Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
File:                     eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft (raw, json)
Hash identifier:          hq/PMroEwuNSd9lruaXxTbTuMH1Nh8Wj+CXoFKw7BF8=
Subject key identifier:   16:BF:BE:E0:A3:26:72:7C:6D:30:FD:20:6C:04:99:77:FB:E0:AA:85
Authority key identifier: 78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF
Certificate issuer:       /CN=78c580769d521c89cc797ff699cacf0ba43da9bf
Certificate serial:       0199FC2198E6C839E17CD3DFDE0D5995514D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
Manifest number:          07A6
Signing time:             Sun 19 Oct 2025 11:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:24 +0000
Files and hashes:         1: eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl (hash: nKecZI+jnHRTwPVop4oHaeDoPyk5fgSz4/YPQe7oU1Y=)
                          2: q-rEMrzcCLKSVC0BBkFH6PEOzdU.roa (hash: Gog+17gwzclnNwGlh4/AMdyY5c+5OZ3UEQLglik+gVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:98:e6:c8:39:e1:7c:d3:df:de:0d:59:95:51:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c580769d521c89cc797ff699cacf0ba43da9bf
        Validity
            Not Before: Oct 19 11:01:24 2025 GMT
            Not After : Oct 20 11:01:24 2025 GMT
        Subject: CN=16bfbee0a326727c6d30fd206c049977fbe0aa85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:9b:35:6d:36:0e:07:f9:fc:f0:d3:9d:15:
                    e6:5d:7d:76:fb:40:ca:f6:67:98:84:ce:00:4e:01:
                    9a:30:9a:1d:4b:20:9f:ee:85:c3:86:ef:6a:19:50:
                    6e:1c:f4:1f:62:37:96:82:68:c7:6c:10:ee:b2:41:
                    27:9d:51:33:45:b9:b5:35:40:88:09:60:ff:76:de:
                    9e:e7:95:ea:4c:84:0f:30:f5:8c:78:ce:95:13:1c:
                    ac:99:a5:15:1a:69:5d:de:a8:ec:44:45:bd:97:01:
                    17:c0:90:3a:63:66:e0:aa:2d:5f:f4:d2:6d:24:b0:
                    4f:cf:e9:43:82:46:fe:40:be:4f:83:7d:fe:49:cc:
                    07:d9:13:5c:a1:83:a4:52:5a:71:7e:65:09:40:47:
                    c4:f0:ae:1f:2a:6a:7e:74:e3:e1:a1:46:16:5e:7e:
                    ea:50:62:62:46:4c:3a:7d:f5:41:30:3b:2f:0d:2f:
                    6d:c9:ed:1a:1b:bd:50:45:44:66:88:91:fe:ff:9e:
                    ec:f8:e6:ba:a1:20:42:fb:c8:36:b8:9c:6c:bd:8e:
                    9a:b8:57:c3:67:d3:3b:1b:5b:da:61:14:a5:ce:c2:
                    9c:75:32:30:3e:91:ec:19:31:68:45:d4:76:c5:c9:
                    3e:e7:06:53:18:39:b8:e5:b9:4c:cc:2b:82:cc:48:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BF:BE:E0:A3:26:72:7C:6D:30:FD:20:6C:04:99:77:FB:E0:AA:85
            X509v3 Authority Key Identifier:
