Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
File:                     kW-Aw18gLrAnZkGb-30oISX_4Vg.mft (raw, json)
Hash identifier:          phdxS2VifaruOPvveL+/wh52+qImWZf+FSKmNUgBg2Q=
Subject key identifier:   55:CD:B0:E0:3A:14:45:DC:03:86:4D:4B:F7:C0:D1:41:30:39:B5:F9
Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58
Certificate issuer:       /CN=916f80c35f202eb02766419bfb7d282125ffe158
Certificate serial:       019A1505D42567CC2E978B0268A57AEF34DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
Manifest number:          16F4
Signing time:             Fri 24 Oct 2025 07:01:34 +0000
Manifest this update:     Fri 24 Oct 2025 07:01:34 +0000
Manifest next update:     Sat 25 Oct 2025 07:01:34 +0000
Files and hashes:         1: Nooohr4P5yKkhRHUp5WOKPpdMDs.roa (hash: yQvSjkqhAqaWpvZ1QnemaJY2V/F+jwI7osUi/29zs8c=)
                          2: kW-Aw18gLrAnZkGb-30oISX_4Vg.crl (hash: 4FqY7fUbsYStj3T8uhmOKfixN2+qQeabiTw4y2/aXG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Oct 2025 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:15:05:d4:25:67:cc:2e:97:8b:02:68:a5:7a:ef:34:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158
        Validity
            Not Before: Oct 24 07:01:34 2025 GMT
            Not After : Oct 25 07:01:34 2025 GMT
        Subject: CN=55cdb0e03a1445dc03864d4bf7c0d1413039b5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:74:99:0d:d8:fc:45:0c:53:40:8c:65:24:9c:
                    7e:c1:d0:1d:bf:91:dc:42:c0:73:70:b6:81:a5:9c:
                    81:5f:59:e5:4d:1b:7f:e8:37:9b:78:de:73:60:1d:
                    21:2d:25:68:7f:2c:09:04:0a:41:41:48:50:b1:df:
                    8b:ab:df:79:8c:4d:b3:da:90:b9:dd:6a:73:bb:16:
                    8f:96:93:63:ff:85:43:41:ec:d4:37:3c:ca:b1:75:
                    c0:cb:b2:af:1d:0b:2d:06:75:bb:60:4b:7a:6b:3d:
                    25:18:eb:38:ca:c0:13:51:f5:72:36:09:cd:db:41:
                    cb:08:84:9d:16:36:8f:70:96:37:c3:db:d1:2c:24:
                    95:69:2a:7b:7d:4d:94:4d:d5:0b:a8:7b:d8:06:ae:
                    53:31:9a:a5:fd:bf:d1:00:a5:3e:21:a6:03:40:ed:
                    ab:ef:07:83:87:c4:c5:0e:0b:b8:25:cd:21:a5:bc:
                    11:1a:a9:b0:4d:d5:56:57:15:53:6f:a9:87:07:6f:
                    e7:78:0f:7f:e2:29:9e:d8:f9:e7:f6:65:43:c8:50:
                    1a:61:81:05:6c:4d:51:c6:c5:b8:a4:03:38:19:65:
                    df:ff:17:87:3d:2b:aa:0f:7e:fa:b3:3f:d4:e7:fa:
                    f3:b7:b9:1e:5d:59:dd:25:b9:3c:14:31:84:6f:3f:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CD:B0:E0:3A:14:45:DC:03:86:4D:4B:F7:C0:D1:41:30:39:B5:F9
