Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
File:                     ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft (raw, json)
Hash identifier:          MQQHitQrxdUMa+WQcSB2veyJ7F4M137TURcr6Q41ouE=
Subject key identifier:   FA:B5:39:5C:80:F8:A7:12:F1:17:42:F5:8E:8C:88:E5:F0:A5:FC:19
Authority key identifier: 7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6
Certificate issuer:       /CN=7a17259a863c3d637d457e119b750df95e003fd6
Certificate serial:       0199FC21716A7F8C471E57BB410F7881538B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 11:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:14 +0000
Files and hashes:         1: dUBDyI3Y08c8mTiyeoJMlAL0nl0.roa (hash: J6i7zBjAUQN6Z3eRo+/Gx26n+pN6OCH/O5XrMxGVkXk=)
                          2: ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl (hash: waY1DzxwrUdBr/OaX+kV33gf4Yp04Ei8ERMVadajzqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:71:6a:7f:8c:47:1e:57:bb:41:0f:78:81:53:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a17259a863c3d637d457e119b750df95e003fd6
        Validity
            Not Before: Oct 19 11:01:14 2025 GMT
            Not After : Oct 20 11:01:14 2025 GMT
        Subject: CN=fab5395c80f8a712f11742f58e8c88e5f0a5fc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:a1:96:d6:51:d1:4e:b5:03:0f:5e:a2:a7:
                    3c:c1:82:ca:35:cc:5d:1e:72:ad:2b:23:8f:9c:93:
                    97:86:39:9b:8d:c9:ff:c2:e1:e5:5f:a8:e7:43:6d:
                    ba:79:11:da:0b:17:a7:13:0c:ac:b0:02:5d:09:c8:
                    99:9e:e0:af:93:54:22:98:a7:18:c3:e7:79:3d:66:
                    6b:e4:18:42:eb:dd:04:69:d5:e6:04:c9:f2:6f:fe:
                    a5:37:61:0b:7e:2a:22:d6:89:93:73:8c:a9:74:6b:
                    f0:31:b9:65:ad:08:4d:9a:c6:4a:35:19:d4:35:47:
                    5c:a9:84:ce:93:b7:3d:2d:01:99:55:29:fc:61:3d:
                    79:50:08:ca:f0:f7:50:a3:e0:16:e7:84:59:43:8f:
                    80:e9:af:95:2e:a7:93:80:f5:4f:b4:0f:31:30:c7:
                    d4:f0:7b:15:ef:d0:47:f8:9e:ea:04:18:bc:aa:e3:
                    ee:e3:ba:ce:be:65:45:e4:03:ad:2f:61:2a:48:c8:
                    43:81:56:0b:87:9a:48:f0:a4:70:78:da:62:bf:73:
                    d5:ca:91:a3:6b:10:aa:7b:fd:87:90:b7:30:9a:44:
                    99:29:f5:97:13:2f:e7:4e:5c:c5:eb:ce:21:b9:75:
                    5a:f5:a1:36:26:be:89:dd:84:a6:1f:e0:6c:e8:ad:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B5:39:5C:80:F8:A7:12:F1:17:42:F5:8E:8C:88:E5:F0:A5:FC:19
            X509v3 Authority Key Identifier:
                keyid:7A:17:25:9A:86:3C:3D:63:7D:45:7E:11:9B:75:0D:F9:5E:00:3F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/00849e-d8e6-4bb1-ad30-ad8bc8bc7967/1/ehclmoY8PWN9RX4Rm3UN-V4AP9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:32:0f:b1:3f:e9:ae:05:c9:66:52:3f:3e:a7:04:ce:97:bf:
         f1:1a:21:02:73:eb:b5:60:a3:df:e9:dc:d9:4a:bd:e5:83:5d:
         ad:4c:7d:a8:d9:dc:20:54:72:4c:d2:48:c9:8f:8e:85:c4:6b:
         43:6a:d4:a8:1b:92:61:90:6a:f1:6a:69:7e:bf:c2:2e:bd:ca:
         0b:2a:2f:f2:03:2d:eb:64:30:bc:f4:c6:cf:cf:f2:26:67:fb:
         d1:6a:5c:77:25:35:a2:9d:92:11:c5:bd:26:06:99:a1:11:b0:
         88:47:08:c7:01:a6:0f:e1:d6:db:f8:ec:ad:10:e3:0b:8d:c5:
         55:91:e1:9d:29:2b:9c:d3:e3:88:13:76:6f:36:24:1f:13:c0:
         bb:52:b8:dc:e6:fd:56:6c:14:f6:00:7b:27:ff:f4:44:14:2d:
         bc:ba:d4:dc:cc:5c:c8:93:b8:9c:a6:6a:ab:61:46:03:ca:cb:
         75:50:4e:a6:5e:dc:a8:d0:5b:bb:3c:d7:7d:3f:28:4f:11:69:
         8c:12:8d:31:70:d9:68:8d:01:68:79:7e:13:4a:e2:57:a1:34:
         d5:bf:a8:88:6c:ec:0c:00:02:a5:e2:0c:16:9b:77:6a:34:c8:
         67:35:37:28:e0:99:14:be:6a:20:f0:ab:2e:8c:b7:70:79:53:
         97:63:b5:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IXFqf4xHHle7QQ94gVOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMTcyNTlhODYzYzNkNjM3ZDQ1N2UxMTliNzUwZGY5NWUw
MDNmZDYwHhcNMjUxMDE5MTEwMTE0WhcNMjUxMDIwMTEwMTE0WjAzMTEwLwYDVQQD
EyhmYWI1Mzk1YzgwZjhhNzEyZjExNzQyZjU4ZThjODhlNWYwYTVmYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiuhltZR0U61Aw9eoqc8wYLKNcxd
HnKtKyOPnJOXhjmbjcn/wuHlX6jnQ226eRHaCxenEwyssAJdCciZnuCvk1QimKcY
w+d5PWZr5BhC690EadXmBMnyb/6lN2ELfioi1omTc4ypdGvwMbllrQhNmsZKNRnU
NUdcqYTOk7c9LQGZVSn8YT15UAjK8PdQo+AW54RZQ4+A6a+VLqeTgPVPtA8xMMfU
8HsV79BH+J7qBBi8quPu47rOvmVF5AOtL2EqSMhDgVYLh5pI8KRweNpiv3PVypGj
axCqe/2HkLcwmkSZKfWXEy/nTlzF684huXVa9aE2Jr6J3YSmH+Bs6K1+GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPq1OVyA+KcS8RdC9Y6MiOXwpfwZMB8GA1UdIwQY
MBaAFHoXJZqGPD1jfUV+EZt1DfleAD/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAt
YWQ4YmM4YmM3OTY3LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wMDg0OWUtZDhlNi00YmIxLWFkMzAtYWQ4YmM4YmM3OTY3
LzEvZWhjbG1vWThQV045Ulg0Um0zVU4tVjRBUDlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDIPsT/p
rgXJZlI/PqcEzpe/8RohAnPrtWCj3+nc2Uq95YNdrUx9qNncIFRyTNJIyY+OhcRr
Q2rUqBuSYZBq8Wppfr/CLr3KCyov8gMt62QwvPTGz8/yJmf70WpcdyU1op2SEcW9
JgaZoRGwiEcIxwGmD+HW2/jsrRDjC43FVZHhnSkrnNPjiBN2bzYkHxPAu1K43Ob9
VmwU9gB7J//0RBQtvLrU3MxcyJO4nKZqq2FGA8rLdVBOpl7cqNBbuzzXfT8oTxFp
jBKNMXDZaI0BaHl+E0riV6E01b+oiGzsDAACpeIMFpt3ajTIZzU3KOCZFL5qIPCr
Loy3cHlTl2O16g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:44 2025 by rpki-client