Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File:                     8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier:          QFW1Hx+5iG33rOMk2t1nD84Ucj4u/d8jQzwZKrycams=
Subject key identifier:   F2:A0:82:6D:F8:FB:E8:07:C4:16:CC:3E:E3:E1:D7:5F:30:D1:CB:D7
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       019A22893EE2603B260D46A33D2857D921A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number:          16AD
Signing time:             Sun 26 Oct 2025 22:00:11 +0000
Manifest this update:     Sun 26 Oct 2025 22:00:11 +0000
Manifest next update:     Mon 27 Oct 2025 22:00:11 +0000
Files and hashes:         1: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: 68pVB7YbtLwoA1qVnrm7Mi8zJNrq249+i1lWQWfvI8s=)
                          2: LYYtWBIrqnMkBqXL_qoGSSiMC0A.roa (hash: GO+MMgl638g9Pe8U4lrnZd+WeVwSJjTIvRPV7rn/M2U=)
                          3: qUqbG1fI6WnBp5sF-Oa70_Lholo.roa (hash: Onc/iKE+MBUdx68cwO8V8LQmCLrY9+uNfRvlbv3SVUg=)
                          4: vNazpVnOuKKsE-A9nDrKkBqBqmw.roa (hash: 6yzwUeXrNsunwiRKny+F9bobTBkszKyU+zUViVo+zKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:89:3e:e2:60:3b:26:0d:46:a3:3d:28:57:d9:21:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: Oct 26 22:00:11 2025 GMT
            Not After : Oct 27 22:00:11 2025 GMT
        Subject: CN=f2a0826df8fbe807c416cc3ee3e1d75f30d1cbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:1b:7f:8f:30:4a:88:f2:a0:1a:75:29:81:
                    48:19:9e:54:7c:ad:6f:b8:a6:08:b9:6b:11:cd:0b:
                    bd:c5:95:12:2f:45:9f:e9:e4:d4:bd:c0:90:35:54:
                    e3:de:d3:53:ce:f3:d9:b0:df:fb:3b:64:32:9b:87:
                    b5:19:ea:eb:4c:94:88:51:4f:70:29:c6:24:eb:b4:
                    93:48:d4:de:27:27:3f:bb:ed:96:32:ea:da:74:a1:
                    ea:0b:29:95:94:64:38:f5:94:85:ef:b9:52:03:09:
                    97:75:b2:af:0a:4a:ef:26:97:9b:83:43:12:69:ed:
                    ee:30:91:9a:5c:e7:49:16:ee:8c:98:00:2c:5d:8b:
                    38:12:9d:ad:0d:b0:6d:6c:3d:88:13:6f:53:e7:4c:
                    6c:be:46:9f:b2:c2:fd:91:a7:75:26:82:68:8f:ab:
                    d8:d3:5b:47:9f:67:74:d9:3c:35:c8:78:a8:4a:fc:
                    48:66:ba:53:1c:ba:0e:f4:a6:3f:c2:1e:6d:3a:74:
                    d6:37:8c:12:07:ae:22:b3:23:3f:2e:64:85:bd:af:
                    c6:0e:c9:c3:25:c6:24:99:bc:63:34:04:c1:77:3e:
                    a5:61:30:92:5a:5a:9e:e4:11:d9:f2:6e:7e:cf:a4:
                    4e:62:85:ca:a6:9b:47:b6:5e:02:11:24:1c:2f:a6:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A0:82:6D:F8:FB:E8:07:C4:16:CC:3E:E3:E1:D7:5F:30:D1:CB:D7
