Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          nLxMfNXwEVgL1cSER3eWGkRPFQL/igWxojGV7TKBi/k=
Subject key identifier:   88:D9:39:F3:C8:28:2F:D0:1F:80:62:CA:E2:99:94:15:CF:D8:A0:02
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       0199FD33F040513444B007491A3AEA723928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          16F1
Signing time:             Sun 19 Oct 2025 16:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:03 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: +bN/NLf4xsUZce/C6yKan8R+bUTYEaewZiMiPsj8deU=)
                          2: 3mOoENhQssYcE0_jNIiNCd1IJhM.roa (hash: NxDjxUHodJorGdwgiCzGcQ9QT0JyGcub9gsrImCrSi0=)
                          3: Ap3gL9Yp7uumyoe2yxrwjvNZDxk.roa (hash: wudrm+gdegSTau2jZcPXyXW7DUxfSyZ4WVu/YKmSW1A=)
                          4: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (hash: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=)
                          5: OT6YHDk_lhZsoGwe6NFFGa5Sz3g.roa (hash: 3UK4RMJ18E6BJ3Pt3k1N4ljIIeVHfvFurvUMotxJ7ow=)
                          6: xPlV_dPEF5A6IiGBWHJlqdqTyug.roa (hash: L4B5IhPuaoOP7uH4/YjON7e/k30j+W6z6mE0lKhs4Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:f0:40:51:34:44:b0:07:49:1a:3a:ea:72:39:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Oct 19 16:01:03 2025 GMT
            Not After : Oct 20 16:01:03 2025 GMT
        Subject: CN=88d939f3c8282fd01f8062cae2999415cfd8a002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:ec:36:e1:07:15:83:f6:35:d2:41:ce:e2:
                    71:f7:35:cd:25:3d:6d:42:be:d9:33:bb:ec:df:07:
                    8c:71:f7:c6:80:73:48:ea:65:67:ee:2c:0a:86:b6:
                    1b:f5:07:7e:79:77:d6:63:3c:de:95:7d:b5:61:6c:
                    d5:26:e5:74:1d:b7:c2:2b:64:03:2d:4b:0e:4c:1b:
                    94:0d:9f:b1:cf:ca:2d:f6:dd:e2:e4:17:84:f4:d6:
                    7e:c3:a8:40:f7:33:50:3e:8a:be:73:c2:02:f4:6b:
                    bb:75:25:bd:39:c0:1f:d7:81:1d:b3:2b:83:19:07:
                    31:3d:f3:fc:79:5a:d5:f1:67:bb:34:45:7e:3d:9f:
                    70:95:5e:7b:9d:28:0b:6b:f8:0d:1a:99:d9:03:be:
                    83:83:ca:5e:58:8a:0d:a8:f5:f4:3c:0c:58:bf:b9:
                    de:39:d3:e9:21:d3:2e:e6:2e:19:9d:08:24:3d:d3:
                    db:d2:48:c9:59:9d:e0:c4:a1:d0:39:52:e0:01:c9:
                    de:31:1d:e0:6e:31:76:5c:fc:49:bd:34:59:9d:9a:
                    0e:a5:71:69:90:96:4f:b5:05:f7:58:e3:ba:87:47:
                    0e:64:ae:5d:a2:71:f6:4c:cc:d7:16:7c:f4:8b:03:
                    f9:3d:db:c3:10:c8:f0:31:69:ac:be:fc:d1:d9:21:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D9:39:F3:C8:28:2F:D0:1F:80:62:CA:E2:99:94:15:CF:D8:A0:02
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:85:34:2d:2f:e6:5e:6f:21:33:76:9a:ca:82:06:3c:ad:
         57:48:75:8f:07:5f:f2:2f:d8:c2:da:30:a4:23:fd:2d:d1:fa:
         71:e5:06:80:aa:a1:0b:7f:95:51:24:41:c0:ce:f7:7c:a3:26:
         5c:de:86:ad:28:e0:09:5d:e7:2d:27:53:c6:52:e3:25:ee:4e:
         4a:b6:b1:8b:cf:cb:d9:f3:ae:5f:5c:84:ec:57:5d:80:01:36:
         34:fa:2c:cd:4d:76:4c:d4:52:03:56:ac:1c:1b:d1:12:0d:94:
         4b:9e:d2:44:02:2e:4a:2b:d7:d2:c5:e7:46:17:47:7e:07:f5:
         6f:34:b7:a5:6a:cc:cb:98:9b:b1:cf:59:08:af:5b:19:e1:8f:
         cc:7a:3e:77:c8:d5:76:f5:a1:13:77:64:8f:d2:b1:e8:db:5b:
         a8:8b:c8:a4:ec:8c:84:1f:32:42:d6:4f:55:ec:85:15:4f:99:
         14:bb:34:ab:9a:00:2a:92:93:79:8e:ff:c3:3e:d3:e8:1c:3a:
         d5:1d:52:40:37:87:f5:3f:15:b7:c2:13:24:27:74:39:82:b4:
         6a:0e:b8:e5:fa:8c:e4:65:9b:16:d3:6b:41:ed:b5:c0:fb:8f:
         a8:4e:6c:e5:81:b2:7e:7c:9c:c2:95:0f:9d:39:79:8b:14:f1:
         e2:a1:f5:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/BAUTREsAdJGjrqcjkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTI2OTQ2NTJhYTI5ODUxMWVkYWZiZTE4ZDJiMWNkYmM3
OTI2MzgwHhcNMjUxMDE5MTYwMTAzWhcNMjUxMDIwMTYwMTAzWjAzMTEwLwYDVQQD
Eyg4OGQ5MzlmM2M4MjgyZmQwMWY4MDYyY2FlMjk5OTQxNWNmZDhhMDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzPsNuEHFYP2NdJBzuJx9zXNJT1t
Qr7ZM7vs3weMcffGgHNI6mVn7iwKhrYb9Qd+eXfWYzzelX21YWzVJuV0HbfCK2QD
LUsOTBuUDZ+xz8ot9t3i5BeE9NZ+w6hA9zNQPoq+c8IC9Gu7dSW9OcAf14EdsyuD
GQcxPfP8eVrV8We7NEV+PZ9wlV57nSgLa/gNGpnZA76Dg8peWIoNqPX0PAxYv7ne
OdPpIdMu5i4ZnQgkPdPb0kjJWZ3gxKHQOVLgAcneMR3gbjF2XPxJvTRZnZoOpXFp
kJZPtQX3WOO6h0cOZK5donH2TMzXFnz0iwP5PdvDEMjwMWmsvvzR2SGarwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjZOfPIKC/QH4BiyuKZlBXP2KACMB8GA1UdIwQY
MBaAFNbiaUZSqimFEe2vvhjSsc28eSY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODkt
YjQyMzY0ODk1MDgzLzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODktYjQyMzY0ODk1MDgz
LzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7qFNC0v
5l5vITN2msqCBjytV0h1jwdf8i/YwtowpCP9LdH6ceUGgKqhC3+VUSRBwM73fKMm
XN6GrSjgCV3nLSdTxlLjJe5OSraxi8/L2fOuX1yE7FddgAE2NPoszU12TNRSA1as
HBvREg2US57SRAIuSivX0sXnRhdHfgf1bzS3pWrMy5ibsc9ZCK9bGeGPzHo+d8jV
dvWhE3dkj9Kx6NtbqIvIpOyMhB8yQtZPVeyFFU+ZFLs0q5oAKpKTeY7/wz7T6Bw6
1R1SQDeH9T8Vt8ITJCd0OYK0ag645fqM5GWbFtNrQe21wPuPqE5s5YGyfnycwpUP
nTl5ixTx4qH1xA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:08 2025 by rpki-client