Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File:                     IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier:          0OhVK9XPajSt11WUZXqFkeBIE+oEW9v85P3AhSqc6nU=
Subject key identifier:   0A:60:1A:D4:F1:95:8C:25:65:3C:55:70:D8:E1:DF:0C:FC:6D:A3:53
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       019A221BE2D62F410B81553A82D21F1B7A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number:          16FA
Signing time:             Sun 26 Oct 2025 20:00:44 +0000
Manifest this update:     Sun 26 Oct 2025 20:00:44 +0000
Manifest next update:     Mon 27 Oct 2025 20:00:44 +0000
Files and hashes:         1: CMn2soeES3hR-sK_8HvrSujpCpQ.roa (hash: VTuRr4KfXEripqS9AelciewMmdMPiSyij0Vs8ogbZ90=)
                          2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: Mm2rkCVRqOXS6qZsonoLwBOLUBPedSJ3drOGQ+Rbq6Q=)
                          3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=)
                          4: Z_2-Zbi4vsdnVpg2d_lnWwbhvN4.roa (hash: 8GDUJ7ZhRwTXBlYLdtF6LAMc571ge2c8D8UbSUf3lg0=)
                          5: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=)
                          6: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:1b:e2:d6:2f:41:0b:81:55:3a:82:d2:1f:1b:7a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Oct 26 20:00:44 2025 GMT
            Not After : Oct 27 20:00:44 2025 GMT
        Subject: CN=0a601ad4f1958c25653c5570d8e1df0cfc6da353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:11:b8:de:ce:82:91:9c:2e:96:09:d7:57:
                    fb:3c:5d:1e:1f:b4:bc:60:c2:e5:6d:ec:7a:fd:00:
                    52:91:43:b4:d8:ba:84:97:59:ec:95:78:67:88:04:
                    dc:8c:d6:5a:4b:aa:9e:e3:d8:87:93:cf:d3:76:37:
                    82:b4:5c:0b:99:3e:fe:47:6d:37:62:17:2f:1d:d1:
                    12:84:b0:0e:cb:74:71:74:3d:77:c1:24:28:1c:67:
                    9c:5e:82:2b:7e:71:0a:17:59:05:47:ea:83:b2:2a:
                    a6:4c:c6:40:f7:87:22:51:1a:61:d5:25:75:dd:27:
                    6d:cf:97:ae:12:d2:b9:30:0a:26:bd:4d:08:c7:35:
                    57:c9:3b:e6:89:7e:95:6d:9a:b4:41:37:44:4f:fb:
                    cd:ad:43:12:89:72:23:5e:af:d1:e0:d0:48:6d:4e:
                    8d:f4:ef:7d:88:eb:1c:b2:13:4e:dc:bb:52:d5:e3:
                    c9:77:ad:5d:c6:eb:f0:e8:96:f5:ef:db:81:ba:2c:
                    fb:e5:ed:36:03:1a:54:31:ea:cc:b1:1f:f4:55:3e:
                    95:72:40:c0:0e:f0:95:0f:16:9f:3e:d6:fc:b0:95:
                    4c:b6:66:8e:10:f1:96:37:90:fe:03:f4:c9:a8:e9:
                    9c:40:5a:59:3c:db:b1:c4:b4:18:83:00:a5:14:84:
                    39:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:60:1A:D4:F1:95:8C:25:65:3C:55:70:D8:E1:DF:0C:FC:6D:A3:53
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ed:27:a3:65:4d:8c:0a:a8:06:fa:6c:b1:1a:92:d3:c2:98:
         a7:27:82:45:bf:72:08:18:42:e8:22:1c:f4:22:ee:9a:ae:94:
         e6:77:6c:42:69:46:89:0a:38:ba:83:65:27:94:ed:f8:97:62:
         b8:36:c5:e9:c7:f9:01:81:3f:8b:b2:af:a9:9b:39:be:ca:dd:
         b8:01:56:0b:b7:37:28:a3:44:4a:f4:76:8a:87:c9:5a:89:b1:
         ed:e5:6b:4d:6b:4d:48:48:e3:a8:9d:e5:a7:f7:6c:82:7f:f1:
         46:94:10:d7:66:f5:26:24:3a:b6:13:06:d5:dc:6f:f3:32:14:
         88:f9:f7:95:fd:38:4c:5a:e7:76:64:23:29:00:e0:6c:02:b4:
         53:70:65:2f:e5:de:39:0b:bf:62:d4:4c:68:6e:f9:e1:4f:b8:
         69:df:b1:fc:67:1b:2c:65:19:3f:99:56:99:bf:3b:c6:fc:1d:
         70:4b:d1:e2:3f:a8:6b:ef:b2:79:b8:1a:6c:0f:77:b5:ff:3f:
         04:ea:f5:cd:47:e1:4c:2f:f2:e4:76:6d:03:04:f6:69:cc:80:
         17:a2:01:0f:69:e6:91:4e:83:d3:df:99:6a:48:eb:49:d3:b1:
         81:68:22:92:97:5e:50:22:c3:54:3a:fc:da:68:87:96:c4:90:
         e7:7e:e9:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG+LWL0ELgVU6gtIfG3qEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4
YjJkZTcwHhcNMjUxMDI2MjAwMDQ0WhcNMjUxMDI3MjAwMDQ0WjAzMTEwLwYDVQQD
EygwYTYwMWFkNGYxOTU4YzI1NjUzYzU1NzBkOGUxZGYwY2ZjNmRhMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj04RuN7OgpGcLpYJ11f7PF0eH7S8
YMLlbex6/QBSkUO02LqEl1nslXhniATcjNZaS6qe49iHk8/TdjeCtFwLmT7+R203
YhcvHdEShLAOy3RxdD13wSQoHGecXoIrfnEKF1kFR+qDsiqmTMZA94ciURph1SV1
3Sdtz5euEtK5MAomvU0IxzVXyTvmiX6VbZq0QTdET/vNrUMSiXIjXq/R4NBIbU6N
9O99iOscshNO3LtS1ePJd61dxuvw6Jb179uBuiz75e02AxpUMerMsR/0VT6VckDA
DvCVDxafPtb8sJVMtmaOEPGWN5D+A/TJqOmcQFpZPNuxxLQYgwClFIQ5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApgGtTxlYwlZTxVcNjh3wz8baNTMB8GA1UdIwQY
MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt
NGQ3MzczMGY3ZDMyLzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy
LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO0no2VN
jAqoBvpssRqS08KYpyeCRb9yCBhC6CIc9CLumq6U5ndsQmlGiQo4uoNlJ5Tt+Jdi
uDbF6cf5AYE/i7KvqZs5vsrduAFWC7c3KKNESvR2iofJWomx7eVrTWtNSEjjqJ3l
p/dsgn/xRpQQ12b1JiQ6thMG1dxv8zIUiPn3lf04TFrndmQjKQDgbAK0U3BlL+Xe
OQu/YtRMaG754U+4ad+x/GcbLGUZP5lWmb87xvwdcEvR4j+oa++yebgabA93tf8/
BOr1zUfhTC/y5HZtAwT2acyAF6IBD2nmkU6D09+ZakjrSdOxgWgikpdeUCLDVDr8
2miHlsSQ537pBQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:42:14 2025 by rpki-client