Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
File:                     S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft (raw, json)
Hash identifier:          /x/UY8skGKMd8229DK+qYAgWE9XzkwE8MTD2apybilk=
Subject key identifier:   F0:CF:CD:18:64:B1:5F:9A:1F:CB:C2:73:E8:17:85:62:5E:61:E4:28
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Certificate issuer:       /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial:       019A0411D6F0895FB871EEB963B4E758B2E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
Manifest number:          16F2
Signing time:             Tue 21 Oct 2025 00:01:09 +0000
Manifest this update:     Tue 21 Oct 2025 00:01:09 +0000
Manifest next update:     Wed 22 Oct 2025 00:01:09 +0000
Files and hashes:         1: IMyen03Z3kYW501dGBJKRvVCnYU.roa (hash: iucT9aE10m3DuQgfsaO8fZMDF0JO/83+1ytDh6dNspg=)
                          2: S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl (hash: z1LRo2Mp8DmG8D5L5hl+qJ6o+OxoQA24yKp8RqcLGng=)
                          3: _70B8nLCrCvW6ACV30Y-ItPOrFA.roa (hash: cBDWH8z972r2xnPCEsRs0ukVbID+nL6L8yt1uckQ37s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:11:d6:f0:89:5f:b8:71:ee:b9:63:b4:e7:58:b2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
        Validity
            Not Before: Oct 21 00:01:09 2025 GMT
            Not After : Oct 22 00:01:09 2025 GMT
        Subject: CN=f0cfcd1864b15f9a1fcbc273e81785625e61e428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:d6:1c:5a:d7:d8:cb:ab:38:37:b1:36:68:
                    ef:ce:28:04:ae:ca:60:2b:f0:fb:bd:c7:b8:0e:eb:
                    f0:d0:b8:21:d3:34:88:f6:7a:0c:6d:db:cf:a6:08:
                    24:b1:ee:06:c1:f2:ea:21:55:a3:e7:d3:50:74:4a:
                    20:1a:90:ac:a8:44:ac:f3:71:ac:ac:7c:1c:e0:1f:
                    34:59:1a:8f:a2:24:d2:14:9e:bb:34:e7:f3:a2:3a:
                    f9:58:d6:ba:69:11:43:96:ea:41:81:fc:8f:13:7b:
                    0b:83:85:ee:23:08:9d:84:81:51:cb:23:44:93:00:
                    18:77:25:7c:41:f4:a5:3b:7b:f5:2b:03:66:2e:cf:
                    19:ae:83:6d:a2:04:ad:65:94:16:27:ce:95:e5:7e:
                    97:fa:c8:cc:81:1c:a4:84:b8:4e:de:a8:f9:39:b6:
                    a9:a3:3b:ef:31:d7:13:a2:0e:7b:9c:bd:3f:4a:e0:
                    f3:38:fe:a0:34:1f:7e:4a:a0:d6:a3:1b:36:56:d7:
                    e0:3b:a2:ec:db:2a:f0:93:23:3f:09:a5:47:e8:74:
                    e8:62:82:ca:51:7a:14:ba:f9:c0:02:d8:a0:df:bf:
                    cb:2f:b2:c5:f5:08:e4:1a:fe:5a:db:c8:cd:84:d9:
                    70:21:b6:56:f2:55:5d:41:5e:e0:5e:ce:c0:48:78:
                    48:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CF:CD:18:64:B1:5F:9A:1F:CB:C2:73:E8:17:85:62:5E:61:E4:28
            X509v3 Authority Key Identifier:
                keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ed:e5:16:e7:0a:8e:96:42:d0:5e:a8:db:ec:f9:77:68:77:
         f9:36:11:5d:bb:09:a5:a0:74:63:79:c8:42:29:47:3c:b8:c2:
         c7:87:ae:56:cd:af:c1:ef:92:6a:3e:7d:f5:de:1e:c8:a2:90:
         33:94:1c:cf:16:98:dc:fb:06:50:4e:d1:6b:c9:98:32:c6:9e:
         b7:54:2a:f9:9c:d3:da:25:97:e9:26:ed:f9:2c:14:f8:bb:39:
         70:a6:b0:8c:3f:d7:8c:d0:49:d1:39:4e:c9:03:a9:e0:6f:53:
         18:9d:8d:a2:19:e6:85:48:96:a3:6e:04:20:2b:29:e9:f8:31:
         55:d2:75:a4:52:8a:bc:2c:4e:21:88:b2:a1:5f:94:e0:4a:05:
         4b:ab:97:72:98:8d:3a:fd:4d:ae:e0:c1:a9:76:9b:54:5d:21:
         0d:16:3a:8b:e0:2b:05:df:ea:73:aa:70:90:56:65:92:db:7a:
         8d:9d:34:b5:d6:97:c6:76:6e:24:ca:bf:11:23:6d:8e:af:0d:
         1d:c5:56:1c:d9:b2:7d:13:d6:11:30:83:1d:62:58:a2:f6:dc:
         ed:bd:0a:51:21:b8:1c:12:69:1e:d3:40:8a:d0:62:29:1d:27:
         b4:1b:bc:65:68:d9:d3:bb:2a:ba:e4:cb:ee:7a:7f:d0:48:59:
         c5:f1:c7:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoEEdbwiV+4ce65Y7TnWLLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTc3MjViMGE2MDVkNGRkY2M0NjRiNzBkY2IzYTE2MmE1
ZjA1NWIwHhcNMjUxMDIxMDAwMTA5WhcNMjUxMDIyMDAwMTA5WjAzMTEwLwYDVQQD
EyhmMGNmY2QxODY0YjE1ZjlhMWZjYmMyNzNlODE3ODU2MjVlNjFlNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/XWHFrX2MurODexNmjvzigErspg
K/D7vce4Duvw0Lgh0zSI9noMbdvPpggkse4GwfLqIVWj59NQdEogGpCsqESs83Gs
rHwc4B80WRqPoiTSFJ67NOfzojr5WNa6aRFDlupBgfyPE3sLg4XuIwidhIFRyyNE
kwAYdyV8QfSlO3v1KwNmLs8ZroNtogStZZQWJ86V5X6X+sjMgRykhLhO3qj5Obap
ozvvMdcTog57nL0/SuDzOP6gNB9+SqDWoxs2VtfgO6Ls2yrwkyM/CaVH6HToYoLK
UXoUuvnAAtig37/LL7LF9QjkGv5a28jNhNlwIbZW8lVdQV7gXs7ASHhItQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDPzRhksV+aH8vCc+gXhWJeYeQoMB8GA1UdIwQY
MBaAFEtXclsKYF1N3MRktw3LOhYqXwVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgt
OGFmNTZlNzMzNjAwLzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lMDA1YzItYWZmYS00NThmLWFhZjgtOGFmNTZlNzMzNjAw
LzEvUzFkeVd3cGdYVTNjeEdTM0RjczZGaXBmQlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATO3lFucK
jpZC0F6o2+z5d2h3+TYRXbsJpaB0Y3nIQilHPLjCx4euVs2vwe+Saj599d4eyKKQ
M5QczxaY3PsGUE7Ra8mYMsaet1Qq+ZzT2iWX6Sbt+SwU+Ls5cKawjD/XjNBJ0TlO
yQOp4G9TGJ2NohnmhUiWo24EICsp6fgxVdJ1pFKKvCxOIYiyoV+U4EoFS6uXcpiN
Ov1NruDBqXabVF0hDRY6i+ArBd/qc6pwkFZlktt6jZ00tdaXxnZuJMq/ESNtjq8N
HcVWHNmyfRPWETCDHWJYovbc7b0KUSG4HBJpHtNAitBiKR0ntBu8ZWjZ07squuTL
7np/0EhZxfHHGw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:47:50 2025 by rpki-client