Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File:                     1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier:          LOuONWFZCN1MyywrFHu4S3XBAU7jhLaricyi9z6/vuk=
Subject key identifier:   BD:4E:DA:90:E4:E9:7B:10:6D:FA:22:44:8C:E6:00:07:C0:11:7D:3B
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer:       /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial:       0199FC590849004C527E8FD00B95EA6D7DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 12:01:57 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:57 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:57 +0000
Files and hashes:         1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: XQkmgnTLZ4rz9/yRen67JkNVOUW4IK/op0412Vih4ow=)
                          2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
                          3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:08:49:00:4c:52:7e:8f:d0:0b:95:ea:6d:7d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
        Validity
            Not Before: Oct 19 12:01:57 2025 GMT
            Not After : Oct 20 12:01:57 2025 GMT
        Subject: CN=bd4eda90e4e97b106dfa22448ce60007c0117d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:41:45:f3:f3:21:10:d5:ce:62:2d:65:92:81:
                    54:81:24:e3:c0:f3:26:42:ff:7a:ed:88:77:d6:fb:
                    d0:a7:b3:cc:61:e2:c7:c7:2d:d2:09:af:25:7c:4d:
                    3b:fc:e3:f2:2c:25:cd:f5:4c:e8:f4:48:1f:51:6e:
                    f1:ac:c5:a1:22:86:92:07:15:14:5a:9a:c2:49:ff:
                    9f:72:87:db:ea:fd:3a:c3:cd:2c:94:0c:b8:51:d5:
                    94:3d:c1:f7:0e:a9:7f:5c:5f:a1:08:7a:0d:73:2f:
                    e0:27:de:72:49:06:6c:e9:b6:0b:a8:bf:5d:94:fa:
                    26:d9:65:71:46:a4:4a:52:71:13:ac:ed:e4:67:60:
                    4b:76:5f:8d:e3:54:ff:08:49:37:36:1f:7c:0f:23:
                    88:e5:23:0a:2d:8a:4a:4c:f3:92:a8:bc:8e:03:c5:
                    83:ff:bf:5a:0d:82:00:95:85:0c:cd:12:a4:87:f0:
                    32:7c:1e:ed:8c:10:a6:fb:a1:8e:8e:2b:54:b6:9f:
                    bb:00:b0:0a:f1:fb:23:1b:64:ca:5d:c9:e8:a3:0d:
                    c5:09:77:0d:a8:11:8e:b6:c4:ab:01:0b:75:70:ac:
                    0d:fd:0f:b0:7e:a2:7f:e1:6c:f6:35:1e:8a:77:79:
                    bc:30:1a:30:5e:dd:f5:3a:f0:93:20:33:3c:3a:36:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4E:DA:90:E4:E9:7B:10:6D:FA:22:44:8C:E6:00:07:C0:11:7D:3B
            X509v3 Authority Key Identifier:
                keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5f:e7:0f:76:1f:f3:a1:28:5a:72:40:b1:17:33:6f:af:68:
         d3:ed:1e:d4:dd:b8:cf:e7:04:47:2c:7d:b9:c2:1e:a0:b5:b6:
         f7:00:70:85:f2:4f:a2:c8:b7:39:4d:52:b9:45:79:f3:57:21:
         9b:2f:ff:08:3b:84:b9:60:cc:54:3a:36:4f:8b:5f:09:a4:3f:
         4f:c0:93:2d:84:7c:22:bd:9f:be:1b:70:2d:12:24:40:00:44:
         9d:f3:f3:93:ef:93:54:4d:6a:9f:23:35:c1:b2:8f:0f:f1:9d:
         86:5d:f6:13:7d:14:b5:6a:2a:96:45:80:38:a2:eb:fc:46:1c:
         d2:a5:f4:78:d4:b3:1b:e2:3b:88:82:d1:f4:26:a9:46:9e:cc:
         fc:48:63:89:29:57:62:63:2a:bf:56:4c:b5:b8:66:df:28:07:
         cc:b5:31:46:fa:b1:57:9c:b4:42:4e:56:e5:9c:93:20:4d:e4:
         ec:85:b1:75:58:3a:85:0f:a5:04:c6:66:4e:c6:d7:4e:d7:32:
         61:25:98:2a:fa:56:0f:51:57:a3:bd:c9:bf:42:80:18:37:19:
         e2:ac:ac:b5:80:b4:0f:1c:4f:89:5d:aa:fa:4c:fd:94:50:55:
         cb:9c:33:4b:06:aa:ce:59:bd:45:34:4c:f5:7c:28:43:66:e8:
         7b:e4:16:f2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8WQhJAExSfo/QC5XqbX2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZWQ5NDM5YTRlNGIyZDMyZTRiZWU2NDdmM2I2MTA1NWIx
NjllM2QwHhcNMjUxMDE5MTIwMTU3WhcNMjUxMDIwMTIwMTU3WjAzMTEwLwYDVQQD
EyhiZDRlZGE5MGU0ZTk3YjEwNmRmYTIyNDQ4Y2U2MDAwN2MwMTE3ZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UFF8/MhENXOYi1lkoFUgSTjwPMm
Qv967Yh31vvQp7PMYeLHxy3SCa8lfE07/OPyLCXN9Uzo9EgfUW7xrMWhIoaSBxUU
WprCSf+fcofb6v06w80slAy4UdWUPcH3Dql/XF+hCHoNcy/gJ95ySQZs6bYLqL9d
lPom2WVxRqRKUnETrO3kZ2BLdl+N41T/CEk3Nh98DyOI5SMKLYpKTPOSqLyOA8WD
/79aDYIAlYUMzRKkh/AyfB7tjBCm+6GOjitUtp+7ALAK8fsjG2TKXcnoow3FCXcN
qBGOtsSrAQt1cKwN/Q+wfqJ/4Wz2NR6Kd3m8MBowXt31OvCTIDM8OjZ3NwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL1O2pDk6XsQbfoiRIzmAAfAEX07MB8GA1UdIwQY
MBaAFPvtlDmk5LLTLkvuZH87YQVbFp49MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0tMlVPYVRrc3RNdVMtNWtmenRoQlZzV25qMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvZDA3YzA3LWI5NjItNGY0Yi1hM2Ew
LWI1MWIzNWRlZjZkZS8xLzEtLTJVT2FUa3N0TXVTLTVrZnp0aEJWc1duajAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzkwL2QwN2MwNy1iOTYyLTRmNGItYTNhMC1iNTFiMzVkZWY2
ZGUvMS8xLS0yVU9hVGtzdE11Uy01a2Z6dGhCVnNXbmowLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1/n
D3Yf86EoWnJAsRczb69o0+0e1N24z+cERyx9ucIeoLW29wBwhfJPosi3OU1SuUV5
81chmy//CDuEuWDMVDo2T4tfCaQ/T8CTLYR8Ir2fvhtwLRIkQABEnfPzk++TVE1q
nyM1wbKPD/Gdhl32E30UtWoqlkWAOKLr/EYc0qX0eNSzG+I7iILR9CapRp7M/Ehj
iSlXYmMqv1ZMtbhm3ygHzLUxRvqxV5y0Qk5W5ZyTIE3k7IWxdVg6hQ+lBMZmTsbX
TtcyYSWYKvpWD1FXo73Jv0KAGDcZ4qystYC0DxxPiV2q+kz9lFBVy5wzSwaqzlm9
RTRM9XwoQ2boe+QW8g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:12 2025 by rpki-client