Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File:                     C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier:          ohk+K+9oLMVvGcTv4+403JSUw9pDqH9nbtPZNscj9pA=
Subject key identifier:   16:45:A9:F5:42:0F:4B:D7:BD:CC:5C:BC:35:69:CA:C3:23:1D:74:55
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer:       /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial:       0199FEB4D8D8B0882C247527B879E2A61ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number:          03C4
Signing time:             Sun 19 Oct 2025 23:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:28 +0000
Files and hashes:         1: 1-l_gre_pxhYS4_zZwDxZG1Nt_5c.roa (hash: 79+LUQppQGCR1ma6gkDs/MxaDYgg8iUK7GVvWKXvzJ8=)
                          2: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=)
                          3: 5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa (hash: xzEHQ5rCOad65DlaTD/0zOgecwAYSd4+GjZ0k61Ou6I=)
                          4: 6YJjObW1_CPDgXKpHS-TcyIptqo.roa (hash: jjGiP1pdwyr2zLGuJkHaIJCjcU/oN7YWkJKwf34n+BE=)
                          5: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: 76inmKbEnssUY02HSlEeLR6wrx/devlx7LsjCpBrDQM=)
                          6: DOAEIvCj-u7rs38MBt2OY5TO5ck.roa (hash: L2KlUD/3hwbtTHy39+u/XA4u/e4Wc7hTiaNnBwb1Xl8=)
                          7: E0upJVXmvrb9QB1vHUoxxOXLw38.roa (hash: 4mhxGqIUoY4Bc+dX0kK4RcxfBAsMjNcaP7xXT7MwJUE=)
                          8: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=)
                          9: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=)
                          10: QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa (hash: B0QgrQfgkvXm7vAQLsl/pTmN0f26n576ETmzI38WdjE=)
                          11: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (hash: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=)
                          12: U8Lz-woBuayQCxonI-hxDcK01_Y.roa (hash: 418Oc771TIXqLSF+QH4I7VyOD2EV9+QkDmHN3kvRN94=)
                          13: UoCD-Jw-d36aunkLRuz6ly1x2v0.roa (hash: IL5ej7uIEFxvULFt7FLIix+P1FPdxsPj2Yas43tG1o8=)
                          14: XKsWSdLhRTm8gjvClV_GNNpoCtc.roa (hash: KzhS3En/I42C0iMadSwm0isXBogBsqCsvnDb64RYfSg=)
                          15: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=)
                          16: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=)
                          17: bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa (hash: 1S0gGuFvbVkAU0skMefR3m5Pq9v5mIgplTKpElL9/XI=)
                          18: i9pP0UdC60SIkPjAyVnRvnkLQpI.roa (hash: DCLA36TFrAK5MuagUyc5DT4JGQhrH1BUGZII4pznSfI=)
                          19: lO1MSRjPmSLDkgv8jGt5ktPBHoc.roa (hash: og5imLvn3cUBwDvPoHiD1z3A3c1NAGRPK9XyazGlNpE=)
                          20: lzUrfdjvi4X0daNPvReXYlaxfUs.roa (hash: mmPPsLggwrEErlARtsPqmojwc7jNfBJKDlKr0vM/KnA=)
                          21: mFwXB_3EhYgPmb02XlkNrRIYAks.roa (hash: +phEwBPGNbWcGWHb9f7x0gtZyCJo2VWruE9fcfo0yZQ=)
                          22: mrriTsp_r84VvXOZ9vwCDiafNfA.roa (hash: 237ftlrT6P/fqAsRok2Wq3N6bqs/PXVVGhXC7gyjJzY=)
                          23: pPTTLhksK7v4ipvrbQpEGSDbgjk.roa (hash: o2I/GTIezXoCE5dcTj8iZrNN0OoZ4v7wD/kJ0bQOHoc=)
                          24: qa2CW4uODzDkm2CmPACzVMfywlo.roa (hash: hm7X8GWW08mhXHAmgZF26ZoPtjwf8VScQbQBIGqBTN0=)
