Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File:                     jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier:          gisOYfghRtujMxEx5zA9cFOkYQhmdIMm1TQZ63WEyhg=
Subject key identifier:   52:FE:8A:77:A1:25:DF:07:31:05:44:B7:24:CA:85:A8:0A:34:85:B3
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer:       /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial:       0199FDD8FF0B6E5040CE6E6959DF0C5FB76B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 19:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:20 +0000
Files and hashes:         1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
                          2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
                          3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
                          4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: anH2y51pKukqosvDn8Xudr+szfTKkJUZLAIVoK8Hvk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:ff:0b:6e:50:40:ce:6e:69:59:df:0c:5f:b7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
        Validity
            Not Before: Oct 19 19:01:20 2025 GMT
            Not After : Oct 20 19:01:20 2025 GMT
        Subject: CN=52fe8a77a125df07310544b724ca85a80a3485b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:79:9b:33:20:c8:7c:e0:57:80:75:6f:64:0a:
                    f2:20:bf:04:8d:93:a1:ed:9f:e4:29:ae:4d:9f:f3:
                    69:f2:5a:60:ce:ae:63:bc:85:90:ea:18:46:7c:53:
                    3a:4e:c3:b1:9f:8b:4c:53:bb:c0:a2:22:c6:65:62:
                    2b:44:ef:d5:93:fd:4e:a6:9d:ba:95:b9:d2:35:58:
                    0b:92:c2:0b:74:a4:4e:ac:0d:b3:21:da:34:e6:99:
                    a3:6d:8c:56:00:93:bc:c9:69:18:3b:74:aa:0d:8e:
                    25:4a:48:24:bb:0c:04:01:b6:c7:ac:5e:f5:3e:72:
                    fc:b5:ef:41:c1:09:9d:8b:08:a1:ac:ba:52:3f:bc:
                    20:c7:19:da:a4:11:16:ce:69:57:d5:b9:c4:05:73:
                    18:a5:fe:5f:0c:68:74:61:ce:55:5b:e2:77:a1:70:
                    26:ce:ca:36:24:ac:60:cd:a5:47:7c:f8:9d:ae:dd:
                    f6:3e:17:e3:ea:6e:2f:38:e9:46:71:b5:3a:46:e7:
                    3f:eb:c4:ed:a7:db:43:0c:7a:8c:0d:62:91:72:9d:
                    25:83:80:23:06:c6:ec:73:b0:a3:e4:11:98:5c:71:
                    3f:80:e3:c7:0d:5a:0c:9b:b4:f0:f9:34:70:88:32:
                    1a:32:1f:1a:09:f6:0d:85:69:9f:db:83:8d:4d:f2:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FE:8A:77:A1:25:DF:07:31:05:44:B7:24:CA:85:A8:0A:34:85:B3
            X509v3 Authority Key Identifier:
                keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:eb:1e:df:a8:3a:13:6c:0e:37:8f:c6:e0:76:f3:52:5a:
         1b:f3:4f:55:09:b9:0b:af:a2:c1:63:a0:f8:23:fe:ee:8b:37:
         17:4c:cb:3c:74:5c:e0:28:d5:16:ea:72:59:a2:bc:f5:c0:61:
         07:d8:f9:ea:e4:83:a1:e0:4c:bf:73:3f:4f:c4:82:9f:88:7c:
         36:0f:d8:3b:79:10:16:1d:d1:7f:23:3f:a2:d3:5f:66:75:76:
         42:e5:03:04:2e:29:8b:28:7d:60:f1:e3:b4:af:8a:5d:96:c1:
         c3:4b:d5:35:ea:ce:7d:ff:8c:fe:c4:e7:ff:04:a6:ae:d1:72:
         2c:87:db:f0:46:58:46:da:9d:24:11:14:2d:46:a3:14:a2:4e:
         0e:58:ae:f5:67:2a:41:2f:8e:e8:25:75:21:6b:d5:01:f6:ec:
         29:39:df:ee:a3:01:3b:92:63:92:31:f9:4e:dc:fb:87:59:ca:
         cb:a1:80:ed:ce:b4:71:99:69:2c:fa:e5:c1:8d:ae:57:63:d3:
         87:98:bf:c0:f8:97:98:76:1c:2b:3e:51:11:01:00:0f:40:25:
         98:0f:ca:db:b2:b1:f5:85:7c:c3:f7:4b:a4:f9:9b:91:7b:95:
         02:d9:aa:b2:94:c6:58:4e:66:60:86:6f:de:95:f0:9f:bb:99:
         1e:ad:6d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92P8LblBAzm5pWd8MX7drMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODU2NTU3YzQxNDZhOGI1MGRjNGQ5NDQyNGIwNjY4MGNl
Zjc1NWIwHhcNMjUxMDE5MTkwMTIwWhcNMjUxMDIwMTkwMTIwWjAzMTEwLwYDVQQD
Eyg1MmZlOGE3N2ExMjVkZjA3MzEwNTQ0YjcyNGNhODVhODBhMzQ4NWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinmbMyDIfOBXgHVvZAryIL8EjZOh
7Z/kKa5Nn/Np8lpgzq5jvIWQ6hhGfFM6TsOxn4tMU7vAoiLGZWIrRO/Vk/1Opp26
lbnSNVgLksILdKROrA2zIdo05pmjbYxWAJO8yWkYO3SqDY4lSkgkuwwEAbbHrF71
PnL8te9BwQmdiwihrLpSP7wgxxnapBEWzmlX1bnEBXMYpf5fDGh0Yc5VW+J3oXAm
zso2JKxgzaVHfPidrt32Phfj6m4vOOlGcbU6Ruc/68Ttp9tDDHqMDWKRcp0lg4Aj
Bsbsc7Cj5BGYXHE/gOPHDVoMm7Tw+TRwiDIaMh8aCfYNhWmf24ONTfKSuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL+inehJd8HMQVEtyTKhagKNIWzMB8GA1UdIwQY
MBaAFIyFZVfEFGqLUNxNlEJLBmgM73VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt
MmE2YjlhMGNjYWJkLzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk
LzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoXrHt+o
OhNsDjePxuB281JaG/NPVQm5C6+iwWOg+CP+7os3F0zLPHRc4CjVFupyWaK89cBh
B9j56uSDoeBMv3M/T8SCn4h8Ng/YO3kQFh3RfyM/otNfZnV2QuUDBC4piyh9YPHj
tK+KXZbBw0vVNerOff+M/sTn/wSmrtFyLIfb8EZYRtqdJBEULUajFKJODliu9Wcq
QS+O6CV1IWvVAfbsKTnf7qMBO5JjkjH5Ttz7h1nKy6GA7c60cZlpLPrlwY2uV2PT
h5i/wPiXmHYcKz5REQEAD0AlmA/K27Kx9YV8w/dLpPmbkXuVAtmqspTGWE5mYIZv
3pXwn7uZHq1t+w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:38:42 2025 by rpki-client