Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
File:                     xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft (raw, json)
Hash identifier:          S4V5NbdQ4MZADllrUzu4bfB4de4Mppr43Q2Gx1fAYMQ=
Subject key identifier:   A1:2A:B7:73:FE:CE:B1:BB:58:A5:3A:4D:53:FD:4E:82:C9:B0:4C:BC
Authority key identifier: C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61
Certificate issuer:       /CN=c4402c55758faee473938f8067a889ad5e271261
Certificate serial:       0199FEEBAC1D42B557B1CD3A7D6AECBB01B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
Manifest number:          16B4
Signing time:             Mon 20 Oct 2025 00:01:21 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:21 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:21 +0000
Files and hashes:         1: E8OPd8A6_dgzaBqnWV201n06rXs.roa (hash: hcTcW3JT+mi3CMuGaWLI1AgOOEgBHBo13pVy947r0uY=)
                          2: XY1Eges0ofwvvFCGnxnMTZuzqq0.roa (hash: 4lDMbdxSfWLvbOB4pHjSTKQ4KFN1x9vtL2R0MqxD430=)
                          3: xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl (hash: t2kpG6kVuqfPShxU3e3ERgckMGr92/kIzO9gQCWHmg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:ac:1d:42:b5:57:b1:cd:3a:7d:6a:ec:bb:01:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4402c55758faee473938f8067a889ad5e271261
        Validity
            Not Before: Oct 20 00:01:21 2025 GMT
            Not After : Oct 21 00:01:21 2025 GMT
        Subject: CN=a12ab773feceb1bb58a53a4d53fd4e82c9b04cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:2c:d8:ba:97:df:79:99:ab:50:8b:35:4a:
                    aa:8f:d9:a7:61:96:f4:33:56:6f:81:4c:60:e9:88:
                    0c:16:b7:c1:9f:7f:d8:fc:d8:01:fe:ba:78:30:0f:
                    10:a2:06:a8:0e:07:fc:a8:3a:94:cd:26:2d:9e:3b:
                    bd:be:ea:ac:82:01:c0:ee:aa:2d:31:45:7c:f2:98:
                    f2:9b:ba:c2:24:c5:bc:51:9d:32:91:98:f0:d7:6b:
                    27:3f:66:02:82:a3:aa:1d:ba:67:08:22:05:4c:37:
                    3a:5a:82:12:f7:4f:aa:0b:4c:12:aa:a4:5a:34:5d:
                    4c:9d:e0:b0:07:54:ad:7a:15:36:68:f8:19:6c:57:
                    e7:0d:bf:9e:e8:6c:0c:30:0a:90:9d:c7:30:de:08:
                    7c:b2:61:51:3a:13:4f:68:8b:a2:b7:02:a2:0d:e1:
                    60:80:6a:65:94:fb:bb:84:9d:44:66:60:ad:9a:26:
                    03:67:37:ba:ef:a0:b9:b8:4d:b5:58:37:a1:f5:a6:
                    ee:7a:b6:2a:2b:18:2b:b6:98:95:c8:09:d7:6b:90:
                    12:7d:32:82:35:bd:d5:b5:de:9c:2b:11:59:44:59:
                    16:f3:93:3a:45:a7:1e:43:2c:ac:fc:43:35:6e:4a:
                    bf:5c:e3:6e:cb:fa:49:06:15:f2:7e:59:15:f2:78:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2A:B7:73:FE:CE:B1:BB:58:A5:3A:4D:53:FD:4E:82:C9:B0:4C:BC
            X509v3 Authority Key Identifier:
