Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
File:                     eWp37lLc7VJziTpxudvKPG6WSV8.mft (raw, json)
Hash identifier:          2ns3yCKy9DsFkSf4jNGk8fKNJKLpOUnctAmzksccxA8=
Subject key identifier:   91:5F:75:B5:95:6C:BF:5A:22:C5:E4:90:8A:F2:40:67:91:E7:B6:76
Authority key identifier: 79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F
Certificate issuer:       /CN=796a77ee52dced5273893a71b9dbca3c6e96495f
Certificate serial:       0199FCC67DD037B1BC2EFF88CF7F95F1082E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 14:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:30 +0000
Files and hashes:         1: Z9imWMQXkDi3hSx8syS_S0O-b7E.roa (hash: fD5IH9xgaO6rxM8nd7cbZSlPKfJCeSYGI2T6GSa1HgE=)
                          2: eWp37lLc7VJziTpxudvKPG6WSV8.crl (hash: 5NFIK53l3GV9tISoUpmS+E/JmW1csTY35xkaEHMP+go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:7d:d0:37:b1:bc:2e:ff:88:cf:7f:95:f1:08:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796a77ee52dced5273893a71b9dbca3c6e96495f
        Validity
            Not Before: Oct 19 14:01:30 2025 GMT
            Not After : Oct 20 14:01:30 2025 GMT
        Subject: CN=915f75b5956cbf5a22c5e4908af2406791e7b676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a0:96:35:47:63:c1:0e:27:de:5e:4b:01:47:
                    59:7b:a1:41:5a:a5:c8:0a:0e:62:41:5f:7b:e2:f7:
                    1d:51:90:29:e3:a6:09:e2:72:95:f7:1a:cd:e1:0d:
                    f0:44:60:75:9d:bf:6f:de:57:66:a5:e4:53:f4:24:
                    57:3c:7f:d5:2d:94:84:bc:1d:28:f4:0d:29:65:1f:
                    97:cb:f7:f6:80:7b:f6:8e:89:22:9d:ab:dd:5e:eb:
                    c8:c1:17:34:97:7e:56:b5:ef:2e:03:58:04:79:56:
                    1d:b0:0e:16:dc:0d:4f:a9:43:c6:cc:f6:a0:57:d9:
                    22:4d:05:e8:e3:1f:15:81:11:e3:75:bd:02:8b:1f:
                    30:b0:f2:d0:84:6b:e4:2b:5e:5a:81:47:a3:99:84:
                    60:4a:89:7d:15:e5:da:c0:77:ed:33:1f:01:60:a3:
                    3b:79:2b:9a:98:8f:e5:b0:4b:5c:69:f8:f6:69:f6:
                    d7:74:9d:42:5d:a5:9c:ad:ee:ca:aa:89:9f:ca:74:
                    5e:43:1e:45:3d:f8:08:0f:12:e3:47:6c:61:a7:7a:
                    8a:8a:88:b0:4d:5f:d1:56:bc:1e:86:3b:f9:16:f4:
                    7e:7e:50:50:13:ee:0f:8c:fc:bd:46:b5:d2:2e:96:
                    a1:a4:36:0d:12:43:ec:b6:34:69:c1:51:89:63:c6:
                    25:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5F:75:B5:95:6C:BF:5A:22:C5:E4:90:8A:F2:40:67:91:E7:B6:76
            X509v3 Authority Key Identifier:
                keyid:79:6A:77:EE:52:DC:ED:52:73:89:3A:71:B9:DB:CA:3C:6E:96:49:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWp37lLc7VJziTpxudvKPG6WSV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ea96bf-fa0d-42f7-8098-3f30ca086872/1/eWp37lLc7VJziTpxudvKPG6WSV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:8e:11:86:bb:fb:86:09:71:23:a0:b8:0d:f1:a5:ea:18:57:
         c6:8e:40:23:34:fc:cf:8a:e0:01:a6:97:e5:bd:e6:3c:2b:0d:
         bf:0d:30:2f:d7:4f:e4:37:99:9e:09:1c:6b:1e:b9:95:d1:21:
         34:7c:d3:3b:5f:0a:40:62:c0:f2:50:2b:d7:16:bb:2e:4f:b8:
         68:ac:e8:5a:bf:5b:4b:d0:cd:41:0a:d9:ea:2a:da:06:14:40:
         3b:4b:24:06:d1:2e:26:3f:f7:90:1f:f7:ab:08:3a:75:9b:d4:
         22:7e:73:bb:31:c4:c6:8b:fb:9c:6a:18:8a:2d:c3:e0:f3:3b:
         f5:ea:ba:a8:9a:81:bc:b1:77:38:2e:c3:af:0b:11:d6:e2:10:
         b1:fd:61:bb:4a:0c:e0:c6:40:b9:bb:8e:05:ac:61:75:a9:0e:
         7e:d5:df:68:26:4e:d9:f7:07:c4:c2:43:12:2b:50:68:f8:44:
         b0:01:00:15:a1:b3:54:96:44:5f:80:b3:ef:a9:cf:c9:8d:ee:
         bd:5c:be:60:fa:a1:19:4d:74:16:9e:11:ff:92:4c:cf:41:e1:
         c1:d9:26:f8:5e:a8:89:8b:03:ba:59:f5:c0:62:12:c9:d3:38:
         f4:16:d2:6c:ec:11:47:b6:31:3b:7b:d5:5f:6b:43:f6:66:58:
         4a:99:73:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xn3QN7G8Lv+Iz3+V8QguMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NmE3N2VlNTJkY2VkNTI3Mzg5M2E3MWI5ZGJjYTNjNmU5
NjQ5NWYwHhcNMjUxMDE5MTQwMTMwWhcNMjUxMDIwMTQwMTMwWjAzMTEwLwYDVQQD
Eyg5MTVmNzViNTk1NmNiZjVhMjJjNWU0OTA4YWYyNDA2NzkxZTdiNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKCWNUdjwQ4n3l5LAUdZe6FBWqXI
Cg5iQV974vcdUZAp46YJ4nKV9xrN4Q3wRGB1nb9v3ldmpeRT9CRXPH/VLZSEvB0o
9A0pZR+Xy/f2gHv2jokinavdXuvIwRc0l35Wte8uA1gEeVYdsA4W3A1PqUPGzPag
V9kiTQXo4x8VgRHjdb0Cix8wsPLQhGvkK15agUejmYRgSol9FeXawHftMx8BYKM7
eSuamI/lsEtcafj2afbXdJ1CXaWcre7KqomfynReQx5FPfgIDxLjR2xhp3qKioiw
TV/RVrwehjv5FvR+flBQE+4PjPy9RrXSLpahpDYNEkPstjRpwVGJY8YlYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFfdbWVbL9aIsXkkIryQGeR57Z2MB8GA1UdIwQY
MBaAFHlqd+5S3O1Sc4k6cbnbyjxulklfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lYTk2YmYtZmEwZC00MmY3LTgwOTgt
M2YzMGNhMDg2ODcyLzEvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lYTk2YmYtZmEwZC00MmY3LTgwOTgtM2YzMGNhMDg2ODcy
LzEvZVdwMzdsTGM3Vkp6aVRweHVkdktQRzZXU1Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ44Rhrv7
hglxI6C4DfGl6hhXxo5AIzT8z4rgAaaX5b3mPCsNvw0wL9dP5DeZngkcax65ldEh
NHzTO18KQGLA8lAr1xa7Lk+4aKzoWr9bS9DNQQrZ6iraBhRAO0skBtEuJj/3kB/3
qwg6dZvUIn5zuzHExov7nGoYii3D4PM79eq6qJqBvLF3OC7DrwsR1uIQsf1hu0oM
4MZAubuOBaxhdakOftXfaCZO2fcHxMJDEitQaPhEsAEAFaGzVJZEX4Cz76nPyY3u
vVy+YPqhGU10Fp4R/5JMz0Hhwdkm+F6oiYsDuln1wGISydM49BbSbOwRR7YxO3vV
X2tD9mZYSplzPg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:41 2025 by rpki-client