Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
File:                     pKN763_WXKqa_EbZ8kJzzSfA-WA.mft (raw, json)
Hash identifier:          jBlaUKtnbxDMvYslw1ucbAkJu/JbyTuC/C8ZKC9e+/k=
Subject key identifier:   90:BD:CC:82:BE:FA:68:E1:A8:A5:D5:C9:DD:E3:65:0D:60:FC:1D:A7
Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
Certificate issuer:       /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Certificate serial:       0199FCC6A698C749E732EE7D08C4973282C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 14:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:41 +0000
Files and hashes:         1: eZY2teiRCMuc8ordB3siE6vvyrU.roa (hash: eYVuxyQrp/ArDQADFzcG2OxANFHCCc8GbHzB/2LAyF8=)
                          2: pKN763_WXKqa_EbZ8kJzzSfA-WA.crl (hash: 6jfhVnbNT6WMhpb2yTDGcv5WVOatKqqkPbgQMQmFfFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:a6:98:c7:49:e7:32:ee:7d:08:c4:97:32:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
        Validity
            Not Before: Oct 19 14:01:41 2025 GMT
            Not After : Oct 20 14:01:41 2025 GMT
        Subject: CN=90bdcc82befa68e1a8a5d5c9dde3650d60fc1da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:61:a7:9c:a7:e4:40:ab:38:6b:8c:e1:66:
                    75:a7:64:31:da:56:9e:bc:96:f1:31:24:04:fd:c6:
                    13:1e:2b:70:18:33:bd:4f:55:91:84:e8:53:d3:53:
                    b9:3b:21:67:07:48:0d:fe:97:4e:b6:9f:8d:8b:da:
                    08:93:eb:8c:c7:78:ca:3b:d5:e7:c9:dd:12:14:70:
                    7d:d0:db:90:92:2e:7d:ad:4d:5c:f3:de:7d:fa:f2:
                    df:f5:fb:3e:25:8d:a9:7b:eb:71:6c:d4:06:10:da:
                    24:c3:57:55:1f:6b:9f:18:32:ba:0f:81:bd:61:2f:
                    a8:df:68:bb:57:7b:3e:41:14:2d:09:a2:30:84:53:
                    3d:8e:6a:9c:bf:5c:f9:19:c7:f8:a8:43:4a:71:75:
                    9e:15:70:85:0f:09:45:2c:16:a1:e8:2e:5e:ba:39:
                    0b:96:6b:9e:e0:2a:db:16:63:e1:99:ee:7c:f0:11:
                    a7:bc:bf:45:43:80:cf:ba:c6:1d:7d:b7:a8:81:cb:
                    04:b2:a3:96:7d:fd:62:dd:91:09:4b:df:ef:84:7a:
                    0f:9a:58:8f:5f:37:cd:11:55:d9:74:02:4f:b7:3e:
                    85:71:ca:01:34:94:62:8f:79:e3:1d:17:8f:b6:72:
                    e3:bb:23:f5:d8:e1:0a:28:af:37:05:8d:cc:de:ea:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BD:CC:82:BE:FA:68:E1:A8:A5:D5:C9:DD:E3:65:0D:60:FC:1D:A7
            X509v3 Authority Key Identifier:
                keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:71:6c:61:6c:1f:cc:f7:59:4d:58:51:c8:2d:80:22:f0:c8:
