Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File:                     6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier:          yUgPpXOHH21gX/9rjBOVVzl89UXfn0rn/u7AVR4cQD0=
Subject key identifier:   0A:DA:91:2E:35:3A:16:E2:9C:3F:75:1E:B4:7A:75:4F:C0:37:2B:2A
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer:       /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial:       0199FC58AEA58ACC96B7002A0F3D296F7D84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 12:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:34 +0000
Files and hashes:         1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: Oqer+E3LGMHlly6rZG1OSfhbt072A7MsSOs0gD9Hc3M=)
                          2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:ae:a5:8a:cc:96:b7:00:2a:0f:3d:29:6f:7d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
        Validity
            Not Before: Oct 19 12:01:34 2025 GMT
            Not After : Oct 20 12:01:34 2025 GMT
        Subject: CN=0ada912e353a16e29c3f751eb47a754fc0372b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:d3:fe:f0:13:06:ab:32:35:17:39:54:88:
                    7f:41:dd:5b:ed:c1:09:f0:cd:67:74:3e:33:ba:a7:
                    a1:71:76:38:f3:9b:d4:3c:af:e5:f3:e8:d3:85:ba:
                    6c:1c:a3:f5:56:9b:5b:bf:1e:d4:b6:03:66:1c:47:
                    4d:da:4a:14:a1:76:96:16:bf:45:65:1a:2d:9d:ff:
                    a1:50:14:cd:d4:d5:12:b8:7d:b7:21:c1:b5:8b:b4:
                    a0:dc:9f:d0:8e:67:dd:72:99:8a:ba:57:59:ff:98:
                    93:93:7b:5a:c4:56:1d:54:17:e1:66:74:bc:b2:f4:
                    f4:9c:06:d0:f2:e1:d5:a1:bf:69:a8:72:59:12:55:
                    98:13:5a:34:77:e2:6f:df:04:a8:4f:76:5b:f6:34:
                    60:76:16:8a:eb:91:33:aa:a0:1d:f3:16:77:3d:5e:
                    ca:c1:4f:dd:6e:da:f2:35:dd:d6:df:b0:f7:35:9f:
                    99:e8:93:57:d4:33:e6:92:7e:5d:b4:af:64:3b:94:
                    4d:5b:20:1f:5b:b4:9e:0a:88:d7:bb:fd:ed:bf:95:
                    b4:10:4a:20:e3:17:16:13:98:b2:4c:10:c1:dd:bb:
                    9c:1b:02:9c:10:91:d2:58:d4:87:e2:21:d1:25:0a:
                    00:74:3c:11:ac:5e:c1:b2:86:e5:12:89:57:0b:10:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DA:91:2E:35:3A:16:E2:9C:3F:75:1E:B4:7A:75:4F:C0:37:2B:2A
            X509v3 Authority Key Identifier:
                keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4f:08:3d:c1:7d:c9:15:84:8c:52:1d:d7:ff:d3:46:1a:9d:
         b3:f1:84:1a:7e:fb:ff:89:bc:13:32:78:12:94:d3:a0:f0:49:
         03:5e:eb:3b:f1:d6:ff:6c:a7:39:47:2c:05:6d:b4:2c:7d:17:
         fb:ff:e3:12:1f:a7:d3:d5:a0:6f:7a:f9:1e:b0:65:d7:f8:d2:
         de:29:a2:38:b0:26:55:6f:18:c9:a4:22:56:5e:d6:96:20:18:
         fd:08:ff:9c:bb:53:35:01:4b:7c:ac:4b:05:f3:84:4e:2e:76:
         33:a0:de:a8:3b:78:ac:65:ba:7c:93:b5:af:20:bc:41:3e:4d:
         65:f2:f0:52:bc:03:e2:bf:2f:75:61:7c:d4:d4:6e:07:45:1b:
         13:71:f7:9e:e6:ce:56:70:8b:7f:24:b8:09:9a:82:22:0e:fc:
         ab:0e:e2:e3:00:2f:e9:03:58:c1:48:1a:eb:c4:b9:a5:2a:c4:
         30:34:90:46:8b:86:59:31:61:8b:97:e5:de:3f:28:de:18:f1:
         bf:31:43:c0:cf:0b:c1:80:b3:3e:00:34:69:ae:27:76:5a:15:
         87:23:56:9a:db:3d:52:79:e5:86:1b:86:d3:19:77:3d:c2:e1:
         93:f0:5f:aa:9f:10:31:8a:2c:a0:09:60:f2:0b:a2:52:12:e4:
         b1:8d:05:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WK6lisyWtwAqDz0pb32EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YzNlNjQ1MmE2M2Y4ZTQ3YTI1N2U1M2MxYThmZmE3NWY5
MWVhNDAwHhcNMjUxMDE5MTIwMTM0WhcNMjUxMDIwMTIwMTM0WjAzMTEwLwYDVQQD
EygwYWRhOTEyZTM1M2ExNmUyOWMzZjc1MWViNDdhNzU0ZmMwMzcyYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknDT/vATBqsyNRc5VIh/Qd1b7cEJ
8M1ndD4zuqehcXY485vUPK/l8+jThbpsHKP1Vptbvx7UtgNmHEdN2koUoXaWFr9F
ZRotnf+hUBTN1NUSuH23IcG1i7Sg3J/QjmfdcpmKuldZ/5iTk3taxFYdVBfhZnS8
svT0nAbQ8uHVob9pqHJZElWYE1o0d+Jv3wSoT3Zb9jRgdhaK65EzqqAd8xZ3PV7K
wU/dbtryNd3W37D3NZ+Z6JNX1DPmkn5dtK9kO5RNWyAfW7SeCojXu/3tv5W0EEog
4xcWE5iyTBDB3bucGwKcEJHSWNSH4iHRJQoAdDwRrF7BsoblEolXCxCxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArakS41OhbinD91HrR6dU/ANysqMB8GA1UdIwQY
MBaAFOjD5kUqY/jkeiV+U8Go/6dfkepAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTkt
NmQ4MTBiMGFkYTBhLzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kYjQ2NTgtNDI3NS00M2JhLTlkYTktNmQ4MTBiMGFkYTBh
LzEvNk1QbVJTcGotT1I2Slg1VHdhal9wMS1SNmtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHE8IPcF9
yRWEjFId1//TRhqds/GEGn77/4m8EzJ4EpTToPBJA17rO/HW/2ynOUcsBW20LH0X
+//jEh+n09Wgb3r5HrBl1/jS3imiOLAmVW8YyaQiVl7WliAY/Qj/nLtTNQFLfKxL
BfOETi52M6DeqDt4rGW6fJO1ryC8QT5NZfLwUrwD4r8vdWF81NRuB0UbE3H3nubO
VnCLfyS4CZqCIg78qw7i4wAv6QNYwUga68S5pSrEMDSQRouGWTFhi5fl3j8o3hjx
vzFDwM8LwYCzPgA0aa4ndloVhyNWmts9UnnlhhuG0xl3PcLhk/Bfqp8QMYosoAlg
8guiUhLksY0FEg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:54 2025 by rpki-client