Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
File:                     eCa2BPb4wD_p32yY5h856u11VaU.mft (raw, json)
Hash identifier:          mQW+CW0PTTAQ6eRYErfF4XOv+dUax5T4cI5pqpcDJJo=
Subject key identifier:   72:2C:C8:AB:5D:B1:92:F9:E9:8A:A8:12:5C:A3:6E:98:14:54:A7:F0
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Certificate issuer:       /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial:       0199FDDA156F9723DFA3FAF99D688F99DEEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 19:02:31 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:31 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:31 +0000
Files and hashes:         1: 842mFfTvhpMCx5O_VlnhbyC5DPc.roa (hash: Y0uuEcHUMVeKlkZHSWT3ejEG3c8HH3MwGXKgGUvrUyI=)
                          2: W8WjY9YYv8iljwDY45MThfbAk84.roa (hash: dxrwQI2i6fKiTUhyw6w33TI4PVDbBCXq3QCNhLROPGc=)
                          3: eCa2BPb4wD_p32yY5h856u11VaU.crl (hash: FwewMMxK25akeu6aQqedodS1/6jP+1BWP8oTLM2NzlY=)
                          4: vkWj2nsjhackefLzTv92x4E_mxA.roa (hash: WehOyXDU50Ry7h0fUSMpd4vK4omZPxG7KTOejPEntu0=)
                          5: zHyi0zO0aepoCj3YfwkO2CsuHDk.roa (hash: 64jkIZP0sVFKnl22gW7SzeQyLPkea22pOG/lfDbS5eU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:15:6f:97:23:df:a3:fa:f9:9d:68:8f:99:de:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
        Validity
            Not Before: Oct 19 19:02:31 2025 GMT
            Not After : Oct 20 19:02:31 2025 GMT
        Subject: CN=722cc8ab5db192f9e98aa8125ca36e981454a7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:b8:a0:c8:31:51:98:79:18:65:18:0e:dd:
                    56:d8:c2:27:a5:3e:13:72:2c:8f:7a:8a:0f:b6:2d:
                    07:ff:aa:08:62:5d:10:2c:6a:92:02:50:b9:50:94:
                    60:76:e4:50:2d:85:c3:a6:7b:62:7e:66:34:fc:64:
                    bc:29:87:ee:f3:aa:e6:cc:f5:c6:a8:8a:b4:b3:aa:
                    97:00:de:d1:5e:92:ea:55:ac:97:17:68:f9:55:8f:
                    71:8f:da:ac:27:10:e4:07:54:b0:60:f8:86:a1:4c:
                    a5:0b:6c:1e:a9:31:45:d1:70:6a:b6:e9:ac:82:3a:
                    ef:aa:88:2a:ec:dd:47:e2:8b:04:8c:b0:31:f0:23:
                    db:62:b7:55:98:42:34:3f:ac:58:36:99:a5:98:e7:
                    0d:26:ab:3b:81:26:e0:04:55:db:73:b5:69:83:47:
                    20:61:5f:f8:18:25:0a:eb:ee:2e:39:e3:a9:73:da:
                    af:c4:03:9a:43:38:ce:e6:5f:10:ab:b6:68:e4:27:
                    ac:0b:3b:7c:27:2c:f5:3c:a4:3d:36:08:cc:c6:15:
                    ca:86:a4:6a:1c:4f:7f:97:54:74:ba:33:21:90:e7:
                    69:bb:a7:e6:60:a6:85:a2:df:5d:0c:22:d5:7f:47:
                    dc:33:b6:95:b3:b4:e1:9f:51:22:31:44:1b:6a:28:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:C8:AB:5D:B1:92:F9:E9:8A:A8:12:5C:A3:6E:98:14:54:A7:F0
            X509v3 Authority Key Identifier:
                keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:08:59:8d:ac:36:84:b0:e1:bb:f6:a7:12:8d:a7:19:78:56:
         78:6d:25:d6:df:47:1d:ea:55:bb:61:f1:aa:d0:e8:7f:e3:6e:
         c3:e3:38:6c:c7:31:c7:9d:44:ed:6c:62:eb:6d:c0:1e:50:26:
         66:65:a1:87:48:bf:4b:85:18:bb:5c:59:0a:7e:32:64:ea:56:
         fc:83:5e:e7:cf:fc:12:11:ab:72:f4:5e:3c:ed:b3:c1:1e:82:
         fa:15:38:85:53:3b:aa:4a:b5:5b:db:2f:8f:4a:d2:42:22:57:
         b5:9d:71:81:c1:90:f7:37:5f:30:69:51:90:d7:a5:d1:fb:a2:
         7a:35:f4:c5:20:33:9f:0f:06:b8:9b:17:01:d2:14:e1:76:d2:
         a2:05:30:b4:2c:84:59:77:99:95:c6:ee:4c:0a:de:b1:4a:6e:
         e0:0d:e5:5b:5b:37:f7:07:c8:4b:30:65:8e:a5:4d:33:2c:15:
         a7:5c:c4:aa:ff:f1:53:ba:64:ad:e6:70:e0:1f:f0:63:82:6f:
         35:75:f7:c3:24:98:27:c6:4e:76:7b:49:ae:79:d7:58:ee:f7:
         96:86:93:ab:2e:99:d5:5d:a6:13:de:3c:1b:3c:63:85:20:42:
         d0:ef:12:d7:ec:e2:ee:35:c7:46:30:79:67:7d:0c:de:9b:e4:
         c5:ab:89:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92hVvlyPfo/r5nWiPmd7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MjZiNjA0ZjZmOGMwM2ZlOWRmNmM5OGU2MWYzOWVhZWQ3
NTU1YTUwHhcNMjUxMDE5MTkwMjMxWhcNMjUxMDIwMTkwMjMxWjAzMTEwLwYDVQQD
Eyg3MjJjYzhhYjVkYjE5MmY5ZTk4YWE4MTI1Y2EzNmU5ODE0NTRhN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD24oMgxUZh5GGUYDt1W2MInpT4T
ciyPeooPti0H/6oIYl0QLGqSAlC5UJRgduRQLYXDpntifmY0/GS8KYfu86rmzPXG
qIq0s6qXAN7RXpLqVayXF2j5VY9xj9qsJxDkB1SwYPiGoUylC2weqTFF0XBqtums
gjrvqogq7N1H4osEjLAx8CPbYrdVmEI0P6xYNpmlmOcNJqs7gSbgBFXbc7Vpg0cg
YV/4GCUK6+4uOeOpc9qvxAOaQzjO5l8Qq7Zo5CesCzt8Jyz1PKQ9NgjMxhXKhqRq
HE9/l1R0ujMhkOdpu6fmYKaFot9dDCLVf0fcM7aVs7Thn1EiMUQbaigCkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIsyKtdsZL56YqoElyjbpgUVKfwMB8GA1UdIwQY
MBaAFHgmtgT2+MA/6d9smOYfOertdVWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTct
Y2EwNDc0YWRmMzczLzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTctY2EwNDc0YWRmMzcz
LzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmghZjaw2
hLDhu/anEo2nGXhWeG0l1t9HHepVu2HxqtDof+Nuw+M4bMcxx51E7Wxi623AHlAm
ZmWhh0i/S4UYu1xZCn4yZOpW/INe58/8EhGrcvRePO2zwR6C+hU4hVM7qkq1W9sv
j0rSQiJXtZ1xgcGQ9zdfMGlRkNel0fuiejX0xSAznw8GuJsXAdIU4XbSogUwtCyE
WXeZlcbuTAresUpu4A3lW1s39wfISzBljqVNMywVp1zEqv/xU7pkreZw4B/wY4Jv
NXX3wySYJ8ZOdntJrnnXWO73loaTqy6Z1V2mE948GzxjhSBC0O8S1+zi7jXHRjB5
Z30M3pvkxauJ1A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:47 2025 by rpki-client