         6b:2e:90:28:e1:4c:c2:de:3e:6a:2a:29:4e:4f:0f:4f:fa:14:
         77:07:42:5d:c5:d2:a2:60:e2:5e:0f:ec:30:cf:05:f5:f0:dc:
         c0:fe:1c:7d:b9:c6:d0:d8:a6:02:68:bd:a1:df:b7:fa:a7:3b:
         5d:d5:e0:4d:fa:b4:4b:71:70:b5:1a:c2:f1:d6:71:38:42:e6:
         a1:66:07:8e:21:fd:36:b6:b7:51:90:d7:c7:2d:25:86:61:eb:
         ec:b1:c9:84:3e:ea:f9:a4:14:be:da:79:d8:42:d6:98:08:ac:
         48:7b:95:eb:22:d7:13:3d:3d:52:1a:f8:ca:e6:e8:8f:02:c3:
         4f:67:31:07:01:ea:f6:de:b5:32:c6:aa:48:e8:71:b7:9b:12:
         31:71:25:d7:42:40:81:ea:7d:2d:fe:f4:3f:7d:d4:49:53:e5:
         58:db:d4:6b:33:f7:d7:a5:21:37:ed:b1:18:63:de:da:f1:c1:
         a9:cf:7b:82:8a:65:49:44:16:0d:91:45:36:03:b6:25:7f:06:
         3c:fb:fe:a8:91:4a:08:c9:d8:fd:e2:ec:63:c1:b7:24:88:86:
         14:2f:01:ff:6f:15:07:a5:f2:e0:37:94:ec:e1:40:4f:04:37:
         0e:11:b9:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xqaYx0nnMu59CMSXMoLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTM3YmViN2ZkNjVjYWE5YWZjNDZkOWYyNDI3M2NkMjdj
MGY5NjAwHhcNMjUxMDE5MTQwMTQxWhcNMjUxMDIwMTQwMTQxWjAzMTEwLwYDVQQD
Eyg5MGJkY2M4MmJlZmE2OGUxYThhNWQ1YzlkZGUzNjUwZDYwZmMxZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMJhp5yn5ECrOGuM4WZ1p2Qx2lae
vJbxMSQE/cYTHitwGDO9T1WRhOhT01O5OyFnB0gN/pdOtp+Ni9oIk+uMx3jKO9Xn
yd0SFHB90NuQki59rU1c8959+vLf9fs+JY2pe+txbNQGENokw1dVH2ufGDK6D4G9
YS+o32i7V3s+QRQtCaIwhFM9jmqcv1z5Gcf4qENKcXWeFXCFDwlFLBah6C5eujkL
lmue4CrbFmPhme588BGnvL9FQ4DPusYdfbeogcsEsqOWff1i3ZEJS9/vhHoPmliP
XzfNEVXZdAJPtz6FccoBNJRij3njHRePtnLjuyP12OEKKK83BY3M3upTewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJC9zIK++mjhqKXVyd3jZQ1g/B2nMB8GA1UdIwQY
MBaAFKSje+t/1lyqmvxG2fJCc80nwPlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtONzYzX1dYS3FhX0ViWjhrSnp6U2ZBLVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mNDQwZGUtMTU5Mi00NThjLWFhYTMt
N2M0NzI0MWMwYTg0LzEvcEtONzYzX1dYS3FhX0ViWjhrSnp6U2ZBLVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9mNDQwZGUtMTU5Mi00NThjLWFhYTMtN2M0NzI0MWMwYTg0
LzEvcEtONzYzX1dYS3FhX0ViWjhrSnp6U2ZBLVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3FsYWwf
zPdZTVhRyC2AIvDIay6QKOFMwt4+aiopTk8PT/oUdwdCXcXSomDiXg/sMM8F9fDc
wP4cfbnG0NimAmi9od+3+qc7XdXgTfq0S3FwtRrC8dZxOELmoWYHjiH9Nra3UZDX
xy0lhmHr7LHJhD7q+aQUvtp52ELWmAisSHuV6yLXEz09Uhr4yubojwLDT2cxBwHq
9t61MsaqSOhxt5sSMXEl10JAgep9Lf70P33USVPlWNvUazP316UhN+2xGGPe2vHB
qc97goplSUQWDZFFNgO2JX8GPPv+qJFKCMnY/eLsY8G3JIiGFC8B/28VB6Xy4DeU
7OFATwQ3DhG5/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:15 2025 by rpki-client