Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
File:                     8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json)
Hash identifier:          54KRyyRoznU+uGM2m2QuYh9KukJhZIyyZsELxCyR3ws=
Subject key identifier:   52:A8:C2:11:BC:2C:9F:81:92:E1:5B:96:80:C1:73:63:CE:22:44:BD
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Certificate issuer:       /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial:       0199FD6AE0B8DA7B247D7440D0E66885A059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 17:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:03 +0000
Files and hashes:         1: 00x2a7vYcUP_RgzqZlJDShLq9Do.roa (hash: cq08qt5t6pt7+g4zB6xtHZuctjeJqy9pw/L/lk8TYFo=)
                          2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: uzvUnhlmCvZp215EtXySBdi57sHzyqR0utYE0HMuSwY=)
                          3: KVMzJG-tiBiXKGfDbX7s-fqSUcs.roa (hash: izdiO/l04uY0Tl9GP7xbaa4HsWMYkrOgbs0SiG0a1K8=)
                          4: OBC2jp5FIHT7G9c2m1xsJUD2ivs.roa (hash: DrwuyysosoB70lBjSllnHo3rVU0U0NusilzO8tRi9Q0=)
                          5: OxF-ngX6YGUArZrbAYmh9hpGzkU.roa (hash: zhEaR7GNPbf+2lOaH8uFUPJFKzbpuLS5x4CvU7dkxPs=)
                          6: Q2Pg2GNHELVKyFoNgxOuT8YFvLY.roa (hash: DsyRU7FSw+3XDKbBM9HrtgkzYSVPnqWwqknbD6CWVSU=)
                          7: RO-InVXPYoHaB1ZpM-19yr94dQs.roa (hash: 8Y6VcUcgO4alufdIJ4djN2KAnB4AyYetp1VZzDDuyNk=)
                          8: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (hash: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=)
                          9: _gM5SG_4QQqKocZtcQPCR80SAmI.roa (hash: ee8TJS3VrEj5YXrt15hISXpN3dVXM3P5ROyjlVEMHSs=)
                          10: fG6If6WZh4pXAVRu1gEQ7wbPbEs.roa (hash: OIBSpF8oXZotrR8RVX6KacBPnJZCoNiFLIZ7aWyayQU=)
                          11: gfQeyx6Q7sjS4Xpny9IUQ8tQxLY.roa (hash: zrq/geD7ajZHxMLm7OvFbnGGXeIS14GfMNfAscurlR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:e0:b8:da:7b:24:7d:74:40:d0:e6:68:85:a0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
        Validity
            Not Before: Oct 19 17:01:03 2025 GMT
            Not After : Oct 20 17:01:03 2025 GMT
        Subject: CN=52a8c211bc2c9f8192e15b9680c17363ce2244bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:97:26:93:33:b0:15:16:b4:ce:d6:2c:70:
                    57:5c:92:87:4c:5d:da:a1:61:99:d9:b4:ae:ff:c4:
                    88:b0:69:4e:7f:9d:4b:f9:92:3f:84:d3:e5:d0:6d:
                    72:54:f2:b8:92:ae:dd:47:a7:2a:82:e4:68:24:e6:
                    fa:43:b9:5c:e7:cc:6f:6a:49:19:28:6b:21:71:08:
                    95:fc:b9:37:0d:ca:f2:da:81:15:10:9b:eb:07:34:
                    41:1f:38:89:6f:c1:4e:33:a8:10:d5:b9:f8:ff:7c:
                    65:d9:bd:0e:5c:60:f9:11:ec:88:25:b0:7c:01:63:
                    77:2b:bc:74:fb:a3:0d:f3:43:5a:bb:af:cc:88:18:
                    59:35:5e:21:ae:ba:ee:9e:0c:dc:fd:e0:92:06:3c:
                    67:64:0f:24:3a:a6:18:d8:96:dd:35:48:96:8d:ee:
                    f9:75:40:d1:fe:45:9b:ba:f0:7f:0e:26:03:91:01:
                    4a:c0:bc:a2:cd:7c:6a:5f:e5:9f:a5:d8:b5:68:2d:
                    fa:16:d9:05:32:3f:5e:47:fd:57:a0:b0:93:28:14:
                    06:24:33:3c:a5:71:76:66:be:69:19:52:c2:89:24:
                    ef:e5:e1:88:cc:40:c7:b4:43:4c:93:d2:d4:65:83:
                    82:c9:a7:78:f4:a6:06:21:26:35:bf:20:cd:42:b6:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A8:C2:11:BC:2C:9F:81:92:E1:5B:96:80:C1:73:63:CE:22:44:BD
            X509v3 Authority Key Identifier:
                keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:d3:a6:70:fa:0e:f5:69:7c:2e:cd:3d:bf:64:f3:3b:95:30:
         63:b5:14:fe:dd:19:90:4b:a4:25:71:ca:4a:a2:1b:cd:16:f9:
         2d:48:fc:0c:58:a7:83:f7:0e:cc:ca:40:c0:46:a5:26:36:0b:
         5b:ff:7a:7d:f0:43:bb:05:e9:60:44:13:1f:ef:2f:8a:68:9f:
         fd:bb:ac:64:c2:83:00:83:95:2e:f3:e8:2a:70:01:f7:20:fe:
         9e:00:7e:01:fc:a6:ea:51:d9:99:2f:44:f7:b1:95:13:72:81:
         ac:0d:db:c1:56:36:a5:52:9c:69:4d:c2:d7:ee:c1:bc:7e:9b:
         c0:0f:f1:a2:e3:92:cb:28:ac:ef:6d:76:05:b6:a4:a1:6a:1f:
         5d:1e:cc:b2:be:d5:a4:4b:88:8c:79:99:57:a8:38:e7:20:fa:
         90:25:82:88:5c:8b:b2:55:bb:a8:e3:69:cb:8e:89:b0:65:45:
         e0:a8:6f:cf:f5:21:8c:2f:64:56:65:d4:88:3b:e4:90:69:5c:
         58:f9:f5:d6:ae:35:e5:a8:a8:3e:ed:6e:41:94:17:21:2d:79:
         91:63:10:0c:35:91:b1:3d:3d:82:ca:80:23:ce:3c:7a:8e:bb:
         d6:06:af:45:3b:7e:6d:19:6c:d3:c6:80:f6:92:38:f6:32:09:
         57:69:8b:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9auC42nskfXRA0OZohaBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1
MjYxNDMwHhcNMjUxMDE5MTcwMTAzWhcNMjUxMDIwMTcwMTAzWjAzMTEwLwYDVQQD
Eyg1MmE4YzIxMWJjMmM5ZjgxOTJlMTViOTY4MGMxNzM2M2NlMjI0NGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXaXJpMzsBUWtM7WLHBXXJKHTF3a
oWGZ2bSu/8SIsGlOf51L+ZI/hNPl0G1yVPK4kq7dR6cqguRoJOb6Q7lc58xvakkZ
KGshcQiV/Lk3Dcry2oEVEJvrBzRBHziJb8FOM6gQ1bn4/3xl2b0OXGD5EeyIJbB8
AWN3K7x0+6MN80Nau6/MiBhZNV4hrrrungzc/eCSBjxnZA8kOqYY2JbdNUiWje75
dUDR/kWbuvB/DiYDkQFKwLyizXxqX+Wfpdi1aC36FtkFMj9eR/1XoLCTKBQGJDM8
pXF2Zr5pGVLCiSTv5eGIzEDHtENMk9LUZYOCyad49KYGISY1vyDNQrYOKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKowhG8LJ+BkuFbloDBc2POIkS9MB8GA1UdIwQY
MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt
ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw
LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9OmcPoO
9Wl8Ls09v2TzO5UwY7UU/t0ZkEukJXHKSqIbzRb5LUj8DFing/cOzMpAwEalJjYL
W/96ffBDuwXpYEQTH+8vimif/busZMKDAIOVLvPoKnAB9yD+ngB+Afym6lHZmS9E
97GVE3KBrA3bwVY2pVKcaU3C1+7BvH6bwA/xouOSyyis7212BbakoWofXR7Msr7V
pEuIjHmZV6g45yD6kCWCiFyLslW7qONpy46JsGVF4Khvz/UhjC9kVmXUiDvkkGlc
WPn11q415aioPu1uQZQXIS15kWMQDDWRsT09gsqAI848eo671gavRTt+bRls08aA
9pI49jIJV2mLnw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:40 2025 by rpki-client