Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
File:                     Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft (raw, json)
Hash identifier:          JqhGnBO+0n/nwVTDrfq3fKOEiCIq1i8n2ssWCQoUTiw=
Subject key identifier:   96:41:AB:04:8F:A9:55:47:27:6D:3E:8D:C5:47:CF:94:F3:E5:F2:62
Authority key identifier: 16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D
Certificate issuer:       /CN=16f91ff671f1de5143aa21a008e26e27946ab85d
Certificate serial:       019A05927425FB6A8998EFDEEA6A8DAD43E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
Manifest number:          16E5
Signing time:             Tue 21 Oct 2025 07:01:15 +0000
Manifest this update:     Tue 21 Oct 2025 07:01:15 +0000
Manifest next update:     Wed 22 Oct 2025 07:01:15 +0000
Files and hashes:         1: Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl (hash: pUmng08X224kRzGDB9xVIlhBMHwVz0IObPE4MAKozec=)
                          2: Ga3e6QHsTUZGTikjmdN4xgpIHeY.roa (hash: P6IjosmlOiqXveubqIomO6KehA4R0g/PyjiODsr89zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 07:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:05:92:74:25:fb:6a:89:98:ef:de:ea:6a:8d:ad:43:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f91ff671f1de5143aa21a008e26e27946ab85d
        Validity
            Not Before: Oct 21 07:01:15 2025 GMT
            Not After : Oct 22 07:01:15 2025 GMT
        Subject: CN=9641ab048fa95547276d3e8dc547cf94f3e5f262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:bd:cc:ff:9d:b9:7d:69:a5:f8:3b:fe:97:
                    90:f2:6e:00:fa:df:8a:93:c6:32:b7:99:62:70:13:
                    da:f3:98:a9:57:0c:21:53:90:05:bc:b2:f1:fd:1f:
                    62:b4:de:73:67:07:db:ce:3b:e2:79:be:ee:3a:f7:
                    e2:d6:ac:24:67:33:f9:e0:0f:00:70:d9:fc:d0:ce:
                    90:21:cd:95:9c:ec:2c:2e:b9:a1:cf:aa:e2:b6:90:
                    35:9b:1f:4d:e2:33:0a:9a:09:6c:f2:07:bd:2e:a1:
                    c7:06:5d:0b:68:c5:28:fc:ea:0c:bf:4a:a9:c1:1f:
                    19:b5:15:9f:32:3b:cc:0a:aa:8f:46:cc:00:74:2e:
                    7b:f1:ea:09:bc:1c:44:75:f1:d3:cd:cc:35:4e:ad:
                    68:92:83:97:8c:0b:7a:1a:c6:18:b7:46:43:b2:19:
                    b4:82:a5:fa:1f:78:80:27:50:6a:90:cf:5d:56:75:
                    f8:b1:ca:c2:0b:c7:28:fe:61:64:c6:2d:e3:dd:ac:
                    6b:88:fa:85:f2:e1:d1:35:ea:57:1c:56:54:b9:cd:
                    77:89:b5:fe:cb:03:21:ac:c6:ad:f2:28:03:ab:b8:
                    18:4a:82:00:f1:08:e2:40:0b:b6:59:95:be:b8:be:
                    2b:f0:d8:b8:47:6d:a0:5b:40:0a:a8:15:61:c6:ea:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:41:AB:04:8F:A9:55:47:27:6D:3E:8D:C5:47:CF:94:F3:E5:F2:62
            X509v3 Authority Key Identifier:
                keyid:16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b0:25:40:97:48:45:40:7b:06:25:ba:42:19:fd:80:71:ea:
         15:22:e0:e1:29:08:a2:d2:04:e0:32:3c:5c:76:7c:7b:5a:50:
         8f:17:89:61:7b:c2:cd:65:14:ab:6f:af:01:cb:64:cd:d9:a6:
         69:f7:6f:c3:73:dc:67:bd:08:de:cb:ce:01:1e:92:2d:16:66:
         e5:48:f9:c6:6c:58:e3:5d:3a:31:25:e2:ea:9b:b6:39:35:b8:
         14:62:ff:0d:53:27:81:af:47:12:e4:7b:34:99:a1:b4:17:f7:
         91:3a:6c:c2:20:6c:b8:4f:ba:5c:b1:9b:c8:83:21:a9:e8:d9:
         be:62:c5:55:98:bb:5e:dd:6e:4f:cd:2f:27:b2:7a:ef:62:ac:
         1d:ad:cf:ca:87:d7:16:d4:15:da:98:50:f1:d6:d6:43:66:62:
         5b:90:b7:a0:c8:a1:2b:72:e8:de:54:11:39:72:f1:63:00:ae:
         bc:b6:9a:ee:8b:7c:d3:ff:fd:d2:47:da:65:19:09:a6:f6:ca:
         ad:56:09:27:4f:44:6b:5a:ef:7a:4b:87:b1:40:3e:20:03:fd:
         21:cc:32:9f:f0:d8:fb:12:1f:59:ff:fa:ca:bb:d7:42:ec:8b:
         83:7a:77:ba:1b:05:74:b8:58:70:3e:78:ff:92:18:84:5d:95:
         57:2f:a6:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoFknQl+2qJmO/e6mqNrUPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZjkxZmY2NzFmMWRlNTE0M2FhMjFhMDA4ZTI2ZTI3OTQ2
YWI4NWQwHhcNMjUxMDIxMDcwMTE1WhcNMjUxMDIyMDcwMTE1WjAzMTEwLwYDVQQD
Eyg5NjQxYWIwNDhmYTk1NTQ3Mjc2ZDNlOGRjNTQ3Y2Y5NGYzZTVmMjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp69zP+duX1ppfg7/peQ8m4A+t+K
k8Yyt5licBPa85ipVwwhU5AFvLLx/R9itN5zZwfbzjvieb7uOvfi1qwkZzP54A8A
cNn80M6QIc2VnOwsLrmhz6ritpA1mx9N4jMKmgls8ge9LqHHBl0LaMUo/OoMv0qp
wR8ZtRWfMjvMCqqPRswAdC578eoJvBxEdfHTzcw1Tq1okoOXjAt6GsYYt0ZDshm0
gqX6H3iAJ1BqkM9dVnX4scrCC8co/mFkxi3j3axriPqF8uHRNepXHFZUuc13ibX+
ywMhrMat8igDq7gYSoIA8QjiQAu2WZW+uL4r8Ni4R22gW0AKqBVhxuohoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZBqwSPqVVHJ20+jcVHz5Tz5fJiMB8GA1UdIwQY
MBaAFBb5H/Zx8d5RQ6ohoAjibieUarhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wOTY5NTEtZDU3My00Y2VlLTk1Zjkt
YWE4NWE4YzBhZWMxLzEvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wOTY5NTEtZDU3My00Y2VlLTk1ZjktYWE4NWE4YzBhZWMx
LzEvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrAlQJdI
RUB7BiW6Qhn9gHHqFSLg4SkIotIE4DI8XHZ8e1pQjxeJYXvCzWUUq2+vActkzdmm
afdvw3PcZ70I3svOAR6SLRZm5Uj5xmxY4106MSXi6pu2OTW4FGL/DVMnga9HEuR7
NJmhtBf3kTpswiBsuE+6XLGbyIMhqejZvmLFVZi7Xt1uT80vJ7J672KsHa3PyofX
FtQV2phQ8dbWQ2ZiW5C3oMihK3Lo3lQROXLxYwCuvLaa7ot80//90kfaZRkJpvbK
rVYJJ09Ea1rvekuHsUA+IAP9Icwyn/DY+xIfWf/6yrvXQuyLg3p3uhsFdLhYcD54
/5IYhF2VVy+m4w==
-----END CERTIFICATE-----
Generated at Tue Oct 21 18:14:03 2025 by rpki-client