Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
File:                     t5VYLHMwLrCpdEd2AwSYUIM70hA.mft (raw, json)
Hash identifier:          XPT2lk68HgHaHq1zc6Np30VN0/Y+1cTTFdFRLt7JxuQ=
Subject key identifier:   17:AE:1A:7E:3C:CE:DD:A4:D7:C4:67:52:39:55:5A:88:D6:5B:99:FE
Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
Certificate issuer:       /CN=b795582c73302eb0a974477603049850833bd210
Certificate serial:       0199FBEAB9BBD7D17AEFA496D16F701AFDBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:28 +0000
Files and hashes:         1: BHWwRry-UijUF9-7a9qe-3in6HE.roa (hash: GplxxbcF603HuP5zyFWWBxSgE208s+IGY7yLNmT6LyQ=)
                          2: t5VYLHMwLrCpdEd2AwSYUIM70hA.crl (hash: 1bUwbw7Hh4WimtUYHphu6R75lbvFvxtKuKPF7NKH2Gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:b9:bb:d7:d1:7a:ef:a4:96:d1:6f:70:1a:fd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b795582c73302eb0a974477603049850833bd210
        Validity
            Not Before: Oct 19 10:01:28 2025 GMT
            Not After : Oct 20 10:01:28 2025 GMT
        Subject: CN=17ae1a7e3ccedda4d7c4675239555a88d65b99fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0c:ab:83:28:cb:59:85:b9:e3:c8:41:3d:00:
                    fa:c9:a5:63:5a:a2:47:2b:fc:dc:4b:ab:dc:3b:ba:
                    03:7d:7c:8b:16:45:5c:80:13:61:bb:af:a0:ea:52:
                    5c:82:4b:cf:eb:43:73:8d:bf:93:10:59:ee:db:15:
                    5d:a2:e3:a5:09:58:95:e1:fa:54:10:42:60:c3:1e:
                    98:00:11:c3:40:e5:c2:63:60:06:36:2f:6e:a7:18:
                    39:de:77:4c:39:dc:58:28:63:d3:82:b2:e4:0c:e5:
                    b4:97:ef:fd:06:bd:0c:78:2e:f2:4e:dd:63:98:0f:
                    2c:43:ab:d6:63:bd:17:27:53:f9:fb:cc:de:40:14:
                    4c:86:09:0e:eb:91:5b:0f:4a:39:5e:be:11:28:c0:
                    f4:e0:c7:62:cc:eb:ac:9f:94:dd:79:62:b3:81:3b:
                    24:5f:c4:55:a8:ef:0f:69:0d:e8:84:e1:72:41:ee:
                    4e:bb:63:9b:29:cb:6b:4d:91:b7:0d:f2:8e:0c:d5:
                    52:2c:66:b6:55:1c:ea:56:ec:0d:39:1f:cd:44:a4:
                    00:f3:cc:fd:66:8e:47:ba:f4:23:dc:91:99:ca:cb:
                    78:ba:72:ee:44:15:16:b4:f2:24:49:63:f8:e6:b0:
                    dd:8f:f2:bf:02:e1:93:8a:0d:1c:bd:c0:af:f8:da:
                    aa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AE:1A:7E:3C:CE:DD:A4:D7:C4:67:52:39:55:5A:88:D6:5B:99:FE
            X509v3 Authority Key Identifier:
                keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:51:7a:63:ca:39:eb:74:34:60:ba:b4:6a:47:46:c3:76:24:
         14:0c:b7:3f:03:f4:49:8e:e8:7b:36:1f:1d:13:6f:83:98:8f:
         d1:22:9e:2f:db:5e:dc:e1:92:59:1b:58:dc:c1:24:eb:df:79:
         a9:7a:86:bf:a8:93:df:bd:a5:28:77:da:ae:d8:bd:4d:e7:08:
         54:4f:0b:43:e7:43:83:2f:0d:1e:94:b5:fa:45:5d:b5:1c:7d:
         f3:23:16:90:82:a0:59:d9:92:a7:88:af:be:a9:fb:37:13:fc:
         66:cf:52:42:c5:69:53:3d:d9:5b:62:99:f8:f7:1e:c0:ce:7c:
         68:cd:9d:15:cb:ff:31:18:b6:f1:f5:76:04:c2:bf:e6:ab:5c:
         57:05:f3:9e:cf:49:6b:17:34:e6:50:96:9d:55:dd:3a:c2:cc:
         91:c3:77:21:4e:87:52:25:9b:95:a3:35:62:67:2f:b0:5a:5a:
         ea:c9:49:68:52:68:5e:af:d9:88:84:8a:bf:d8:b0:6a:9b:3f:
         8f:f4:c1:e8:5c:6a:8a:3c:70:7c:82:6d:b9:16:c0:35:1f:1d:
         05:f9:c8:94:04:79:2f:4a:e8:a4:9e:b3:3b:71:f6:c5:dd:27:
         5c:44:75:f6:f4:71:67:f0:c1:72:e2:ff:dd:01:7c:7c:c4:b6:
         85:f2:fc:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rm719F676SW0W9wGv27MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTU1ODJjNzMzMDJlYjBhOTc0NDc3NjAzMDQ5ODUwODMz
YmQyMTAwHhcNMjUxMDE5MTAwMTI4WhcNMjUxMDIwMTAwMTI4WjAzMTEwLwYDVQQD
EygxN2FlMWE3ZTNjY2VkZGE0ZDdjNDY3NTIzOTU1NWE4OGQ2NWI5OWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wyrgyjLWYW548hBPQD6yaVjWqJH
K/zcS6vcO7oDfXyLFkVcgBNhu6+g6lJcgkvP60Nzjb+TEFnu2xVdouOlCViV4fpU
EEJgwx6YABHDQOXCY2AGNi9upxg53ndMOdxYKGPTgrLkDOW0l+/9Br0MeC7yTt1j
mA8sQ6vWY70XJ1P5+8zeQBRMhgkO65FbD0o5Xr4RKMD04MdizOusn5TdeWKzgTsk
X8RVqO8PaQ3ohOFyQe5Ou2ObKctrTZG3DfKODNVSLGa2VRzqVuwNOR/NRKQA88z9
Zo5HuvQj3JGZyst4unLuRBUWtPIkSWP45rDdj/K/AuGTig0cvcCv+NqqbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeuGn48zt2k18RnUjlVWojWW5n+MB8GA1UdIwQY
MBaAFLeVWCxzMC6wqXRHdgMEmFCDO9IQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81N2QzMGEtMDU1Mi00NWY2LTllYmMt
YzJiZDVmYzA0NDI0LzEvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81N2QzMGEtMDU1Mi00NWY2LTllYmMtYzJiZDVmYzA0NDI0
LzEvdDVWWUxITXdMckNwZEVkMkF3U1lVSU03MGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1F6Y8o5
63Q0YLq0akdGw3YkFAy3PwP0SY7oezYfHRNvg5iP0SKeL9te3OGSWRtY3MEk6995
qXqGv6iT372lKHfarti9TecIVE8LQ+dDgy8NHpS1+kVdtRx98yMWkIKgWdmSp4iv
vqn7NxP8Zs9SQsVpUz3ZW2KZ+PcewM58aM2dFcv/MRi28fV2BMK/5qtcVwXzns9J
axc05lCWnVXdOsLMkcN3IU6HUiWblaM1YmcvsFpa6slJaFJoXq/ZiISKv9iwaps/
j/TB6FxqijxwfIJtuRbANR8dBfnIlAR5L0ropJ6zO3H2xd0nXER19vRxZ/DBcuL/
3QF8fMS2hfL8vw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:43 2025 by rpki-client