Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File:                     BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier:          /kVl9gHFMlxGjWy29jQobk0GlUFO9mffbH3DexmItr0=
Subject key identifier:   7D:EE:E8:5A:C2:B3:18:5F:7F:AA:70:E2:5D:AE:97:71:CC:3A:56:B7
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer:       /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial:       0199FBEB8AE39D6575D8D91E08535871F357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 10:02:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:21 +0000
Files and hashes:         1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: /etBfAdWUF1lWEn/wlifhZsqqU25N8g0Hz/kmYs/O5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:8a:e3:9d:65:75:d8:d9:1e:08:53:58:71:f3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
        Validity
            Not Before: Oct 19 10:02:21 2025 GMT
            Not After : Oct 20 10:02:21 2025 GMT
        Subject: CN=7deee85ac2b3185f7faa70e25dae9771cc3a56b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:71:06:00:67:15:9e:86:3b:22:18:8c:76:
                    a0:e7:95:0d:12:55:37:7f:69:2f:3f:c1:63:21:e7:
                    7f:19:d3:c3:57:a1:9f:75:0c:4b:7f:e7:5e:5c:60:
                    d7:24:ef:6c:23:58:a4:ba:21:93:49:21:f4:59:d2:
                    05:3e:42:fd:46:bb:6d:68:d2:c0:17:a9:cd:ec:d7:
                    be:05:5c:cc:ec:1b:8e:88:e6:8b:8d:55:14:61:9d:
                    4c:4f:1e:3b:3d:53:35:9e:78:90:cb:d5:be:ae:71:
                    63:ed:d0:65:11:38:8e:62:48:a5:33:1c:1e:81:0c:
                    63:ae:16:ea:01:9e:39:a7:3c:60:a7:74:75:a5:63:
                    d1:87:9f:ff:68:c6:80:dd:31:bf:51:99:39:d6:c9:
                    82:58:80:5a:73:10:2b:6c:c4:86:e6:63:ab:cb:77:
                    9e:57:e7:2b:e6:6a:ac:74:58:67:e5:81:25:8e:fc:
                    66:af:da:68:91:72:12:ad:a1:f7:f3:1c:6b:b6:cd:
                    22:5a:27:ff:f2:80:b6:26:7d:ef:ae:86:8b:60:a5:
                    77:dc:86:e2:c1:d2:ca:18:64:53:90:e8:75:31:16:
                    f4:89:ae:13:80:8b:4d:44:e7:3d:88:7d:14:21:8f:
                    9c:c0:83:c8:12:7b:4d:51:b6:ea:f9:f8:56:2c:fc:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EE:E8:5A:C2:B3:18:5F:7F:AA:70:E2:5D:AE:97:71:CC:3A:56:B7
            X509v3 Authority Key Identifier:
                keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:ba:00:5b:a6:bd:e7:95:79:e8:37:ec:cc:0d:e7:04:e8:
         fc:86:7a:76:ad:7e:03:00:c3:bf:4e:45:9b:55:84:20:1d:6d:
         27:c3:bd:0a:b4:ed:9c:23:7b:7f:e1:3b:4e:2f:f8:7b:63:ee:
         64:db:ef:15:c3:d8:6a:9f:f5:29:08:2e:31:3f:ac:95:69:bb:
         b2:fa:07:24:4c:c9:54:fa:0a:6f:b3:18:01:63:f1:e3:89:a0:
         09:14:a6:05:c5:50:fb:0c:99:97:64:31:1a:82:e7:9d:4b:96:
         17:a0:c0:39:6a:fc:c6:3d:78:02:f8:e7:e2:ea:53:ae:73:37:
         ec:9c:25:e1:38:ae:1e:65:0f:cf:93:0d:d8:4a:bf:54:04:4f:
         63:77:1e:ab:b2:6f:64:b6:65:90:62:bb:f0:ca:03:52:f3:3a:
         bc:d5:ed:16:d4:48:70:86:47:dd:f9:4a:5d:2c:92:c6:42:9b:
         22:9d:9f:d4:80:71:c8:fa:14:b1:94:eb:1a:97:8e:e6:ef:62:
         89:d7:90:1e:4b:5c:18:c3:9a:28:6b:f3:14:2d:0f:b8:f2:2a:
         e4:4e:41:80:35:14:62:69:39:7d:07:1a:93:a4:78:b6:18:58:
         44:35:0c:57:57:ef:72:23:d0:4e:24:c0:da:b8:2a:6f:80:0f:
         ca:12:7c:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn764rjnWV12NkeCFNYcfNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZTQyZDg5N2U5Njg5NWM3MGY0M2NhMDM1MGQwZmY0NGI4
NDg5NTMwHhcNMjUxMDE5MTAwMjIxWhcNMjUxMDIwMTAwMjIxWjAzMTEwLwYDVQQD
Eyg3ZGVlZTg1YWMyYjMxODVmN2ZhYTcwZTI1ZGFlOTc3MWNjM2E1NmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDxxBgBnFZ6GOyIYjHag55UNElU3
f2kvP8FjIed/GdPDV6GfdQxLf+deXGDXJO9sI1ikuiGTSSH0WdIFPkL9RrttaNLA
F6nN7Ne+BVzM7BuOiOaLjVUUYZ1MTx47PVM1nniQy9W+rnFj7dBlETiOYkilMxwe
gQxjrhbqAZ45pzxgp3R1pWPRh5//aMaA3TG/UZk51smCWIBacxArbMSG5mOry3ee
V+cr5mqsdFhn5YEljvxmr9pokXISraH38xxrts0iWif/8oC2Jn3vroaLYKV33Ibi
wdLKGGRTkOh1MRb0ia4TgItNROc9iH0UIY+cwIPIEntNUbbq+fhWLPxdqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3u6FrCsxhff6pw4l2ul3HMOla3MB8GA1UdIwQY
MBaAFAbkLYl+lolccPQ8oDUND/RLhIlTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnVRdGlYNldpVnh3OUR5Z05RMFA5RXVFaVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zOWEwMDYtNjNhYS00ODNiLTlkOWYt
Mjk1MjdjZTE5OWVkLzEvQnVRdGlYNldpVnh3OUR5Z05RMFA5RXVFaVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zOWEwMDYtNjNhYS00ODNiLTlkOWYtMjk1MjdjZTE5OWVk
LzEvQnVRdGlYNldpVnh3OUR5Z05RMFA5RXVFaVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFM+6AFum
veeVeeg37MwN5wTo/IZ6dq1+AwDDv05Fm1WEIB1tJ8O9CrTtnCN7f+E7Ti/4e2Pu
ZNvvFcPYap/1KQguMT+slWm7svoHJEzJVPoKb7MYAWPx44mgCRSmBcVQ+wyZl2Qx
GoLnnUuWF6DAOWr8xj14Avjn4upTrnM37Jwl4TiuHmUPz5MN2Eq/VARPY3ceq7Jv
ZLZlkGK78MoDUvM6vNXtFtRIcIZH3flKXSySxkKbIp2f1IBxyPoUsZTrGpeO5u9i
ideQHktcGMOaKGvzFC0PuPIq5E5BgDUUYmk5fQcak6R4thhYRDUMV1fvciPQTiTA
2rgqb4APyhJ8sQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:22 2025 by rpki-client