Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
File:                     5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json)
Hash identifier:          cCxI8IMtxCDMszRIRSnfpc2HugxHKsPhpXy6jTrs7k4=
Subject key identifier:   B1:DD:A0:2A:9F:5A:B6:A7:58:77:7A:92:AC:77:B4:74:1D:F0:91:71
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Certificate issuer:       /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial:       0199FBEAC09852F87E992C285C2A2AE3E9E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
Manifest number:          16F3
Signing time:             Sun 19 Oct 2025 10:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:29 +0000
Files and hashes:         1: 53Sw43oc54bFdYl3J8aYgPuTq1A.roa (hash: F/vDAf5IclENw5iT+CZVjqI+jpZyrwkuo7GV9LGXD0M=)
                          2: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: Zz79/AvITK+/2iq/gdYmFUxGuuqPyiMGf/5Da0X0oU4=)
                          3: 8bzVTIvU7VLto519WM6kmb1aC88.roa (hash: RKtsKte4GFMP8uvXTysNKUtwWTqGBn/sT3xSLBAL7kc=)
                          4: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (hash: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=)
                          5: KDN_6FFPENk8-bDnIrfpP21-8VE.roa (hash: RLkioT2IjSMiI+bndKsLWNSNLlPwCFxgUoWcDB4O4GA=)
                          6: L9WBYojbvLbnk987LNP8zQZEzQg.roa (hash: 2vRXimXnDZGXHdopycsq1UqK3u4zkQKmcrWliNbOkFI=)
                          7: U0jLu9ql5SdWIQT76CBH027LVAA.roa (hash: PMh+5OCLPKe8/WakcVuCjjuQ331xyUdKEkuwBGpmve4=)
                          8: WOy4XXuLEMlJp9KBWwhDiF407tA.roa (hash: 6fZWXR6YTfGld6EIK4/PHGRBk1q4g1SRUcUmJfhoCkw=)
                          9: ZpjDQL4nsFw5QzvH0G3r2a1GNlk.roa (hash: CAm7uW2+Hk0sF/LHF5dzV4+B9Tz215MhOa+XlD6Ei5U=)
                          10: _KM3VWtbdBYw-7ONqWep42LzJbM.roa (hash: e0kdHEeKs2calKvQRylwRCnRtRK5mFt57DwvVj7HLtU=)
                          11: cVKkCDaARUtvYDXoV4X9N2Ey2ZE.roa (hash: QIVK0slO8PFSnaXnlK3EvRckSMInnvVoSayFBWoxzeo=)
                          12: j9WZYSGRdVfvzLNu1mDZtYatwaY.roa (hash: nUy51L/tmtGCGiZiltuVFci4bpVMC+ZdBO8uYz2YP0g=)
                          13: p-0-WRExyZV5USsnbA07oLLM0Dk.roa (hash: TpKQK+Apn7tf7RflC4lVp209f1NDxfhMP5jeUnHBKic=)
                          14: qepQI1x3-VZdN4tY2IgS2Qt0QxA.roa (hash: bg52ywo15jKHz/Ym+vNWwgmJcwLyfvK3SRvTyb5JixQ=)
                          15: rXg2JiPJpfAU79JRlEbsnp3pLc8.roa (hash: MQVzfSubZdxq5yFhe68zUL+Rr+rpOcHAqeIz000zyLw=)
                          16: uo3I45HXu40pb8JAg4x-iMt72NU.roa (hash: DCwRNzAYt7btk9pb3J4DQg/DLUtwWKO6Tv+fQC/dgO4=)
                          17: wf1azGdbs6KejpsvGDcmKSTTHpQ.roa (hash: q5SxtkKD9yNoBx9Nh1XxgTUv7m8d3XBZq8krtOYc6Wk=)
                          18: xLOovb_V_553mPyCa2MPaJ6AL4o.roa (hash: N6NgzmGF9X7Oq9bKLoPjt2ok22T8qTteZuv/qrOneTE=)
                          19: yQ-AQ94E1D9Tv3q18wm7Fve1ObI.roa (hash: H8VQOZeeUDRGGEzlonPzEMZCTDLV4o0msTIPImbqpx8=)
