Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
File:                     1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft (raw, json)
Hash identifier:          SVIce7lrzvjakyER44irCtk/aO6/4yHQA4jGH+eTf5E=
Subject key identifier:   43:8A:60:9F:3B:42:C0:91:40:0D:0A:18:42:D4:EF:FA:37:06:E0:AA
Authority key identifier: F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7
Certificate issuer:       /CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
Certificate serial:       0199FB4612291AE487F4020F9772D1B05765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
Manifest number:          16ED
Signing time:             Sun 19 Oct 2025 07:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:37 +0000
Files and hashes:         1: 1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl (hash: 4ogq25NpkYE94rm2eFS8Ah49R9JDyyATfp+Nyt5tddY=)
                          2: SVu_Rhlf-7B0-LrZBWZ_lATeixo.roa (hash: z3DEUmnDk72CZ2z3i1AK8FkYVNV6rEs5/0h0eR+TClE=)
                          3: USACkltJE4QqwVVNlMM3MAOHbI4.roa (hash: JKLOLgv3d9BtTTCj6wlSjdzlBfme6YgxxZZXaxE+z9Y=)
                          4: dbrSfqG4yJ8e6RjT1uN9s6dEGrQ.roa (hash: o+ewDMF8kuHL4BLfo2Z0qsDG7FEYFuX7LdWzLtyg2Y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:12:29:1a:e4:87:f4:02:0f:97:72:d1:b0:57:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8203a0c04b81fe1766fa41bd31b73b588188ac7
        Validity
            Not Before: Oct 19 07:01:37 2025 GMT
            Not After : Oct 20 07:01:37 2025 GMT
        Subject: CN=438a609f3b42c091400d0a1842d4effa3706e0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:3c:6f:d7:d0:3c:89:05:6e:fe:92:bb:a7:
                    7e:30:d4:17:ae:da:51:59:21:5d:15:ba:2b:ea:8a:
                    0c:08:21:d9:54:7d:6a:3b:3b:0e:53:c1:18:3e:30:
                    74:87:d1:87:ab:1d:c3:8b:de:1e:4e:db:d6:94:35:
                    1c:ca:cf:44:68:ec:a4:95:4e:ea:e1:de:36:28:9f:
                    60:bc:8a:d2:32:82:0a:cb:80:a3:29:57:21:2b:a9:
                    b8:67:df:01:33:4c:d5:09:b4:fd:aa:15:ea:2f:71:
                    3e:16:3b:99:78:7c:c6:5f:7c:4e:1d:41:1b:db:77:
                    bc:06:23:61:58:c2:09:d4:2e:ae:35:01:7d:4c:ad:
                    75:5c:49:05:68:dd:1c:93:28:27:b1:88:bb:a0:3f:
                    36:49:64:d9:b5:9d:41:37:8e:69:b4:8b:21:26:cf:
                    d8:cc:36:0c:a5:35:69:95:57:e3:dc:1e:88:52:6a:
                    d0:50:5e:16:f3:44:6b:fe:30:1d:94:8b:9e:5a:56:
                    3e:83:8d:86:16:68:26:5a:e6:7a:d7:f4:2d:6d:4c:
                    ed:9d:30:eb:6e:c8:3f:11:1e:40:5f:20:c3:78:29:
                    3d:c6:08:51:1d:e4:ce:d3:22:60:73:ea:ca:f4:bd:
                    bf:05:d7:d9:0f:c3:b6:90:10:b4:6f:4e:69:5f:6e:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8A:60:9F:3B:42:C0:91:40:0D:0A:18:42:D4:EF:FA:37:06:E0:AA
            X509v3 Authority Key Identifier:
                keyid:F8:20:3A:0C:04:B8:1F:E1:76:6F:A4:1B:D3:1B:73:B5:88:18:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CA6DAS4H-F2b6Qb0xtztYgYisc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e14ca3-da8e-4b58-863a-3389620c1bd7/1/1-CA6DAS4H-F2b6Qb0xtztYgYisc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:dd:52:c6:e7:7f:01:0c:c7:0d:35:37:87:cd:48:9a:ae:12:
         a0:da:80:34:33:7d:d3:2b:05:2f:29:53:a1:3a:82:a2:01:0c:
         21:23:98:97:52:c2:74:c8:b3:d2:63:e3:d2:5e:d2:84:1f:d6:
         ce:62:f8:11:76:8a:41:ee:78:5d:9d:d6:af:ac:b9:db:ee:d0:
         34:b4:45:b9:55:7a:9c:6d:5d:95:49:c4:70:1a:ea:2c:98:6b:
         c5:14:86:6b:c8:0b:2f:42:32:52:17:20:0c:b5:32:73:48:cd:
         f6:72:eb:e2:2b:65:35:6c:c0:19:54:0a:43:24:e2:39:79:5a:
         0e:22:cb:8d:62:f7:12:52:2a:7c:ad:82:ca:0f:c5:7a:83:c4:
         ef:56:99:d8:7f:7f:1e:64:18:9f:fa:99:ea:2b:0d:47:f9:96:
         79:e1:4f:98:fc:57:06:bb:41:ac:9f:fe:59:80:1e:4b:41:76:
         0f:c9:53:e7:20:0b:fe:bf:cd:9f:4b:29:7a:26:91:45:b2:54:
         5f:c9:eb:98:3f:0b:de:5e:ed:aa:0d:0e:a1:6d:9e:42:e1:fa:
         11:98:7c:f0:0a:8f:ba:df:8d:d3:9c:0f:89:99:ef:65:20:40:
         31:92:44:47:79:2f:b4:19:a3:69:7f:58:15:0b:8b:21:45:ed:
         86:be:1c:59
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn7RhIpGuSH9AIPl3LRsFdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MjAzYTBjMDRiODFmZTE3NjZmYTQxYmQzMWI3M2I1ODgx
ODhhYzcwHhcNMjUxMDE5MDcwMTM3WhcNMjUxMDIwMDcwMTM3WjAzMTEwLwYDVQQD
Eyg0MzhhNjA5ZjNiNDJjMDkxNDAwZDBhMTg0MmQ0ZWZmYTM3MDZlMGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto08b9fQPIkFbv6Su6d+MNQXrtpR
WSFdFbor6ooMCCHZVH1qOzsOU8EYPjB0h9GHqx3Di94eTtvWlDUcys9EaOyklU7q
4d42KJ9gvIrSMoIKy4CjKVchK6m4Z98BM0zVCbT9qhXqL3E+FjuZeHzGX3xOHUEb
23e8BiNhWMIJ1C6uNQF9TK11XEkFaN0ckygnsYi7oD82SWTZtZ1BN45ptIshJs/Y
zDYMpTVplVfj3B6IUmrQUF4W80Rr/jAdlIueWlY+g42GFmgmWuZ61/QtbUztnTDr
bsg/ER5AXyDDeCk9xghRHeTO0yJgc+rK9L2/BdfZD8O2kBC0b05pX24+owIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEOKYJ87QsCRQA0KGELU7/o3BuCqMB8GA1UdIwQY
MBaAFPggOgwEuB/hdm+kG9Mbc7WIGIrHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1DQTZEQVM0SC1GMmI2UWIweHR6dFlnWWlzYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvZTE0Y2EzLWRhOGUtNGI1OC04NjNh
LTMzODk2MjBjMWJkNy8xLzEtQ0E2REFTNEgtRjJiNlFiMHh0enRZZ1lpc2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzViL2UxNGNhMy1kYThlLTRiNTgtODYzYS0zMzg5NjIwYzFi
ZDcvMS8xLUNBNkRBUzRILUYyYjZRYjB4dHp0WWdZaXNjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0d1S
xud/AQzHDTU3h81Imq4SoNqANDN90ysFLylToTqCogEMISOYl1LCdMiz0mPj0l7S
hB/WzmL4EXaKQe54XZ3Wr6y52+7QNLRFuVV6nG1dlUnEcBrqLJhrxRSGa8gLL0Iy
UhcgDLUyc0jN9nLr4itlNWzAGVQKQyTiOXlaDiLLjWL3ElIqfK2Cyg/FeoPE71aZ
2H9/HmQYn/qZ6isNR/mWeeFPmPxXBrtBrJ/+WYAeS0F2D8lT5yAL/r/Nn0speiaR
RbJUX8nrmD8L3l7tqg0OoW2eQuH6EZh88AqPut+N05wPiZnvZSBAMZJER3kvtBmj
aX9YFQuLIUXthr4cWQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:01 2025 by rpki-client