Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          /+M8GOSREQx0oaC7LW3DNQ8TWKxVKs9JqU1VIH6yKmk=
Subject key identifier:   AB:22:9D:29:78:84:90:E5:16:10:B8:1F:F2:10:27:FF:49:77:31:30
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       019A4EF432DD836D89B17D6FC405CEEB79A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          16FA
Signing time:             Tue 04 Nov 2025 13:00:17 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:17 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:17 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: 3y803dMWjGzzSuO48Z3AQPCzSby7Yy4insipRoXmq5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:32:dd:83:6d:89:b1:7d:6f:c4:05:ce:eb:79:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: Nov  4 13:00:17 2025 GMT
            Not After : Nov  5 13:00:17 2025 GMT
        Subject: CN=ab229d29788490e51610b81ff21027ff49773130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:b6:b1:09:42:37:3a:4f:6c:ca:04:83:6d:
                    bc:01:d5:ab:af:3f:fe:f4:84:c3:d8:b3:cf:13:a1:
                    a0:99:48:ae:36:ff:e6:ac:64:68:0c:7d:db:46:d9:
                    57:66:a3:06:5b:9a:5a:36:ff:43:e9:31:5c:0b:28:
                    c7:6e:3e:b3:a7:12:77:7a:29:fa:4f:e9:01:58:d4:
                    2f:c3:da:24:13:1a:d2:06:b7:9a:ca:69:7f:80:61:
                    73:c2:04:23:96:fa:62:ce:17:c3:54:41:c7:62:46:
                    06:ae:48:57:40:bc:2d:f0:22:77:35:c5:fe:6c:bf:
                    3a:87:bd:2e:02:2a:dc:16:ce:99:54:8c:0a:21:5c:
                    ca:e7:6a:2d:81:fa:58:a5:d4:20:0b:15:5a:e6:a4:
                    4a:26:a3:7b:fa:56:56:e9:d2:15:a9:ac:c6:3b:a6:
                    eb:75:5f:c1:77:58:eb:7d:2d:47:2b:03:7e:51:c2:
                    ec:c0:36:2b:c1:bc:4a:9e:bb:3a:56:a2:dc:99:e6:
                    83:15:e9:7a:89:fd:c6:8e:db:7e:e9:2d:83:82:76:
                    ef:f6:a0:f1:e7:fb:b4:3a:39:0f:3b:0c:4a:50:ea:
                    8a:20:be:d5:0a:89:8b:31:be:8d:6f:86:1f:37:bd:
                    fb:bb:11:66:e6:28:c8:b5:7f:12:19:04:8e:dc:26:
                    c0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:22:9D:29:78:84:90:E5:16:10:B8:1F:F2:10:27:FF:49:77:31:30
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:51:4b:92:b5:ef:9d:b0:48:94:da:be:52:39:c7:bf:f6:39:
         e5:64:b2:ba:d2:e0:52:22:ae:4a:bf:e3:bc:fd:19:f8:c6:f9:
         e5:d8:95:56:85:35:b9:cf:bf:34:4a:55:1f:7c:68:e7:13:93:
         ab:38:8a:e8:92:5a:b6:78:10:2e:fc:80:f1:68:05:d9:6b:76:
         23:08:9b:56:9b:ef:5f:6f:ab:23:ef:ab:cf:5d:98:9b:cb:28:
         f6:84:7f:71:c2:27:19:d0:3b:83:60:db:19:88:46:c6:78:8a:
         bb:e0:aa:d2:41:0d:0e:6e:5f:41:1d:18:50:48:ce:e0:c5:c5:
         d3:b6:22:6a:a0:d0:16:ce:11:8a:30:3d:11:10:ff:b1:26:20:
         01:2c:69:d5:9d:6e:ce:15:c8:a0:13:b5:53:f5:5b:29:56:f6:
         c7:a0:67:3e:b3:ec:ef:1d:bd:af:54:e9:4a:ad:c7:16:05:52:
         65:d3:2f:63:aa:b1:b7:a9:00:e6:ff:ae:c4:b4:ac:81:8f:7b:
         5d:84:71:cf:a6:38:ad:75:a3:8d:cd:23:38:ff:f7:bb:77:58:
         e1:e5:a0:be:ef:4e:1c:da:fc:1e:eb:57:16:ea:12:e5:ea:c3:
         b9:7a:9f:8d:70:2a:1f:04:72:df:48:7e:09:0b:80:ab:2f:e6:
         b3:97:59:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DLdg22JsX1vxAXO63miMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZTRjNDk3NWQyNjBkOTdiMGQzM2M0ZDZjZDBkNTg3ZjEw
YzIyYTAwHhcNMjUxMTA0MTMwMDE3WhcNMjUxMTA1MTMwMDE3WjAzMTEwLwYDVQQD
EyhhYjIyOWQyOTc4ODQ5MGU1MTYxMGI4MWZmMjEwMjdmZjQ5NzczMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYO2sQlCNzpPbMoEg228AdWrrz/+
9ITD2LPPE6GgmUiuNv/mrGRoDH3bRtlXZqMGW5paNv9D6TFcCyjHbj6zpxJ3ein6
T+kBWNQvw9okExrSBreayml/gGFzwgQjlvpizhfDVEHHYkYGrkhXQLwt8CJ3NcX+
bL86h70uAircFs6ZVIwKIVzK52otgfpYpdQgCxVa5qRKJqN7+lZW6dIVqazGO6br
dV/Bd1jrfS1HKwN+UcLswDYrwbxKnrs6VqLcmeaDFel6if3Gjtt+6S2Dgnbv9qDx
5/u0OjkPOwxKUOqKIL7VComLMb6Nb4YfN737uxFm5ijItX8SGQSO3CbAxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsinSl4hJDlFhC4H/IQJ/9JdzEwMB8GA1UdIwQY
MBaAFO7kxJddJg2XsNM8TWzQ1YfxDCKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2Mt
NDMyZDNmYjBmYzIyLzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lODRiZmMtOGEzNi00NDA5LThkY2MtNDMyZDNmYjBmYzIy
LzEvN3VURWwxMG1EWmV3MHp4TmJORFZoX0VNSXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFFLkrXv
nbBIlNq+UjnHv/Y55WSyutLgUiKuSr/jvP0Z+Mb55diVVoU1uc+/NEpVH3xo5xOT
qziK6JJatngQLvyA8WgF2Wt2IwibVpvvX2+rI++rz12Ym8so9oR/ccInGdA7g2Db
GYhGxniKu+Cq0kENDm5fQR0YUEjO4MXF07YiaqDQFs4RijA9ERD/sSYgASxp1Z1u
zhXIoBO1U/VbKVb2x6BnPrPs7x29r1TpSq3HFgVSZdMvY6qxt6kA5v+uxLSsgY97
XYRxz6Y4rXWjjc0jOP/3u3dY4eWgvu9OHNr8HutXFuoS5erDuXqfjXAqHwRy30h+
CQuAqy/ms5dZzQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:14 2025 by rpki-client