Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File:                     V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier:          1t4/WRB61+Bxsv1nwm8bIIwJmepCfKs4wPE6WwxxTX4=
Subject key identifier:   11:C6:1C:BF:23:4A:F1:0A:A5:DB:CC:7F:67:67:FE:38:1A:93:C2:AF
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer:       /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial:       0199FC2149900B6E385312C4F487F6C1B9B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 11:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:03 +0000
Files and hashes:         1: NG7h3MLl7rsjKfJWWMgCk14YKA8.roa (hash: TfduHN4QjBYJ2zJVMdkqYrJchaPgW7zgFk7X9cdWumk=)
                          2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: k+EcaDbHTKaZCc8MWzYFhGl7U5SudYhCitJeiEdBpK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:49:90:0b:6e:38:53:12:c4:f4:87:f6:c1:b9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
        Validity
            Not Before: Oct 19 11:01:03 2025 GMT
            Not After : Oct 20 11:01:03 2025 GMT
        Subject: CN=11c61cbf234af10aa5dbcc7f6767fe381a93c2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fa:05:e3:9e:83:4f:a8:7c:99:21:ee:d4:44:
                    9d:37:17:fd:f2:2a:5c:71:d1:0f:84:23:f3:1c:ef:
                    d0:c7:2b:58:f1:9e:51:d7:4f:66:b0:02:7e:5d:78:
                    9c:db:1a:4f:4a:0d:1d:9e:0a:71:46:a2:e7:41:91:
                    93:e4:53:0d:cb:71:1a:41:1b:d5:e0:cc:df:5d:77:
                    05:d3:48:8c:ab:00:1c:02:4d:c3:5a:f0:f4:f0:77:
                    b1:1f:c6:d2:89:71:88:8b:7d:79:ef:40:be:e4:20:
                    07:a1:72:68:5e:66:10:e5:a0:dc:1c:2f:17:f6:75:
                    36:a2:92:df:64:7f:ed:f1:8c:ed:f8:8d:74:66:d1:
                    52:e4:ae:d9:e3:11:ba:49:82:1b:46:0f:fa:4f:3f:
                    f4:b6:ab:be:86:6a:4d:9a:70:41:8f:5a:8d:eb:e5:
                    b0:d2:da:d6:0f:ec:8d:64:e5:6e:93:10:9e:36:a8:
                    a4:8d:44:a7:eb:59:90:d9:8e:cc:b7:5c:d1:e7:f0:
                    33:27:53:94:89:63:65:f0:7b:b6:11:dd:8b:f8:43:
                    a4:4b:cb:12:dd:25:69:25:f9:f4:24:12:a2:6f:27:
                    a5:ab:88:8a:74:73:77:11:24:94:99:8d:d3:ff:a6:
                    48:3f:81:0e:01:39:04:99:4a:fd:d3:1b:2d:4d:3c:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C6:1C:BF:23:4A:F1:0A:A5:DB:CC:7F:67:67:FE:38:1A:93:C2:AF
            X509v3 Authority Key Identifier:
                keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:72:a5:03:4b:bc:1f:0e:b8:d2:97:52:80:03:f3:cc:8f:35:
         48:59:8f:62:13:7b:62:c4:b8:73:cc:d0:cf:ec:fc:91:ee:77:
         7d:58:41:bb:7d:76:38:fd:6a:d9:5e:cd:de:d5:62:dc:04:36:
         8f:88:b8:d1:c3:27:84:39:b4:3b:f8:ea:09:af:3f:2e:98:bb:
         e8:db:6f:bd:c3:f6:cf:36:88:da:58:89:18:98:32:2e:a2:e8:
         31:bc:a1:99:79:23:fc:42:0d:83:fd:33:ae:9f:bb:d9:43:38:
         24:a3:9e:97:8d:7f:19:9c:6b:70:28:f7:09:07:42:34:d1:cd:
         95:32:10:46:b6:69:9e:9e:6a:06:93:5d:6d:00:ee:01:15:14:
         d2:85:33:9a:c9:09:8a:4f:77:01:57:8d:6e:2e:6a:90:c1:4f:
         44:88:84:8d:d9:dc:d0:96:e7:0c:e7:87:bd:7d:66:6e:c8:95:
         56:e6:6d:72:e2:2a:09:fb:02:25:da:0b:68:53:6f:11:1a:50:
         ec:62:13:5a:7b:16:20:0f:9b:b7:84:75:66:0b:1d:a9:cf:8b:
         ef:62:1a:ed:44:85:86:6b:bd:31:ae:bc:bc:2c:1c:33:9b:f5:
         b0:76:e6:62:27:1b:af:fe:69:71:b1:9e:a2:cf:6f:fa:24:74:
         75:ff:95:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUmQC244UxLE9If2wbmyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NDUzN2Q1NGYzNmYxNDIyMzFiYzgxNzAzODg3MmNiNjA3
YjIxZTcwHhcNMjUxMDE5MTEwMTAzWhcNMjUxMDIwMTEwMTAzWjAzMTEwLwYDVQQD
EygxMWM2MWNiZjIzNGFmMTBhYTVkYmNjN2Y2NzY3ZmUzODFhOTNjMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/oF456DT6h8mSHu1ESdNxf98ipc
cdEPhCPzHO/QxytY8Z5R109msAJ+XXic2xpPSg0dngpxRqLnQZGT5FMNy3EaQRvV
4MzfXXcF00iMqwAcAk3DWvD08HexH8bSiXGIi31570C+5CAHoXJoXmYQ5aDcHC8X
9nU2opLfZH/t8Yzt+I10ZtFS5K7Z4xG6SYIbRg/6Tz/0tqu+hmpNmnBBj1qN6+Ww
0trWD+yNZOVukxCeNqikjUSn61mQ2Y7Mt1zR5/AzJ1OUiWNl8Hu2Ed2L+EOkS8sS
3SVpJfn0JBKibyelq4iKdHN3ESSUmY3T/6ZIP4EOATkEmUr90xstTTwzJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHGHL8jSvEKpdvMf2dn/jgak8KvMB8GA1UdIwQY
MBaAFFdFN9VPNvFCIxvIFwOIcstgeyHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQt
NGI4OWQzNzc4MDhlLzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mZGQyNWQtYzAzNC00OWYzLTg5MGQtNGI4OWQzNzc4MDhl
LzEvVjBVMzFVODI4VUlqRzhnWEE0aHl5MkI3SWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3KlA0u8
Hw640pdSgAPzzI81SFmPYhN7YsS4c8zQz+z8ke53fVhBu312OP1q2V7N3tVi3AQ2
j4i40cMnhDm0O/jqCa8/Lpi76NtvvcP2zzaI2liJGJgyLqLoMbyhmXkj/EINg/0z
rp+72UM4JKOel41/GZxrcCj3CQdCNNHNlTIQRrZpnp5qBpNdbQDuARUU0oUzmskJ
ik93AVeNbi5qkMFPRIiEjdnc0JbnDOeHvX1mbsiVVuZtcuIqCfsCJdoLaFNvERpQ
7GITWnsWIA+bt4R1Zgsdqc+L72Ia7USFhmu9Ma68vCwcM5v1sHbmYicbr/5pcbGe
os9v+iR0df+Viw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:54 2025 by rpki-client