Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
File:                     EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft (raw, json)
Hash identifier:          ibjiy28NIrMlx4wSYppoeVLAcRxxvE2JRBb8ksPIWZE=
Subject key identifier:   D5:F8:8E:A4:D3:91:67:E7:B8:99:E4:D6:4B:87:65:73:3F:A1:BD:82
Authority key identifier: 10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0
Certificate issuer:       /CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
Certificate serial:       0199FC58ECAB570D33274ECD659C3B9BF959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 12:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:50 +0000
Files and hashes:         1: EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl (hash: PS6+t5cDMv5X2p9Ogf0E6mqOKjGH3M8osXcTfeeATLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:ec:ab:57:0d:33:27:4e:cd:65:9c:3b:9b:f9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10797eb5f9aa9abe52008ce7f21ab44afdeea0d0
        Validity
            Not Before: Oct 19 12:01:50 2025 GMT
            Not After : Oct 20 12:01:50 2025 GMT
        Subject: CN=d5f88ea4d39167e7b899e4d64b8765733fa1bd82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:88:39:ab:e1:1f:a9:a9:15:00:8a:78:25:2f:
                    6e:b4:9a:87:b1:5a:4f:8d:3a:f6:db:20:1a:b6:6f:
                    15:5d:2b:50:39:47:10:41:5a:29:49:dd:1e:19:25:
                    49:5d:f1:d9:53:75:2d:16:04:96:94:b9:2f:29:c2:
                    7e:04:36:4c:f6:9c:36:e5:03:67:5e:a2:ff:a3:08:
                    21:53:54:22:c6:6b:35:d2:0d:39:1e:64:de:46:00:
                    e2:7a:90:20:a1:90:81:71:e8:56:70:29:9b:9e:6f:
                    99:5f:89:39:1b:13:61:b5:a5:32:79:04:bb:a3:76:
                    6e:28:b4:2e:d5:07:8e:e9:34:30:76:56:c8:6d:ea:
                    de:cf:e3:85:83:d8:a3:ad:67:6f:d6:21:b2:5a:68:
                    65:5e:f0:ea:a3:39:13:fa:a4:85:70:36:ac:f7:d1:
                    e6:3a:a0:0a:e6:9b:56:52:a1:d7:6c:16:4b:27:67:
                    19:80:9f:3e:57:fe:21:03:79:bb:52:b2:e3:27:28:
                    bc:e7:ac:d1:71:5d:12:40:23:1f:03:7f:05:94:55:
                    55:f7:4b:c1:f7:aa:69:d5:d2:7b:7a:69:16:52:69:
                    b6:24:94:85:89:f8:ca:94:3a:7a:49:74:6f:9d:65:
                    4b:2a:f2:3c:28:bc:00:6f:59:62:d3:4f:e5:83:7e:
                    be:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F8:8E:A4:D3:91:67:E7:B8:99:E4:D6:4B:87:65:73:3F:A1:BD:82
            X509v3 Authority Key Identifier:
                keyid:10:79:7E:B5:F9:AA:9A:BE:52:00:8C:E7:F2:1A:B4:4A:FD:EE:A0:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f5c8a3-e5ca-41ae-af8a-8db708347438/1/EHl-tfmqmr5SAIzn8hq0Sv3uoNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:53:b7:f9:8e:c8:f1:fc:19:06:8b:ae:0f:01:8e:14:92:a4:
         3b:9d:d7:c7:11:7d:74:b1:4a:bb:7f:36:b7:34:dd:26:f5:a7:
         9d:80:cd:9f:94:ca:d7:71:03:e7:a8:18:f1:e6:93:3b:11:54:
         6e:61:74:d2:af:e0:aa:a2:23:d5:1c:f3:cf:07:8b:e1:19:13:
         3f:93:8e:a6:f4:96:a4:83:aa:8b:89:13:8a:83:7f:48:9b:38:
         20:02:59:ba:f1:06:88:28:3d:ca:09:44:5b:5e:cd:73:ba:55:
         02:85:52:3e:1c:b7:77:2a:3a:66:82:06:5d:6a:6a:90:28:7e:
         06:f3:13:81:bc:84:ff:3b:22:4c:b5:71:56:b4:f6:73:b8:a0:
         9c:02:ac:52:f0:f4:69:fc:ef:58:33:c5:fb:bd:14:a3:94:9d:
         b9:fb:98:dd:99:ac:13:b5:19:9e:8f:13:54:ac:8c:5f:34:df:
         f7:f0:ef:9b:03:48:3c:e7:8e:71:5b:2a:84:a6:ef:dd:77:41:
         0f:a3:41:3f:51:5e:95:e9:7e:f6:e4:0d:0a:47:15:b2:f5:12:
         28:52:85:cd:d5:81:0c:19:f6:ec:ca:41:41:4b:83:c7:5d:0b:
         82:5d:94:65:4e:03:b4:c4:53:d9:50:94:d3:c7:a1:35:81:b5:
         bb:bc:ee:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WOyrVw0zJ07NZZw7m/lZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNzk3ZWI1ZjlhYTlhYmU1MjAwOGNlN2YyMWFiNDRhZmRl
ZWEwZDAwHhcNMjUxMDE5MTIwMTUwWhcNMjUxMDIwMTIwMTUwWjAzMTEwLwYDVQQD
EyhkNWY4OGVhNGQzOTE2N2U3Yjg5OWU0ZDY0Yjg3NjU3MzNmYTFiZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8og5q+EfqakVAIp4JS9utJqHsVpP
jTr22yAatm8VXStQOUcQQVopSd0eGSVJXfHZU3UtFgSWlLkvKcJ+BDZM9pw25QNn
XqL/owghU1Qixms10g05HmTeRgDiepAgoZCBcehWcCmbnm+ZX4k5GxNhtaUyeQS7
o3ZuKLQu1QeO6TQwdlbIberez+OFg9ijrWdv1iGyWmhlXvDqozkT+qSFcDas99Hm
OqAK5ptWUqHXbBZLJ2cZgJ8+V/4hA3m7UrLjJyi856zRcV0SQCMfA38FlFVV90vB
96pp1dJ7emkWUmm2JJSFifjKlDp6SXRvnWVLKvI8KLwAb1li00/lg36+KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX4jqTTkWfnuJnk1kuHZXM/ob2CMB8GA1UdIwQY
MBaAFBB5frX5qpq+UgCM5/IatEr97qDQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNWM4YTMtZTVjYS00MWFlLWFmOGEt
OGRiNzA4MzQ3NDM4LzEvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNWM4YTMtZTVjYS00MWFlLWFmOGEtOGRiNzA4MzQ3NDM4
LzEvRUhsLXRmbXFtcjVTQUl6bjhocTBTdjN1b05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlO3+Y7I
8fwZBouuDwGOFJKkO53XxxF9dLFKu382tzTdJvWnnYDNn5TK13ED56gY8eaTOxFU
bmF00q/gqqIj1RzzzweL4RkTP5OOpvSWpIOqi4kTioN/SJs4IAJZuvEGiCg9yglE
W17Nc7pVAoVSPhy3dyo6ZoIGXWpqkCh+BvMTgbyE/zsiTLVxVrT2c7ignAKsUvD0
afzvWDPF+70Uo5SdufuY3ZmsE7UZno8TVKyMXzTf9/DvmwNIPOeOcVsqhKbv3XdB
D6NBP1Felel+9uQNCkcVsvUSKFKFzdWBDBn27MpBQUuDx10Lgl2UZU4DtMRT2VCU
08ehNYG1u7zuiA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:39 2025 by rpki-client