Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
File:                     Fi14JJtyG00s6M9t_PvEQiITrJ0.mft (raw, json)
Hash identifier:          pH6hLfDhyRkVtTy/Ed1KB46seNMGIyicEtk//4b0COM=
Subject key identifier:   D5:81:FA:E1:93:21:09:40:02:A9:33:CB:15:2A:99:17:68:6F:AB:9E
Authority key identifier: 16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D
Certificate issuer:       /CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
Certificate serial:       0199FC2169687E27574A7D3D591CB72BC2A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 11:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:12 +0000
Files and hashes:         1: Fi14JJtyG00s6M9t_PvEQiITrJ0.crl (hash: Qq8kl7Jaj9w3jHMQcs1aCb/DixEo7jPVb6kT++qBEEA=)
                          2: vYN3fYbPSffdlZL2ecCWPRuF_iU.roa (hash: f7zca1Xa7343zBsVvDmSCYRZch2YTDhkeKKqt6AwzpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:69:68:7e:27:57:4a:7d:3d:59:1c:b7:2b:c2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162d78249b721b4d2ce8cf6dfcfbc4422213ac9d
        Validity
            Not Before: Oct 19 11:01:12 2025 GMT
            Not After : Oct 20 11:01:12 2025 GMT
        Subject: CN=d581fae19321094002a933cb152a9917686fab9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:d3:7b:df:b7:f3:d3:40:34:57:e8:b1:0c:
                    b3:4d:27:1f:17:0c:1b:00:1e:db:ac:db:87:c1:e3:
                    1f:10:db:23:95:a8:55:51:11:61:18:ca:0d:84:ab:
                    53:2e:cb:28:2f:03:18:9b:a5:db:cb:78:fd:ad:7f:
                    25:ce:09:17:65:b2:6d:99:37:10:68:bc:38:60:f7:
                    fc:8a:51:2d:00:8c:69:d4:2a:e9:8e:1a:96:34:2f:
                    5c:91:74:04:d7:cf:ac:be:81:9e:83:b0:0e:60:92:
                    53:ec:34:47:56:08:d9:d0:f7:01:ae:0f:f9:51:d4:
                    31:a0:1c:fd:0c:1d:38:74:77:42:4a:83:9c:16:63:
                    ae:02:4f:d9:d9:52:7e:f5:03:e2:0a:f9:f7:ca:ed:
                    a0:ca:7c:1e:f0:9c:cc:ac:58:89:d4:2b:7b:91:6c:
                    37:c9:78:b7:6c:ee:e4:80:0a:6d:9c:52:c7:19:29:
                    d3:45:99:a7:70:38:8c:38:fc:25:7f:30:dd:b9:5c:
                    e5:a3:34:89:34:95:9e:d0:19:8f:a3:ef:9c:b6:26:
                    23:5f:31:6a:4b:2a:8d:ab:96:0f:7a:8d:39:22:e7:
                    0a:f2:0a:55:95:bb:97:54:6f:bd:9e:5b:f2:ca:4a:
                    41:27:ce:48:d7:0f:fe:0a:89:ea:32:5d:bb:49:06:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:81:FA:E1:93:21:09:40:02:A9:33:CB:15:2A:99:17:68:6F:AB:9E
            X509v3 Authority Key Identifier:
