Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File:                     7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier:          evLRD/bvmwmeo1Onc3Q2MwGsmeSuuMX4F8MbMKmR1Ow=
Subject key identifier:   EB:5E:2F:DC:33:A2:7E:C5:02:29:3C:01:56:75:2F:26:07:68:ED:60
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer:       /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial:       0199FCFD6F6A856F38D1DA6047BD436BD471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number:          165D
Signing time:             Sun 19 Oct 2025 15:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:31 +0000
Files and hashes:         1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: Cy8q0DbvVCXTwhgV5qWbgkGvXyL2vsiRU63XjXU873g=)
                          2: YeFUZsaHfHTPpiu7f2dFmo68C7E.roa (hash: VFJqwzLzDH7CjnLQbhz/bJw/ANPrHjYMaDgoQuDyxDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:6f:6a:85:6f:38:d1:da:60:47:bd:43:6b:d4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
        Validity
            Not Before: Oct 19 15:01:31 2025 GMT
            Not After : Oct 20 15:01:31 2025 GMT
        Subject: CN=eb5e2fdc33a27ec502293c0156752f260768ed60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:79:5a:af:e2:80:54:1a:16:4d:91:99:ff:
                    8a:d5:90:c3:cb:0a:8a:1e:0d:56:37:ab:02:36:b3:
                    01:55:af:2b:a1:30:b2:6f:4a:d1:69:9c:05:66:21:
                    21:84:33:76:48:b7:d1:2b:8b:b5:2c:b5:a5:aa:6c:
                    71:fd:62:da:d8:31:f0:1c:0a:a8:ee:ee:48:aa:43:
                    88:69:25:7d:4a:e2:2e:ba:7c:86:06:e3:fa:a2:8b:
                    18:75:de:c7:d3:ff:15:2b:49:a4:6c:72:3a:65:77:
                    36:cd:86:be:c2:d4:2b:02:6f:2c:91:36:39:e6:5a:
                    55:5b:5c:b5:60:7e:b2:5f:eb:33:29:e8:02:f7:d3:
                    cb:70:f6:12:ce:ad:e5:60:43:35:88:67:40:9a:5f:
                    03:a3:96:a6:3d:c4:45:8c:bd:c3:85:7c:c5:3e:f6:
                    51:0c:7e:f4:c3:d3:89:0b:98:6a:7c:c7:16:9f:85:
                    4f:0a:2f:e9:e7:e6:ce:85:2d:69:1b:ed:1b:9b:09:
                    61:f8:dc:99:eb:6e:6d:2e:1f:8d:27:86:4d:09:59:
                    89:af:84:20:b8:10:24:9e:03:58:e8:d6:44:e6:d4:
                    f0:c0:34:1d:bb:11:8e:ce:51:cd:50:bc:b6:1f:8f:
                    d0:63:82:da:2e:c6:89:ca:97:2e:84:0a:19:e0:5e:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5E:2F:DC:33:A2:7E:C5:02:29:3C:01:56:75:2F:26:07:68:ED:60
            X509v3 Authority Key Identifier:
                keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fd:61:fd:cd:77:39:6d:89:9b:c7:3f:ab:09:58:11:66:90:
         fb:90:60:e9:2a:61:f1:19:df:7a:cf:2c:fe:2d:0e:0a:f5:7a:
         6e:e2:1a:d4:9d:60:e8:87:e5:75:8d:0d:74:dd:32:67:a3:f2:
         08:fc:00:90:2a:ef:cf:3e:48:a7:ce:00:3b:c7:0b:3c:5c:59:
         ae:61:25:64:f2:8c:a0:8a:b2:b9:32:77:f0:c4:6f:da:ef:24:
         a1:2b:7a:07:b8:1e:77:c9:7e:13:e2:37:61:1f:f8:4f:bc:5a:
         84:eb:50:69:3f:86:bd:97:20:eb:54:d3:e5:5d:43:1a:e5:ff:
         5b:36:6b:9b:a7:67:0c:7d:3c:cf:be:ed:a7:66:72:75:0a:54:
         86:f2:e1:c3:e4:75:82:56:cb:30:2f:e6:85:f5:8b:6c:6c:84:
         dc:f8:c0:e6:11:fa:c4:ec:34:b2:06:bd:9c:00:93:5e:79:82:
         e0:89:6a:c1:de:cb:7e:87:22:f0:54:a9:17:db:8f:6b:b3:65:
         24:16:0f:80:ac:41:f4:f9:35:1a:a4:4b:45:e7:be:7e:a9:b4:
         9c:29:1e:6d:da:1c:c7:90:d2:d1:06:05:d3:3a:29:48:f1:17:
         1c:85:da:2a:d9:f9:c4:fd:84:e6:18:d0:7c:39:45:e5:81:fb:
         c9:e1:0a:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/W9qhW840dpgR71Da9RxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTE3YzBhZmRhNDQ5ZWNjMDQyOWMwNDZkZjUwZmJjOTU5
YjRlZWEwHhcNMjUxMDE5MTUwMTMxWhcNMjUxMDIwMTUwMTMxWjAzMTEwLwYDVQQD
EyhlYjVlMmZkYzMzYTI3ZWM1MDIyOTNjMDE1Njc1MmYyNjA3NjhlZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jN5Wq/igFQaFk2Rmf+K1ZDDywqK
Hg1WN6sCNrMBVa8roTCyb0rRaZwFZiEhhDN2SLfRK4u1LLWlqmxx/WLa2DHwHAqo
7u5IqkOIaSV9SuIuunyGBuP6oosYdd7H0/8VK0mkbHI6ZXc2zYa+wtQrAm8skTY5
5lpVW1y1YH6yX+szKegC99PLcPYSzq3lYEM1iGdAml8Do5amPcRFjL3DhXzFPvZR
DH70w9OJC5hqfMcWn4VPCi/p5+bOhS1pG+0bmwlh+NyZ625tLh+NJ4ZNCVmJr4Qg
uBAkngNY6NZE5tTwwDQduxGOzlHNULy2H4/QY4LaLsaJypcuhAoZ4F4CDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOteL9wzon7FAik8AVZ1LyYHaO1gMB8GA1UdIwQY
MBaAFOyRfAr9pEnswEKcBG31D7yVm07qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYt
ZDI1MmE1NzRhZThkLzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jODhhOGYtN2JlMC00ZTQwLTljZTYtZDI1MmE1NzRhZThk
LzEvN0pGOEN2MmtTZXpBUXB3RWJmVVB2SldiVHVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUv1h/c13
OW2Jm8c/qwlYEWaQ+5Bg6Sph8Rnfes8s/i0OCvV6buIa1J1g6IfldY0NdN0yZ6Py
CPwAkCrvzz5Ip84AO8cLPFxZrmElZPKMoIqyuTJ38MRv2u8koSt6B7ged8l+E+I3
YR/4T7xahOtQaT+GvZcg61TT5V1DGuX/WzZrm6dnDH08z77tp2ZydQpUhvLhw+R1
glbLMC/mhfWLbGyE3PjA5hH6xOw0sga9nACTXnmC4Ilqwd7Lfoci8FSpF9uPa7Nl
JBYPgKxB9Pk1GqRLRee+fqm0nCkebdocx5DS0QYF0zopSPEXHIXaKtn5xP2E5hjQ
fDlF5YH7yeEKiw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:20 2025 by rpki-client