Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
File:                     _AUWm-THSVJnJZffED7rG0e7aKM.mft (raw, json)
Hash identifier:          t5r66+eAjHLEt3++rrFsg5XVjLErlCyRJgH8vWckFI0=
Subject key identifier:   E0:2F:89:9E:14:15:C8:12:39:11:C9:7C:0E:64:BC:76:50:B8:B6:2D
Authority key identifier: FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3
Certificate issuer:       /CN=fc05169be4c74952672597df103eeb1b47bb68a3
Certificate serial:       0199FC8F26E751CAD121CABC4503C6A3B53C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
Manifest number:          1660
Signing time:             Sun 19 Oct 2025 13:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:04 +0000
Files and hashes:         1: _AUWm-THSVJnJZffED7rG0e7aKM.crl (hash: gJUPKPOfGuwPBYJb3ZgkYCZ/fw36oudoEEkVQ+Fw74g=)
                          2: qjBjdrunKiTcPXqIE7s1xh7dwEw.roa (hash: uHoSIY7qke5jgdqqvLbgYTxS1uVZNz+Tj5AJ31INqCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:26:e7:51:ca:d1:21:ca:bc:45:03:c6:a3:b5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc05169be4c74952672597df103eeb1b47bb68a3
        Validity
            Not Before: Oct 19 13:01:04 2025 GMT
            Not After : Oct 20 13:01:04 2025 GMT
        Subject: CN=e02f899e1415c8123911c97c0e64bc7650b8b62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fe:05:80:bf:26:31:ad:1a:43:86:7b:c1:9a:
                    9d:f9:f3:a5:97:96:ad:ad:81:46:5d:9e:b1:b7:a9:
                    bf:6c:0c:8a:21:df:12:e7:b3:d2:f4:63:1b:de:21:
                    3d:86:0f:29:21:7f:06:8e:19:8e:99:22:fa:00:9a:
                    10:35:5c:5d:22:dd:96:80:8b:48:d1:e1:61:69:a2:
                    4d:f1:c2:57:98:a2:57:cc:c6:e4:81:0b:7a:f9:30:
                    13:9f:e1:f1:97:61:60:1a:e1:95:f0:b4:f5:68:60:
                    e8:5e:2d:21:84:ab:92:2a:75:65:25:55:73:19:f5:
                    be:52:43:5f:55:07:9b:ed:02:fa:74:a0:86:cf:bd:
                    48:74:d7:3d:d1:31:2a:7f:25:89:9a:ea:57:9e:d7:
                    68:5c:3e:5f:68:bc:ea:3c:7f:5d:1b:be:d0:ab:c5:
                    05:0f:1d:2a:28:40:8b:33:f9:3f:15:de:e0:af:ac:
                    ae:79:f1:1f:60:b1:d3:70:27:0e:0e:71:39:b1:7e:
                    7c:3b:14:28:ce:a5:39:95:62:3d:a8:a1:76:a7:20:
                    04:53:08:ec:7a:75:79:87:a4:8e:8b:40:56:2d:d5:
                    46:76:c1:81:f3:45:f0:1e:9b:e0:05:c0:ae:fc:20:
                    20:60:d0:dc:71:97:ef:b4:dd:05:a4:48:37:27:98:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2F:89:9E:14:15:C8:12:39:11:C9:7C:0E:64:BC:76:50:B8:B6:2D
            X509v3 Authority Key Identifier:
                keyid:FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f8:9a:ed:db:f8:ed:8f:2a:13:d2:41:e7:72:ad:54:fb:10:
         f6:79:1b:de:65:0a:2c:b9:86:63:65:64:85:2d:df:85:b9:0a:
         a5:40:83:7c:03:15:bc:fb:76:b0:64:1c:3c:95:89:dd:19:84:
         d0:0e:46:1d:17:c1:af:b7:e9:02:e4:d9:32:bb:2f:b6:6e:f8:
         64:82:79:0b:e5:c5:70:b5:a4:be:6a:49:17:41:76:4a:b8:00:
         16:d5:6d:80:3b:d3:96:5f:47:5e:9c:c9:7e:b2:11:31:ba:5a:
         ed:4e:e2:48:52:19:c5:c5:c1:da:ae:89:c9:12:74:07:69:07:
         d2:15:29:6e:08:08:cb:d1:1c:29:40:8e:8f:27:00:01:6f:0e:
         a9:cb:0e:96:d2:ed:3b:76:b6:fe:aa:ad:48:9d:f5:a3:d5:78:
         a1:a5:4d:c4:f7:f6:f6:86:67:0c:a8:5c:cc:0f:bd:96:28:d0:
         af:52:f8:11:4c:ef:2e:37:b5:07:8e:65:98:45:16:b7:f7:6d:
         28:0e:4c:3f:a8:1b:50:60:54:7d:cc:4b:f4:fa:f9:cb:f5:27:
         1a:1f:af:2d:5b:3f:50:17:04:0d:e6:89:26:97:e5:1c:4e:da:
         6f:0f:42:ae:7e:75:25:44:aa:20:88:70:63:bd:5f:62:af:00:
         1d:3d:59:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jybnUcrRIcq8RQPGo7U8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDUxNjliZTRjNzQ5NTI2NzI1OTdkZjEwM2VlYjFiNDdi
YjY4YTMwHhcNMjUxMDE5MTMwMTA0WhcNMjUxMDIwMTMwMTA0WjAzMTEwLwYDVQQD
EyhlMDJmODk5ZTE0MTVjODEyMzkxMWM5N2MwZTY0YmM3NjUwYjhiNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v4FgL8mMa0aQ4Z7wZqd+fOll5at
rYFGXZ6xt6m/bAyKId8S57PS9GMb3iE9hg8pIX8GjhmOmSL6AJoQNVxdIt2WgItI
0eFhaaJN8cJXmKJXzMbkgQt6+TATn+Hxl2FgGuGV8LT1aGDoXi0hhKuSKnVlJVVz
GfW+UkNfVQeb7QL6dKCGz71IdNc90TEqfyWJmupXntdoXD5faLzqPH9dG77Qq8UF
Dx0qKECLM/k/Fd7gr6yuefEfYLHTcCcODnE5sX58OxQozqU5lWI9qKF2pyAEUwjs
enV5h6SOi0BWLdVGdsGB80XwHpvgBcCu/CAgYNDccZfvtN0FpEg3J5g5bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAviZ4UFcgSORHJfA5kvHZQuLYtMB8GA1UdIwQY
MBaAFPwFFpvkx0lSZyWX3xA+6xtHu2ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FVV20tVEhTVkpuSlpmZkVEN3JHMGU3YUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNTliYWYtMTEzZS00NjBiLTkzZTct
MzM4YTk4YTFkOWNiLzEvX0FVV20tVEhTVkpuSlpmZkVEN3JHMGU3YUtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iNTliYWYtMTEzZS00NjBiLTkzZTctMzM4YTk4YTFkOWNi
LzEvX0FVV20tVEhTVkpuSlpmZkVEN3JHMGU3YUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfia7dv4
7Y8qE9JB53KtVPsQ9nkb3mUKLLmGY2VkhS3fhbkKpUCDfAMVvPt2sGQcPJWJ3RmE
0A5GHRfBr7fpAuTZMrsvtm74ZIJ5C+XFcLWkvmpJF0F2SrgAFtVtgDvTll9HXpzJ
frIRMbpa7U7iSFIZxcXB2q6JyRJ0B2kH0hUpbggIy9EcKUCOjycAAW8OqcsOltLt
O3a2/qqtSJ31o9V4oaVNxPf29oZnDKhczA+9lijQr1L4EUzvLje1B45lmEUWt/dt
KA5MP6gbUGBUfcxL9Pr5y/UnGh+vLVs/UBcEDeaJJpflHE7abw9Crn51JUSqIIhw
Y71fYq8AHT1ZeQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:44 2025 by rpki-client