Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
File:                     _MymLL50MyhVVIOoV-Uhhj-VO0E.mft (raw, json)
Hash identifier:          ne9+bQUvdJVURfXHHhEgklsW2a6Khskuwz6CRqN692k=
Subject key identifier:   83:23:15:41:BC:30:60:44:02:A4:86:D0:9A:35:55:27:4C:45:D7:22
Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
Certificate issuer:       /CN=fccca62cbe743328555483a857e521863f953b41
Certificate serial:       019A236562186825EF2C274499D5D8F6E9F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
Manifest number:          16FC
Signing time:             Mon 27 Oct 2025 02:00:38 +0000
Manifest this update:     Mon 27 Oct 2025 02:00:38 +0000
Manifest next update:     Tue 28 Oct 2025 02:00:38 +0000
Files and hashes:         1: SQnsB4pgBnmpIi4TRKO7zpVO0eA.roa (hash: WWdVpcd3MWSz2a/cTGWg0pR5ff1Hobu49xdGhZEZSxE=)
                          2: _MymLL50MyhVVIOoV-Uhhj-VO0E.crl (hash: YCsmz9V7Lj3uo0x6UMfUvoPu4ah2a82P6yoWgTVZTNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:65:62:18:68:25:ef:2c:27:44:99:d5:d8:f6:e9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccca62cbe743328555483a857e521863f953b41
        Validity
            Not Before: Oct 27 02:00:38 2025 GMT
            Not After : Oct 28 02:00:38 2025 GMT
        Subject: CN=83231541bc30604402a486d09a3555274c45d722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:23:5a:23:29:86:00:25:97:ec:e2:1f:a0:
                    1d:c3:eb:a2:17:ea:89:e9:bc:1d:2d:c3:7a:ee:17:
                    85:cf:0d:b2:3b:cc:3a:73:51:00:76:0b:ed:9b:87:
                    1e:a4:b8:90:05:e1:09:43:ee:c0:80:cd:a1:bf:0e:
                    d6:ee:5b:8c:10:e2:5e:a2:17:d2:ee:78:68:12:71:
                    d6:50:f9:c8:f2:84:83:d2:fb:d0:b8:0a:8a:65:42:
                    8b:70:f5:59:b7:30:9a:ba:ad:33:9f:40:0d:e9:09:
                    e1:ca:0b:e1:36:9d:b6:cf:72:0b:0c:a6:2d:d3:e4:
                    6d:ec:4c:f1:8c:1d:9c:9e:c8:45:58:89:72:7f:ec:
                    c8:4b:37:1b:fc:6a:0a:f1:e6:9b:75:68:60:22:75:
                    e7:95:a1:1d:05:0f:92:ce:ab:78:96:6d:22:9e:d4:
                    45:ba:65:24:44:75:0c:35:29:86:43:ad:4a:95:d8:
                    86:30:81:7c:55:1e:0e:e1:90:a0:41:99:f8:92:05:
                    0d:31:ad:32:72:9e:e7:b3:e9:a9:79:16:2f:93:a4:
                    53:19:2a:96:4a:d0:80:9e:82:b8:2f:1a:c7:59:36:
                    dd:da:b1:56:38:f8:91:f3:e4:ba:b7:4a:fd:51:55:
                    ca:81:a0:c5:f1:a0:05:9e:68:8c:bb:36:fb:c3:94:
                    76:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:15:41:BC:30:60:44:02:A4:86:D0:9A:35:55:27:4C:45:D7:22
            X509v3 Authority Key Identifier:
                keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:53:59:e0:44:b0:b5:ee:a2:ed:a5:6f:44:08:20:2f:ef:
         47:8b:e8:db:9d:87:96:25:f9:a4:cb:9b:70:e8:d9:89:6b:d2:
         3c:8c:5e:15:56:f9:b8:00:37:8d:34:20:77:ca:c1:c6:75:18:
         06:17:e7:ea:01:e2:75:be:74:cc:57:fe:7a:d1:a7:67:01:b0:
         0e:76:b6:db:65:a1:d2:a3:53:08:ee:79:ee:40:71:98:3c:ab:
         4a:4f:2c:9e:0d:ed:e5:05:b7:8f:fa:37:d7:4a:d0:91:69:70:
         ad:d0:8f:9b:9d:2e:1f:f0:83:e6:df:b7:99:18:fc:f4:86:f5:
         b2:bf:74:d0:a8:d6:c2:36:26:15:21:60:20:e0:a5:ed:bc:0e:
         69:ae:69:9d:b1:29:27:3b:00:26:a7:e5:d9:01:74:f9:6f:25:
         17:2d:58:34:40:59:df:0e:aa:af:f9:df:f4:91:b8:ed:b5:bb:
         96:65:ef:89:88:23:18:a3:74:b5:bb:96:e7:fc:ea:41:86:17:
         eb:c7:b8:8b:4d:8f:ee:18:bf:4e:ad:fc:9f:95:70:ae:59:8d:
         c0:93:e5:3c:1e:8e:9c:62:56:9f:8d:ee:ad:65:20:99:fd:03:
         0d:55:ad:e1:76:35:26:c2:f2:d0:76:1b:2e:d8:61:e6:41:56:
         b5:0a:fa:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZWIYaCXvLCdEmdXY9un2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjY2NhNjJjYmU3NDMzMjg1NTU0ODNhODU3ZTUyMTg2M2Y5
NTNiNDEwHhcNMjUxMDI3MDIwMDM4WhcNMjUxMDI4MDIwMDM4WjAzMTEwLwYDVQQD
Eyg4MzIzMTU0MWJjMzA2MDQ0MDJhNDg2ZDA5YTM1NTUyNzRjNDVkNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe4jWiMphgAll+ziH6Adw+uiF+qJ
6bwdLcN67heFzw2yO8w6c1EAdgvtm4cepLiQBeEJQ+7AgM2hvw7W7luMEOJeohfS
7nhoEnHWUPnI8oSD0vvQuAqKZUKLcPVZtzCauq0zn0AN6QnhygvhNp22z3ILDKYt
0+Rt7EzxjB2cnshFWIlyf+zISzcb/GoK8eabdWhgInXnlaEdBQ+Szqt4lm0intRF
umUkRHUMNSmGQ61KldiGMIF8VR4O4ZCgQZn4kgUNMa0ycp7ns+mpeRYvk6RTGSqW
StCAnoK4LxrHWTbd2rFWOPiR8+S6t0r9UVXKgaDF8aAFnmiMuzb7w5R2bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMjFUG8MGBEAqSG0Jo1VSdMRdciMB8GA1UdIwQY
MBaAFPzMpiy+dDMoVVSDqFflIYY/lTtBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX015bUxMNTBNeWhWVklPb1YtVWhoai1WTzBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMmU0M2QtMWZhYS00MGIzLWIwMTIt
ZWU2NGM2ZTcxYmZiLzEvX015bUxMNTBNeWhWVklPb1YtVWhoai1WTzBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kMmU0M2QtMWZhYS00MGIzLWIwMTItZWU2NGM2ZTcxYmZi
LzEvX015bUxMNTBNeWhWVklPb1YtVWhoai1WTzBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLZTWeBE
sLXuou2lb0QIIC/vR4vo252HliX5pMubcOjZiWvSPIxeFVb5uAA3jTQgd8rBxnUY
Bhfn6gHidb50zFf+etGnZwGwDna222Wh0qNTCO557kBxmDyrSk8sng3t5QW3j/o3
10rQkWlwrdCPm50uH/CD5t+3mRj89Ib1sr900KjWwjYmFSFgIOCl7bwOaa5pnbEp
JzsAJqfl2QF0+W8lFy1YNEBZ3w6qr/nf9JG47bW7lmXviYgjGKN0tbuW5/zqQYYX
68e4i02P7hi/Tq38n5VwrlmNwJPlPB6OnGJWn43urWUgmf0DDVWt4XY1JsLy0HYb
Lthh5kFWtQr6YA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:22:00 2025 by rpki-client