Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File:                     1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier:          clV9Of+RmFkgCJhlLdhaXjz8E3bWBrZF7RKgivAuOfI=
Subject key identifier:   37:AD:D8:4B:46:92:47:51:DC:04:A0:13:E2:35:74:89:0C:83:28:04
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer:       /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial:       0199FC21A741E6D1B8001BD6E3DAA1CDA4EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 11:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:27 +0000
Files and hashes:         1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: o2OXA5zhbcdYyLkUvUjfB00dCrx+r+QdADoBOhRaGhk=)
                          2: RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa (hash: BNo8QMwK2CvmHYQFxYebo4KjKZTrRv5gh0bqfDREWd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:a7:41:e6:d1:b8:00:1b:d6:e3:da:a1:cd:a4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
        Validity
            Not Before: Oct 19 11:01:27 2025 GMT
            Not After : Oct 20 11:01:27 2025 GMT
        Subject: CN=37add84b46924751dc04a013e23574890c832804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:04:09:10:4a:08:70:95:a4:1e:1c:98:49:
                    29:a5:81:32:65:88:bc:8e:b4:41:68:9b:2a:43:b1:
                    5d:c5:a7:32:4c:b1:e7:d3:ad:cb:b6:6b:78:2b:9a:
                    65:32:8b:1e:2a:10:8c:f0:68:50:95:65:e6:d5:71:
                    a2:a3:da:5e:38:96:01:75:ef:c2:b3:cc:2c:49:64:
                    38:21:1b:48:28:69:98:b4:12:51:2c:39:6a:87:a4:
                    31:80:26:f8:2e:60:48:51:53:fb:ef:77:33:97:78:
                    32:17:21:fb:67:cd:e2:3a:49:22:14:f1:77:fe:84:
                    d6:76:f8:a7:30:18:5b:0d:f9:36:8c:e8:1d:5b:2a:
                    40:52:2a:80:14:d3:50:1a:e7:a4:88:1e:be:b0:ff:
                    40:94:ac:b7:30:11:a9:05:cc:f6:87:2d:d5:71:c1:
                    b1:b1:8b:a0:96:44:60:f1:79:f4:85:e8:cd:8c:79:
                    eb:e4:f3:59:1a:3c:f3:d1:6e:90:e2:27:3e:df:bc:
                    ac:fc:e4:97:bc:5f:1b:07:f5:bd:ad:66:c5:47:2b:
                    f1:7d:0e:ee:a7:0f:b4:d9:27:3f:00:ec:79:a9:f6:
                    7c:ed:26:65:6c:e9:7f:d4:f0:0e:9e:18:1d:90:c4:
                    75:47:f9:bc:b4:99:79:dd:7b:56:81:58:33:81:3f:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AD:D8:4B:46:92:47:51:DC:04:A0:13:E2:35:74:89:0C:83:28:04
            X509v3 Authority Key Identifier:
                keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:34:e1:ff:fe:ea:66:e2:d5:5e:91:4b:e3:9a:e2:64:f9:7e:
         ab:f0:50:9c:82:a0:1a:46:4e:28:0a:13:13:98:7d:40:f6:a3:
         c2:a0:76:f0:5c:49:d3:5b:f6:d5:79:cc:cc:b9:d3:a0:71:a9:
         f3:1c:aa:f1:8b:83:ec:15:10:90:21:99:77:74:35:d1:b7:b3:
         2e:d7:b7:2e:29:b0:67:cb:7d:b5:af:5d:11:46:e0:0b:92:ef:
         e6:91:57:3a:a5:74:c9:f7:f3:47:d3:36:00:5e:43:e2:27:66:
         9d:40:2d:3e:26:f1:07:8f:ff:81:b5:a7:94:75:a6:c7:e0:7a:
         c8:ca:f6:fb:ef:b9:b2:e9:66:b3:5a:72:b8:ec:00:e1:26:70:
         ef:14:18:c5:22:a6:f0:40:b4:63:8a:00:1a:4f:81:d7:47:60:
         92:f5:32:83:82:3e:b1:f9:c6:4f:5b:3a:7e:e6:1e:ba:c3:02:
         85:04:56:74:d4:0b:ac:42:10:79:a0:8e:35:06:d2:d9:01:ef:
         bf:7a:15:e8:80:e5:d8:f3:5e:2a:d3:e7:e6:97:2b:c9:92:bf:
         7f:4f:c9:ad:b8:82:6e:0c:f7:67:8c:8c:bc:93:e8:ed:f3:6b:
         20:ff:d7:e6:fa:b1:8a:67:7e:fa:cc:08:cb:be:93:f7:39:69:
         a3:92:f0:f4
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZn8IadB5tG4ABvW49qhzaTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTAyNTdkMDY3ZWY4Yjg1ZjYyMGM2NzIyMGNmOTc3ZGRk
ZTM5OTQwHhcNMjUxMDE5MTEwMTI3WhcNMjUxMDIwMTEwMTI3WjAzMTEwLwYDVQQD
EygzN2FkZDg0YjQ2OTI0NzUxZGMwNGEwMTNlMjM1NzQ4OTBjODMyODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+8ECRBKCHCVpB4cmEkppYEyZYi8
jrRBaJsqQ7FdxacyTLHn063Ltmt4K5plMoseKhCM8GhQlWXm1XGio9peOJYBde/C
s8wsSWQ4IRtIKGmYtBJRLDlqh6QxgCb4LmBIUVP773czl3gyFyH7Z83iOkkiFPF3
/oTWdvinMBhbDfk2jOgdWypAUiqAFNNQGuekiB6+sP9AlKy3MBGpBcz2hy3VccGx
sYuglkRg8Xn0hejNjHnr5PNZGjzz0W6Q4ic+37ys/OSXvF8bB/W9rWbFRyvxfQ7u
pw+02Sc/AOx5qfZ87SZlbOl/1PAOnhgdkMR1R/m8tJl53XtWgVgzgT8lGQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDet2EtGkkdR3ASgE+I1dIkMgygEMB8GA1UdIwQY
MBaAFPngJX0Gfvi4X2IMZyIM+Xfd3jmUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lQWxmUVotLUxoZllneG5JZ3o1ZDkzZU9aUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNjkxOTRhLTQ1YTAtNDhlZi05OWJm
LThlMDQ4ODdjMGFiZi8xLzEtZUFsZlFaLS1MaGZZZ3huSWd6NWQ5M2VPWlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ViLzY5MTk0YS00NWEwLTQ4ZWYtOTliZi04ZTA0ODg3YzBh
YmYvMS8xLWVBbGZRWi0tTGhmWWd4bklnejVkOTNlT1pRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjTh
//7qZuLVXpFL45riZPl+q/BQnIKgGkZOKAoTE5h9QPajwqB28FxJ01v21XnMzLnT
oHGp8xyq8YuD7BUQkCGZd3Q10bezLte3LimwZ8t9ta9dEUbgC5Lv5pFXOqV0yffz
R9M2AF5D4idmnUAtPibxB4//gbWnlHWmx+B6yMr2+++5sulms1pyuOwA4SZw7xQY
xSKm8EC0Y4oAGk+B10dgkvUyg4I+sfnGT1s6fuYeusMChQRWdNQLrEIQeaCONQbS
2QHvv3oV6IDl2PNeKtPn5pcryZK/f0/JrbiCbgz3Z4yMvJPo7fNrIP/X5vqximd+
+swIy76T9zlpo5Lw9A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:38 2025 by rpki-client