                          25: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=)
                          26: tVTdYwnYYp3b_eUhbVSQRQeadEU.roa (hash: 4Nl3NSw+3Qg0hgNeV3S8TaiNWf3yjru7QAcwwQS9RII=)
                          27: tra90j-TkDoNhw2jYUOuCLQtLHQ.roa (hash: rMHYa+7snR9OTOD/IZ29XHnehX6LzLjK9r4pNKm+rGM=)
                          28: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=)
                          29: wPGbhSOTVO3W6IHlbrSy3bcGNLc.roa (hash: JCi40r9Uzz4ur2p29IZ7AQpEQaCcaPWxmQf31vmLka0=)
                          30: xHqvlNpd7IJ2_bWmni8VAvmQhSo.roa (hash: RLG5JtYf55FcGjS6lNHNnXjb7AxYPOv8Xo1vraqegr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:d8:d8:b0:88:2c:24:75:27:b8:79:e2:a6:1a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
        Validity
            Not Before: Oct 19 23:01:28 2025 GMT
            Not After : Oct 20 23:01:28 2025 GMT
        Subject: CN=1645a9f5420f4bd7bdcc5cbc3569cac3231d7455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:51:2f:29:14:d0:a7:1f:59:4b:96:ec:5e:93:
                    9c:76:c8:f7:f6:dd:67:f9:90:4b:6f:cd:ad:05:40:
                    b4:f0:20:d6:11:b1:30:dc:27:de:74:aa:82:78:37:
                    3f:e0:c6:3f:93:a2:a6:5c:60:2a:fa:b1:70:0e:4e:
                    cd:d2:e8:06:31:95:8a:7c:42:37:7d:56:e7:28:09:
                    fb:b8:2c:87:b6:bb:dc:81:d7:c7:5f:c6:3e:f1:6f:
                    79:41:34:7f:15:fa:b2:59:d0:a9:aa:1d:4d:7c:03:
                    aa:a3:cb:72:3c:20:6b:31:51:22:e0:15:5e:70:eb:
                    d1:46:67:e2:33:e5:4a:c8:ca:6a:f2:7c:f4:47:fc:
                    0e:1e:10:cb:ae:9c:42:25:a3:4c:a2:56:01:68:6f:
                    b1:52:56:64:24:f0:5c:96:bf:a1:1b:be:0e:03:69:
                    2b:5f:18:9b:2f:ea:b8:d7:b4:88:4f:66:60:79:e4:
                    60:b4:1c:ca:07:61:98:3b:2f:80:5e:32:33:a1:6c:
                    ad:dc:d5:7d:a4:de:91:79:db:ea:9e:7b:02:95:fc:
                    84:b2:cd:3f:d4:70:78:41:52:b1:ca:0c:64:ae:c7:
                    d0:53:52:85:41:84:60:80:1d:61:ca:ce:2d:18:cf:
                    bf:6a:5d:8d:fc:c7:e0:96:93:4e:9a:c5:b6:77:1d:
                    5e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:45:A9:F5:42:0F:4B:D7:BD:CC:5C:BC:35:69:CA:C3:23:1D:74:55
            X509v3 Authority Key Identifier:
                keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:50:38:2d:b0:a2:6a:f4:b3:28:a0:e9:05:e3:b1:27:8d:ca:
         3c:3e:dd:50:4d:3b:12:e2:6f:c3:75:18:b4:d2:c6:bd:8b:47:
         bc:41:f2:97:0a:80:9a:fc:06:14:05:f4:64:57:99:0a:77:03:
         fe:6b:c6:a2:ba:47:8f:cb:90:69:73:28:89:9d:dc:e1:d8:2a:
         db:ee:19:a4:5c:88:77:e0:bb:55:68:81:5f:83:46:a6:1e:86:
         07:61:85:a1:c5:87:4b:54:d4:e8:96:4f:25:a2:33:3b:2f:ff:
         a2:9b:ed:83:9f:c4:9e:fb:74:e5:ac:27:1d:1e:9e:cf:9b:37:
         37:cc:ff:b9:1b:60:a3:8a:21:4d:70:77:01:e4:bf:c1:b0:b7:
         4c:ed:a9:b5:91:af:f4:37:e2:17:f5:81:45:58:51:4a:74:4a:
         80:a4:cf:42:01:05:e1:56:9c:a6:b1:7a:15:e3:0e:7e:57:bb:
         0f:5b:4d:c9:a0:a1:2c:c7:b1:db:4e:17:13:e0:64:37:50:46:
         61:f2:9c:a0:12:61:f6:c1:04:24:04:da:fa:f1:10:5f:e9:26:
         9e:b1:29:f0:cc:6e:53:bb:bc:c4:11:3c:14:5e:b1:85:25:57:
         1e:50:cd:5b:15:5f:cf:7d:f8:36:19:22:d3:30:12:ec:d8:da:
         c4:95:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:37 2025 by rpki-client