Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
File:                     dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft (raw, json)
Hash identifier:          7ztmjVUvf7cfrNvEJV+jeaHzRzSq2/82y2k0HkDjHvU=
Subject key identifier:   11:73:5B:1D:26:4B:09:4F:2C:3A:92:CD:26:F7:A4:65:7B:89:9F:1F
Authority key identifier: 75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D
Certificate issuer:       /CN=75535bade37a3d6fc380442a285e157b984ca91d
Certificate serial:       0199FCC60936AC894ACF88815762847191AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 14:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:00 +0000
Files and hashes:         1: 3DXXEnpw8Kq8exXKbL27_UtPX4M.roa (hash: PH+r8FXGuNWkdvccxwTfvbjUFdbtdPYMtKDMmyDHBUw=)
                          2: dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl (hash: DFqwQnhgHzVJTewZ/u4csJION7QjMp4u3nBvvS9n+VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:09:36:ac:89:4a:cf:88:81:57:62:84:71:91:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75535bade37a3d6fc380442a285e157b984ca91d
        Validity
            Not Before: Oct 19 14:01:00 2025 GMT
            Not After : Oct 20 14:01:00 2025 GMT
        Subject: CN=11735b1d264b094f2c3a92cd26f7a4657b899f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:f5:bd:01:2a:13:2c:35:05:c2:76:45:5a:
                    38:52:5d:45:6b:2f:f0:5f:7e:3b:17:7b:59:b6:6f:
                    f3:a6:d0:18:96:5d:c3:0d:ff:ee:2c:55:da:9d:20:
                    35:c0:16:28:4a:5e:84:a4:b0:e8:de:93:28:92:8e:
                    01:4d:5e:79:9a:7b:37:e5:20:02:69:c6:d8:4f:6d:
                    df:72:d7:99:40:40:38:d1:4e:c7:91:24:ce:71:2c:
                    1a:8e:6e:de:d2:14:98:a4:23:bd:41:a5:47:32:7c:
                    52:f9:65:5f:8b:d5:06:38:0b:d1:b7:f8:41:c0:24:
                    0a:0f:cd:7a:e8:2b:39:6a:47:e7:35:5b:62:f5:be:
                    88:fb:b0:a8:29:17:7a:50:12:6a:f7:25:91:75:96:
                    5b:4d:c8:c2:34:91:01:cd:f9:a5:24:e7:1a:10:d7:
                    94:20:e0:d7:77:0b:da:82:05:a1:7b:78:f9:c9:da:
                    eb:70:a0:b5:89:dc:e8:8a:ee:c9:0b:08:45:33:06:
                    dc:e0:14:8c:ad:69:ce:8b:39:00:da:15:4f:67:31:
                    11:7e:26:c6:04:a6:d2:a1:cd:8a:27:0f:86:8b:a5:
                    f5:91:f0:f0:73:48:2e:45:39:6b:d0:aa:c9:43:45:
                    57:7d:fc:20:ca:8e:22:f9:da:67:cc:39:98:b8:d9:
                    3a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:73:5B:1D:26:4B:09:4F:2C:3A:92:CD:26:F7:A4:65:7B:89:9F:1F
            X509v3 Authority Key Identifier:
                keyid:75:53:5B:AD:E3:7A:3D:6F:C3:80:44:2A:28:5E:15:7B:98:4C:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVNbreN6PW_DgEQqKF4Ve5hMqR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2f339b-f19f-452f-88be-29ffc4443901/1/dVNbreN6PW_DgEQqKF4Ve5hMqR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e9:a1:7f:f3:9b:c7:ee:48:57:32:47:1f:1a:a2:e3:0c:dc:
         00:4c:5d:b4:23:ff:cc:ca:d9:b9:be:a8:c6:f7:ce:55:a8:89:
         cc:21:71:e1:46:4b:7a:fd:ff:96:ee:12:d1:17:99:cf:25:05:
         d7:a0:91:cb:a4:ec:60:84:cb:ca:4d:f4:f6:a3:67:e5:f6:7f:
         31:bc:95:52:61:2d:06:fe:25:78:52:51:27:ca:33:34:3a:ce:
         3e:26:2a:d3:c4:6a:ea:1a:e0:4f:88:51:7e:d4:14:73:fc:95:
         62:b3:e2:a4:f7:f2:34:2f:f8:ba:28:1e:b9:10:4e:9a:11:bb:
         c2:c9:b5:a9:88:f7:a7:a3:bc:19:75:a4:8c:9d:2c:19:66:58:
         ce:dc:c9:c5:23:73:d6:c7:2a:a5:0b:82:c0:08:df:1d:af:b0:
         4d:b1:fc:9f:9e:1b:d5:2f:37:7e:f0:b2:87:2d:92:0b:f1:a2:
         ee:0c:eb:9b:99:84:a4:1d:57:60:3f:b3:0c:06:b2:9d:21:9c:
         35:5a:8b:0b:fd:0c:6e:ba:53:7b:1c:62:bb:74:96:38:5f:06:
         d5:70:93:c0:42:58:42:cf:1b:53:cb:a2:e9:20:64:6c:70:35:
         e4:6a:f5:10:4b:ba:14:0d:6e:63:cc:90:8d:14:77:d1:12:f9:
         36:41:21:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xgk2rIlKz4iBV2KEcZGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NTM1YmFkZTM3YTNkNmZjMzgwNDQyYTI4NWUxNTdiOTg0
Y2E5MWQwHhcNMjUxMDE5MTQwMTAwWhcNMjUxMDIwMTQwMTAwWjAzMTEwLwYDVQQD
EygxMTczNWIxZDI2NGIwOTRmMmMzYTkyY2QyNmY3YTQ2NTdiODk5ZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EP1vQEqEyw1BcJ2RVo4Ul1Fay/w
X347F3tZtm/zptAYll3DDf/uLFXanSA1wBYoSl6EpLDo3pMoko4BTV55mns35SAC
acbYT23fcteZQEA40U7HkSTOcSwajm7e0hSYpCO9QaVHMnxS+WVfi9UGOAvRt/hB
wCQKD8166Cs5akfnNVti9b6I+7CoKRd6UBJq9yWRdZZbTcjCNJEBzfmlJOcaENeU
IODXdwvaggWhe3j5ydrrcKC1idzoiu7JCwhFMwbc4BSMrWnOizkA2hVPZzERfibG
BKbSoc2KJw+Gi6X1kfDwc0guRTlr0KrJQ0VXffwgyo4i+dpnzDmYuNk6RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFzWx0mSwlPLDqSzSb3pGV7iZ8fMB8GA1UdIwQY
MBaAFHVTW63jej1vw4BEKiheFXuYTKkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUt
MjlmZmM0NDQzOTAxLzEvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yZjMzOWItZjE5Zi00NTJmLTg4YmUtMjlmZmM0NDQzOTAx
LzEvZFZOYnJlTjZQV19EZ0VRcUtGNFZlNWhNcVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHemhf/Ob
x+5IVzJHHxqi4wzcAExdtCP/zMrZub6oxvfOVaiJzCFx4UZLev3/lu4S0ReZzyUF
16CRy6TsYITLyk309qNn5fZ/MbyVUmEtBv4leFJRJ8ozNDrOPiYq08Rq6hrgT4hR
ftQUc/yVYrPipPfyNC/4uigeuRBOmhG7wsm1qYj3p6O8GXWkjJ0sGWZYztzJxSNz
1scqpQuCwAjfHa+wTbH8n54b1S83fvCyhy2SC/Gi7gzrm5mEpB1XYD+zDAaynSGc
NVqLC/0MbrpTexxiu3SWOF8G1XCTwEJYQs8bU8ui6SBkbHA15Gr1EEu6FA1uY8yQ
jRR30RL5NkEhpw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:27 2025 by rpki-client