Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
File:                     T02gn7vpD7efDwiyB_g18PDaKf4.mft (raw, json)
Hash identifier:          gAfEOc8dpQt8k/UQ4yWsNFBqAcScv7hADdMCugsaPUM=
Subject key identifier:   6B:0A:7E:A2:5D:F2:13:2C:F5:E9:9D:42:11:F2:1B:FB:A9:DA:F5:92
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Certificate issuer:       /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial:       0199FC58F3D585032D082020A543A2C1F181
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 12:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:51 +0000
Files and hashes:         1: FuAE5x8IJALIfmhZTsiAE9-IbCg.roa (hash: MfUFICZEyn8ysR/zcHy2Sq4j5nmV7SDJce70wP8HCVI=)
                          2: T02gn7vpD7efDwiyB_g18PDaKf4.crl (hash: 2nGr+iOC1sPm5Ou7m5gVffLHSW1VSLJM4CbR30xInuE=)
                          3: gdPSlZVyk0yt_ww6hr6rZwJTSYc.roa (hash: BWCu7uf0+bhsgilLRDC1frTnR4k0Kb5AA6w389paaDU=)
                          4: iBqZQWjVBdiULjEjYkpA4wqz2gQ.roa (hash: 5JOBo54X9w8ocNdk7qTuaglinouKKSJrSomDV8exe9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:f3:d5:85:03:2d:08:20:20:a5:43:a2:c1:f1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
        Validity
            Not Before: Oct 19 12:01:51 2025 GMT
            Not After : Oct 20 12:01:51 2025 GMT
        Subject: CN=6b0a7ea25df2132cf5e99d4211f21bfba9daf592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:24:39:c1:48:09:eb:16:0c:cd:5a:52:11:
                    84:ce:9c:b1:f5:2e:70:cb:ce:6b:7e:1d:3b:07:27:
                    82:a5:9c:e4:97:30:5f:1e:51:2d:45:d6:a3:77:3c:
                    25:7e:3c:7c:06:14:18:f0:2b:b1:e1:c6:72:a0:3f:
                    8e:c1:02:a0:7f:45:b1:a2:4e:a9:29:ad:3f:89:97:
                    cd:f2:d8:27:25:fb:48:44:70:6d:c2:e7:8d:7f:65:
                    ea:ac:19:1f:3a:ba:c6:5f:1a:33:67:eb:ed:6b:9c:
                    4c:d9:91:cf:83:bf:ff:96:7b:bf:61:3b:36:30:91:
                    93:b3:cc:01:06:b2:93:2b:48:ca:fc:ae:c2:bd:72:
                    ea:58:86:36:87:96:6d:f2:fc:e8:2d:97:ec:f4:58:
                    83:c3:f8:c2:92:82:b9:6d:bc:14:68:cc:b9:51:da:
                    f2:a8:01:ca:bc:97:4a:65:10:cd:25:14:b8:a3:d8:
                    63:bc:2b:64:d0:40:bb:a0:ea:c7:a7:3f:2f:ed:ca:
                    69:e5:f1:8d:27:8f:f8:be:2a:00:a8:04:5d:a0:40:
                    7d:89:3f:7d:83:ae:96:81:91:48:7e:d6:1e:f3:13:
                    b9:cf:2c:fd:a6:9f:99:af:ac:ef:cf:ea:fb:e8:18:
                    7b:bd:24:92:c8:51:49:ee:a4:4f:24:e2:e7:35:d9:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0A:7E:A2:5D:F2:13:2C:F5:E9:9D:42:11:F2:1B:FB:A9:DA:F5:92
