Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File:                     5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier:          5r0okhmFl1zUZi0UaKj/ItqCht8ZYpPNdEKIG1YsixI=
Subject key identifier:   DD:8B:2D:DB:CF:DF:74:D8:E9:D5:94:25:42:59:29:17:58:05:CA:7A
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer:       /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial:       0199FBEBF0217CAE6BC4CE2209046D534441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 10:02:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:47 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:47 +0000
Files and hashes:         1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: z9POp77L2ZWpwebFu+zP96A7MXfBbvAxG3J9929p8+o=)
                          2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f0:21:7c:ae:6b:c4:ce:22:09:04:6d:53:44:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
        Validity
            Not Before: Oct 19 10:02:47 2025 GMT
            Not After : Oct 20 10:02:47 2025 GMT
        Subject: CN=dd8b2ddbcfdf74d8e9d59425425929175805ca7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:ec:b5:28:2d:a7:fd:a0:96:1c:e6:51:95:
                    c7:b9:2a:50:ec:ed:61:98:6f:6e:cb:37:0e:87:ff:
                    f1:74:cb:d7:58:56:87:a0:9c:9b:b9:94:a7:95:31:
                    f0:84:7e:25:ec:1d:63:f8:e3:99:ee:92:f8:ac:43:
                    49:0a:a8:bd:20:02:88:99:00:5b:1c:42:8d:20:04:
                    96:53:49:f3:d6:6d:6e:8b:e8:47:95:bf:d8:2f:78:
                    49:f8:14:98:96:5e:af:45:e4:11:95:1f:99:50:cd:
                    1b:25:ff:78:2d:d6:d3:51:a2:5e:81:c6:be:00:3f:
                    99:19:68:42:c4:5b:f3:8d:4f:64:67:d4:c5:11:29:
                    04:39:cd:e8:30:e2:1c:0c:d8:a4:39:dd:ef:64:b7:
                    e7:32:df:ba:13:6e:93:50:84:2a:c5:ec:b4:56:28:
                    96:d4:40:c8:a3:f8:4f:fc:c0:38:f2:14:c9:05:6b:
                    ae:77:7a:d6:0d:16:be:71:c1:e9:8a:e5:6b:46:06:
                    3d:8c:fa:d6:9d:bc:ea:c0:9f:81:f6:0e:2f:33:af:
                    64:6f:d8:39:f2:ab:8f:2e:2f:d1:38:1a:56:82:29:
                    19:d4:ff:50:4a:98:49:0b:b5:e5:24:97:ea:b6:f3:
                    c7:7d:e9:8e:0a:4a:a4:71:4d:65:3e:37:fa:b7:97:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8B:2D:DB:CF:DF:74:D8:E9:D5:94:25:42:59:29:17:58:05:CA:7A
            X509v3 Authority Key Identifier:
                keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:72:df:cc:f4:3f:ff:8b:c8:f5:3d:1c:70:46:de:29:43:a1:
         94:8a:05:a9:66:d2:db:59:c5:ba:58:83:7a:26:da:74:da:3e:
         c7:1c:be:5e:a8:f5:96:03:7b:1c:fa:03:68:45:a1:68:ea:c6:
         d9:ec:cd:74:24:a2:64:9b:de:84:41:10:30:f2:8c:1b:58:0e:
         e1:34:e8:5a:5f:86:3c:54:42:fb:59:7e:d0:7f:b5:25:5e:4a:
         c5:24:35:8d:84:83:74:c3:ad:f4:80:f8:f1:b7:8a:22:9f:d3:
         02:fe:6e:23:71:5c:a4:06:70:32:fe:19:26:4a:ef:a3:68:e6:
         4f:06:70:e3:d7:52:93:72:00:68:6d:b5:cf:67:5a:6d:aa:9f:
         96:6d:4f:be:f9:ad:12:6b:b2:22:14:e6:ac:9d:12:22:f4:e9:
         86:ab:36:26:05:ed:7d:42:53:a0:0a:2d:6d:4d:a1:9f:cd:a6:
         aa:c9:91:a8:59:c9:4c:d6:08:46:c8:5e:fd:ef:2d:ec:fb:85:
         2b:7e:cc:ff:73:df:42:e9:af:2c:52:f1:08:1b:cc:66:d3:0c:
         5a:14:36:a8:ef:23:c6:aa:17:ec:28:b4:7c:26:8a:dc:3f:77:
         09:3b:02:b5:d0:59:c7:0b:d2:b9:5a:f8:cf:0d:46:ca:18:57:
         51:28:c9:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/AhfK5rxM4iCQRtU0RBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZGFlM2VmZTBhMzY3OTdkYTQzY2JkNThmNmRmZjk5YzNi
YmRkOGQwHhcNMjUxMDE5MTAwMjQ3WhcNMjUxMDIwMTAwMjQ3WjAzMTEwLwYDVQQD
EyhkZDhiMmRkYmNmZGY3NGQ4ZTlkNTk0MjU0MjU5MjkxNzU4MDVjYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm3stSgtp/2glhzmUZXHuSpQ7O1h
mG9uyzcOh//xdMvXWFaHoJybuZSnlTHwhH4l7B1j+OOZ7pL4rENJCqi9IAKImQBb
HEKNIASWU0nz1m1ui+hHlb/YL3hJ+BSYll6vReQRlR+ZUM0bJf94LdbTUaJegca+
AD+ZGWhCxFvzjU9kZ9TFESkEOc3oMOIcDNikOd3vZLfnMt+6E26TUIQqxey0ViiW
1EDIo/hP/MA48hTJBWuud3rWDRa+ccHpiuVrRgY9jPrWnbzqwJ+B9g4vM69kb9g5
8quPLi/ROBpWgikZ1P9QSphJC7XlJJfqtvPHfemOCkqkcU1lPjf6t5fT2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2LLdvP33TY6dWUJUJZKRdYBcp6MB8GA1UdIwQY
MBaAFOba4+/go2eX2kPL1Y9t/5nDu92NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQt
NmMyZmZiNGI2MWU2LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9kMTI1ZmQtYzM5Yy00MjcyLThjYWQtNmMyZmZiNGI2MWU2
LzEvNXRyajctQ2paNWZhUTh2VmoyM19tY083M1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXLfzPQ/
/4vI9T0ccEbeKUOhlIoFqWbS21nFuliDeibadNo+xxy+Xqj1lgN7HPoDaEWhaOrG
2ezNdCSiZJvehEEQMPKMG1gO4TToWl+GPFRC+1l+0H+1JV5KxSQ1jYSDdMOt9ID4
8beKIp/TAv5uI3FcpAZwMv4ZJkrvo2jmTwZw49dSk3IAaG21z2dabaqflm1Pvvmt
EmuyIhTmrJ0SIvTphqs2JgXtfUJToAotbU2hn82mqsmRqFnJTNYIRshe/e8t7PuF
K37M/3PfQumvLFLxCBvMZtMMWhQ2qO8jxqoX7Ci0fCaK3D93CTsCtdBZxwvSuVr4
zw1GyhhXUSjJjA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:59 2025 by rpki-client