Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File:                     Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier:          tuNrkkHykrrp8CbluRO/Llp/AGs2JoY9l47Yl8T2Rsc=
Subject key identifier:   46:3A:97:32:EF:BC:DD:63:BF:0C:F6:DB:38:36:CE:3A:C7:28:AA:57
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer:       /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial:       019A0CA6AE1C0A7CB15A71C76CE9D4F1628F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number:          16EB
Signing time:             Wed 22 Oct 2025 16:00:41 +0000
Manifest this update:     Wed 22 Oct 2025 16:00:41 +0000
Manifest next update:     Thu 23 Oct 2025 16:00:41 +0000
Files and hashes:         1: 2nLfLY9iuS0QWJUoxMXGuTVNh4Q.roa (hash: KGQN3KTkCEm9UO8mNAZfG4hkgxNjImc/0aUX1CErP0M=)
                          2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: XIc7xbHnOTnZ7wkQzh+5pVwzbwZ7G85aRdxRF8klWEM=)
                          3: OP_LxEh3lwkqqiARAnCPDgbwZFo.roa (hash: s8g9cGnm5CE4zgxAFLfWVnDVE/Wx0l3/tOuxqSeDbUw=)
                          4: Th0AzgJWNzEMUInk7IHPiBNTMFs.roa (hash: 0b9R/T23sDaiRJT9SmZqwKUiLRaB4TURwrsLOA1pG44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0c:a6:ae:1c:0a:7c:b1:5a:71:c7:6c:e9:d4:f1:62:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
        Validity
            Not Before: Oct 22 16:00:41 2025 GMT
            Not After : Oct 23 16:00:41 2025 GMT
        Subject: CN=463a9732efbcdd63bf0cf6db3836ce3ac728aa57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cf:ba:5a:05:87:a6:22:14:eb:27:0f:a0:29:
                    f9:bf:53:ba:78:35:b5:7d:19:ed:fc:d2:97:1f:94:
                    a3:cf:11:3d:c6:3b:d5:a8:51:95:a2:cf:0b:77:0c:
                    83:8e:61:d4:6a:5d:39:0a:76:fb:c4:2b:0d:c7:bf:
                    97:f5:66:b9:27:39:19:51:57:c8:2c:15:45:7b:36:
                    52:23:8d:a8:d5:e0:f1:0c:8a:e1:0e:c2:e4:58:c2:
                    7b:71:00:52:3e:a9:e6:a1:30:e8:e3:cc:7c:29:78:
                    3e:16:0b:12:95:ec:af:6f:01:5c:25:3a:cb:9c:d9:
                    65:66:ab:76:2e:67:32:d8:98:c0:d1:5c:ab:aa:00:
                    a1:84:bb:7d:eb:6f:ba:c1:9b:7f:7f:ba:54:e4:b1:
                    1c:d1:2c:40:f6:8e:9b:2c:d9:e9:d5:98:88:37:d5:
                    9c:3e:e0:1c:91:8d:6d:a6:16:99:3a:71:ab:47:4e:
                    c5:a3:9b:38:83:e6:da:3c:99:07:7a:9b:af:0d:e2:
                    1e:db:b6:35:6f:e4:0b:4b:2b:3a:32:6c:35:ee:1f:
                    d0:d2:c0:d8:3b:81:e3:ff:a7:80:9c:b6:2a:23:e5:
                    1a:2b:a2:c5:05:72:fa:28:16:47:6a:e9:fa:35:76:
                    cd:9e:05:13:66:ab:d6:91:a5:0d:f6:56:0c:ab:e0:
