Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File:                     BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier:          uZ6DCuQYpyHgBPtDeh/3qJ4cMRrtpPiZuyjDUxOZdnY=
Subject key identifier:   EF:31:DC:8B:A6:93:9F:49:75:67:55:D3:D8:D6:DF:67:49:30:98:1F
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer:       /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial:       0199FCFD9878A7D591335956735529BF3B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 15:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:42 +0000
Files and hashes:         1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: NM5Izx5hPQbKC3TRzxjpJcH7ygQaryFhHJBkhXGoZXU=)
                          2: oxM6mR0m9rOLSyak3ORyqAg0XsI.roa (hash: mea+PwbnpZFhyRm88cF7gUeBjEiQVDq413u5vrlmXG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:98:78:a7:d5:91:33:59:56:73:55:29:bf:3b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
        Validity
            Not Before: Oct 19 15:01:42 2025 GMT
            Not After : Oct 20 15:01:42 2025 GMT
        Subject: CN=ef31dc8ba6939f49756755d3d8d6df674930981f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:f4:e1:95:57:58:04:4e:5b:e4:60:77:1c:
                    f5:a8:c2:3e:a8:c2:e5:c9:3b:4c:bf:8e:49:f1:e1:
                    56:4d:2a:98:c4:e3:94:d9:60:b5:61:e2:ef:41:50:
                    e0:e0:7e:59:26:f2:8e:f1:47:a4:4a:f4:38:d4:0c:
                    20:fc:e7:76:2a:27:b9:3a:b9:f7:30:8a:c0:57:f5:
                    ad:4c:2d:0b:6f:87:ec:5e:80:9a:02:ee:c0:b0:04:
                    28:99:ab:89:4b:28:e2:81:18:89:d1:27:73:2d:dd:
                    55:f7:83:8c:f1:c9:ff:8a:c3:8a:47:46:b1:04:18:
                    73:40:11:63:92:48:5f:2d:fc:3c:12:bc:96:81:59:
                    38:ad:cf:48:fb:3c:a2:fa:9e:ab:76:2a:48:56:24:
                    d2:bc:ef:81:4a:a1:f9:e6:0a:9f:2a:5b:e5:98:70:
                    a7:3d:91:5f:b4:6a:b0:80:1d:87:36:b1:f1:50:8c:
                    e3:5e:9f:ba:33:79:5e:b2:89:67:f6:e8:1d:a8:22:
                    26:70:a3:7b:57:e3:43:df:11:77:49:cd:9b:14:a0:
                    40:42:68:4a:ef:66:ad:90:c1:80:31:80:ec:ca:e4:
                    43:9b:97:73:da:1e:6e:0b:a0:54:82:0a:98:4a:cf:
                    02:bb:a1:c5:66:c5:9a:f0:3f:0f:26:9d:db:39:c2:
                    bc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:31:DC:8B:A6:93:9F:49:75:67:55:D3:D8:D6:DF:67:49:30:98:1F
            X509v3 Authority Key Identifier:
                keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:77:6b:1c:df:b3:88:34:29:5f:a6:b4:6f:18:76:25:e3:5e:
         2a:d0:de:f1:67:60:6b:f8:89:c2:ed:aa:7c:f7:4b:d7:61:86:
         be:be:c1:ea:30:8a:3b:02:20:87:fb:1e:f5:19:45:ca:b9:c8:
         9a:50:37:20:e0:4e:a4:43:54:25:1e:d4:c1:79:6a:60:97:17:
         5e:6e:2f:d7:5a:69:50:60:a1:5b:c7:85:94:4d:e5:60:eb:3c:
         23:c1:c3:cf:72:8a:b9:f0:30:ec:00:3f:d5:e5:b2:54:04:d2:
         66:ed:38:5c:1a:79:9a:a2:55:81:82:39:8c:5d:c9:60:58:69:
         02:c8:ca:0d:07:e8:02:01:de:9a:d1:c9:79:70:7b:18:0b:7c:
         b4:2f:ac:90:c3:65:a4:92:c4:14:ac:cf:f8:43:52:ec:3d:5e:
         19:34:23:f9:f9:d6:e1:e3:35:86:ac:17:13:77:d5:06:6d:d8:
         51:6f:f1:53:d0:9b:8a:a5:ea:9b:98:91:62:65:88:50:8d:1c:
         58:24:40:33:d0:18:c8:cd:d3:9f:0e:e7:9c:fc:55:30:fa:43:
         6d:1e:f3:76:61:a3:28:78:2a:44:a2:1e:f8:3f:3c:f5:80:56:
         35:a1:57:c4:93:5a:f9:cf:f3:60:7b:67:20:18:1c:43:a9:14:
         f2:4c:2d:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Zh4p9WRM1lWc1UpvztDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MDM2NWM4YWY0ODgxM2E1YmFiOTdlZGUzNTU1MzlmMTE0
NzRkYzcwHhcNMjUxMDE5MTUwMTQyWhcNMjUxMDIwMTUwMTQyWjAzMTEwLwYDVQQD
EyhlZjMxZGM4YmE2OTM5ZjQ5NzU2NzU1ZDNkOGQ2ZGY2NzQ5MzA5ODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhT04ZVXWAROW+Rgdxz1qMI+qMLl
yTtMv45J8eFWTSqYxOOU2WC1YeLvQVDg4H5ZJvKO8UekSvQ41Awg/Od2Kie5Orn3
MIrAV/WtTC0Lb4fsXoCaAu7AsAQomauJSyjigRiJ0SdzLd1V94OM8cn/isOKR0ax
BBhzQBFjkkhfLfw8EryWgVk4rc9I+zyi+p6rdipIViTSvO+BSqH55gqfKlvlmHCn
PZFftGqwgB2HNrHxUIzjXp+6M3lesoln9ugdqCImcKN7V+ND3xF3Sc2bFKBAQmhK
72atkMGAMYDsyuRDm5dz2h5uC6BUggqYSs8Cu6HFZsWa8D8PJp3bOcK8gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8x3Iumk59JdWdV09jW32dJMJgfMB8GA1UdIwQY
MBaAFAUDZcivSIE6W6uX7eNVU58RR03HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgt
YTU4NzliNjlmMTI2LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgtYTU4NzliNjlmMTI2
LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXdrHN+z
iDQpX6a0bxh2JeNeKtDe8Wdga/iJwu2qfPdL12GGvr7B6jCKOwIgh/se9RlFyrnI
mlA3IOBOpENUJR7UwXlqYJcXXm4v11ppUGChW8eFlE3lYOs8I8HDz3KKufAw7AA/
1eWyVATSZu04XBp5mqJVgYI5jF3JYFhpAsjKDQfoAgHemtHJeXB7GAt8tC+skMNl
pJLEFKzP+ENS7D1eGTQj+fnW4eM1hqwXE3fVBm3YUW/xU9CbiqXqm5iRYmWIUI0c
WCRAM9AYyM3Tnw7nnPxVMPpDbR7zdmGjKHgqRKIe+D889YBWNaFXxJNa+c/zYHtn
IBgcQ6kU8kwtEQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:41 2025 by rpki-client