Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
File:                     cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json)
Hash identifier:          4osX1PrTTUcZe8fYPCpCCqDSpXPHD1DnRLsC9/b9UB4=
Subject key identifier:   16:74:1D:00:F3:B5:72:AA:A5:9E:DB:71:0B:40:AF:7F:32:D8:F5:A1
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Certificate issuer:       /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial:       0199FF901E6D82EADC32ACD5F467A823390B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
Manifest number:          10CB
Signing time:             Mon 20 Oct 2025 03:00:58 +0000
Manifest this update:     Mon 20 Oct 2025 03:00:58 +0000
Manifest next update:     Tue 21 Oct 2025 03:00:58 +0000
Files and hashes:         1: 1-DdA-do2aUnfFDViNUxhUDqFzbE.roa (hash: BKYK/ZWsPHxxlNPF0PEHOjs0OjsXKAGuBICEBJN+sBU=)
                          2: PquNLopkqyd1FPkE6lVSuFZAhHk.roa (hash: cueg/ECXevtubCCHF8NReS6so4hgNR13sPfAmLWyFN8=)
                          3: SKahOuz63VxzF7gsfLLtP4-dwsQ.roa (hash: tgpfEWxbjIJhXJgvlYzjtjMs+efIHb2DWjDR4Pl22YM=)
                          4: Y87LNPXwYxzM1KbDSMEARR-tLxU.roa (hash: Hc9P0WIM13wsCCDXXb34wAtaFccE9wg34ig8vLvBeGY=)
                          5: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: iLra8lSYb5eOmG99dWHzppmQJgz4ZL/y4VsQ91ROmcQ=)
                          6: dj7XdZh5KETFPQnDms3UxXnRXC4.roa (hash: EpSZ3YEAtJm35+lis2XvA9ik+aj1Kz53yBaF/oXDmdQ=)
                          7: nq4bzy4h6lHvAq7WfQfvLT3Lcxs.roa (hash: AUW0hCwolQea98JTwSo4ol+MpnG7tQ7XKxKB7k262zg=)
                          8: pnzGJ4U9axy4lLwZnaehAwpRVaQ.roa (hash: rLQUf7uZTpB79YDcuBoB9yRmzU3aEUgIa9XP7frMy3M=)
                          9: rIEcC1yrrtWRE_-aC4aiNaHlF0w.roa (hash: RIIBfBGrMJNxseu/gjjvLy+xu6nPcaesVv59+v9lv30=)
                          10: wF16Isbo0PTlUouJULLf9fQs6Jw.roa (hash: ujnMHiwDZPQLz7IHlGLCJr2Hydzywx1acJmP/oG/nU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:90:1e:6d:82:ea:dc:32:ac:d5:f4:67:a8:23:39:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
        Validity
            Not Before: Oct 20 03:00:58 2025 GMT
            Not After : Oct 21 03:00:58 2025 GMT
        Subject: CN=16741d00f3b572aaa59edb710b40af7f32d8f5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:5d:f0:82:33:72:2e:36:c0:0d:ff:40:55:
                    74:6a:52:46:2c:c0:7f:58:f8:f2:80:3c:4c:45:d1:
                    27:3a:3c:3e:9d:a1:3c:82:9b:c3:41:1a:b2:7d:80:
                    bf:1e:75:81:24:73:55:4e:ee:66:79:3f:3b:c7:2c:
                    45:9c:2b:86:68:35:57:8c:e8:29:40:e3:ee:c4:94:
                    f0:76:28:cf:1d:49:44:03:ba:ab:de:79:03:ff:78:
                    c9:bd:f1:ac:63:59:56:76:10:d2:04:9e:e3:cb:dc:
                    37:1f:88:2b:e0:19:03:f0:64:93:2a:04:62:c5:b0:
                    ff:73:90:66:be:43:66:4d:5f:76:cc:63:ab:ce:bf:
                    6b:12:06:e9:7c:78:8c:17:2b:1f:50:58:b4:c1:0b:
                    6e:06:a1:ee:05:af:b6:9e:55:21:e6:66:66:cf:c2:
                    dd:7e:dd:51:2b:ee:a5:58:89:51:f9:12:c8:3a:7d:
                    82:ae:91:83:1e:33:05:17:79:58:99:d2:e4:b8:33:
                    60:01:b1:dd:24:2e:bb:57:ae:10:8d:a2:ec:bb:10:
                    45:95:de:21:b3:c5:3e:2d:74:a5:cd:da:b0:51:0b:
                    63:b2:18:24:49:72:6e:6b:4f:a2:d7:d3:da:2c:e4:
                    dd:35:0e:99:0b:43:e2:c8:89:7f:d0:94:0d:8f:d0:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:74:1D:00:F3:B5:72:AA:A5:9E:DB:71:0B:40:AF:7F:32:D8:F5:A1
            X509v3 Authority Key Identifier:
                keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:81:45:66:37:43:1f:bd:78:eb:07:3b:ee:86:c9:2d:6a:9b:
         94:38:b1:12:a3:dc:b1:5e:a1:71:12:9b:bf:f5:a5:a4:dd:74:
         d1:16:ad:6e:41:e0:bc:5f:ae:49:1c:5c:a5:62:68:be:a4:01:
         79:88:bc:aa:8c:25:30:d8:4c:81:96:de:b7:4c:16:82:26:5c:
         fe:b0:73:15:60:5e:de:f3:5c:37:f1:30:e1:49:3b:0c:48:47:
         ca:23:49:61:5b:91:0f:84:15:11:f3:da:48:b7:59:bb:08:d2:
         a1:65:74:a4:0a:82:1d:17:b0:87:5d:80:f3:c7:23:22:f6:00:
         0c:16:23:64:54:3c:21:ad:f6:be:f9:15:32:94:f4:6a:8a:e4:
         82:ab:23:d1:fc:81:29:3b:25:fb:08:01:4e:8d:db:ba:c8:57:
         2f:da:95:ca:34:94:43:71:83:40:51:74:c1:73:61:0f:3e:43:
         b4:19:7b:aa:4c:22:ce:b8:b4:91:f4:91:b3:7e:0a:62:c3:77:
         e0:a8:34:b8:c8:1e:a9:56:0a:6a:58:47:38:78:df:5e:64:f2:
         cf:80:97:b9:07:f0:f0:a1:4e:58:01:20:c9:90:de:cd:4d:bc:
         fe:79:fd:e2:70:5d:3b:09:5f:26:6f:79:a4:ba:1d:48:57:05:
         47:d5:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:00 2025 by rpki-client