Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
File:                     NgqdJtuz6l36roO2GQit2Pxt028.mft (raw, json)
Hash identifier:          pLFJyUHOfqzq/NR35z2KzuP1xcHhGErCzXVzQ1NSyM8=
Subject key identifier:   F2:85:A7:E5:64:BD:67:98:3C:69:3C:41:4D:A2:69:45:EC:41:68:2B
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Certificate issuer:       /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial:       0199FCC62BCE8B7755B62E49455176ECF0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 14:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:09 +0000
Files and hashes:         1: 8O6-gKb80MguFWMDjHISxDIUjOY.roa (hash: 3o+8tVrWRw5md2p0yBC1m89E5Wym1EPSdJ/KhkZ5Zfw=)
                          2: NgqdJtuz6l36roO2GQit2Pxt028.crl (hash: OhZH7H2ePvjXAq80wghGCtivtNYpGFu8Ir9PdtgopGU=)
                          3: Zi0j7h9kKDeUNaeEMFA--W7qxgc.roa (hash: X3ti0Mbq81jS2GwcXcG3SUj5PuFqGydxb+zfC6HvRS8=)
                          4: ng125dUOqVaBw3danc1rOaXrcqk.roa (hash: E63qId+nBBFGXNOzGBHEt5a6wlCWGVhiMwoeA9BRjGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:2b:ce:8b:77:55:b6:2e:49:45:51:76:ec:f0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
        Validity
            Not Before: Oct 19 14:01:09 2025 GMT
            Not After : Oct 20 14:01:09 2025 GMT
        Subject: CN=f285a7e564bd67983c693c414da26945ec41682b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:9e:fe:24:0c:54:fd:52:b8:fb:45:2f:01:
                    b3:57:43:4d:de:af:2a:ef:7c:40:91:a8:69:5a:14:
                    e7:9c:d2:3c:45:ba:ce:87:92:b4:af:52:ec:18:28:
                    18:f4:05:ca:38:68:aa:ce:5f:c2:f3:f7:9f:32:b8:
                    46:8d:bf:ec:bc:a2:8e:75:44:e0:68:5a:90:f0:c3:
                    b3:c6:e1:d8:48:1c:bc:a1:79:f1:86:87:0f:19:99:
                    86:ea:a2:60:2a:25:cc:bc:a7:65:37:a8:49:76:e1:
                    8d:6c:6f:27:4f:2d:4a:26:53:a1:b5:61:ca:ba:ae:
                    fb:40:c0:d3:9f:ca:fa:35:29:54:ba:0d:d4:fc:5f:
                    fe:07:14:62:fd:5f:b2:0d:19:62:93:35:b1:b0:32:
                    77:e8:b4:1f:9a:65:bb:fd:87:ee:bd:3b:c9:fb:88:
                    2f:29:92:d9:71:bb:97:b6:ed:fa:f6:5b:20:0c:09:
                    f0:36:1f:f8:08:31:0e:48:47:30:32:99:f9:31:ff:
                    27:38:c8:50:82:c3:f7:78:7b:8b:8a:28:1c:b0:6b:
                    1d:e2:cc:b0:0f:1b:d3:29:95:7c:26:2d:d2:1f:b4:
                    e1:5c:0d:59:57:d1:47:b6:a4:f8:b0:72:85:a3:cd:
                    b3:84:a5:d5:94:6f:d8:d2:43:c5:83:33:c0:89:1b:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:85:A7:E5:64:BD:67:98:3C:69:3C:41:4D:A2:69:45:EC:41:68:2B
            X509v3 Authority Key Identifier:
                keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:50:cb:d2:cf:5a:72:74:d5:a0:e6:24:83:d6:4b:84:54:05:
         49:4a:fd:83:77:78:f6:01:1e:8a:64:32:61:16:d6:58:9d:c9:
         35:4d:af:c7:92:e0:31:9c:8f:16:bf:26:fc:6f:4f:7f:7d:c3:
         c0:29:d9:0b:53:2e:ce:2c:de:93:1d:80:2a:5b:56:22:8b:3c:
         80:e7:91:b8:95:b1:6c:d4:bf:49:e0:98:e0:4c:38:82:de:97:
         e8:5e:5e:4a:c8:39:b3:a9:cc:e1:09:c8:4e:fd:de:f9:31:46:
         19:a1:e5:43:98:ef:da:80:f1:97:fc:20:e2:81:6a:f7:9e:f9:
         36:8f:53:30:e2:9b:ff:0f:7d:22:e0:04:55:97:ad:cb:1d:22:
         c8:c4:20:68:7f:96:7e:49:90:30:f6:6a:f2:09:24:97:9c:b1:
         ce:7b:71:af:62:df:f2:47:5b:16:8a:45:5c:fb:d5:ba:1f:05:
         95:9b:82:21:c0:d1:e0:54:3b:82:88:25:a0:38:67:df:a5:a1:
         7f:03:53:25:bc:28:69:bc:a0:1c:b9:8d:67:25:6c:8c:52:3c:
         0e:01:f8:37:02:3e:3e:cb:70:1b:42:e2:a5:91:79:cb:a9:43:
         01:4d:07:86:09:0c:eb:ce:1d:ef:d0:f2:3b:64:70:0a:82:35:
         39:71:52:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xivOi3dVti5JRVF27PDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MGE5ZDI2ZGJiM2VhNWRmYWFlODNiNjE5MDhhZGQ4ZmM2
ZGQzNmYwHhcNMjUxMDE5MTQwMTA5WhcNMjUxMDIwMTQwMTA5WjAzMTEwLwYDVQQD
EyhmMjg1YTdlNTY0YmQ2Nzk4M2M2OTNjNDE0ZGEyNjk0NWVjNDE2ODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnOe/iQMVP1SuPtFLwGzV0NN3q8q
73xAkahpWhTnnNI8RbrOh5K0r1LsGCgY9AXKOGiqzl/C8/efMrhGjb/svKKOdUTg
aFqQ8MOzxuHYSBy8oXnxhocPGZmG6qJgKiXMvKdlN6hJduGNbG8nTy1KJlOhtWHK
uq77QMDTn8r6NSlUug3U/F/+BxRi/V+yDRlikzWxsDJ36LQfmmW7/YfuvTvJ+4gv
KZLZcbuXtu369lsgDAnwNh/4CDEOSEcwMpn5Mf8nOMhQgsP3eHuLiigcsGsd4syw
DxvTKZV8Ji3SH7ThXA1ZV9FHtqT4sHKFo82zhKXVlG/Y0kPFgzPAiRtbzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKFp+VkvWeYPGk8QU2iaUXsQWgrMB8GA1UdIwQY
MBaAFDYKnSbbs+pd+q6DthkIrdj8bdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmdxZEp0dXo2bDM2cm9PMkdRaXQyUHh0MDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yN2UyOWUtYzg5NC00ZDM5LWFjMjMt
MTJlOTZiYTIzNWQ4LzEvTmdxZEp0dXo2bDM2cm9PMkdRaXQyUHh0MDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yN2UyOWUtYzg5NC00ZDM5LWFjMjMtMTJlOTZiYTIzNWQ4
LzEvTmdxZEp0dXo2bDM2cm9PMkdRaXQyUHh0MDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlDL0s9a
cnTVoOYkg9ZLhFQFSUr9g3d49gEeimQyYRbWWJ3JNU2vx5LgMZyPFr8m/G9Pf33D
wCnZC1Muzizekx2AKltWIos8gOeRuJWxbNS/SeCY4Ew4gt6X6F5eSsg5s6nM4QnI
Tv3e+TFGGaHlQ5jv2oDxl/wg4oFq9575No9TMOKb/w99IuAEVZetyx0iyMQgaH+W
fkmQMPZq8gkkl5yxzntxr2Lf8kdbFopFXPvVuh8FlZuCIcDR4FQ7gogloDhn36Wh
fwNTJbwoabygHLmNZyVsjFI8DgH4NwI+PstwG0LipZF5y6lDAU0HhgkM684d79Dy
O2RwCoI1OXFSww==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:11 2025 by rpki-client