Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File:                     0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier:          AGeLKyOs6V7CLNuyjKlJJBufvK9bh12cDOXLUpiJPN4=
Subject key identifier:   4D:8B:0C:46:D5:FC:FF:78:D0:08:53:77:24:D8:8B:AD:E5:7D:EE:94
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer:       /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial:       019A04116252F4C38DBC68D74414E2206AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number:          16EA
Signing time:             Tue 21 Oct 2025 00:00:39 +0000
Manifest this update:     Tue 21 Oct 2025 00:00:39 +0000
Manifest next update:     Wed 22 Oct 2025 00:00:39 +0000
Files and hashes:         1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: 8rljmUhk2UhYF82A0pX4yjwRX71Ge3J9I6tpcqSv+Kw=)
                          2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
                          3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 00:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:11:62:52:f4:c3:8d:bc:68:d7:44:14:e2:20:6a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
        Validity
            Not Before: Oct 21 00:00:39 2025 GMT
            Not After : Oct 22 00:00:39 2025 GMT
        Subject: CN=4d8b0c46d5fcff78d008537724d88bade57dee94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:e8:33:96:50:57:1c:9f:01:ba:87:80:cb:
                    b2:0e:50:35:c1:e4:fd:a6:76:23:9b:1d:74:0d:87:
                    4c:d8:ea:0a:33:67:d2:09:6c:73:e9:30:39:e2:bc:
                    5e:3f:53:a7:75:e3:39:ec:cd:97:ec:2f:99:bf:32:
                    bd:d9:84:1e:fa:8d:48:9d:fb:83:3d:a4:f2:2a:c1:
                    ad:fb:29:8d:4f:71:b0:e4:93:11:c5:09:48:24:5c:
                    f4:a0:b5:f1:3b:47:f3:c5:7d:79:74:ce:ec:7e:ab:
                    85:e9:d1:05:a5:6a:c5:f5:68:65:46:74:9b:37:5d:
                    82:02:9e:92:90:73:00:80:c1:fc:60:bd:e7:3d:7a:
                    90:bd:40:1b:4d:87:9f:fd:c7:4d:eb:67:18:f2:ad:
                    eb:84:c2:bf:be:8b:76:36:27:8a:52:1e:94:5a:3b:
                    c5:fe:af:28:2a:20:02:e6:4f:4d:c4:0b:82:99:70:
                    00:a6:17:24:e5:46:53:c9:52:66:c8:76:5f:df:b9:
                    0c:b8:0f:d2:ac:71:3c:52:b5:be:79:4e:68:16:18:
                    a1:8c:88:97:70:15:6e:f9:f3:9c:6f:fa:f7:ba:af:
                    1b:f7:91:db:26:e0:e9:2c:4a:e2:43:7d:7c:5f:b3:
                    25:03:51:34:11:bb:77:10:3e:81:5c:02:c1:6a:27:
                    54:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8B:0C:46:D5:FC:FF:78:D0:08:53:77:24:D8:8B:AD:E5:7D:EE:94
            X509v3 Authority Key Identifier:
                keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d6:65:69:d3:63:94:aa:06:5e:c0:30:64:c0:fc:8d:f4:4a:
         90:68:07:3e:ad:a0:32:e3:be:ac:b9:f0:eb:a6:98:d2:95:82:
         f1:88:90:25:e9:eb:a3:cc:27:f8:fa:1a:7c:f0:f6:77:a6:61:
         e4:27:fb:24:9f:ac:c7:cf:fd:6d:cf:d1:a0:2e:7c:6e:f3:d5:
         5e:70:77:e4:b4:c9:41:db:a1:3f:18:ad:78:0e:a9:22:89:2c:
         5a:d2:93:e0:59:16:8c:63:c5:e9:f6:91:da:f8:fc:ea:ec:90:
         0c:4e:0a:f8:ae:4c:53:b2:e1:09:5c:22:d4:b3:25:63:34:8c:
         43:64:b1:81:76:f7:3e:5c:76:1c:27:24:66:8a:1f:e8:b9:38:
         a2:2f:72:20:c3:6d:47:8b:2e:b0:4e:4a:80:00:b2:fe:5f:5a:
         cf:a0:90:e4:46:f4:c1:18:ea:5d:95:40:d8:4d:56:ea:04:62:
         6a:90:7f:63:85:e8:04:76:41:ba:47:ba:79:3d:90:14:7d:fb:
         ea:d1:e3:a7:e5:90:a6:6c:d5:a0:7c:b8:20:09:7c:4f:b8:bb:
         a2:be:b3:9f:4b:90:40:be:10:e0:26:23:90:d5:05:f2:cf:55:
         8d:0d:42:c5:e1:a8:f2:f9:3b:4c:be:d8:3b:b3:87:30:1e:d2:
         02:be:06:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoEEWJS9MONvGjXRBTiIGq0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMDEwZGEzNTc2MjQyMzI0Y2VmYjJjODFjMTMzOWE2YzBl
M2I0MDMwHhcNMjUxMDIxMDAwMDM5WhcNMjUxMDIyMDAwMDM5WjAzMTEwLwYDVQQD
Eyg0ZDhiMGM0NmQ1ZmNmZjc4ZDAwODUzNzcyNGQ4OGJhZGU1N2RlZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwHoM5ZQVxyfAbqHgMuyDlA1weT9
pnYjmx10DYdM2OoKM2fSCWxz6TA54rxeP1OndeM57M2X7C+ZvzK92YQe+o1InfuD
PaTyKsGt+ymNT3Gw5JMRxQlIJFz0oLXxO0fzxX15dM7sfquF6dEFpWrF9WhlRnSb
N12CAp6SkHMAgMH8YL3nPXqQvUAbTYef/cdN62cY8q3rhMK/vot2NieKUh6UWjvF
/q8oKiAC5k9NxAuCmXAAphck5UZTyVJmyHZf37kMuA/SrHE8UrW+eU5oFhihjIiX
cBVu+fOcb/r3uq8b95HbJuDpLEriQ318X7MlA1E0Ebt3ED6BXALBaidUAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2LDEbV/P940AhTdyTYi63lfe6UMB8GA1UdIwQY
MBaAFNEBDaNXYkIyTO+yyBwTOabA47QDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAt
YTcwNDEyZmJjODMyLzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAtYTcwNDEyZmJjODMy
LzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptZladNj
lKoGXsAwZMD8jfRKkGgHPq2gMuO+rLnw66aY0pWC8YiQJenro8wn+PoafPD2d6Zh
5Cf7JJ+sx8/9bc/RoC58bvPVXnB35LTJQduhPxiteA6pIoksWtKT4FkWjGPF6faR
2vj86uyQDE4K+K5MU7LhCVwi1LMlYzSMQ2SxgXb3Plx2HCckZoof6Lk4oi9yIMNt
R4susE5KgACy/l9az6CQ5Eb0wRjqXZVA2E1W6gRiapB/Y4XoBHZBuke6eT2QFH37
6tHjp+WQpmzVoHy4IAl8T7i7or6zn0uQQL4Q4CYjkNUF8s9VjQ1CxeGo8vk7TL7Y
O7OHMB7SAr4GAw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:40:01 2025 by rpki-client