Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
File:                     6YHNH8bDLks7fJxTiwTdMKgRw8s.mft (raw, json)
Hash identifier:          9XdntEToeKYn8yat6zwpi/mErAxvngNd+B4RW2TYa2I=
Subject key identifier:   5B:19:39:7C:D8:40:3A:61:2E:68:65:A6:B9:C4:D2:BC:5F:79:6E:09
Authority key identifier: E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB
Certificate issuer:       /CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
Certificate serial:       019A2D443543FD526314AC668AFB499E4DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
Manifest number:          16FC
Signing time:             Wed 29 Oct 2025 00:00:35 +0000
Manifest this update:     Wed 29 Oct 2025 00:00:35 +0000
Manifest next update:     Thu 30 Oct 2025 00:00:35 +0000
Files and hashes:         1: 6YHNH8bDLks7fJxTiwTdMKgRw8s.crl (hash: GKBJQHWMyKZZ6eD6wyXwmD6OA2bClEfNq3UAZZI/mQA=)
                          2: IVdjVoN4btCTyMYmCO02k9GntBE.roa (hash: a5NdeKrzfcEUiEbmiEcDr8auHl1ryaiEhNrV1p0CNFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2d:44:35:43:fd:52:63:14:ac:66:8a:fb:49:9e:4d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e981cd1fc6c32e4b3b7c9c538b04dd30a811c3cb
        Validity
            Not Before: Oct 29 00:00:35 2025 GMT
            Not After : Oct 30 00:00:35 2025 GMT
        Subject: CN=5b19397cd8403a612e6865a6b9c4d2bc5f796e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:96:a5:c1:72:33:50:1a:1c:37:08:fe:4c:
                    55:84:e7:4b:d1:2e:bf:25:49:9e:e3:e4:5a:9b:47:
                    ca:aa:66:e5:c6:a8:7e:1e:06:37:23:a4:21:1c:52:
                    71:8c:2e:af:ce:25:a4:2c:5e:2a:ef:b0:12:6f:f2:
                    3a:29:92:a4:5f:10:23:4c:a2:24:5a:8a:75:30:cc:
                    ef:ad:2c:c1:84:a0:c8:56:3a:41:6c:3e:13:b0:71:
                    72:17:fa:eb:c6:d3:5f:dd:b0:b0:2c:7b:b0:ab:66:
                    ec:1b:ca:b6:c2:85:e2:d0:8a:bb:6b:63:41:93:b3:
                    17:e3:7a:b1:01:81:ec:8f:c5:d6:b1:c7:24:f2:49:
                    35:b4:92:a3:0b:6a:72:6f:f4:da:aa:97:fc:89:80:
                    cc:51:cf:7e:e2:8c:bf:ff:22:fd:c1:ed:2b:82:c9:
                    73:38:21:95:e7:d3:64:30:fd:ad:da:c9:b2:e3:47:
                    09:62:d3:6f:5c:89:6f:09:b4:72:b8:3a:c4:bf:1f:
                    c8:8b:62:1f:dc:ec:8f:3f:cf:c2:0c:67:38:e5:46:
                    67:ca:42:53:49:06:ef:a6:85:70:7c:8d:c8:34:3b:
                    d0:47:6c:b7:24:c9:c6:ea:c2:22:a9:55:1a:63:a1:
                    72:4a:47:ea:63:5e:8e:a2:aa:94:2f:f0:2a:dc:43:
                    7b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:19:39:7C:D8:40:3A:61:2E:68:65:A6:B9:C4:D2:BC:5F:79:6E:09
            X509v3 Authority Key Identifier:
                keyid:E9:81:CD:1F:C6:C3:2E:4B:3B:7C:9C:53:8B:04:DD:30:A8:11:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YHNH8bDLks7fJxTiwTdMKgRw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8e16cf-cd3b-4177-a045-1c28e1cd5745/1/6YHNH8bDLks7fJxTiwTdMKgRw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:01:04:df:50:5e:7c:fe:5c:fd:6b:09:e8:cf:2d:fc:39:55:
         f5:df:10:6c:02:ef:c7:af:5a:d0:9d:8c:e2:c4:ea:e9:93:4d:
         a0:c9:46:9e:6b:81:20:af:93:8c:8a:96:2b:39:7a:34:46:55:
         20:25:3d:50:7a:41:9a:ee:49:b6:d7:ad:48:3e:6e:4c:93:09:
         e9:71:de:72:24:c3:12:83:b0:5d:5f:aa:be:0a:56:cc:d9:6d:
         32:f3:c9:cf:03:ac:e1:61:63:a4:93:21:e2:3e:8a:be:0b:2e:
         16:54:80:cb:40:7e:d3:85:a6:ab:71:81:a9:bf:9f:87:f7:33:
         c6:65:19:e1:df:b6:46:bf:9a:56:04:bc:14:de:38:df:9d:28:
         ce:e8:af:9d:79:66:48:e9:d0:48:c0:44:7f:14:9d:e8:3c:d8:
         0a:57:d7:63:4f:0e:d8:23:3f:27:ac:4a:50:b3:9a:b8:8e:0d:
         aa:16:4f:f3:fc:ee:ac:5d:ad:10:bf:ee:50:bd:62:80:26:4e:
         ca:f0:88:d0:3b:fc:2a:22:d7:a4:be:34:a5:aa:7a:ba:0b:7c:
         2a:db:d2:e7:54:9d:c5:7c:2a:a4:47:ae:8d:a2:d4:0d:c5:81:
         ee:19:92:fa:8e:bb:b7:b4:f5:8d:d4:c0:55:fc:3e:fc:7f:f6:
         22:34:af:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZotRDVD/VJjFKxmivtJnk3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ODFjZDFmYzZjMzJlNGIzYjdjOWM1MzhiMDRkZDMwYTgx
MWMzY2IwHhcNMjUxMDI5MDAwMDM1WhcNMjUxMDMwMDAwMDM1WjAzMTEwLwYDVQQD
Eyg1YjE5Mzk3Y2Q4NDAzYTYxMmU2ODY1YTZiOWM0ZDJiYzVmNzk2ZTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM2WpcFyM1AaHDcI/kxVhOdL0S6/
JUme4+Ram0fKqmblxqh+HgY3I6QhHFJxjC6vziWkLF4q77ASb/I6KZKkXxAjTKIk
Wop1MMzvrSzBhKDIVjpBbD4TsHFyF/rrxtNf3bCwLHuwq2bsG8q2woXi0Iq7a2NB
k7MX43qxAYHsj8XWscck8kk1tJKjC2pyb/Taqpf8iYDMUc9+4oy//yL9we0rgslz
OCGV59NkMP2t2smy40cJYtNvXIlvCbRyuDrEvx/Ii2If3OyPP8/CDGc45UZnykJT
SQbvpoVwfI3INDvQR2y3JMnG6sIiqVUaY6FySkfqY16OoqqUL/Aq3EN7nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsZOXzYQDphLmhlprnE0rxfeW4JMB8GA1UdIwQY
MBaAFOmBzR/Gwy5LO3ycU4sE3TCoEcPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNllITkg4YkRMa3M3Zkp4VGl3VGRNS2dSdzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni84ZTE2Y2YtY2QzYi00MTc3LWEwNDUt
MWMyOGUxY2Q1NzQ1LzEvNllITkg4YkRMa3M3Zkp4VGl3VGRNS2dSdzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni84ZTE2Y2YtY2QzYi00MTc3LWEwNDUtMWMyOGUxY2Q1NzQ1
LzEvNllITkg4YkRMa3M3Zkp4VGl3VGRNS2dSdzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAEE31Be
fP5c/WsJ6M8t/DlV9d8QbALvx69a0J2M4sTq6ZNNoMlGnmuBIK+TjIqWKzl6NEZV
ICU9UHpBmu5JttetSD5uTJMJ6XHeciTDEoOwXV+qvgpWzNltMvPJzwOs4WFjpJMh
4j6KvgsuFlSAy0B+04Wmq3GBqb+fh/czxmUZ4d+2Rr+aVgS8FN44350ozuivnXlm
SOnQSMBEfxSd6DzYClfXY08O2CM/J6xKULOauI4NqhZP8/zurF2tEL/uUL1igCZO
yvCI0Dv8KiLXpL40pap6ugt8KtvS51SdxXwqpEeujaLUDcWB7hmS+o67t7T1jdTA
Vfw+/H/2IjSvAA==
-----END CERTIFICATE-----
Generated at Wed Oct 29 01:32:35 2025 by rpki-client