Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File:                     bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier:          VIgfMQV3FOIIWuwl1ojtZ4JwGk/c8cVVCF5/tyQ9eKk=
Subject key identifier:   FA:FE:35:37:F9:F1:10:55:64:02:6E:D7:07:A7:A8:C0:76:6C:DD:A9
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       0199FFC86E042FD100F2D28C57B19BB79F70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number:          0A3D
Signing time:             Mon 20 Oct 2025 04:02:29 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:29 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:29 +0000
Files and hashes:         1: 1sTgJl3sTanwlgMRcn77_2dUJM8.roa (hash: vo2Vicdpq6fz2WwOWR4dxMKYZ8Z42zVAgbzJ2M75hlU=)
                          2: 8siXkxau2138dP6m5aJN0wtpHTI.roa (hash: GwsrPvPPt7Z/Ni79LEzNptMmMFygBlI/k5u7rDJcMQE=)
                          3: AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa (hash: VBK/s5fQa4YZQsAHU7WMS4ftCQ62G//BKKOQdCIew7A=)
                          4: DEkgt7AE1Iurv1gdgI4QOvTs29s.roa (hash: YYhF4Wk1OWCgiTiDwmzzUdGICChv/o9/RpFOj0wkgnI=)
                          5: EyhOhnS-dh85bLrIatnotrj633k.roa (hash: uaMbS52/Rq7xCKN1Go+BTPVuBTmDhRAWyG5p4TGatBI=)
                          6: Gfn1jwtlF8FRxL3Rz03Ea937VEE.roa (hash: RFgXaXGTO5AA2vd/LK/W065gZCsDh6ylVKtNqAJn6Qc=)
                          7: HU-EIhuZhffeHTr6oBxxd7aAP4I.roa (hash: dWetGyfBqetMsgtm2EjHhfWyWz5E9rrZ+ucVfb9UJfQ=)
                          8: QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa (hash: I4+1yKNsyiVB5SA6pW3mkOMGZ2Rt1t8pp1b96alaFKc=)
                          9: QnNCDuIZzZJfBF3ECszlCfF7nQw.roa (hash: 7YHX2znxxfS3ObXlB9bs5pQPuS62yS0sohOCK8USfs8=)
                          10: X6xEtdbtx-FA89KexAHlhM8onBA.roa (hash: rlVOKfCoCiEEfjhU6f0pemc0VZKNKC23+JgJYG4rtvE=)
                          11: a0c5tAP64rJrQGbTaO53HXEP4pM.roa (hash: UZ8YKqqX+S+lHueXoZZQjZ+yCy8BoEc9t2MsAApSiJI=)
                          12: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: 3mVMnXYaPV7pvxVK2xW/f8spH/SV6HzijRrbOUOjuGE=)
                          13: doqSreqZ0puIFaWYepjXsiORFJA.roa (hash: xuSkxml5vM8NDv68l6QOx0gv3YZ4+ZcGerX4dTq1v8c=)
                          14: hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa (hash: Vs4l1+koaU4BTtoLKZvO0IVoW3ur4SIH0UypyRQaGng=)
                          15: i0OpGL6o9siQU9k8jbmuQiPpOOw.roa (hash: jgZAPRJyPw+LpYm6mw4QOAGT6CLfAJ3m4VbuEluN/rg=)
                          16: jcQFU7Zk7-0Lbr1GReTX6bLuEPE.roa (hash: 6B+Zw0i1FE8WuG3O7mAFWms0Wi1ZgHxcSaTjZME1FJE=)
                          17: mYnhwnu7xK6th8xjixqpd0tj3F8.roa (hash: sG+spce3EPIId/QZOF+TJDOdXx28q2wnT9Bt9/T0FwE=)
                          18: oZj3kamLQ64qe41NAn79tJxrn3A.roa (hash: aQLWnTTQZBYLNZEs0bSmxS+Cx6vWjLj05WSdg5JVYgs=)
                          19: uID_AUaziSnLI0lAwJTwsfqCxRw.roa (hash: QtgKVOPT2HRLTAKe7wnPyZFAiV4EOv0IQt4AKIrv4xE=)