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:61:92:fe:cb:01:0a:d3:12:75:70:6f:9f:02:c7:81:c4:
         74:1d:6a:c2:ca:86:34:d6:4a:86:30:0b:86:cd:be:0e:4f:4c:
         ff:9b:ea:c7:5f:55:c3:c6:eb:70:33:cb:ad:da:78:ea:f2:99:
         b9:0a:45:31:d0:97:7b:98:53:7e:b7:bf:95:dc:86:dc:2f:58:
         8b:45:63:d1:60:d9:1a:ac:f8:58:0f:eb:60:d4:d0:94:0b:1c:
         10:7f:b7:3f:4f:54:7b:66:80:a6:39:e8:90:cd:1b:fe:28:36:
         99:a8:8f:80:e5:16:43:69:1c:10:1f:6d:7f:cd:c7:ba:53:71:
         38:3f:4a:4b:57:45:b4:ba:ee:7f:f5:50:af:18:a2:6a:0d:17:
         0a:6b:f8:3c:1d:a5:09:f2:22:f7:cd:6f:d4:97:3e:ca:73:f7:
         35:09:f1:7b:64:1e:da:e5:b0:16:07:56:e6:d7:70:92:60:f9:
         11:a7:f3:64:6b:57:02:c2:b5:ab:d9:62:4e:be:ad:de:39:c5:
         0a:87:1a:9f:7b:5d:56:23:08:e3:8c:d5:70:fe:df:ac:89:3c:
         f0:65:7b:2b:aa:67:0b:b4:63:7b:06:a9:db:ca:d4:fb:1a:de:
         9c:ea:36:f3:29:58:ab:63:ca:ee:f7:9f:4d:ad:32:3c:12:98:
         36:fd:10:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiT7iYDsmDUajPShX2SGpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYTA2YzZjMTA4ZTk0MTliMmNkYjIxZDQ4YjQ5YTZiYmQ2
YzE2ZGYwHhcNMjUxMDI2MjIwMDExWhcNMjUxMDI3MjIwMDExWjAzMTEwLwYDVQQD
EyhmMmEwODI2ZGY4ZmJlODA3YzQxNmNjM2VlM2UxZDc1ZjMwZDFjYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBIbf48wSojyoBp1KYFIGZ5UfK1v
uKYIuWsRzQu9xZUSL0Wf6eTUvcCQNVTj3tNTzvPZsN/7O2Qym4e1GerrTJSIUU9w
KcYk67STSNTeJyc/u+2WMuradKHqCymVlGQ49ZSF77lSAwmXdbKvCkrvJpebg0MS
ae3uMJGaXOdJFu6MmAAsXYs4Ep2tDbBtbD2IE29T50xsvkafssL9kad1JoJoj6vY
01tHn2d02Tw1yHioSvxIZrpTHLoO9KY/wh5tOnTWN4wSB64isyM/LmSFva/GDsnD
JcYkmbxjNATBdz6lYTCSWlqe5BHZ8m5+z6ROYoXKpptHtl4CESQcL6Za7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKggm34++gHxBbMPuPh118w0cvXMB8GA1UdIwQY
MBaAFPGgbGwQjpQZss2yHUi0mmu9bBbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kZWY2NDctOTE4Ni00NzI5LWJiOTkt
MTQyZWJlODY5MzE2LzEvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kZWY2NDctOTE4Ni00NzI5LWJiOTktMTQyZWJlODY5MzE2
LzEvOGFCc2JCQ09sQm15emJJZFNMU2FhNzFzRnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEf9hkv7L
AQrTEnVwb58Cx4HEdB1qwsqGNNZKhjALhs2+Dk9M/5vqx19Vw8brcDPLrdp46vKZ
uQpFMdCXe5hTfre/ldyG3C9Yi0Vj0WDZGqz4WA/rYNTQlAscEH+3P09Ue2aApjno
kM0b/ig2maiPgOUWQ2kcEB9tf83HulNxOD9KS1dFtLruf/VQrxiiag0XCmv4PB2l
CfIi981v1Jc+ynP3NQnxe2Qe2uWwFgdW5tdwkmD5EafzZGtXAsK1q9liTr6t3jnF
Cocan3tdViMI44zVcP7frIk88GV7K6pnC7Rjewap28rU+xrenOo28ylYq2PK7vef
Ta0yPBKYNv0QOA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:44:43 2025 by rpki-client