Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File:                     bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier:          y116zZvbEpYNnQdxmZt60SMS4gQ6KdQRFS/ExLQsPEg=
Subject key identifier:   8F:5A:1F:4D:23:5D:10:E7:F6:F9:F4:53:C2:F6:5D:92:73:12:78:51
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer:       /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial:       0199FBEC1743E29E0B6B035167B8EBD85D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 10:02:57 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:57 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:57 +0000
Files and hashes:         1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
                          2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: C83nG6E++Vd2Io88k9hQ7Od1swyC7LfGVGieckJDIjY=)
                          3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:17:43:e2:9e:0b:6b:03:51:67:b8:eb:d8:5d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
        Validity
            Not Before: Oct 19 10:02:57 2025 GMT
            Not After : Oct 20 10:02:57 2025 GMT
        Subject: CN=8f5a1f4d235d10e7f6f9f453c2f65d9273127851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:36:28:97:e3:a2:1f:ca:86:47:93:31:27:87:
                    ba:d6:52:5b:08:36:d4:65:44:f1:56:56:b2:80:e3:
                    71:1c:cd:e8:bf:48:67:5c:9c:8f:d2:1d:e7:41:de:
                    93:86:7c:11:d4:55:89:51:b8:5d:f5:4e:43:2e:2a:
                    32:8d:ac:cd:1b:a5:41:21:fd:90:3d:7a:13:5d:d1:
                    e5:e7:ad:27:73:df:3a:29:3f:99:9e:2d:91:90:b9:
                    9e:5a:e5:e3:5a:6d:b1:6a:f6:50:2e:e4:96:38:ae:
                    5e:dd:9d:b4:20:43:9d:2a:02:a5:91:1e:7a:8c:bd:
                    e4:2f:c2:41:81:22:a4:d9:05:ed:8a:fd:92:b7:9e:
                    da:55:3d:1c:8c:59:a3:df:6b:bd:02:05:f4:0b:62:
                    30:43:97:31:3c:e8:50:ca:b2:f6:4a:f4:2b:f1:20:
                    c6:14:21:ce:e5:ed:51:f5:56:98:52:1b:da:18:1a:
                    eb:27:53:ab:08:dd:01:f5:74:e0:18:14:01:12:ce:
                    d5:9d:8f:8d:5a:7a:71:60:f8:e0:79:1b:ed:79:6b:
                    a1:46:45:24:16:b9:0b:7e:b8:f6:41:50:1c:2c:81:
                    4a:96:c1:66:5d:c1:0d:cc:82:27:7a:80:19:b2:6a:
                    fb:8c:ec:3d:4a:ac:06:ea:5d:e5:88:00:7d:00:1a:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5A:1F:4D:23:5D:10:E7:F6:F9:F4:53:C2:F6:5D:92:73:12:78:51
            X509v3 Authority Key Identifier:
                keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:28:d9:d5:70:c2:e0:f7:9a:de:ea:73:74:85:c4:a6:95:1c:
         cb:33:38:cc:b6:87:7a:42:5b:50:3d:b1:49:0d:de:34:db:78:
         83:a0:26:a5:12:de:8a:ef:a9:90:ce:0d:e7:8c:7f:dd:4f:17:
         36:09:f2:6f:ca:f6:84:d1:01:25:9c:bc:0b:09:6c:5c:a3:b9:
         95:32:bd:3e:f3:2e:b5:d5:17:9d:70:30:96:ab:31:85:f8:ef:
         b5:07:0f:1d:ae:4d:48:88:28:11:c0:43:5a:34:5e:03:c9:e2:
         3e:eb:82:19:a7:77:74:38:07:f1:fb:06:c3:36:80:66:86:fe:
         b8:a8:26:21:ed:08:eb:ab:ba:0e:86:91:01:8b:0c:8c:fc:66:
         04:15:fd:61:df:b0:58:3a:a4:6b:dc:68:29:0b:17:e4:79:ad:
         4d:ff:b4:22:d9:ab:73:57:6d:ec:ee:75:24:fe:c6:4f:30:69:
         01:1b:ae:1e:78:e4:d7:1c:53:c0:4f:f9:63:f7:f7:40:5a:84:
         29:e0:6d:15:52:9e:e7:c6:0f:ab:3b:e1:bb:0a:a5:48:97:b5:
         f7:43:a3:84:5e:91:45:86:1f:b1:85:5f:ab:79:3c:db:60:77:
         c5:e3:6b:7a:28:c8:31:7e:d9:65:31:76:df:a6:d1:c1:ba:e1:
         f9:2d:29:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77BdD4p4LawNRZ7jr2F1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTJhYjcwNjNjODVkZmUyMmZhN2E5OWQ5YzZmY2U1ZTYx
NjEwMzEwHhcNMjUxMDE5MTAwMjU3WhcNMjUxMDIwMTAwMjU3WjAzMTEwLwYDVQQD
Eyg4ZjVhMWY0ZDIzNWQxMGU3ZjZmOWY0NTNjMmY2NWQ5MjczMTI3ODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzYol+OiH8qGR5MxJ4e61lJbCDbU
ZUTxVlaygONxHM3ov0hnXJyP0h3nQd6ThnwR1FWJUbhd9U5DLioyjazNG6VBIf2Q
PXoTXdHl560nc986KT+Zni2RkLmeWuXjWm2xavZQLuSWOK5e3Z20IEOdKgKlkR56
jL3kL8JBgSKk2QXtiv2St57aVT0cjFmj32u9AgX0C2IwQ5cxPOhQyrL2SvQr8SDG
FCHO5e1R9VaYUhvaGBrrJ1OrCN0B9XTgGBQBEs7VnY+NWnpxYPjgeRvteWuhRkUk
FrkLfrj2QVAcLIFKlsFmXcENzIIneoAZsmr7jOw9SqwG6l3liAB9ABoaIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9aH00jXRDn9vn0U8L2XZJzEnhRMB8GA1UdIwQY
MBaAFGwSq3BjyF3+Ivp6mdnG/OXmFhAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjIt
OTU5ZWJiOTA1YjNhLzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xMmU2NzktODU2Yy00OGVhLWEwNjItOTU5ZWJiOTA1YjNh
LzEvYkJLcmNHUElYZjRpLW5xWjJjYjg1ZVlXRURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyjZ1XDC
4Pea3upzdIXEppUcyzM4zLaHekJbUD2xSQ3eNNt4g6AmpRLeiu+pkM4N54x/3U8X
Ngnyb8r2hNEBJZy8CwlsXKO5lTK9PvMutdUXnXAwlqsxhfjvtQcPHa5NSIgoEcBD
WjReA8niPuuCGad3dDgH8fsGwzaAZob+uKgmIe0I66u6DoaRAYsMjPxmBBX9Yd+w
WDqka9xoKQsX5HmtTf+0Itmrc1dt7O51JP7GTzBpARuuHnjk1xxTwE/5Y/f3QFqE
KeBtFVKe58YPqzvhuwqlSJe190OjhF6RRYYfsYVfq3k822B3xeNreijIMX7ZZTF2
36bRwbrh+S0pnQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:51 2025 by rpki-client