                    b1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3A:97:32:EF:BC:DD:63:BF:0C:F6:DB:38:36:CE:3A:C7:28:AA:57
            X509v3 Authority Key Identifier:
                keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:64:8f:53:c2:d9:ce:35:c1:48:ee:72:05:45:cb:74:23:e9:
         49:2e:95:c5:b3:e2:3d:5f:b5:4b:80:d2:36:32:40:fe:04:a8:
         3e:11:7c:a5:f3:21:c3:6d:b8:69:09:05:eb:27:50:3b:6e:fc:
         73:02:84:75:03:f1:2e:94:c7:90:e1:7f:5d:4e:90:2e:37:ab:
         78:fe:0d:24:9d:7a:21:93:67:c4:c9:7d:4e:9d:8d:4c:12:91:
         8c:6f:26:8c:70:f3:41:d9:1e:93:b4:79:ae:ba:88:e0:85:18:
         dd:66:ad:f8:39:19:5c:32:f0:e8:28:5c:27:72:3b:c6:82:5f:
         28:34:83:7f:d9:6d:19:6a:aa:9d:17:de:40:aa:f1:74:3f:c3:
         7a:66:c6:81:eb:47:13:7c:86:0f:2a:74:43:ac:cd:b0:56:dd:
         30:e0:4b:a7:97:11:3d:ab:68:7f:69:9e:71:4f:8d:56:0f:07:
         ad:f0:b1:28:eb:15:25:1a:3b:79:ff:36:9e:80:5d:90:d8:52:
         7e:79:e6:db:b4:4c:08:f7:4d:0e:15:ba:5e:4d:46:96:26:24:
         02:a3:50:77:d2:f5:63:77:31:1b:da:db:34:41:38:7a:0f:8c:
         0c:ee:68:69:dc:29:d6:16:51:b4:ab:2d:a5:6c:06:df:b5:b8:
         bc:c2:a7:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMpq4cCnyxWnHHbOnU8WKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzdhY2QxMTJmMWM2YzgzM2JlYzIyZjhiNTNjYzcwZDIz
OTA4NzYwHhcNMjUxMDIyMTYwMDQxWhcNMjUxMDIzMTYwMDQxWjAzMTEwLwYDVQQD
Eyg0NjNhOTczMmVmYmNkZDYzYmYwY2Y2ZGIzODM2Y2UzYWM3MjhhYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM+6WgWHpiIU6ycPoCn5v1O6eDW1
fRnt/NKXH5SjzxE9xjvVqFGVos8LdwyDjmHUal05Cnb7xCsNx7+X9Wa5JzkZUVfI
LBVFezZSI42o1eDxDIrhDsLkWMJ7cQBSPqnmoTDo48x8KXg+FgsSleyvbwFcJTrL
nNllZqt2Lmcy2JjA0VyrqgChhLt962+6wZt/f7pU5LEc0SxA9o6bLNnp1ZiIN9Wc
PuAckY1tphaZOnGrR07Fo5s4g+baPJkHepuvDeIe27Y1b+QLSys6Mmw17h/Q0sDY
O4Hj/6eAnLYqI+UaK6LFBXL6KBZHaun6NXbNngUTZqvWkaUN9lYMq+Cx5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEY6lzLvvN1jvwz22zg2zjrHKKpXMB8GA1UdIwQY
MBaAFAJ3rNES8cbIM77CL4tTzHDSOQh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQt
ZDk2NTU5ODc4NzRhLzEvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yYzBmMGItNzgzMS00MWQzLTkxNmQtZDk2NTU5ODc4NzRh
LzEvQW5lczBSTHh4c2d6dnNJdmkxUE1jTkk1Q0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWSPU8LZ
zjXBSO5yBUXLdCPpSS6VxbPiPV+1S4DSNjJA/gSoPhF8pfMhw224aQkF6ydQO278
cwKEdQPxLpTHkOF/XU6QLjereP4NJJ16IZNnxMl9Tp2NTBKRjG8mjHDzQdkek7R5
rrqI4IUY3Wat+DkZXDLw6ChcJ3I7xoJfKDSDf9ltGWqqnRfeQKrxdD/DembGgetH
E3yGDyp0Q6zNsFbdMOBLp5cRPatof2mecU+NVg8HrfCxKOsVJRo7ef82noBdkNhS
fnnm27RMCPdNDhW6Xk1GliYkAqNQd9L1Y3cxG9rbNEE4eg+MDO5oadwp1hZRtKst
pWwG37W4vMKnFQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 19:06:34 2025 by rpki-client