Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
File:                     YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft (raw, json)
Hash identifier:          r8pLk63SW/TS83l8MiKl8Bhmh7f/zXnGM/vXZimLzcQ=
Subject key identifier:   48:86:4C:FD:FE:31:31:F1:EA:C5:B6:3D:06:FB:5D:13:CC:06:80:71
Authority key identifier: 61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6
Certificate issuer:       /CN=614256ed38fb1e96944926db4c66c4d088acfbd6
Certificate serial:       0199FB7CE7A415FE5607FE9EF7D4FAADB67F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 08:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:30 +0000
Files and hashes:         1: BoZqZz072WMffBg633aOURbd2Lg.roa (hash: b9zcHNJaQ+Hj+ANj7i08VVN5oo2tzosCmEXhBWweaRk=)
                          2: YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl (hash: J5URtgtr7Au++V4Y4Cbgz7fVTyPw5nvZnek4Rh9K9sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:e7:a4:15:fe:56:07:fe:9e:f7:d4:fa:ad:b6:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614256ed38fb1e96944926db4c66c4d088acfbd6
        Validity
            Not Before: Oct 19 08:01:30 2025 GMT
            Not After : Oct 20 08:01:30 2025 GMT
        Subject: CN=48864cfdfe3131f1eac5b63d06fb5d13cc068071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:3d:cf:9b:e0:e3:71:49:e8:c2:c0:f7:bd:
                    92:72:3b:b8:a0:2c:2c:9d:70:7d:a0:bf:01:62:f0:
                    44:ff:e8:3f:27:9d:2f:6c:1f:87:db:c9:10:22:d2:
                    b2:d5:ee:02:6f:10:83:03:b8:89:52:9c:d1:76:66:
                    7e:55:cd:85:da:f3:d8:9e:91:6c:f8:f3:09:72:d6:
                    52:e3:67:5d:34:8e:81:a7:56:bf:a9:88:79:ec:ec:
                    be:82:2c:02:b8:23:28:96:62:c3:98:68:7d:49:43:
                    54:f6:a9:3a:46:5b:f3:c0:0d:a5:d8:11:09:e8:94:
                    58:60:2a:b5:91:90:b7:da:60:a6:e8:db:5b:92:df:
                    a2:4c:99:1c:e3:a4:24:cc:38:7e:f9:22:fc:ab:d2:
                    76:96:b7:6b:50:9d:d5:ef:1a:54:ae:59:57:3e:4d:
                    35:d0:31:0b:c8:8f:49:d4:a6:4a:be:de:11:e9:a6:
                    28:1e:99:64:5a:a5:69:02:08:fd:3e:e6:6c:5f:0e:
                    bb:02:0f:5f:0b:bc:46:6f:f6:76:6b:cb:9c:85:11:
                    20:5c:4c:27:12:cb:fa:b5:c0:07:9b:e8:dc:bd:d9:
                    1b:d6:0d:29:ca:4e:5d:05:08:f3:32:10:30:a0:17:
                    66:76:5f:54:56:d5:8b:88:e8:16:c8:69:4a:ad:83:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:86:4C:FD:FE:31:31:F1:EA:C5:B6:3D:06:FB:5D:13:CC:06:80:71
            X509v3 Authority Key Identifier:
                keyid:61:42:56:ED:38:FB:1E:96:94:49:26:DB:4C:66:C4:D0:88:AC:FB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fca369-6b85-4e03-ab71-68ba6c54ef9a/1/YUJW7Tj7HpaUSSbbTGbE0Iis-9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:72:1c:15:49:e7:4e:15:c4:57:e3:2e:66:5a:65:79:2f:
         a4:8e:7d:a6:5f:b6:ca:39:67:24:fa:75:34:74:fb:20:88:c4:
         5b:c6:d7:65:d8:0c:8c:45:38:02:83:7e:3f:d7:c9:7d:e9:b1:
         20:e8:9c:31:76:d8:e9:39:11:19:aa:2c:17:36:bb:ad:31:cb:
         96:d1:86:c0:33:44:df:bb:fc:66:c7:49:c1:e1:d2:42:fa:cf:
         5c:13:ef:57:16:bd:13:70:a8:1f:ff:ae:f2:09:8e:d5:99:39:
         b3:08:e0:e5:70:67:8e:ca:36:95:31:0a:42:ea:1b:d4:0d:29:
         61:47:80:d2:9f:3f:25:a4:fa:ce:e2:d5:17:0c:8d:49:db:24:
         61:90:b6:da:99:cd:5f:91:31:c4:48:07:6d:1a:e0:a0:a2:bc:
         c0:1c:45:cb:32:8b:ca:ee:aa:e5:cc:94:04:22:50:44:92:98:
         8d:b4:5e:15:a2:e7:2a:29:dd:43:8c:c4:ea:fe:1c:44:b6:0a:
         63:44:80:62:96:4c:3f:ed:fa:0c:01:6a:02:41:43:f2:1c:7a:
         33:85:c4:2d:f1:71:27:c0:0f:28:0e:48:d1:74:43:b6:6d:44:
         2d:f5:dd:5b:a2:5b:9e:3a:76:34:f0:54:be:9a:e5:cf:94:8a:
         11:79:61:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fOekFf5WB/6e99T6rbZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNDI1NmVkMzhmYjFlOTY5NDQ5MjZkYjRjNjZjNGQwODhh
Y2ZiZDYwHhcNMjUxMDE5MDgwMTMwWhcNMjUxMDIwMDgwMTMwWjAzMTEwLwYDVQQD
Eyg0ODg2NGNmZGZlMzEzMWYxZWFjNWI2M2QwNmZiNWQxM2NjMDY4MDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxE9z5vg43FJ6MLA972Scju4oCws
nXB9oL8BYvBE/+g/J50vbB+H28kQItKy1e4CbxCDA7iJUpzRdmZ+Vc2F2vPYnpFs
+PMJctZS42ddNI6Bp1a/qYh57Oy+giwCuCMolmLDmGh9SUNU9qk6RlvzwA2l2BEJ
6JRYYCq1kZC32mCm6Ntbkt+iTJkc46QkzDh++SL8q9J2lrdrUJ3V7xpUrllXPk01
0DELyI9J1KZKvt4R6aYoHplkWqVpAgj9PuZsXw67Ag9fC7xGb/Z2a8uchREgXEwn
Esv6tcAHm+jcvdkb1g0pyk5dBQjzMhAwoBdmdl9UVtWLiOgWyGlKrYMtawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiGTP3+MTHx6sW2PQb7XRPMBoBxMB8GA1UdIwQY
MBaAFGFCVu04+x6WlEkm20xmxNCIrPvWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEt
NjhiYTZjNTRlZjlhLzEvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9mY2EzNjktNmI4NS00ZTAzLWFiNzEtNjhiYTZjNTRlZjlh
LzEvWVVKVzdUajdIcGFVU1NiYlRHYkUwSWlzLTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/VyHBVJ
504VxFfjLmZaZXkvpI59pl+2yjlnJPp1NHT7IIjEW8bXZdgMjEU4AoN+P9fJfemx
IOicMXbY6TkRGaosFza7rTHLltGGwDNE37v8ZsdJweHSQvrPXBPvVxa9E3CoH/+u
8gmO1Zk5swjg5XBnjso2lTEKQuob1A0pYUeA0p8/JaT6zuLVFwyNSdskYZC22pnN
X5ExxEgHbRrgoKK8wBxFyzKLyu6q5cyUBCJQRJKYjbReFaLnKindQ4zE6v4cRLYK
Y0SAYpZMP+36DAFqAkFD8hx6M4XELfFxJ8APKA5I0XRDtm1ELfXdW6Jbnjp2NPBU
vprlz5SKEXlhHw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:11 2025 by rpki-client