Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
File:                     P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft (raw, json)
Hash identifier:          pSuBRa1u01QLoT/tI2K/8g891SI69D0rMONwV8aYT8c=
Subject key identifier:   62:76:2E:33:63:6B:48:E1:B9:16:11:22:38:D8:CB:5D:C1:EE:63:A6
Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
Certificate issuer:       /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Certificate serial:       0199FC21406888724A16AD8F700A0D489BCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 11:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:01 +0000
Files and hashes:         1: P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl (hash: LS3HzWNlwIAPhWtwr19Itd1qa8Li8BqSFpniZCcdnfk=)
                          2: xxFhvD1_C6pipJEBTKl033yHEF0.roa (hash: wMvUINT+XWfdQDveaENdYgbkPPqi3fpmXNh+RaQEiM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:40:68:88:72:4a:16:ad:8f:70:0a:0d:48:9b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
        Validity
            Not Before: Oct 19 11:01:01 2025 GMT
            Not After : Oct 20 11:01:01 2025 GMT
        Subject: CN=62762e33636b48e1b916112238d8cb5dc1ee63a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:23:00:d5:ca:d8:4f:a1:1e:a0:20:a7:8e:
                    0c:32:09:fc:7f:79:8e:a0:1d:12:20:9a:b8:88:a8:
                    ac:33:b5:65:72:c2:c7:07:89:1c:16:d0:49:20:94:
                    9c:65:3a:46:6f:5c:f0:01:9e:9a:3f:74:21:c2:13:
                    24:c5:9e:03:26:c6:b9:ee:0f:3b:0f:21:d2:08:5f:
                    4a:c6:25:3c:88:f4:1c:03:10:c1:e5:e0:33:fd:3d:
                    c5:b6:ff:75:73:97:cc:33:70:b9:19:ef:32:a6:b7:
                    f5:a5:62:d8:1a:3c:ca:ed:b0:ca:d1:8c:1a:d9:1b:
                    b9:ae:71:91:81:ec:24:89:a2:63:90:54:b9:96:e1:
                    c6:26:75:7d:07:19:f9:c8:28:83:62:ee:75:49:c8:
                    28:55:9d:82:f6:46:f8:8e:4b:9d:a0:ab:e5:94:a2:
                    f7:77:45:88:1a:cd:b0:2f:18:5c:51:0d:5a:75:25:
                    5a:45:8a:22:51:cd:3a:c2:d6:c0:f9:ce:fe:54:8e:
                    a6:e5:8b:cf:d7:3b:a2:3f:93:f4:e3:1e:2f:44:d8:
                    6d:97:a3:a6:3a:7e:3a:56:ac:07:25:d6:47:4c:37:
                    bc:7d:1e:e5:0f:96:c3:6f:8b:0f:6f:f1:c1:49:20:
                    dd:24:2a:ec:23:87:53:51:24:f0:95:cf:ee:ec:97:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:76:2E:33:63:6B:48:E1:B9:16:11:22:38:D8:CB:5D:C1:EE:63:A6
            X509v3 Authority Key Identifier:
                keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9a:62:13:54:d5:d0:dd:28:94:c6:2e:8f:65:dd:2c:66:f6:
         2a:bc:cb:58:83:c9:d2:5c:09:98:5f:91:3c:4f:c6:15:c9:f1:
         f3:58:db:cb:70:c3:1d:8f:49:71:b3:44:66:9e:c7:6a:3f:83:
         51:96:56:e9:a3:61:b9:b1:ce:c1:a3:b1:15:3d:d9:7c:ef:32:
         9c:e6:9d:42:f2:2d:a7:45:07:0a:4b:15:35:6c:b4:21:e5:64:
         31:0d:8e:1a:c6:8b:75:d9:f5:ef:32:be:4c:5e:bf:a1:9f:dd:
         c0:8a:e6:5a:10:22:8b:25:d7:88:b5:1c:b3:76:7f:ff:85:1c:
         16:ae:46:9c:6a:46:d2:39:1b:ea:1f:1a:b2:84:94:ec:61:09:
         80:3f:0f:91:ac:88:10:4f:8c:55:26:19:e6:80:36:18:6d:47:
         e7:92:91:92:47:03:c9:3a:30:2f:f5:14:69:8c:fc:c4:7a:22:
         c6:f4:12:61:36:9c:b7:15:c0:65:94:95:14:d9:91:a8:ee:f2:
         96:fd:2a:b5:d6:33:52:1d:11:c2:76:68:75:81:ef:e2:d5:4b:
         96:68:a3:5b:a7:1b:79:29:91:b4:0f:61:20:41:3d:db:c0:e4:
         5e:d7:95:f9:1d:b6:34:0e:1b:4b:b2:1b:94:ad:5d:b3:73:d7:
         23:79:03:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUBoiHJKFq2PcAoNSJvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmODFhOGU4Yzc1YjU4ZjdkMWVmZDRjM2U2NTIyZDI3ODYz
ZjljY2YwHhcNMjUxMDE5MTEwMTAxWhcNMjUxMDIwMTEwMTAxWjAzMTEwLwYDVQQD
Eyg2Mjc2MmUzMzYzNmI0OGUxYjkxNjExMjIzOGQ4Y2I1ZGMxZWU2M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0icjANXK2E+hHqAgp44MMgn8f3mO
oB0SIJq4iKisM7VlcsLHB4kcFtBJIJScZTpGb1zwAZ6aP3QhwhMkxZ4DJsa57g87
DyHSCF9KxiU8iPQcAxDB5eAz/T3Ftv91c5fMM3C5Ge8yprf1pWLYGjzK7bDK0Ywa
2Ru5rnGRgewkiaJjkFS5luHGJnV9Bxn5yCiDYu51ScgoVZ2C9kb4jkudoKvllKL3
d0WIGs2wLxhcUQ1adSVaRYoiUc06wtbA+c7+VI6m5YvP1zuiP5P04x4vRNhtl6Om
On46VqwHJdZHTDe8fR7lD5bDb4sPb/HBSSDdJCrsI4dTUSTwlc/u7JdjSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ2LjNja0jhuRYRIjjYy13B7mOmMB8GA1UdIwQY
MBaAFD+BqOjHW1j30e/Uw+ZSLSeGP5zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMt
YjcwOGM0MGE2NjdmLzEvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9lYjdmN2UtYTg4MC00OTdiLWI1NGMtYjcwOGM0MGE2Njdm
LzEvUDRHbzZNZGJXUGZSNzlURDVsSXRKNFlfbk04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5piE1TV
0N0olMYuj2XdLGb2KrzLWIPJ0lwJmF+RPE/GFcnx81jby3DDHY9JcbNEZp7Haj+D
UZZW6aNhubHOwaOxFT3ZfO8ynOadQvItp0UHCksVNWy0IeVkMQ2OGsaLddn17zK+
TF6/oZ/dwIrmWhAiiyXXiLUcs3Z//4UcFq5GnGpG0jkb6h8asoSU7GEJgD8PkayI
EE+MVSYZ5oA2GG1H55KRkkcDyTowL/UUaYz8xHoixvQSYTactxXAZZSVFNmRqO7y
lv0qtdYzUh0RwnZodYHv4tVLlmijW6cbeSmRtA9hIEE928DkXteV+R22NA4bS7Ib
lK1ds3PXI3kDXg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:22 2025 by rpki-client