Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
File:                     dEXd7t-9ctMT6e6MzuroQDzDQUY.mft (raw, json)
Hash identifier:          pnY0rWncoL1aUmxR02ueQ2YyaCZdXRYSZF0B3L+7hNE=
Subject key identifier:   68:9D:68:53:C1:5D:6B:ED:AC:45:B7:57:21:BD:AB:6E:2E:B3:9C:23
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Certificate issuer:       /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial:       0199C4574583EAC96D228F43EAB113E22873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
Manifest number:          16CA
Signing time:             Wed 08 Oct 2025 15:01:17 +0000
Manifest this update:     Wed 08 Oct 2025 15:01:17 +0000
Manifest next update:     Thu 09 Oct 2025 15:01:17 +0000
Files and hashes:         1: 0oXrffU-rSHDpr6TX7IphO7-POk.roa (hash: WbRM1hyDPFlmbx1lM12Y7DHbqSzxb6BFvKIPhKhJrRs=)
                          2: J9QY7yh1pdc4gxwkKHvbRdbJ5Hc.roa (hash: FqRH6xGeGokOrR3y4N/PmTYLTqphdEbs3zKWJDOiox8=)
                          3: RL1wLq44Bf2ikyDTpOd16y5e10g.roa (hash: X39FqUvCzgp1Twm8EXglBTxwVJ18DwP2RWSMPjQDYfw=)
                          4: dEXd7t-9ctMT6e6MzuroQDzDQUY.crl (hash: uqAEG6Ql8TBX9jgh/3ONoV6qBDSGElDEX8wMbKZ+ZXY=)
                          5: nb_SgNToJhQlWuIX7tsN5k_y4pE.roa (hash: 4kJjY6lHt/g87dKdPa2zMnovZO8sWINioQls7x+X7vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 13:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c4:57:45:83:ea:c9:6d:22:8f:43:ea:b1:13:e2:28:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
        Validity
            Not Before: Oct  8 15:01:17 2025 GMT
            Not After : Oct  9 15:01:17 2025 GMT
        Subject: CN=689d6853c15d6bedac45b75721bdab6e2eb39c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:f4:17:08:f4:49:fc:a1:e2:be:35:11:17:
                    38:b9:09:ff:82:5f:5a:c4:b0:67:6f:37:39:ef:2e:
                    ab:76:35:0d:da:5a:04:5d:23:4f:52:e5:1f:84:1b:
                    de:11:cf:f0:b9:96:ea:17:9d:3c:f3:6c:f3:98:c3:
                    93:5a:de:e3:09:fe:dd:8b:60:b1:9e:ec:31:80:7a:
                    39:0d:0e:0f:e8:4b:d4:5f:85:05:98:ef:22:86:12:
                    0b:7b:eb:3a:5a:28:06:f3:4a:ee:02:3a:52:40:52:
                    44:27:a1:ae:31:34:30:c2:4c:30:62:25:4c:5d:59:
                    66:01:03:de:c4:e2:a2:85:db:67:75:f6:21:a1:3f:
                    98:95:8c:5e:6c:fe:1c:f2:60:78:6a:14:64:dc:a8:
                    78:d9:b2:da:36:d9:1d:61:d2:17:c6:38:a7:d7:9a:
                    ec:de:9d:b8:b5:60:af:04:f2:ff:95:d0:ed:44:37:
                    a0:f6:4f:c9:e0:74:bd:70:03:7b:a1:0c:56:0e:f2:
                    b8:a1:02:83:4f:31:78:61:6d:7f:b4:3d:65:41:c3:
                    59:12:88:9b:8b:b5:21:94:5e:10:23:78:d3:b1:01:
                    33:23:9b:95:8c:85:2c:05:03:98:87:62:d8:5c:1b:
                    5e:04:89:1a:d6:23:1a:83:9b:6c:f4:f5:62:45:0f:
                    a5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9D:68:53:C1:5D:6B:ED:AC:45:B7:57:21:BD:AB:6E:2E:B3:9C:23
            X509v3 Authority Key Identifier:
                keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8f:d8:47:5e:15:74:63:92:79:d4:71:d8:ba:2c:85:a9:37:
         f5:68:22:55:4d:cd:5b:75:64:66:d9:8d:64:94:41:df:f2:36:
         b2:47:1c:4c:b6:3d:d3:5e:cb:87:64:5f:fd:99:a6:db:d4:8d:
         31:20:fa:ac:70:fc:0e:3c:b6:78:b2:1d:c4:7f:40:0b:1f:8a:
         b6:90:a8:eb:fc:a8:57:57:a1:74:5a:50:50:33:cd:e1:48:a4:
         68:40:d5:d7:b6:de:36:34:df:22:a0:e1:ed:83:9b:e6:07:80:
         1e:cc:c4:59:31:c4:a5:9c:8b:40:5c:85:a5:5c:8f:9c:ad:54:
         3a:37:e2:7c:f4:2e:e3:ef:6b:df:44:98:f5:65:b1:5d:2a:50:
         20:5c:73:1c:34:78:bf:90:d0:a2:aa:87:d1:05:71:5b:bc:cd:
         e1:38:e1:79:e7:27:42:33:23:47:e0:e9:ab:3e:0f:51:61:9d:
         81:53:b7:47:71:7f:d4:b7:15:4a:44:a4:f6:a6:b2:64:d3:30:
         87:1e:04:cc:ea:a7:14:f0:f7:b0:22:cd:63:11:e6:fc:73:76:
         3f:b5:fa:44:cb:fa:71:85:e8:6d:c7:bc:f5:be:a8:6c:8f:34:
         e5:e3:14:bf:9f:9c:a3:dc:85:88:21:5b:6b:c8:61:1b:c9:e8:
         1c:de:c9:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEV0WD6sltIo9D6rET4ihzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj
MzQxNDYwHhcNMjUxMDA4MTUwMTE3WhcNMjUxMDA5MTUwMTE3WjAzMTEwLwYDVQQD
Eyg2ODlkNjg1M2MxNWQ2YmVkYWM0NWI3NTcyMWJkYWI2ZTJlYjM5YzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2r0Fwj0Sfyh4r41ERc4uQn/gl9a
xLBnbzc57y6rdjUN2loEXSNPUuUfhBveEc/wuZbqF50882zzmMOTWt7jCf7di2Cx
nuwxgHo5DQ4P6EvUX4UFmO8ihhILe+s6WigG80ruAjpSQFJEJ6GuMTQwwkwwYiVM
XVlmAQPexOKihdtndfYhoT+YlYxebP4c8mB4ahRk3Kh42bLaNtkdYdIXxjin15rs
3p24tWCvBPL/ldDtRDeg9k/J4HS9cAN7oQxWDvK4oQKDTzF4YW1/tD1lQcNZEoib
i7UhlF4QI3jTsQEzI5uVjIUsBQOYh2LYXBteBIka1iMag5ts9PViRQ+lawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGidaFPBXWvtrEW3VyG9q24us5wjMB8GA1UdIwQY
MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt
NmNhMzQwZmE3NDkzLzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz
LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4/YR14V
dGOSedRx2Loshak39WgiVU3NW3VkZtmNZJRB3/I2skccTLY9017Lh2Rf/Zmm29SN
MSD6rHD8Djy2eLIdxH9ACx+KtpCo6/yoV1ehdFpQUDPN4UikaEDV17beNjTfIqDh
7YOb5geAHszEWTHEpZyLQFyFpVyPnK1UOjfifPQu4+9r30SY9WWxXSpQIFxzHDR4
v5DQoqqH0QVxW7zN4TjheecnQjMjR+Dpqz4PUWGdgVO3R3F/1LcVSkSk9qayZNMw
hx4EzOqnFPD3sCLNYxHm/HN2P7X6RMv6cYXobce89b6obI805eMUv5+co9yFiCFb
a8hhG8noHN7J/Q==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:32:02 2025 by rpki-client