Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
File:                     VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft (raw, json)
Hash identifier:          +x6dYzRUQo23f4QyiAVNuTDx1VQLQD2khMLAIViwCRU=
Subject key identifier:   10:D4:F6:E8:6E:FB:A7:6B:77:0D:DA:1F:6C:D5:65:D1:BC:2E:BD:B4
Authority key identifier: 54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
Certificate issuer:       /CN=545ab2a3712e2556a4434b8badd6c407a5673121
Certificate serial:       019A01EBF1BD2CBAF07079877ED35C009375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
Manifest number:          16E4
Signing time:             Mon 20 Oct 2025 14:00:31 +0000
Manifest this update:     Mon 20 Oct 2025 14:00:31 +0000
Manifest next update:     Tue 21 Oct 2025 14:00:31 +0000
Files and hashes:         1: 380YDW07MOVrCK11CLTk18E_sTc.roa (hash: pzHRMdqzu6N1d9SDcGlJcx1JSMXi9O/wGKz1T02CpOQ=)
                          2: VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl (hash: 1c1hUVx6PoAL1ox5TbGFYeRSdMyOIelbo4Uslnvl7Wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:eb:f1:bd:2c:ba:f0:70:79:87:7e:d3:5c:00:93:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=545ab2a3712e2556a4434b8badd6c407a5673121
        Validity
            Not Before: Oct 20 14:00:31 2025 GMT
            Not After : Oct 21 14:00:31 2025 GMT
        Subject: CN=10d4f6e86efba76b770dda1f6cd565d1bc2ebdb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:79:cc:c6:87:15:1d:d0:9f:8a:2b:e6:46:
                    37:23:c2:e8:aa:08:b2:dd:39:78:37:9d:6e:3c:8f:
                    60:51:fd:03:53:d8:ea:2e:06:07:e5:66:48:c8:02:
                    3e:6d:06:f6:17:29:16:07:4c:fe:62:45:4a:94:02:
                    eb:46:59:95:55:cc:5d:35:b7:26:51:20:09:25:a4:
                    44:d5:30:eb:7a:40:58:e6:21:77:e8:67:d2:f0:ce:
                    cb:3c:23:54:3f:b5:1b:53:17:db:e3:6c:8f:73:a7:
                    66:1f:b2:e5:e6:7f:ca:7b:63:cc:3d:91:13:39:a4:
                    56:3c:aa:57:5f:2f:1c:19:41:00:35:2f:79:69:23:
                    0c:28:96:7e:5f:9d:20:ce:7b:34:84:17:bf:a4:c1:
                    fc:ea:73:71:26:6e:4c:99:99:a6:c8:9d:d4:a8:7a:
                    81:27:d5:a6:d1:15:87:ac:91:bb:b9:9a:26:2e:f2:
                    a1:9c:0c:bd:0b:ac:68:45:7c:49:8e:7e:fb:69:76:
                    70:e3:2c:ce:ab:03:16:c8:45:37:1a:e8:b1:fc:51:
                    cf:8d:40:80:4c:4d:af:ac:47:cb:ab:f0:0f:53:93:
                    51:be:34:1b:e8:7f:0f:15:55:5e:28:fc:9d:30:5d:
                    43:30:a8:aa:66:61:a7:14:60:e3:ec:79:f3:84:4d:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D4:F6:E8:6E:FB:A7:6B:77:0D:DA:1F:6C:D5:65:D1:BC:2E:BD:B4
