Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
File:                     2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json)
Hash identifier:          dKlzhqHvXpn7ocVRn8PBRxhq8P6Ul3B39XNnGCH5cq4=
Subject key identifier:   2D:1A:31:B4:6A:B9:5C:57:5A:7F:0F:C9:86:7B:2A:8D:F5:3C:5A:ED
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Certificate issuer:       /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial:       019A00DA564DBBC2724BC0B9A910D2D457CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
Manifest number:          10F1
Signing time:             Mon 20 Oct 2025 09:01:40 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:40 +0000
Manifest next update:     Tue 21 Oct 2025 09:01:40 +0000
Files and hashes:         1: 1sKE36lDWeWUjMSloo6n26lQvxE.roa (hash: 0YFmLsRRla2daPn9GavHfi/iWCjcjVBR51fAM/YzUPA=)
                          2: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: WFPaX142G/RNvWUQbI3J2KApgRa21qcujqv7A+UmV2M=)
                          3: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (hash: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=)
                          4: 8GeGNNzjzZvJIEAAhJi9tW2bbrA.roa (hash: Eto9TySCaxnkkdyIGeX6PMXh8s89OGTNecNbv02FHmY=)
                          5: BinZKeyg5gKkO8gwYJ0Ze8CeRxs.roa (hash: y9nENbUlBNsJYj+Cw11EQBzVD35m8OwMSWBUyRfdWao=)
                          6: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (hash: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=)
                          7: JS3mwrKoM_bu1YlMg44SqBJyzi4.roa (hash: FctYPf15GQv8egu27KZUZZfAkIishBp5/PDkotJF9Wg=)
                          8: ZH0QvaHOPvJPYEbUbSGF-chYfuI.roa (hash: GNpLUKAR49JusHGuTxHkn0FssgkY3qDBV+p8eW6v2dA=)
                          9: biowetcg3ehch8_ZT-Bjgdr3xVQ.roa (hash: +3UkGpMA2we3DWKym0QAg124Kd/FTF+tUn4YLgIyHpE=)
                          10: gmGmlBXuT4XMadwFIMM_Ru7A8rY.roa (hash: C02/amx+lTSpWSc0IFfRlXGRMUsC7V5LK9TrUNGhpXk=)
                          11: j0duG-Ijddau9Fj9XQZGhj9d5E0.roa (hash: jAtA5pws2q4wQ+M2hNZZyClsEg5rjHmu2VOiOpDAE88=)
                          12: mP8Qz54E01SquciLEGB10XN2R-M.roa (hash: TdXFl7ZveLTgT4OrOlqkJ84pFNT0T+LUDZ5933YP0mE=)
                          13: suXcRzS6-_4AE_w0ZJlYPW8wMRM.roa (hash: +PBYO+10etR0ZMMQ1FwMVF/GjPtirIZFSfWGb9cD2rU=)
                          14: yRlATHfw4VPtk07WpZ6YJCL0ujk.roa (hash: qFhl3+M+zqPL0w/p5+UX5EFi+fLod6eaZpO9ZGTbXcw=)
                          15: yVFu2BG-2jPO42o54RBasvcduFQ.roa (hash: 6xPh274P2CTFpVhbpm7wdZ5x4IvYPBNr1EUV4XIfsgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:da:56:4d:bb:c2:72:4b:c0:b9:a9:10:d2:d4:57:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
        Validity
            Not Before: Oct 20 09:01:40 2025 GMT
            Not After : Oct 21 09:01:40 2025 GMT
        Subject: CN=2d1a31b46ab95c575a7f0fc9867b2a8df53c5aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:78:f8:6b:a9:9e:16:a1:0b:49:b6:7a:03:
                    5e:36:af:95:04:df:76:1c:19:81:f3:11:31:0e:39:
                    ae:ae:0c:43:51:c6:53:d3:c2:2a:6f:f9:94:4d:a2:
                    93:d3:a0:fe:87:df:c7:e2:ce:e9:90:e6:41:65:29:
                    67:87:83:d3:ea:12:0f:14:f1:a3:71:bd:00:de:38:
                    ad:91:50:39:83:ad:8c:d8:c3:4f:a7:b1:24:b0:c3:
                    61:e9:64:58:38:f0:fd:ca:58:5d:62:68:b9:ce:02:
                    35:a1:03:4f:65:36:22:1d:79:e3:cd:f2:13:eb:bf:
                    49:c0:c0:17:78:20:6b:31:bc:25:6d:22:01:40:8e:
                    14:bb:f0:06:e0:d3:52:d9:25:5f:d2:07:d6:53:3e:
                    a8:bc:46:22:41:e1:07:f9:56:c9:d9:fd:d1:57:bf:
                    1e:39:5e:20:6a:13:f2:c0:6e:5a:7b:a8:b2:40:9c:
                    1c:88:71:f0:e0:d6:da:2b:7f:93:c9:a3:d1:96:f8:
                    0e:94:0e:39:2b:77:bb:d7:69:11:f3:07:f8:eb:71:
                    4f:e3:35:0d:14:75:52:32:22:18:1a:53:04:c6:4d:
                    74:61:59:7e:9d:97:a6:a3:20:7d:b3:ec:2c:d8:16:
                    48:a0:61:fd:e7:4e:55:76:8d:71:98:a4:d3:0e:46:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1A:31:B4:6A:B9:5C:57:5A:7F:0F:C9:86:7B:2A:8D:F5:3C:5A:ED
            X509v3 Authority Key Identifier:
                keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:30:aa:3e:29:b2:d6:4c:a3:37:f3:3c:15:16:a9:cd:cb:90:
         9b:18:6d:9a:a9:5a:16:6b:cb:b7:e8:93:7c:21:01:33:c4:e4:
         47:46:1d:d7:d8:6f:95:c5:99:23:65:4e:0c:89:7d:f1:54:ed:
         af:12:e8:5f:3d:d1:eb:4f:1c:7d:e9:00:28:16:2e:2d:4a:29:
         69:b5:b3:0c:4a:0c:65:6d:54:ed:26:88:6a:8c:79:32:4a:74:
         9e:07:80:3a:ba:a8:95:ec:14:0d:a5:b4:bb:f8:a9:72:6f:c5:
         20:03:9a:75:64:85:a2:ce:d2:79:b5:b3:5a:7d:1b:10:2c:fa:
         7a:66:df:a8:ac:55:10:a5:bc:85:73:0b:cc:ce:70:5c:8a:4d:
         60:96:b4:43:b8:38:0e:8e:2b:94:50:9f:e3:f8:1d:98:18:ed:
         37:6f:d0:4c:c6:24:66:34:f4:82:82:12:3d:ec:47:38:bf:51:
         e4:5b:9a:7f:80:2a:c8:51:c3:f7:7e:ba:44:86:61:cf:f2:b5:
         31:f1:21:43:f1:97:00:df:bc:3c:22:e4:19:51:d4:6d:d4:40:
         5e:86:1b:65:5c:a6:54:ce:70:52:ce:96:bc:fb:c6:c1:c3:cf:
         3d:39:ca:fb:24:e9:e3:ea:1a:d0:36:ca:74:b9:57:da:ea:de:
         82:a2:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:48 2025 by rpki-client