                          20: xu908d1x7ZZAyJSQllDU6MuExl4.roa (hash: lNKGrgJxnj6QPFbpQgdciCH/wYNErsT7dmA1/kh6l/c=)
                          21: yMOpAmqxqg0a6EDYQWzT4EavBvw.roa (hash: yicZ1paw2jc8xl9euKIWprR6Ij78FDs/LCEhj1EOd9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:6e:04:2f:d1:00:f2:d2:8c:57:b1:9b:b7:9f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Oct 20 04:02:29 2025 GMT
            Not After : Oct 21 04:02:29 2025 GMT
        Subject: CN=fafe3537f9f1105564026ed707a7a8c0766cdda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:29:48:2d:9d:3a:db:29:40:c6:c6:56:e9:
                    64:e6:69:33:d1:72:78:64:9e:50:af:ca:8a:bf:86:
                    02:45:fa:a9:21:6b:5a:77:14:73:65:db:d8:d2:ca:
                    9d:8c:56:03:a4:14:6d:3c:cc:09:c5:f6:c4:04:95:
                    85:e8:73:01:75:f6:3f:b9:19:15:65:99:76:8f:ef:
                    57:93:6c:00:00:05:7e:7c:55:0a:55:c9:55:46:8d:
                    16:ec:c5:c0:59:75:25:7e:c0:e3:6d:3c:e9:ee:a2:
                    85:42:7d:47:ad:09:bc:c8:17:f0:27:71:0b:e4:f0:
                    51:26:bb:f2:bb:46:02:0a:fa:e3:f1:90:d1:1c:92:
                    e2:f5:93:7e:30:43:fa:34:8d:7d:9a:88:51:ad:3c:
                    92:22:c9:ec:72:3f:35:b9:57:8a:90:0d:06:91:f8:
                    3c:8a:32:78:44:e9:4f:f5:5e:ac:39:9d:39:93:65:
                    44:96:86:72:7c:09:a9:9c:f9:bb:28:49:23:a0:56:
                    c9:ca:98:67:67:9f:52:b7:70:2d:e3:c8:38:71:c5:
                    20:19:91:57:4f:89:96:33:ec:59:34:52:1a:c9:64:
                    eb:9a:89:db:90:15:42:2f:02:05:e8:4f:dc:6f:b7:
                    5d:6f:34:7d:28:b7:5f:ee:9b:b6:b4:d3:69:96:d3:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FE:35:37:F9:F1:10:55:64:02:6E:D7:07:A7:A8:C0:76:6C:DD:A9
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e9:82:3d:b6:1a:6d:f4:34:7a:1b:ab:c7:38:47:95:d8:05:
         1d:3b:6a:0a:83:37:b0:07:1b:e3:1c:de:4c:88:5e:5b:cc:91:
         db:77:36:41:85:2c:06:af:c6:be:44:d9:27:66:b6:68:91:26:
         ba:d6:f0:4e:e8:7e:4d:3c:6a:0c:ed:39:1d:75:6e:db:b4:13:
         cd:02:2f:e8:43:a3:38:13:27:f1:06:c6:e6:f5:5e:a4:c0:4c:
         1e:c6:a8:d5:c9:bb:ec:16:09:17:d2:16:75:37:13:5f:82:10:
         09:88:f5:00:db:f3:84:ef:77:65:7e:37:06:ae:20:2c:e3:44:
         b8:0e:c2:07:78:18:66:14:32:ca:d6:e7:41:93:11:93:f3:e6:
         b0:13:96:20:02:a2:4a:33:9d:a9:a8:bb:19:1d:78:15:c8:59:
         43:3c:1e:3e:6c:dc:6f:7a:fa:66:ac:5f:f7:48:12:c4:df:c1:
         63:3c:9d:35:06:4f:56:b1:79:3b:9e:b3:4e:13:e9:74:15:fb:
         0e:b8:36:c8:ac:63:54:8d:35:fc:fb:eb:09:f6:31:bc:ee:89:
         8b:68:ea:22:ee:46:c1:5d:68:25:19:8f:55:9d:3a:c1:d0:60:
         4d:fc:f7:26:76:80:7f:4b:0f:30:3e:69:fd:e9:25:e2:90:0e:
         79:73:7c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:36:28 2025 by rpki-client