            X509v3 Authority Key Identifier:
                keyid:54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ee:77:b0:c1:22:27:c8:0d:a4:05:42:eb:99:25:54:98:d0:
         c4:bc:06:61:93:7b:85:58:52:32:58:df:99:0f:24:84:df:86:
         b7:e9:02:3e:15:06:a1:e7:45:56:23:32:40:d5:7e:92:4a:69:
         63:13:77:92:60:fb:62:24:7e:eb:90:0f:04:6c:30:35:c0:dd:
         10:34:57:d1:21:85:2d:4e:51:a8:fb:39:ef:19:a1:f9:6e:05:
         d9:86:be:69:3a:59:b9:60:0e:d4:83:c0:e6:ab:a1:31:52:db:
         2e:c1:fc:cd:c4:14:f6:1d:f7:6e:3e:09:52:07:bd:8c:a4:69:
         a6:80:4a:74:8a:1a:0b:be:9c:08:e7:fc:99:c3:99:e2:5e:1a:
         5f:81:8a:17:8d:5e:85:4b:46:11:24:74:57:7f:ea:31:6f:8f:
         8d:9d:48:ea:3b:93:2e:77:56:16:0d:9d:f8:37:ed:2f:a3:0f:
         97:d0:bf:13:9e:d8:4f:a7:5c:4a:f8:ac:9e:b1:ed:85:c5:37:
         c4:67:f5:74:42:b4:69:96:53:a6:18:be:76:96:57:ce:fa:33:
         f5:e5:b6:60:eb:bb:9f:90:11:3f:eb:33:60:41:89:4e:37:53:
         4a:ed:50:cc:6e:ee:46:30:ac:3d:87:60:3d:b8:21:9e:05:8c:
         c9:f1:35:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoB6/G9LLrwcHmHftNcAJN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NWFiMmEzNzEyZTI1NTZhNDQzNGI4YmFkZDZjNDA3YTU2
NzMxMjEwHhcNMjUxMDIwMTQwMDMxWhcNMjUxMDIxMTQwMDMxWjAzMTEwLwYDVQQD
EygxMGQ0ZjZlODZlZmJhNzZiNzcwZGRhMWY2Y2Q1NjVkMWJjMmViZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZZ5zMaHFR3Qn4or5kY3I8Loqgiy
3Tl4N51uPI9gUf0DU9jqLgYH5WZIyAI+bQb2FykWB0z+YkVKlALrRlmVVcxdNbcm
USAJJaRE1TDrekBY5iF36GfS8M7LPCNUP7UbUxfb42yPc6dmH7Ll5n/Ke2PMPZET
OaRWPKpXXy8cGUEANS95aSMMKJZ+X50gzns0hBe/pMH86nNxJm5MmZmmyJ3UqHqB
J9Wm0RWHrJG7uZomLvKhnAy9C6xoRXxJjn77aXZw4yzOqwMWyEU3Guix/FHPjUCA
TE2vrEfLq/APU5NRvjQb6H8PFVVeKPydMF1DMKiqZmGnFGDj7HnzhE0PVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDU9uhu+6drdw3aH2zVZdG8Lr20MB8GA1UdIwQY
MBaAFFRasqNxLiVWpENLi63WxAelZzEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kMmU4ZDctNTkzZi00YWZiLWI2YjMt
YjlkOGNmYzE5Y2VjLzEvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kMmU4ZDctNTkzZi00YWZiLWI2YjMtYjlkOGNmYzE5Y2Vj
LzEvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXe53sMEi
J8gNpAVC65klVJjQxLwGYZN7hVhSMljfmQ8khN+Gt+kCPhUGoedFViMyQNV+kkpp
YxN3kmD7YiR+65APBGwwNcDdEDRX0SGFLU5RqPs57xmh+W4F2Ya+aTpZuWAO1IPA
5quhMVLbLsH8zcQU9h33bj4JUge9jKRppoBKdIoaC76cCOf8mcOZ4l4aX4GKF41e
hUtGESR0V3/qMW+PjZ1I6juTLndWFg2d+DftL6MPl9C/E57YT6dcSvisnrHthcU3
xGf1dEK0aZZTphi+dpZXzvoz9eW2YOu7n5ARP+szYEGJTjdTSu1QzG7uRjCsPYdg
PbghngWMyfE1WA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:43 2025 by rpki-client