Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
File:                     AnTQhnltTXea0WTCTCI_JrMoTtQ.mft (raw, json)
Hash identifier:          U8kgW8hTaRJdEkGF6e5TkIZp/3/FtINYt3zCvOxYsuY=
Subject key identifier:   DB:58:E7:65:0A:E3:97:99:65:B2:3A:A2:BD:ED:94:FE:A7:DE:C1:AC
Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Certificate issuer:       /CN=0274d086796d4d779ad164c24c223f26b3284ed4
Certificate serial:       0199FC8F8AE4B7E1C02F974DEAC40175E0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 13:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:29 +0000
Files and hashes:         1: AnTQhnltTXea0WTCTCI_JrMoTtQ.crl (hash: /MuDzhKGxLN+uF53qYP0TXMkiWVZcar6rrFUMeSdE9k=)
                          2: t14W6NV1DIvb11EAZ4XUA2ovVHE.roa (hash: zVqRh34b+6mC5A8sW6DvCRtqqP+h65EGfBsPI/G1bUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:8a:e4:b7:e1:c0:2f:97:4d:ea:c4:01:75:e0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4
        Validity
            Not Before: Oct 19 13:01:29 2025 GMT
            Not After : Oct 20 13:01:29 2025 GMT
        Subject: CN=db58e7650ae3979965b23aa2bded94fea7dec1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:43:3d:90:d0:e5:29:3d:5f:88:03:70:66:
                    fe:47:6c:b5:01:d7:8f:27:bd:bf:16:6b:a8:67:0f:
                    ca:82:06:73:ec:a0:4c:59:db:29:49:ab:42:92:21:
                    7b:76:b2:79:7b:d1:20:60:f3:33:32:2f:45:7b:06:
                    cf:b0:15:66:7d:b2:e2:f6:ae:57:c8:e3:c8:24:9a:
                    09:62:cd:dc:38:64:84:d0:1c:f4:3b:f8:b4:54:2b:
                    d5:58:2c:d8:a5:4e:c4:aa:b0:73:db:b3:a8:9b:88:
                    a4:7c:53:32:89:b2:47:f6:dc:5e:ac:4a:8e:c6:2e:
                    2a:66:bb:90:7d:72:75:64:27:85:76:e2:57:ea:a2:
                    fe:bc:88:88:ea:2d:36:05:36:32:ef:12:f3:d2:26:
                    08:bd:d5:27:ff:db:cd:29:f1:76:7f:7a:37:2d:b4:
                    7f:ce:23:ab:78:13:2b:1f:b8:cb:fb:40:94:a9:b4:
                    47:5d:68:8e:0e:c2:ee:88:3a:45:1f:13:51:ca:e6:
                    75:79:19:df:a7:10:37:7c:c2:9b:57:fc:88:e6:2d:
                    07:60:be:93:03:a8:97:bc:92:64:ea:a9:a1:4d:23:
                    46:fa:a7:7d:3b:fd:e4:94:6a:e7:22:91:6e:16:1f:
                    f0:36:c5:92:db:3c:cf:3a:21:31:28:0d:91:2b:65:
                    79:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:58:E7:65:0A:E3:97:99:65:B2:3A:A2:BD:ED:94:FE:A7:DE:C1:AC
            X509v3 Authority Key Identifier:
                keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9d:38:63:78:90:92:01:d8:27:ad:f2:46:fb:20:0b:46:60:
         73:63:16:cb:63:e2:22:b7:58:ca:51:86:19:bf:65:de:91:2b:
         fb:43:6c:b7:3b:07:95:89:5d:39:47:b1:1b:fc:4c:9d:20:d5:
         6f:c9:0a:d7:f2:ae:b0:d0:a5:e5:c3:de:cf:aa:60:48:4c:1b:
         7e:4d:1e:7f:39:e3:38:91:08:c8:1e:8f:9e:5e:70:c8:dc:3c:
         06:df:0a:e6:07:89:9a:bf:a8:26:0d:1c:33:9a:ed:f3:b5:a5:
         ae:c1:b7:da:e0:2b:c2:7f:86:8e:46:b4:aa:33:34:ed:fb:ea:
         2a:a9:16:c1:bb:f9:30:9e:fc:fc:be:8f:e5:fe:50:32:53:41:
         e7:b9:28:91:b5:a3:c2:8c:9b:9e:ca:17:1d:5b:46:5b:85:47:
         5f:71:72:1c:70:dd:4f:45:a7:74:4e:2b:7f:a5:2e:21:c1:4a:
         6f:ca:2c:38:0d:5c:9b:79:b6:a0:5e:2b:b4:35:a1:5c:3a:68:
         04:f0:db:91:cb:a0:1d:bf:85:b1:93:1c:83:17:2e:45:09:0d:
         32:ae:35:db:a1:dc:3f:4b:28:c9:3d:18:d7:d6:c3:c8:34:ad:
         41:de:45:cd:5e:93:75:4a:06:3f:4e:7d:18:b0:2b:85:ec:4c:
         f4:0b:15:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j4rkt+HAL5dN6sQBdeDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzRkMDg2Nzk2ZDRkNzc5YWQxNjRjMjRjMjIzZjI2YjMy
ODRlZDQwHhcNMjUxMDE5MTMwMTI5WhcNMjUxMDIwMTMwMTI5WjAzMTEwLwYDVQQD
EyhkYjU4ZTc2NTBhZTM5Nzk5NjViMjNhYTJiZGVkOTRmZWE3ZGVjMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw1DPZDQ5Sk9X4gDcGb+R2y1AdeP
J72/FmuoZw/KggZz7KBMWdspSatCkiF7drJ5e9EgYPMzMi9FewbPsBVmfbLi9q5X
yOPIJJoJYs3cOGSE0Bz0O/i0VCvVWCzYpU7EqrBz27Oom4ikfFMyibJH9txerEqO
xi4qZruQfXJ1ZCeFduJX6qL+vIiI6i02BTYy7xLz0iYIvdUn/9vNKfF2f3o3LbR/
ziOreBMrH7jL+0CUqbRHXWiODsLuiDpFHxNRyuZ1eRnfpxA3fMKbV/yI5i0HYL6T
A6iXvJJk6qmhTSNG+qd9O/3klGrnIpFuFh/wNsWS2zzPOiExKA2RK2V5YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtY52UK45eZZbI6or3tlP6n3sGsMB8GA1UdIwQY
MBaAFAJ00IZ5bU13mtFkwkwiPyazKE7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83NTE5NTgtYWJlYi00NTllLTgxNDEt
Yjk1NTIwYzg3MmM1LzEvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC83NTE5NTgtYWJlYi00NTllLTgxNDEtYjk1NTIwYzg3MmM1
LzEvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJ04Y3iQ
kgHYJ63yRvsgC0Zgc2MWy2PiIrdYylGGGb9l3pEr+0NstzsHlYldOUexG/xMnSDV
b8kK1/KusNCl5cPez6pgSEwbfk0efznjOJEIyB6Pnl5wyNw8Bt8K5geJmr+oJg0c
M5rt87WlrsG32uArwn+Gjka0qjM07fvqKqkWwbv5MJ78/L6P5f5QMlNB57kokbWj
woybnsoXHVtGW4VHX3FyHHDdT0WndE4rf6UuIcFKb8osOA1cm3m2oF4rtDWhXDpo
BPDbkcugHb+FsZMcgxcuRQkNMq4126HcP0soyT0Y19bDyDStQd5FzV6TdUoGP059
GLArhexM9AsVHw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:26 2025 by rpki-client