Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
File:                     iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json)
Hash identifier:          xK/+5crWJ6+f/URz88aZ25GL6zsEXPWjlVqYaM3f1U8=
Subject key identifier:   76:15:98:88:3C:1F:38:2F:46:73:33:E5:74:01:80:D4:DC:B0:BD:60
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Certificate issuer:       /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial:       0199FE46E243AF78E772BD46DE678A2F641F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 21:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:22 +0000
Files and hashes:         1: VGVyrg_KWe6qJVf2EFW5rg282l8.roa (hash: no1Xp/fKJZHQHLgUjaAU6HFgcxae88YxDTT3wdaVfTw=)
                          2: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: +iaI0URQOfRUyX0DIRzyoHVUt8I0vtusGKq+8q5beZY=)
                          3: jmjQM-Af7YixW0lhj7IQRUe7D0c.roa (hash: Tb54ESX/F3Guxq8pdf9XF/gmXcXHx+T4/bKA3b9RF5c=)
                          4: xmUPQ3mViYNMsd0xxgPFv7m_tqs.roa (hash: +gYQmZnNpgxAgMFZUWEb+q/wfWqMiMPHDDY/N16WFvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:e2:43:af:78:e7:72:bd:46:de:67:8a:2f:64:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
        Validity
            Not Before: Oct 19 21:01:22 2025 GMT
            Not After : Oct 20 21:01:22 2025 GMT
        Subject: CN=761598883c1f382f467333e5740180d4dcb0bd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:a4:25:84:c0:d0:c0:64:06:d2:e2:01:fd:
                    da:53:fd:8f:02:da:b6:f5:99:3c:84:c3:08:2e:a0:
                    70:7f:ad:c7:c5:13:aa:8c:02:3e:28:34:2e:07:2d:
                    8b:71:e1:dc:2c:c8:2b:90:34:08:e5:8a:7d:a9:6a:
                    c5:1b:26:7d:5f:3b:00:4d:2a:41:08:b2:43:94:97:
                    18:04:8e:c3:d3:a1:05:0f:7f:01:b8:28:6d:ce:0a:
                    6d:25:ca:9f:18:1d:86:91:35:6e:70:6f:55:b1:97:
                    0b:4d:e6:a4:41:82:48:7a:08:9c:a3:6c:66:8e:14:
                    17:42:27:f5:22:b1:b2:6a:26:ea:3c:8f:12:54:24:
                    db:03:d4:fc:a0:bc:fb:6d:0a:ef:67:28:08:c0:d0:
                    a9:53:8c:60:40:10:86:9b:74:aa:04:46:db:d3:d6:
                    3d:03:aa:9b:1f:d5:a9:80:fe:97:c8:d1:c2:bb:42:
                    5a:80:31:2c:e9:a0:ab:67:1e:77:24:72:1f:50:3a:
                    b2:fe:f8:76:12:51:06:9b:bc:3c:78:9b:04:d6:96:
                    98:de:ce:2a:39:51:1b:e7:3c:1c:1c:e2:ec:9e:61:
                    43:54:63:b4:0a:0c:ec:6e:1f:11:ec:f1:2e:d0:c0:
                    b5:78:4b:41:4a:d5:74:80:09:0b:9f:5e:57:45:fd:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:15:98:88:3C:1F:38:2F:46:73:33:E5:74:01:80:D4:DC:B0:BD:60
