Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File:                     1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier:          8TJQ5wajpvsJ8uCUvAKx0gUYtAaPQUaC8OBzeYw+SoY=
Subject key identifier:   C0:7D:7D:55:4B:45:A5:0E:11:71:AE:D2:22:D7:99:B7:89:58:41:D7
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer:       /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial:       0199FC8F504126BF5930D103FA00308E8C27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 13:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:14 +0000
Files and hashes:         1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: WCljvor1y9c+cOus3X2+8SdJQqvaexTHC8c+boxVKDg=)
                          2: 90qeQZqwuh0oi-oH9Ho2Hr4JeqU.roa (hash: yAfSfLIB/wlDkdhF0bN4I000INgGh/D9HhTP3okCxDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:50:41:26:bf:59:30:d1:03:fa:00:30:8e:8c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
        Validity
            Not Before: Oct 19 13:01:14 2025 GMT
            Not After : Oct 20 13:01:14 2025 GMT
        Subject: CN=c07d7d554b45a50e1171aed222d799b7895841d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fe:93:35:56:05:dc:c8:95:0f:8c:11:8d:a7:
                    6e:aa:11:37:3e:b9:0e:10:ce:5e:fc:b9:ab:b2:c2:
                    4d:a8:95:d5:70:66:fa:6e:58:26:55:dd:55:63:5c:
                    25:f1:af:76:1b:36:7d:50:e4:31:63:e5:56:7a:55:
                    27:8d:4a:5d:a2:01:c8:1f:23:bb:37:9d:fe:80:34:
                    36:a3:a6:64:69:ff:bd:7e:ff:7e:8d:9a:b2:1b:96:
                    fc:e4:be:5d:df:37:e3:00:dd:cf:bf:22:3b:97:92:
                    3a:cd:e9:b1:b7:79:36:b8:55:b8:3d:53:3d:bb:07:
                    56:b5:1c:00:2e:21:5b:9b:0e:19:03:56:f6:f3:04:
                    eb:cb:46:e9:98:85:94:83:5e:6d:b2:b7:5a:86:ff:
                    d4:86:19:7d:78:a6:10:a9:f7:e2:c6:12:c8:de:56:
                    b6:08:32:8a:14:bd:51:6f:49:46:43:f3:f3:67:b1:
                    3c:87:0f:08:23:cf:5b:34:a5:a4:71:3e:0b:b3:a5:
                    3d:6b:de:b4:57:59:3d:e0:ea:a9:6c:d3:18:b2:5b:
                    b0:dd:7d:55:b3:ef:a1:f9:22:a1:1c:4c:62:78:7e:
                    d4:ca:79:68:a0:84:eb:69:0c:f5:34:c2:fc:6f:60:
                    c3:60:95:99:a8:ce:5b:44:37:63:03:e5:75:f1:a0:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7D:7D:55:4B:45:A5:0E:11:71:AE:D2:22:D7:99:B7:89:58:41:D7
            X509v3 Authority Key Identifier:
                keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:c8:5d:2d:6c:bb:d9:a9:96:bd:48:9f:e6:ad:c4:1b:1a:
         91:d9:fa:03:42:5c:1b:e1:dc:b1:c6:cd:d7:2c:ea:15:41:cf:
         6a:e4:bd:5c:6f:0f:49:59:3b:c3:91:f6:44:da:7a:e7:62:2a:
         c4:a4:07:00:18:16:9b:a6:2a:23:88:3a:c4:49:53:de:9d:ce:
         8b:aa:ae:b7:ff:a3:98:f7:a9:0f:7c:f2:d2:96:00:23:16:d9:
         ce:39:2c:0a:f4:50:fe:42:30:04:d6:10:00:38:6a:27:fb:a8:
         63:2d:ce:6d:02:fd:41:5d:50:3f:8d:9d:ee:b2:9c:25:e4:0f:
         c9:51:06:f6:7f:8d:0d:27:3c:93:68:6f:dc:bf:4a:bb:f6:db:
         24:07:25:bd:c8:e3:a9:e6:ba:e6:64:c7:92:ad:45:d7:11:89:
         6f:77:2a:40:8c:9a:5c:32:e1:c1:e4:5c:ad:f8:ad:da:d1:5d:
         9c:0d:8b:a4:fa:af:3e:9c:5a:83:a5:fd:73:77:9c:24:95:70:
         02:86:f2:dc:4e:37:97:9f:61:47:b2:ce:f4:21:5a:39:7a:5b:
         04:f1:b0:d7:43:06:72:c7:70:4c:13:86:c0:6a:2a:4e:46:bf:
         08:a7:70:2f:b9:23:71:54:eb:17:5f:43:7c:85:ee:d3:fd:2b:
         e0:ae:5e:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1BBJr9ZMNED+gAwjownMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDgyMDcyOWEwZjlhYmZiNmNhYzNiNWY5NmMyNzE5OGQ3
NjM5MWIwHhcNMjUxMDE5MTMwMTE0WhcNMjUxMDIwMTMwMTE0WjAzMTEwLwYDVQQD
EyhjMDdkN2Q1NTRiNDVhNTBlMTE3MWFlZDIyMmQ3OTliNzg5NTg0MWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/6TNVYF3MiVD4wRjaduqhE3PrkO
EM5e/LmrssJNqJXVcGb6blgmVd1VY1wl8a92GzZ9UOQxY+VWelUnjUpdogHIHyO7
N53+gDQ2o6Zkaf+9fv9+jZqyG5b85L5d3zfjAN3PvyI7l5I6zemxt3k2uFW4PVM9
uwdWtRwALiFbmw4ZA1b28wTry0bpmIWUg15tsrdahv/Uhhl9eKYQqffixhLI3la2
CDKKFL1Rb0lGQ/PzZ7E8hw8II89bNKWkcT4Ls6U9a960V1k94OqpbNMYsluw3X1V
s++h+SKhHExieH7UynlooITraQz1NML8b2DDYJWZqM5bRDdjA+V18aDbUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB9fVVLRaUOEXGu0iLXmbeJWEHXMB8GA1UdIwQY
MBaAFNRIIHKaD5q/tsrDtflsJxmNdjkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUt
NjE5NDkzNTZhOWEwLzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUtNjE5NDkzNTZhOWEw
LzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqTIXS1s
u9mplr1In+atxBsakdn6A0JcG+HcscbN1yzqFUHPauS9XG8PSVk7w5H2RNp652Iq
xKQHABgWm6YqI4g6xElT3p3Oi6qut/+jmPepD3zy0pYAIxbZzjksCvRQ/kIwBNYQ
ADhqJ/uoYy3ObQL9QV1QP42d7rKcJeQPyVEG9n+NDSc8k2hv3L9Ku/bbJAclvcjj
qea65mTHkq1F1xGJb3cqQIyaXDLhweRcrfit2tFdnA2LpPqvPpxag6X9c3ecJJVw
Aoby3E43l59hR7LO9CFaOXpbBPGw10MGcsdwTBOGwGoqTka/CKdwL7kjcVTrF19D
fIXu0/0r4K5e9A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:44 2025 by rpki-client