Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
File:                     _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json)
Hash identifier:          Xgn7I3Y3BFp28rqs+OjNebLcydayxbTRd1SlGLDW3jQ=
Subject key identifier:   2E:79:3B:FF:04:E7:AC:B7:F1:B8:39:11:C0:F1:DD:EC:F7:13:71:7C
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Certificate issuer:       /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial:       0199FC5880B367CC298181F3987215510D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 12:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:22 +0000
Files and hashes:         1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: aGbF2JrR81oS5g3v6YwKphwK1dnfUYFVV6Ablwg3GXE=)
                          2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:80:b3:67:cc:29:81:81:f3:98:72:15:51:0d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
        Validity
            Not Before: Oct 19 12:01:22 2025 GMT
            Not After : Oct 20 12:01:22 2025 GMT
        Subject: CN=2e793bff04e7acb7f1b83911c0f1ddecf713717c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:ad:da:6f:37:54:b2:1d:3d:ac:9e:7c:0c:
                    94:49:8a:29:5b:ec:51:98:4d:db:7d:ef:81:47:57:
                    21:34:f0:ee:bf:90:2b:62:4d:b0:ef:bb:0e:a8:30:
                    05:53:b4:56:c7:30:c7:9f:f2:65:2e:11:9f:e7:76:
                    3f:d6:20:f2:12:ea:8e:54:b2:8b:c3:54:a9:2d:76:
                    73:1e:8a:1d:41:b2:00:99:89:80:06:39:2a:b3:29:
                    19:ce:15:2e:fb:52:de:9c:07:20:31:33:43:e5:d1:
                    3b:84:75:40:d5:15:89:16:68:24:16:de:04:01:f1:
                    50:0f:8d:1a:6b:f4:5b:c4:f1:47:00:76:88:89:da:
                    85:cd:cc:e2:26:c8:f7:82:2c:8c:d8:6b:0b:9a:45:
                    f6:a7:ad:1d:57:7f:79:c9:62:f5:88:22:6e:0c:94:
                    3b:a5:13:52:a9:da:97:a8:45:c7:3d:ec:e7:cf:89:
                    09:de:12:7e:41:46:05:53:02:77:a6:28:db:f1:d4:
                    68:c3:0e:f2:c6:e5:8e:2e:52:6b:59:52:e6:f5:15:
                    6e:3d:31:91:8c:24:79:76:85:62:8d:6f:d7:3a:f5:
                    27:5e:7d:e3:fa:06:d5:55:c7:81:11:e4:a2:6d:e1:
                    8a:57:d4:06:ca:d3:62:ed:e0:8d:97:6a:b1:52:ae:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:79:3B:FF:04:E7:AC:B7:F1:B8:39:11:C0:F1:DD:EC:F7:13:71:7C
            X509v3 Authority Key Identifier:
                keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:98:ad:c2:c8:21:9e:b4:de:ce:3f:26:83:09:63:c3:41:d1:
         bf:69:b9:90:0d:67:54:10:50:48:b8:58:d2:e9:76:d1:b9:cf:
         f7:d6:86:6d:78:39:bc:3e:30:5a:05:fb:7c:6b:fb:39:78:13:
         f1:76:47:c1:c9:31:20:90:9e:d8:ae:e7:c0:a4:75:f4:7e:51:
         05:42:c6:24:be:1c:52:ca:5c:e7:4f:69:0e:76:52:55:4a:b6:
         a9:3e:ad:4a:cd:1b:ab:4d:01:27:d0:ec:b3:4b:3f:18:53:d9:
         df:3d:f2:f3:16:d7:09:11:93:d6:0f:5e:7c:b0:c1:3f:91:ce:
         a9:08:16:25:15:ed:ac:30:cb:65:4e:1f:7c:ad:72:61:85:a8:
         08:fd:19:35:2c:17:a1:3c:1d:3c:cd:39:b8:e2:d1:f5:1f:21:
         1e:e2:81:19:84:15:46:52:30:e1:32:29:fa:e4:ae:e1:4d:ab:
         53:ef:3c:46:69:ab:80:43:98:b8:e0:53:0a:da:8e:81:61:97:
         bd:9e:ee:cf:5b:25:f9:e7:e1:46:3f:37:da:c1:6d:ec:7e:a1:
         97:76:ae:cc:47:30:7f:00:d0:55:2f:0b:10:ce:9d:02:46:83:
         5c:d7:a0:26:4f:43:db:88:ce:43:c5:1f:7d:e4:2b:bb:42:55:
         01:0c:83:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WICzZ8wpgYHzmHIVUQ2aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjN2NmYWIyNGYxNWNkMjYyMTc2YWYwZDFjY2Q4ODEyN2Ri
ZjYzMzUwHhcNMjUxMDE5MTIwMTIyWhcNMjUxMDIwMTIwMTIyWjAzMTEwLwYDVQQD
EygyZTc5M2JmZjA0ZTdhY2I3ZjFiODM5MTFjMGYxZGRlY2Y3MTM3MTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkSt2m83VLIdPayefAyUSYopW+xR
mE3bfe+BR1chNPDuv5ArYk2w77sOqDAFU7RWxzDHn/JlLhGf53Y/1iDyEuqOVLKL
w1SpLXZzHoodQbIAmYmABjkqsykZzhUu+1LenAcgMTND5dE7hHVA1RWJFmgkFt4E
AfFQD40aa/RbxPFHAHaIidqFzcziJsj3giyM2GsLmkX2p60dV395yWL1iCJuDJQ7
pRNSqdqXqEXHPeznz4kJ3hJ+QUYFUwJ3pijb8dRoww7yxuWOLlJrWVLm9RVuPTGR
jCR5doVijW/XOvUnXn3j+gbVVceBEeSibeGKV9QGytNi7eCNl2qxUq68iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC55O/8E56y38bg5EcDx3ez3E3F8MB8GA1UdIwQY
MBaAFPx8+rJPFc0mIXavDRzNiBJ9v2M1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYt
NDZkZDEyMDVkY2ZmLzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZjJhZGItZmY2OS00YjA0LWE4MDYtNDZkZDEyMDVkY2Zm
LzEvX0h6NnNrOFZ6U1loZHE4TkhNMklFbjJfWXpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZitwsgh
nrTezj8mgwljw0HRv2m5kA1nVBBQSLhY0ul20bnP99aGbXg5vD4wWgX7fGv7OXgT
8XZHwckxIJCe2K7nwKR19H5RBULGJL4cUspc509pDnZSVUq2qT6tSs0bq00BJ9Ds
s0s/GFPZ3z3y8xbXCRGT1g9efLDBP5HOqQgWJRXtrDDLZU4ffK1yYYWoCP0ZNSwX
oTwdPM05uOLR9R8hHuKBGYQVRlIw4TIp+uSu4U2rU+88RmmrgEOYuOBTCtqOgWGX
vZ7uz1sl+efhRj832sFt7H6hl3auzEcwfwDQVS8LEM6dAkaDXNegJk9D24jOQ8Uf
feQru0JVAQyD/w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:38 2025 by rpki-client