            X509v3 Authority Key Identifier:
                keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:28:08:95:2b:ea:22:e2:71:63:37:a9:87:6a:56:eb:3a:bd:
         bb:80:6c:2a:9d:12:e8:fa:d3:c4:a5:c6:51:63:3d:1b:a8:cf:
         86:13:1e:07:85:6f:3f:6f:d0:d0:8c:44:2c:90:9e:b0:dc:1f:
         7e:92:c3:b7:c7:1e:26:80:07:6b:cd:2b:ca:49:08:ae:fc:e9:
         86:45:4e:9c:70:c5:69:98:04:22:c3:73:3a:7f:d3:8d:64:e3:
         ef:ac:ed:c1:b6:25:e2:ed:46:35:74:c8:2e:35:0c:ff:13:87:
         bf:0f:b4:c8:a9:c1:af:76:1e:77:65:a1:3a:5a:31:85:f0:62:
         3b:24:55:dd:96:63:38:fd:62:e6:60:09:22:85:1a:f8:3c:6f:
         79:55:00:47:33:d7:8f:4d:82:f7:0b:d7:d6:36:6c:63:1d:f9:
         bb:e2:17:63:49:70:a7:d3:5d:c7:69:db:85:20:ea:b6:51:4f:
         a2:e3:19:55:60:70:a6:ff:48:df:30:6a:45:74:bb:0c:48:87:
         fc:66:ef:2c:03:90:f6:d5:6c:30:d0:27:46:5a:ff:70:16:b3:
         be:51:88:e1:af:58:c2:1f:d7:cb:69:a2:e1:83:32:f2:90:69:
         85:70:3c:f4:50:72:d5:da:28:fb:31:f8:1e:c1:bc:e5:c6:90:
         e5:f3:5d:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RuJDr3jncr1G3meKL2QfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMjZmNDc2ZDYwODYyNWFkMWZlMDZlNTJiOTc0YTlmNjZm
MDE0MWEwHhcNMjUxMDE5MjEwMTIyWhcNMjUxMDIwMjEwMTIyWjAzMTEwLwYDVQQD
Eyg3NjE1OTg4ODNjMWYzODJmNDY3MzMzZTU3NDAxODBkNGRjYjBiZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZqkJYTA0MBkBtLiAf3aU/2PAtq2
9Zk8hMMILqBwf63HxROqjAI+KDQuBy2LceHcLMgrkDQI5Yp9qWrFGyZ9XzsATSpB
CLJDlJcYBI7D06EFD38BuChtzgptJcqfGB2GkTVucG9VsZcLTeakQYJIegico2xm
jhQXQif1IrGyaibqPI8SVCTbA9T8oLz7bQrvZygIwNCpU4xgQBCGm3SqBEbb09Y9
A6qbH9WpgP6XyNHCu0JagDEs6aCrZx53JHIfUDqy/vh2ElEGm7w8eJsE1paY3s4q
OVEb5zwcHOLsnmFDVGO0Cgzsbh8R7PEu0MC1eEtBStV0gAkLn15XRf0nZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYVmIg8HzgvRnMz5XQBgNTcsL1gMB8GA1UdIwQY
MBaAFIom9HbWCGJa0f4G5SuXSp9m8BQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2It
ZDg0NmQxMDZiNWY3LzEvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9hNjZmMmQtY2EyZi00YmNhLWIyN2ItZDg0NmQxMDZiNWY3
LzEvaWliMGR0WUlZbHJSX2dibEs1ZEtuMmJ3RkJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSgIlSvq
IuJxYzeph2pW6zq9u4BsKp0S6PrTxKXGUWM9G6jPhhMeB4VvP2/Q0IxELJCesNwf
fpLDt8ceJoAHa80rykkIrvzphkVOnHDFaZgEIsNzOn/TjWTj76ztwbYl4u1GNXTI
LjUM/xOHvw+0yKnBr3Yed2WhOloxhfBiOyRV3ZZjOP1i5mAJIoUa+DxveVUARzPX
j02C9wvX1jZsYx35u+IXY0lwp9Ndx2nbhSDqtlFPouMZVWBwpv9I3zBqRXS7DEiH
/GbvLAOQ9tVsMNAnRlr/cBazvlGI4a9Ywh/Xy2mi4YMy8pBphXA89FBy1doo+zH4
HsG85caQ5fNdYw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:36 2025 by rpki-client