                keyid:16:2D:78:24:9B:72:1B:4D:2C:E8:CF:6D:FC:FB:C4:42:22:13:AC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi14JJtyG00s6M9t_PvEQiITrJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/bcbd03-d231-4d33-b3c5-98fa827186a9/1/Fi14JJtyG00s6M9t_PvEQiITrJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:a9:55:7c:69:43:85:6e:a7:60:38:82:2e:61:fa:57:c2:7a:
         74:2b:e3:9b:3a:26:15:6f:26:c3:6b:c8:ed:c4:17:e5:62:7c:
         de:c6:d9:6c:d0:fb:9e:ac:4e:46:ba:30:95:e0:4a:be:12:6d:
         56:24:7e:87:35:55:ca:a1:dc:e7:b0:f2:4a:4e:ed:fe:69:37:
         16:1e:da:4c:14:65:38:c7:26:38:20:71:8c:a8:17:46:0e:eb:
         f2:17:8b:4f:f5:a1:9d:aa:c9:fe:60:a8:ba:f8:ea:67:7f:12:
         2c:9c:1d:23:92:29:29:03:a9:b0:1e:db:2f:83:8b:0c:ac:d8:
         a6:fa:4d:ce:56:a5:1e:02:a5:df:41:b7:43:81:73:9d:db:75:
         c3:ed:3c:36:f4:3b:b7:52:c1:f5:cd:66:87:09:b3:e8:16:69:
         b1:7e:26:20:c8:1e:e5:71:d5:fe:14:2e:07:b0:88:10:36:3b:
         49:7d:c5:3b:8c:b9:66:b5:dc:8c:47:91:96:52:73:b6:3a:d6:
         3f:a8:4b:d9:37:a2:53:0a:a6:e4:94:77:f6:b9:05:e9:c4:ae:
         a4:05:a9:60:18:1f:94:e0:c4:e7:60:72:09:e1:ba:1f:5b:5e:
         41:3d:64:71:8b:35:a8:c5:86:e4:ad:2a:17:bd:2d:3e:d2:1b:
         cc:20:af:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWlofidXSn09WRy3K8KhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmQ3ODI0OWI3MjFiNGQyY2U4Y2Y2ZGZjZmJjNDQyMjIx
M2FjOWQwHhcNMjUxMDE5MTEwMTEyWhcNMjUxMDIwMTEwMTEyWjAzMTEwLwYDVQQD
EyhkNTgxZmFlMTkzMjEwOTQwMDJhOTMzY2IxNTJhOTkxNzY4NmZhYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4bTe9+389NANFfosQyzTScfFwwb
AB7brNuHweMfENsjlahVURFhGMoNhKtTLssoLwMYm6Xby3j9rX8lzgkXZbJtmTcQ
aLw4YPf8ilEtAIxp1CrpjhqWNC9ckXQE18+svoGeg7AOYJJT7DRHVgjZ0PcBrg/5
UdQxoBz9DB04dHdCSoOcFmOuAk/Z2VJ+9QPiCvn3yu2gynwe8JzMrFiJ1Ct7kWw3
yXi3bO7kgAptnFLHGSnTRZmncDiMOPwlfzDduVzlozSJNJWe0BmPo++ctiYjXzFq
SyqNq5YPeo05IucK8gpVlbuXVG+9nlvyykpBJ85I1w/+ConqMl27SQbrUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWB+uGTIQlAAqkzyxUqmRdob6ueMB8GA1UdIwQY
MBaAFBYteCSbchtNLOjPbfz7xEIiE6ydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmkxNEpKdHlHMDBzNk05dF9QdkVRaUlUckowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iY2JkMDMtZDIzMS00ZDMzLWIzYzUt
OThmYTgyNzE4NmE5LzEvRmkxNEpKdHlHMDBzNk05dF9QdkVRaUlUckowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iY2JkMDMtZDIzMS00ZDMzLWIzYzUtOThmYTgyNzE4NmE5
LzEvRmkxNEpKdHlHMDBzNk05dF9QdkVRaUlUckowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6lVfGlD
hW6nYDiCLmH6V8J6dCvjmzomFW8mw2vI7cQX5WJ83sbZbND7nqxORrowleBKvhJt
ViR+hzVVyqHc57DySk7t/mk3Fh7aTBRlOMcmOCBxjKgXRg7r8heLT/WhnarJ/mCo
uvjqZ38SLJwdI5IpKQOpsB7bL4OLDKzYpvpNzlalHgKl30G3Q4Fzndt1w+08NvQ7
t1LB9c1mhwmz6BZpsX4mIMge5XHV/hQuB7CIEDY7SX3FO4y5ZrXcjEeRllJztjrW
P6hL2TeiUwqm5JR39rkF6cSupAWpYBgflODE52ByCeG6H1teQT1kcYs1qMWG5K0q
F70tPtIbzCCvAg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:30 2025 by rpki-client