer:       /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial:       0199FC213CD257CF03DC05E07F21F150B5EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 11:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:00 +0000
Files and hashes:         1: B1nucPb7NWUbBUo9E6aO-U-ClRc.roa (hash: JvGsvFvtRyqqdZt/kpyabUpQhS7hpxa8fDi+el1bUhg=)
                          2: Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl (hash: Cpw7ickFuhWk5AnAgsaslT9y6KXXjrmtCxSAwOVXKBw=)
                          3: m7nZQDUNXTAKS4UOybVqVQmdP5w.roa (hash: xKnYvzxmkeCg53JAhipiTpZl84ccUL77H2BTcrzkprw=)
                          4: yFJjRro5JzpGdzShKj2Qbj-Hr50.roa (hash: KNe/rWaTqo2IHu+MVm5qVm+k7A9vULCB7kmT0LNcB1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:3c:d2:57:cf:03:dc:05:e0:7f:21:f1:50:b5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
        Validity
            Not Before: Oct 19 11:01:00 2025 GMT
            Not After : Oct 20 11:01:00 2025 GMT
        Subject: CN=1d8693dddb302988bcba66ee201d7ddf97ec7b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:6f:48:51:f4:05:0a:8f:9b:40:5a:2d:28:
                    b8:cf:81:b7:07:37:53:32:87:76:d5:65:90:e3:a0:
                    d7:0a:db:b4:17:6b:86:49:c1:75:d9:06:fb:ce:cc:
                    af:51:48:82:ec:fa:10:e6:7a:ab:b5:8c:c6:05:e5:
                    d0:c8:be:b9:99:03:ec:d6:1c:b6:78:93:a0:e4:d4:
                    91:0f:9a:15:f9:0c:2e:75:8b:71:4f:a0:4a:c8:b9:
                    a8:93:b4:7a:06:4e:86:72:6c:5d:55:54:fe:39:b1:
                    2a:d7:33:ee:4b:58:1e:65:3e:ef:2f:83:05:93:6d:
                    9c:e9:5c:c5:19:80:fa:a9:a6:92:84:88:fd:1b:b2:
                    ab:c6:07:1c:2f:18:05:51:45:46:85:c9:83:1d:5b:
                    8e:0e:30:73:d9:d8:8d:a6:2e:e6:00:eb:3b:6b:8f:
                    75:61:0f:de:14:4d:d4:eb:34:06:86:c3:a2:bf:8a:
                    c3:d7:d4:29:be:4d:39:29:8a:e5:65:5a:91:d4:41:
                    d3:a7:b4:03:83:b5:f7:91:6f:b8:0f:f9:e0:9a:65:
                    91:fc:02:21:9c:f6:5e:32:a9:ea:ba:56:e8:fc:87:
                    8e:92:75:a1:ab:97:ef:de:8e:b1:81:66:e3:c3:3c:
                    ba:b1:76:de:cf:37:6b:d6:7c:c9:86:b3:a6:29:fd:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:86:93:DD:DB:30:29:88:BC:BA:66:EE:20:1D:7D:DF:97:EC:7B:78
            X509v3 Authority Key Identifier:
                keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b7:0b:41:ba:a2:57:56:96:54:6b:00:07:4a:5f:99:53:b7:
         0b:55:12:d7:95:0b:0d:46:b3:f3:4b:5e:e9:05:d1:75:f8:f9:
         77:36:7d:1b:a7:8b:9f:00:e0:ce:f2:14:7f:1d:b2:f0:af:5d:
         44:bd:a2:46:fe:98:f0:86:8f:71:6a:65:0b:67:91:a6:2e:bf:
         98:25:97:87:89:0c:af:3a:1b:21:56:56:2c:19:be:93:c8:fc:
         a0:96:fd:21:c3:98:77:b0:55:76:73:95:27:3d:4f:7b:ba:9a:
         bc:af:a8:20:a4:f9:e3:9b:d1:d3:7c:4d:90:f1:6f:2d:de:9d:
         c2:55:db:31:3e:f7:2a:fb:5b:20:7a:f5:8b:db:e0:5f:e6:94:
         5e:57:32:7c:e5:54:68:f9:49:98:c9:ad:5d:d2:89:d9:18:9a:
         b4:72:4b:d7:30:45:c1:ad:d3:65:6d:c1:38:c3:97:19:7c:a7:
         30:f4:dc:8c:3d:ae:96:47:28:f3:b2:29:54:b5:72:bb:c0:f7:
         32:06:56:07:b4:6a:aa:67:c3:80:c6:d3:8b:99:96:90:76:66:
         53:f7:da:1b:3e:28:af:c4:51:d5:6e:0f:6d:60:63:6b:2f:7c:
         e7:db:4e:ec:77:05:61:7c:4b:fe:e0:13:d4:ff:20:fa:69:ff:
         80:7c:21:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8ITzSV88D3AXgfyHxULXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1Y2Y5ZDhkNTUyY2RjN2Q4YzBkYzZmNjQ5YjMwMWYyMzUx
NDA5ZWUwHhcNMjUxMDE5MTEwMTAwWhcNMjUxMDIwMTEwMTAwWjAzMTEwLwYDVQQD
EygxZDg2OTNkZGRiMzAyOTg4YmNiYTY2ZWUyMDFkN2RkZjk3ZWM3Yjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL9vSFH0BQqPm0BaLSi4z4G3BzdT
Mod21WWQ46DXCtu0F2uGScF12Qb7zsyvUUiC7PoQ5nqrtYzGBeXQyL65mQPs1hy2
eJOg5NSRD5oV+QwudYtxT6BKyLmok7R6Bk6GcmxdVVT+ObEq1zPuS1geZT7vL4MF
k22c6VzFGYD6qaaShIj9G7KrxgccLxgFUUVGhcmDHVuODjBz2diNpi7mAOs7a491
YQ/eFE3U6zQGhsOiv4rD19Qpvk05KYrlZVqR1EHTp7QDg7X3kW+4D/ngmmWR/AIh
nPZeMqnqulbo/IeOknWhq5fv3o6xgWbjwzy6sXbezzdr1nzJhrOmKf3NbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2Gk93bMCmIvLpm7iAdfd+X7Ht4MB8GA1UdIwQY
MBaAFCXPnY1VLNx9jA3G9kmzAfI1FAnuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQt
YTEwNjkwYTc0NGU0LzEvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9hMGUwOGEtOWZmMC00NGI0LWJjYzQtYTEwNjkwYTc0NGU0
LzEvSmMtZGpWVXMzSDJNRGNiMlNiTUI4alVVQ2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbcLQbqi
V1aWVGsAB0pfmVO3C1US15ULDUaz80te6QXRdfj5dzZ9G6eLnwDgzvIUfx2y8K9d
RL2iRv6Y8IaPcWplC2eRpi6/mCWXh4kMrzobIVZWLBm+k8j8oJb9IcOYd7BVdnOV
Jz1Pe7qavK+oIKT545vR03xNkPFvLd6dwlXbMT73KvtbIHr1i9vgX+aUXlcyfOVU
aPlJmMmtXdKJ2RiatHJL1zBFwa3TZW3BOMOXGXynMPTcjD2ulkco87IpVLVyu8D3
MgZWB7RqqmfDgMbTi5mWkHZmU/faGz4or8RR1W4PbWBjay9859tO7HcFYXxL/uAT
1P8g+mn/gHwhUg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:48 2025 by rpki-client