            X509v3 Authority Key Identifier:
                keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:7a:99:5c:98:ec:3c:74:ad:04:b4:91:a7:20:1c:2f:f2:c8:
         a5:b8:92:73:fc:45:ce:1d:4c:86:65:5c:f2:30:92:5b:34:6e:
         ea:07:11:25:d9:89:b8:88:53:91:58:3c:31:1e:50:e0:1f:a4:
         73:d6:75:03:10:04:6c:40:18:8e:62:3e:17:84:34:e4:c2:1c:
         a9:7b:7e:70:3e:47:7f:e7:1d:a5:a7:8b:b0:6e:4d:11:af:d8:
         9f:69:4c:82:b8:da:1e:7b:f6:7b:2b:15:38:68:d9:bf:9b:6e:
         3a:a5:69:12:d1:d1:a9:95:53:e2:53:a7:31:41:db:73:df:99:
         1f:52:ee:5e:4a:b4:ac:66:5d:2f:7f:2f:f4:3d:c2:05:5d:ca:
         fc:e3:e4:86:db:3f:9e:d8:db:06:3f:a3:d5:c2:6c:7e:84:3d:
         60:54:0a:01:34:c5:55:50:87:5b:89:46:50:b7:47:71:75:66:
         35:a1:1d:c8:e3:20:aa:95:22:c4:41:29:a9:2c:ff:79:ac:d2:
         b8:ec:f4:df:2c:be:32:ae:ff:9d:93:4d:91:a1:6d:c4:da:af:
         60:09:cb:be:4d:21:46:1c:0b:13:12:19:5c:33:46:b4:b7:48:
         c7:c1:3b:40:74:0e:8c:52:d6:f2:f2:53:7f:43:72:67:8b:c6:
         f7:85:9d:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoVBdQlZ8wul4sCaKV67zTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNmY4MGMzNWYyMDJlYjAyNzY2NDE5YmZiN2QyODIxMjVm
ZmUxNTgwHhcNMjUxMDI0MDcwMTM0WhcNMjUxMDI1MDcwMTM0WjAzMTEwLwYDVQQD
Eyg1NWNkYjBlMDNhMTQ0NWRjMDM4NjRkNGJmN2MwZDE0MTMwMzliNWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33SZDdj8RQxTQIxlJJx+wdAdv5Hc
QsBzcLaBpZyBX1nlTRt/6DebeN5zYB0hLSVofywJBApBQUhQsd+Lq995jE2z2pC5
3WpzuxaPlpNj/4VDQezUNzzKsXXAy7KvHQstBnW7YEt6az0lGOs4ysATUfVyNgnN
20HLCISdFjaPcJY3w9vRLCSVaSp7fU2UTdULqHvYBq5TMZql/b/RAKU+IaYDQO2r
7weDh8TFDgu4Jc0hpbwRGqmwTdVWVxVTb6mHB2/neA9/4ime2Pnn9mVDyFAaYYEF
bE1RxsW4pAM4GWXf/xeHPSuqD376sz/U5/rzt7keXVndJbk8FDGEbz9eyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXNsOA6FEXcA4ZNS/fA0UEwObX5MB8GA1UdIwQY
MBaAFJFvgMNfIC6wJ2ZBm/t9KCEl/+FYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2Yt
YzEwY2M5NTNiZDFiLzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2YtYzEwY2M5NTNiZDFi
LzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnqZXJjs
PHStBLSRpyAcL/LIpbiSc/xFzh1MhmVc8jCSWzRu6gcRJdmJuIhTkVg8MR5Q4B+k
c9Z1AxAEbEAYjmI+F4Q05MIcqXt+cD5Hf+cdpaeLsG5NEa/Yn2lMgrjaHnv2eysV
OGjZv5tuOqVpEtHRqZVT4lOnMUHbc9+ZH1LuXkq0rGZdL38v9D3CBV3K/OPkhts/
ntjbBj+j1cJsfoQ9YFQKATTFVVCHW4lGULdHcXVmNaEdyOMgqpUixEEpqSz/eazS
uOz03yy+Mq7/nZNNkaFtxNqvYAnLvk0hRhwLExIZXDNGtLdIx8E7QHQOjFLW8vJT
f0NyZ4vG94WdIw==
-----END CERTIFICATE-----
Generated at Fri Oct 24 13:38:52 2025 by rpki-client