Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          axuTxyqmShtBFVC8P16qKpScJPVRrYDINcKU7ZwKNwA=
Subject key identifier:   D2:9E:C2:8E:BE:B4:54:A4:87:68:19:E9:8F:E1:FA:83:D5:35:A1:02
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       0199FB0F48B5BA69F539C0FB570E0D9114B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 06:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:46 +0000
Files and hashes:         1: 0Z0N7XcDaBDDIFuADZvveEOpnJw.roa (hash: gAUFpbijoaRws4OSpZQdGdoxqVjsxrfddgC/n57+l3g=)
                          2: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (hash: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=)
                          3: MeMsmYAnac73QikfwHpf4FiB8MA.roa (hash: w8cyx5Qe5TgkNbDbtB6QAHXf0+aV1FgiM053aALKsSg=)
                          4: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: rZaO9HausL92usRlPTZkp7Ninn4hRzsXc2f7q5VG2Ko=)
                          5: gBOr1K9o3G_sjVut4hTNYrOz3aw.roa (hash: WvCboN2sSwdfSWgLauEyXaJvvKZ2k+WSGckagpeMJcA=)
                          6: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (hash: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=)
                          7: vuTW0ftXsfvIWtL6nGLUGKWxAa0.roa (hash: vusAgJM4Fe2/TEz+SbhV7Z/ibEen3tJQhfA8nIe5Or8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:48:b5:ba:69:f5:39:c0:fb:57:0e:0d:91:14:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Oct 19 06:01:46 2025 GMT
            Not After : Oct 20 06:01:46 2025 GMT
        Subject: CN=d29ec28ebeb454a4876819e98fe1fa83d535a102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:9f:d9:9d:e9:e7:4c:18:73:f2:88:1a:2d:
                    20:3d:1e:33:79:97:9c:25:01:55:81:8b:f6:81:95:
                    af:0b:94:6d:07:07:9e:6b:af:cf:57:1f:be:5e:b2:
                    9e:06:48:7f:e2:1b:ec:07:00:b4:5a:4c:65:15:25:
                    a7:53:56:23:05:2c:4a:2a:3c:bc:a9:d9:21:b5:ae:
                    68:51:9d:c4:af:d5:aa:c2:f5:c1:04:2a:62:0e:e0:
                    81:e3:ae:23:6c:bd:de:a8:0d:92:0f:6d:0d:73:1a:
                    7a:e3:0d:88:0f:5c:fd:53:80:38:a9:55:21:4e:c5:
                    38:61:73:1f:6c:e7:1f:85:c9:3c:b2:9e:ea:a1:da:
                    5d:c8:10:24:99:c4:0d:58:28:59:29:35:f2:e9:1c:
                    f1:ec:73:3c:8f:13:5f:43:f9:9c:67:c9:51:c0:98:
                    35:76:bf:05:a7:f6:a9:9c:c6:8d:fc:b5:44:28:38:
                    cd:48:d1:4c:18:a3:1c:fa:e5:3b:fc:be:25:fd:d1:
                    28:10:ce:f9:fc:ea:96:31:5c:9f:f9:e4:dc:b4:83:
                    31:73:82:80:12:30:98:8e:e0:8b:f0:25:55:89:f1:
                    23:c0:3e:ef:18:0b:50:54:e9:4f:36:07:e4:81:33:
                    8b:92:0b:34:cb:48:af:12:8d:5c:a2:0c:7c:da:ce:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9E:C2:8E:BE:B4:54:A4:87:68:19:E9:8F:E1:FA:83:D5:35:A1:02
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5e:4c:d0:3a:53:88:18:29:58:d1:94:e7:55:1e:25:da:6e:
         d5:85:ef:4a:14:04:98:c2:91:05:77:64:68:b6:46:ef:22:43:
         8b:1e:4c:ff:15:c7:30:8d:56:01:8a:0e:65:5f:b7:bf:f0:46:
         54:f2:c8:b2:40:d3:87:c9:09:d2:2a:45:26:1d:e6:be:cc:63:
         89:61:c5:c2:22:92:f1:a4:53:7c:4f:e1:cf:60:2e:13:f1:1e:
         9b:6b:42:66:83:bd:f2:7d:ff:fd:cd:18:f3:f2:29:83:f7:9a:
         f0:8b:85:ba:9a:30:1a:60:84:06:15:1d:49:40:df:fa:f7:0c:
         f8:60:b4:2f:35:c7:5b:ed:c2:52:5c:10:6f:ff:d5:4c:13:08:
         aa:22:56:3f:a4:0e:c3:0b:92:ab:c3:7b:aa:41:8c:b9:8f:ab:
         30:be:ab:0d:f0:91:d0:72:bb:2b:9d:15:6a:3c:6c:0d:71:fc:
         9c:07:cb:0d:11:c4:42:2e:ad:7f:b0:61:40:72:22:93:8e:6d:
         a4:98:41:43:44:44:e2:89:25:90:14:b4:f3:da:bf:d3:79:8e:
         52:e4:8a:00:63:3e:ba:9d:0e:67:b3:fe:b3:e1:b1:70:11:a9:
         e8:df:a6:43:52:91:5b:e5:36:0a:83:58:f3:89:e2:12:b5:e5:
         44:1f:dd:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7D0i1umn1OcD7Vw4NkRS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTZjZWNmZmQ5YjhiYmExOGQ0NzRlN2IzOTkzZTBhMWQx
NGRiYjMwHhcNMjUxMDE5MDYwMTQ2WhcNMjUxMDIwMDYwMTQ2WjAzMTEwLwYDVQQD
EyhkMjllYzI4ZWJlYjQ1NGE0ODc2ODE5ZTk4ZmUxZmE4M2Q1MzVhMTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRyf2Z3p50wYc/KIGi0gPR4zeZec
JQFVgYv2gZWvC5RtBweea6/PVx++XrKeBkh/4hvsBwC0WkxlFSWnU1YjBSxKKjy8
qdkhta5oUZ3Er9WqwvXBBCpiDuCB464jbL3eqA2SD20Ncxp64w2ID1z9U4A4qVUh
TsU4YXMfbOcfhck8sp7qodpdyBAkmcQNWChZKTXy6Rzx7HM8jxNfQ/mcZ8lRwJg1
dr8Fp/apnMaN/LVEKDjNSNFMGKMc+uU7/L4l/dEoEM75/OqWMVyf+eTctIMxc4KA
EjCYjuCL8CVVifEjwD7vGAtQVOlPNgfkgTOLkgs0y0ivEo1cogx82s51WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKewo6+tFSkh2gZ6Y/h+oPVNaECMB8GA1UdIwQY
MBaAFD7mzs/9m4u6GNR057OZPgodFNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEt
NzMyNDkxMzk3NWQ1LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEtNzMyNDkxMzk3NWQ1
LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXF5M0DpT
iBgpWNGU51UeJdpu1YXvShQEmMKRBXdkaLZG7yJDix5M/xXHMI1WAYoOZV+3v/BG
VPLIskDTh8kJ0ipFJh3mvsxjiWHFwiKS8aRTfE/hz2AuE/Eem2tCZoO98n3//c0Y
8/Ipg/ea8IuFupowGmCEBhUdSUDf+vcM+GC0LzXHW+3CUlwQb//VTBMIqiJWP6QO
wwuSq8N7qkGMuY+rML6rDfCR0HK7K50VajxsDXH8nAfLDRHEQi6tf7BhQHIik45t
pJhBQ0RE4oklkBS089q/03mOUuSKAGM+up0OZ7P+s+GxcBGp6N+mQ1KRW+U2CoNY
84niErXlRB/dJw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:29 2025 by rpki-client