            X509v3 Authority Key Identifier:
                keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:68:db:04:bf:27:32:4f:fb:e4:b3:8f:46:7f:15:e6:0e:bc:
         ea:22:f9:b6:f0:9f:a9:14:e8:c2:16:ee:9b:d9:f4:4c:90:7f:
         33:02:81:34:45:1b:2a:0f:f2:43:74:4f:60:0e:63:e7:19:76:
         4c:e9:c6:73:11:ad:02:c2:da:69:57:ff:10:4f:89:b7:b4:70:
         c8:92:3c:8f:a5:18:b7:29:47:c7:06:c8:8d:ee:0d:dd:74:98:
         ba:4c:9f:45:09:11:88:b2:e1:49:2a:90:fa:ff:e2:e1:e0:5a:
         7a:ab:0c:78:e0:7f:50:06:20:65:4a:b8:a8:ab:cf:95:8d:f5:
         52:96:cf:df:c4:94:e3:db:ad:17:a1:09:ad:ff:98:4e:46:b6:
         3e:67:90:45:04:42:c5:9f:1e:a1:8e:fe:05:0f:d3:37:aa:67:
         05:aa:a2:14:72:bd:c6:ff:84:bf:28:63:6b:c5:a7:22:31:23:
         87:70:6a:8e:fa:02:35:5f:13:62:79:13:ba:39:2c:33:97:46:
         8c:94:d9:f1:c9:60:85:b7:b6:20:74:72:d4:a3:82:d1:c4:3d:
         ff:28:a0:d3:c8:2d:47:82:62:e4:57:29:90:b4:d3:c6:07:a8:
         65:06:e6:7e:0d:07:d1:ad:38:6c:22:80:cd:af:9a:6a:0e:34:
         35:0e:a0:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPPVhQMtCCAgpUOiwfGBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNGRhMDlmYmJlOTBmYjc5ZjBmMDhiMjA3ZjgzNWYwZjBk
YTI5ZmUwHhcNMjUxMDE5MTIwMTUxWhcNMjUxMDIwMTIwMTUxWjAzMTEwLwYDVQQD
Eyg2YjBhN2VhMjVkZjIxMzJjZjVlOTlkNDIxMWYyMWJmYmE5ZGFmNTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu0kOcFICesWDM1aUhGEzpyx9S5w
y85rfh07ByeCpZzklzBfHlEtRdajdzwlfjx8BhQY8Cux4cZyoD+OwQKgf0Wxok6p
Ka0/iZfN8tgnJftIRHBtwueNf2XqrBkfOrrGXxozZ+vta5xM2ZHPg7//lnu/YTs2
MJGTs8wBBrKTK0jK/K7CvXLqWIY2h5Zt8vzoLZfs9FiDw/jCkoK5bbwUaMy5Udry
qAHKvJdKZRDNJRS4o9hjvCtk0EC7oOrHpz8v7cpp5fGNJ4/4vioAqARdoEB9iT99
g66WgZFIftYe8xO5zyz9pp+Zr6zvz+r76Bh7vSSSyFFJ7qRPJOLnNdnUqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsKfqJd8hMs9emdQhHyG/up2vWSMB8GA1UdIwQY
MBaAFE9NoJ+76Q+3nw8Isgf4NfDw2in+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTIt
NmVhOTRhOTYxZDRjLzEvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82NmJkM2EtNTEyMS00OTBkLThjOTItNmVhOTRhOTYxZDRj
LzEvVDAyZ243dnBEN2VmRHdpeUJfZzE4UERhS2Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGjbBL8n
Mk/75LOPRn8V5g686iL5tvCfqRTowhbum9n0TJB/MwKBNEUbKg/yQ3RPYA5j5xl2
TOnGcxGtAsLaaVf/EE+Jt7RwyJI8j6UYtylHxwbIje4N3XSYukyfRQkRiLLhSSqQ
+v/i4eBaeqsMeOB/UAYgZUq4qKvPlY31UpbP38SU49utF6EJrf+YTka2PmeQRQRC
xZ8eoY7+BQ/TN6pnBaqiFHK9xv+Evyhja8WnIjEjh3BqjvoCNV8TYnkTujksM5dG
jJTZ8clghbe2IHRy1KOC0cQ9/yig08gtR4Ji5FcpkLTTxgeoZQbmfg0H0a04bCKA
za+aag40NQ6gsA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:54 2025 by rpki-client