                          20: zmQcXGUtGhS1_tiNEBK-z0ub5Is.roa (hash: w9Y2nBHc4Olve6gCgm/MbgZTbOJSTsJeyEW3ubYEBD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:c0:98:52:f8:7e:99:2c:28:5c:2a:2a:e3:e9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
        Validity
            Not Before: Oct 19 10:01:29 2025 GMT
            Not After : Oct 20 10:01:29 2025 GMT
        Subject: CN=b1dda02a9f5ab6a758777a92ac77b4741df09171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:aa:a4:61:e0:e0:8a:85:df:25:7c:c6:36:
                    36:12:ea:49:ff:d8:b7:d9:de:07:12:ea:03:4a:8e:
                    20:f8:55:ee:45:be:b9:0b:a1:bd:fb:09:84:0e:c0:
                    52:47:c7:7b:2a:6c:11:14:f5:8a:70:5d:29:3d:c0:
                    16:23:25:9c:e6:ad:fb:07:31:37:d6:25:cc:5d:8f:
                    16:c0:48:c7:c3:b7:39:17:8e:d8:4a:b1:df:45:8b:
                    50:54:d9:02:c8:f3:65:3f:26:14:3a:39:25:87:0a:
                    6e:d9:81:dc:95:93:90:0b:bd:73:af:4c:ff:69:68:
                    4e:a4:b2:0f:0c:31:e9:15:72:ca:05:f7:8d:95:f2:
                    77:dd:f9:d3:36:bb:98:41:b1:b6:2e:36:1b:82:4c:
                    58:d2:fa:71:ed:4c:77:22:a2:54:cb:87:a6:c4:0b:
                    37:29:45:59:dd:19:73:bb:bb:ae:09:28:c4:88:25:
                    5a:80:4e:7e:78:58:b0:9d:a4:a4:13:1d:37:e6:a3:
                    c7:b5:0c:06:5d:23:5a:76:35:69:00:6d:a0:fe:12:
                    f9:4d:b8:4c:f2:90:ad:76:d0:15:18:a9:c0:92:07:
                    f1:a3:99:af:f2:a0:38:45:35:d8:5b:11:a1:7c:0d:
                    5d:27:f3:d8:95:74:b9:32:04:b2:76:85:01:97:31:
                    c2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DD:A0:2A:9F:5A:B6:A7:58:77:7A:92:AC:77:B4:74:1D:F0:91:71
            X509v3 Authority Key Identifier:
                keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fb:77:99:13:e5:31:20:e8:f4:82:30:ed:f0:76:60:8a:d7:
         50:d3:0f:d5:48:d7:ad:6c:81:27:bf:c7:42:fe:da:de:c0:35:
         b9:93:50:eb:07:50:03:68:42:1d:16:71:00:d8:32:af:11:ec:
         f7:cd:28:0a:80:db:82:b3:89:72:e4:28:c3:f2:67:de:30:e9:
         cb:26:10:d5:12:8a:70:10:fc:d6:24:23:9a:96:9f:fc:a8:ff:
         c3:89:1e:5d:cf:a1:6c:99:f9:49:e0:1c:3a:e7:5f:c6:12:9c:
         af:5c:e8:40:d1:bf:43:be:c9:a7:80:47:11:e4:b3:f3:6f:2d:
         22:6b:b0:1d:56:69:0f:3c:dc:a6:cc:f5:ea:8c:91:01:b4:0f:
         6b:83:87:43:62:8e:b6:4f:9a:5d:4e:a5:91:8c:fe:96:68:c2:
         9d:8f:e8:7d:19:38:1a:cf:88:fe:80:10:cc:a0:cb:0b:d4:04:
         e8:2b:f9:26:ae:90:b5:39:bf:6e:23:f7:dd:ee:c3:0b:db:35:
         ca:9b:1d:c2:2f:b5:04:2e:9b:34:f4:69:b8:a7:37:eb:b9:ca:
         1f:84:b0:71:74:3f:04:21:91:4c:98:42:86:77:f7:af:2d:43:
         31:5e:b8:02:81:bc:9a:41:3f:43:d6:d9:cc:7e:f0:4c:17:59:
         c0:ff:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:54 2025 by rpki-client