                keyid:78:C5:80:76:9D:52:1C:89:CC:79:7F:F6:99:CA:CF:0B:A4:3D:A9:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMWAdp1SHInMeX_2mcrPC6Q9qb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/91e150-d7b5-413a-83f7-7f3eb8f4895f/1/eMWAdp1SHInMeX_2mcrPC6Q9qb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:e5:78:6b:20:70:85:6d:27:5b:4e:28:51:ea:5c:80:76:15:
         0f:9a:29:f9:d6:3d:99:c1:49:57:6c:12:8c:8d:2e:43:64:a8:
         6d:39:d5:da:84:6f:7d:b0:51:af:ca:e2:66:39:96:4c:ea:f0:
         23:a2:09:ad:92:54:df:9c:12:0a:a7:70:2d:60:f9:e0:ca:f4:
         6c:54:75:ba:b4:46:67:a9:0d:45:e7:29:25:0c:6e:98:80:4f:
         39:52:d4:68:91:13:c6:b5:b6:79:a2:a6:e2:c5:a8:ca:7e:95:
         20:d1:03:9a:9f:f2:8c:15:bf:51:8a:5e:95:62:49:8a:19:66:
         a3:1c:3a:9a:72:fe:0e:5a:9a:d5:00:78:44:0b:6a:f2:6c:c8:
         6f:18:17:b3:42:52:db:79:78:ca:de:51:26:b6:ba:8b:c0:b8:
         a9:95:99:67:14:f9:c3:4c:45:3f:49:09:c6:87:26:54:c9:57:
         01:b0:d1:85:e9:be:37:68:4c:16:90:38:85:df:2c:bd:70:7c:
         26:c0:04:90:39:e1:9e:62:7b:65:f9:95:46:e5:dc:2b:e8:ce:
         42:97:b7:c9:7d:a4:57:c3:bd:71:04:64:90:f0:31:0a:43:5f:
         e5:93:0c:9a:f6:a3:35:68:52:32:46:92:6f:58:66:1a:32:d7:
         26:77:2c:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZjmyDnhfNPf3g1ZlVFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YzU4MDc2OWQ1MjFjODljYzc5N2ZmNjk5Y2FjZjBiYTQz
ZGE5YmYwHhcNMjUxMDE5MTEwMTI0WhcNMjUxMDIwMTEwMTI0WjAzMTEwLwYDVQQD
EygxNmJmYmVlMGEzMjY3MjdjNmQzMGZkMjA2YzA0OTk3N2ZiZTBhYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugWbNW02Dgf5/PDTnRXmXX12+0DK
9meYhM4ATgGaMJodSyCf7oXDhu9qGVBuHPQfYjeWgmjHbBDuskEnnVEzRbm1NUCI
CWD/dt6e55XqTIQPMPWMeM6VExysmaUVGmld3qjsREW9lwEXwJA6Y2bgqi1f9NJt
JLBPz+lDgkb+QL5Pg33+ScwH2RNcoYOkUlpxfmUJQEfE8K4fKmp+dOPhoUYWXn7q
UGJiRkw6ffVBMDsvDS9tye0aG71QRURmiJH+/57s+Oa6oSBC+8g2uJxsvY6auFfD
Z9M7G1vaYRSlzsKcdTIwPpHsGTFoRdR2xck+5wZTGDm45blMzCuCzEh3cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa/vuCjJnJ8bTD9IGwEmXf74KqFMB8GA1UdIwQY
MBaAFHjFgHadUhyJzHl/9pnKzwukPam/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1XQWRwMVNISW5NZVhfMm1jclBDNlE5cWI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85MWUxNTAtZDdiNS00MTNhLTgzZjct
N2YzZWI4ZjQ4OTVmLzEvZU1XQWRwMVNISW5NZVhfMm1jclBDNlE5cWI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi85MWUxNTAtZDdiNS00MTNhLTgzZjctN2YzZWI4ZjQ4OTVm
LzEvZU1XQWRwMVNISW5NZVhfMm1jclBDNlE5cWI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5uV4ayBw
hW0nW04oUepcgHYVD5op+dY9mcFJV2wSjI0uQ2SobTnV2oRvfbBRr8riZjmWTOrw
I6IJrZJU35wSCqdwLWD54Mr0bFR1urRGZ6kNRecpJQxumIBPOVLUaJETxrW2eaKm
4sWoyn6VINEDmp/yjBW/UYpelWJJihlmoxw6mnL+Dlqa1QB4RAtq8mzIbxgXs0JS
23l4yt5RJra6i8C4qZWZZxT5w0xFP0kJxocmVMlXAbDRhem+N2hMFpA4hd8svXB8
JsAEkDnhnmJ7ZfmVRuXcK+jOQpe3yX2kV8O9cQRkkPAxCkNf5ZMMmvajNWhSMkaS
b1hmGjLXJncsWg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:51 2025 by rpki-client