                keyid:C4:40:2C:55:75:8F:AE:E4:73:93:8F:80:67:A8:89:AD:5E:27:12:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEAsVXWPruRzk4-AZ6iJrV4nEmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/964c3c-b570-4113-b4aa-cfdf0311ad8c/1/xEAsVXWPruRzk4-AZ6iJrV4nEmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a6:96:ac:6f:da:0b:0d:7c:56:a2:33:f3:1b:f5:26:53:3f:
         f5:c5:2f:fb:ec:8d:65:e8:bc:c4:15:41:31:11:3e:e1:7c:08:
         b2:4f:c1:1b:f7:87:ca:af:31:78:0f:df:65:f3:22:9d:dd:71:
         85:7d:83:8d:0c:f4:38:01:9b:11:d4:f1:2f:f4:ae:21:20:a3:
         64:ed:33:56:be:83:43:d8:d7:a0:9a:b2:79:0c:af:9c:a4:08:
         46:ac:ec:42:a5:45:13:01:dd:f1:34:3d:14:15:15:9d:38:cf:
         af:0f:e9:1e:5d:cc:48:c0:1a:15:ff:6e:32:c3:76:22:f7:c5:
         61:99:7f:5d:16:12:dd:4c:d3:17:62:4a:7d:70:14:e3:a6:23:
         97:ec:9f:2f:9a:b8:ed:ca:f9:30:47:8c:af:ea:e7:0b:cb:69:
         60:a6:4c:e1:df:5c:cc:c5:1f:d4:89:c9:95:03:d1:a6:6e:21:
         3a:a5:1f:76:34:ca:5d:ee:eb:bf:8e:a8:d9:f7:2e:a6:13:cb:
         65:1e:a9:bf:5b:91:35:9f:ce:27:5a:f3:7b:9e:09:aa:7c:ee:
         dd:8a:b9:eb:27:8d:63:f5:c1:a1:03:ca:9b:85:86:9f:34:7c:
         cf:43:14:7d:a1:28:06:38:b4:d6:41:7b:a1:b9:c8:4a:ad:75:
         23:75:ad:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+66wdQrVXsc06fWrsuwG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NDAyYzU1NzU4ZmFlZTQ3MzkzOGY4MDY3YTg4OWFkNWUy
NzEyNjEwHhcNMjUxMDIwMDAwMTIxWhcNMjUxMDIxMDAwMTIxWjAzMTEwLwYDVQQD
EyhhMTJhYjc3M2ZlY2ViMWJiNThhNTNhNGQ1M2ZkNGU4MmM5YjA0Y2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtEs2LqX33mZq1CLNUqqj9mnYZb0
M1ZvgUxg6YgMFrfBn3/Y/NgB/rp4MA8QogaoDgf8qDqUzSYtnju9vuqsggHA7qot
MUV88pjym7rCJMW8UZ0ykZjw12snP2YCgqOqHbpnCCIFTDc6WoIS90+qC0wSqqRa
NF1MneCwB1StehU2aPgZbFfnDb+e6GwMMAqQnccw3gh8smFROhNPaIuitwKiDeFg
gGpllPu7hJ1EZmCtmiYDZze676C5uE21WDeh9abuerYqKxgrtpiVyAnXa5ASfTKC
Nb3Vtd6cKxFZRFkW85M6RaceQyys/EM1bkq/XONuy/pJBhXyflkV8niQ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEqt3P+zrG7WKU6TVP9ToLJsEy8MB8GA1UdIwQY
MBaAFMRALFV1j67kc5OPgGeoia1eJxJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEVBc1ZYV1BydVJ6azQtQVo2aUpyVjRuRW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NjRjM2MtYjU3MC00MTEzLWI0YWEt
Y2ZkZjAzMTFhZDhjLzEveEVBc1ZYV1BydVJ6azQtQVo2aUpyVjRuRW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy85NjRjM2MtYjU3MC00MTEzLWI0YWEtY2ZkZjAzMTFhZDhj
LzEveEVBc1ZYV1BydVJ6azQtQVo2aUpyVjRuRW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaaWrG/a
Cw18VqIz8xv1JlM/9cUv++yNZei8xBVBMRE+4XwIsk/BG/eHyq8xeA/fZfMind1x
hX2DjQz0OAGbEdTxL/SuISCjZO0zVr6DQ9jXoJqyeQyvnKQIRqzsQqVFEwHd8TQ9
FBUVnTjPrw/pHl3MSMAaFf9uMsN2IvfFYZl/XRYS3UzTF2JKfXAU46Yjl+yfL5q4
7cr5MEeMr+rnC8tpYKZM4d9czMUf1InJlQPRpm4hOqUfdjTKXe7rv46o2fcuphPL
ZR6pv1uRNZ/OJ1rze54Jqnzu3Yq56yeNY/XBoQPKm4WGnzR8z0MUfaEoBji01kF7
obnISq11I3WtKg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:02 2025 by rpki-client