Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File:                     NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier:          GKz/LMopCp8niWkgtfYvUo2n1P3TCKz0yfRe736mx2E=
Subject key identifier:   93:58:C8:C4:5C:B0:D0:63:21:B2:81:06:93:BA:73:AB:21:6E:52:DA
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer:       /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial:       0199FC216035FB2388727EE3E049D76E8855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 11:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:09 +0000
Files and hashes:         1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: VS+Nh8g1+HJlv1hwvOFeRfY4pvlDoFWHJsvzqvW1WQs=)
                          2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:60:35:fb:23:88:72:7e:e3:e0:49:d7:6e:88:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
        Validity
            Not Before: Oct 19 11:01:09 2025 GMT
            Not After : Oct 20 11:01:09 2025 GMT
        Subject: CN=9358c8c45cb0d06321b2810693ba73ab216e52da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:6d:0b:d9:14:ff:a2:7f:a7:d8:66:89:1a:
                    09:08:e0:b9:a4:2d:ac:f4:68:ef:63:48:56:67:6c:
                    ca:3a:66:5d:79:bd:20:60:8e:d6:e8:0c:9a:81:33:
                    7e:b3:b7:0b:eb:b8:25:b4:a7:18:c9:e6:b8:f7:be:
                    ee:a7:77:b7:31:d1:bc:33:b2:80:83:8b:54:a5:22:
                    55:d5:e0:34:4c:d1:6e:14:82:31:43:d2:87:55:28:
                    4d:f1:26:fa:7c:2a:68:2c:19:55:bd:bf:6d:47:d9:
                    3c:3c:b0:df:31:50:48:0a:6c:3f:e7:83:ab:b5:19:
                    f9:2d:df:27:56:ad:98:2a:05:11:3a:3f:08:64:19:
                    2e:5f:4c:8c:93:7e:c7:aa:47:62:bc:8b:51:3f:1e:
                    5d:a4:df:99:4a:6d:d8:d0:49:07:07:cd:9c:a1:26:
                    de:57:15:f8:e0:01:3b:7b:9d:c6:18:e8:9a:a5:5b:
                    6f:c1:d2:8f:d7:3e:14:1b:cb:3a:93:a3:1b:26:44:
                    ff:ec:ec:93:bc:e7:dd:61:fa:61:da:8e:2a:bc:a2:
                    b3:5b:24:c3:f3:4e:45:97:41:5e:e5:0a:d1:a8:ec:
                    b4:7f:10:b9:2c:7b:78:e8:a0:76:51:a5:27:e9:3e:
                    d6:04:35:b6:b3:a1:d9:5c:ae:1c:3d:17:42:05:41:
                    c1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:58:C8:C4:5C:B0:D0:63:21:B2:81:06:93:BA:73:AB:21:6E:52:DA
            X509v3 Authority Key Identifier:
                keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5a:d2:34:03:de:ec:e3:7a:b1:fd:34:18:54:8a:23:47:bf:
         fd:00:9f:fb:4b:40:b4:dd:34:8b:bf:a1:9e:de:de:2c:57:d3:
         b7:fd:56:99:87:1c:97:42:16:f4:e3:59:1c:2f:8d:bb:b2:3b:
         43:8d:fa:f5:97:bb:ae:62:c7:ab:df:fa:5b:b5:76:8c:e4:ff:
         ac:27:0d:53:d8:00:ed:ad:00:24:e6:4d:f1:c8:21:85:70:3e:
         de:99:55:0f:df:0a:64:70:3c:5f:c1:85:71:b6:c4:0b:d0:29:
         73:3a:fa:1f:8c:6b:e1:a5:12:40:7f:91:3c:11:c4:4f:ee:38:
         f7:20:d0:79:af:ed:13:c1:1f:e8:07:53:7b:4c:45:50:f3:5c:
         f4:d5:7b:44:29:6a:ec:13:d6:57:a1:e8:05:c3:e9:0e:bf:c4:
         07:78:f3:58:8a:d0:7d:91:b8:dc:1d:db:08:31:c5:cb:a6:15:
         ee:0d:a7:d2:45:66:02:af:d7:d9:dd:7f:c5:2b:e0:24:11:6d:
         0e:78:44:6d:d8:70:2e:a3:f0:06:f6:6e:99:d9:81:43:57:8d:
         90:a8:13:7f:10:b0:c6:17:4c:d5:81:7d:e9:f9:e1:98:ad:52:
         29:77:9c:5c:c3:35:d1:c9:99:4a:11:7f:c2:b1:bf:39:d6:46:
         50:fa:6e:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IWA1+yOIcn7j4EnXbohVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NmU0NzQ0NzMxZGE0NGYwOGZhNWU5MmM1ZWIyYTQ3NGQ0
OWE4OTIwHhcNMjUxMDE5MTEwMTA5WhcNMjUxMDIwMTEwMTA5WjAzMTEwLwYDVQQD
Eyg5MzU4YzhjNDVjYjBkMDYzMjFiMjgxMDY5M2JhNzNhYjIxNmU1MmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaRtC9kU/6J/p9hmiRoJCOC5pC2s
9GjvY0hWZ2zKOmZdeb0gYI7W6AyagTN+s7cL67gltKcYyea4977up3e3MdG8M7KA
g4tUpSJV1eA0TNFuFIIxQ9KHVShN8Sb6fCpoLBlVvb9tR9k8PLDfMVBICmw/54Or
tRn5Ld8nVq2YKgUROj8IZBkuX0yMk37HqkdivItRPx5dpN+ZSm3Y0EkHB82coSbe
VxX44AE7e53GGOiapVtvwdKP1z4UG8s6k6MbJkT/7OyTvOfdYfph2o4qvKKzWyTD
805Fl0Fe5QrRqOy0fxC5LHt46KB2UaUn6T7WBDW2s6HZXK4cPRdCBUHBiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNYyMRcsNBjIbKBBpO6c6shblLaMB8GA1UdIwQY
MBaAFDVuR0RzHaRPCPpeksXrKkdNSaiSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUt
MGM1MDFkNjg5NzVhLzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84ZjQ3ODktOTYzYS00YzY5LWIxNjUtMGM1MDFkNjg5NzVh
LzEvTlc1SFJITWRwRThJLWw2U3hlc3FSMDFKcUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1rSNAPe
7ON6sf00GFSKI0e//QCf+0tAtN00i7+hnt7eLFfTt/1WmYccl0IW9ONZHC+Nu7I7
Q4369Ze7rmLHq9/6W7V2jOT/rCcNU9gA7a0AJOZN8cghhXA+3plVD98KZHA8X8GF
cbbEC9Apczr6H4xr4aUSQH+RPBHET+449yDQea/tE8Ef6AdTe0xFUPNc9NV7RClq
7BPWV6HoBcPpDr/EB3jzWIrQfZG43B3bCDHFy6YV7g2n0kVmAq/X2d1/xSvgJBFt
DnhEbdhwLqPwBvZumdmBQ1eNkKgTfxCwxhdM1YF96fnhmK1SKXecXMM10cmZShF/
wrG/OdZGUPpuYQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:49 2025 by rpki-client