Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
File:                     O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json)
Hash identifier:          NNr+hO5RJD2JjCRRmmj1qdL/WKPJwwomv7ElyUVTB40=
Subject key identifier:   04:57:6F:FE:83:33:E9:B2:D7:71:C2:44:0B:F6:E8:59:35:44:FA:2D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       0199FDD8EC7E3A38A1B082E2C117A3CB8359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
Manifest number:          18F0
Signing time:             Sun 19 Oct 2025 19:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:15 +0000
Files and hashes:         1: 1-4n255q-GmhvWguY8knOSWxwWOE.roa (hash: SpMPf2vIKuvnbl4s5E51poi38FquEwM10w09zg2yecI=)
                          2: 1Z8g0XZDgC2h6ZZiZGzR-pmBQXE.roa (hash: 7whK1SRZtYZ93wf2pg24GN/SH22buAO3qk0+HbEyWJg=)
                          3: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=)
                          4: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=)
                          5: 7nQ2lmMByBc9BzSe5MpXR-7PWQ4.roa (hash: WXh7yFtrWpyCzYsrsNrvVMrVdkxW0TyL4bbT6QwTD/Q=)
                          6: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=)
                          7: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=)
                          8: DiojNNQH08E8VT8z31hy5NWp8N0.roa (hash: hxWfnXr3HMo5cijkMcL7NHIRvQIwClyV18FZj70iFnY=)
                          9: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=)
                          10: FmAKBKd-PdNqMEGk2uZifaqmnrE.roa (hash: BK0SX5WkOOtWNPjitJ2TK5CAHUK5xcu0+wg05UjWy1g=)
                          11: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=)
                          12: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=)
                          13: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=)
                          14: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: 8oAaBDGbgcbze2v3hktXLV9BD2Cck5L60gWRM1SxzLk=)
                          15: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=)
                          16: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=)
                          17: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=)
                          18: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=)
                          19: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=)
                          20: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=)
                          21: YWHz3fxaOfoMOH5_cTNPFCF5TMk.roa (hash: dI7KHHPfreh/FH6NLvFMGzIK4XeoytI7/bZBWshxj+s=)
                          22: ZxbKXjnBPf3AnoMKuLNv8CQvpmQ.roa (hash: CzlDvM5gWYjkEKjDgesTwVDa95qQ0Cm38PaYGtwMPRg=)
                          23: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=)
                          24: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=)
                          25: d0QPUb9bw255FbDfGbVwKoJI6bE.roa (hash: jrR/WoS1SZ3m1OaPCDPsHF9pj1zBDeNV31JSvSAQwFQ=)
                          26: ejUJhdQv_gD6oiLYrzclBYzyLOY.roa (hash: GfeTAbqceyfp5+2gyCSPrzyUUUuMpH7hOe6M0SAay2Y=)
                          27: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=)
                          28: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=)
                          29: sCZs3Vv_mkmH1488b_8AOyu6O_A.roa (hash: IVmACBgQskh7opLtCDMMeiRu9ORobcLnBCvYU0Xoy8M=)
                          30: sIaFicGSLfWywofV-flOlj4BbEs.roa (hash: T3ig9ILGk20fQZ8i8xMsdIL3W6kPVu5G2DRrIA6L3QI=)
                          31: tGvaJqw-BkYv98JxwuYhGJMirKI.roa (hash: n1mCBZS2+2xEitKl9orN+eHu3AcNiwq8Xb6c6Ko5sAc=)
                          32: yEUQ_aJkjJZT7FqCL5XucJyCbH4.roa (hash: UhItDph40P0qmr9fzzHpHPa0fBJT60AEwUYsGPaQGNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:ec:7e:3a:38:a1:b0:82:e2:c1:17:a3:cb:83:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Oct 19 19:01:15 2025 GMT
            Not After : Oct 20 19:01:15 2025 GMT
        Subject: CN=04576ffe8333e9b2d771c2440bf6e8593544fa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:22:40:ca:14:b2:dc:97:7b:e9:4c:0d:9b:
                    62:b6:9d:94:b9:0e:4d:8d:f4:a6:0d:43:3c:c2:c7:
                    eb:e0:43:d2:25:a9:d3:eb:55:2f:98:8a:48:37:4a:
                    60:e9:89:27:25:14:af:6c:91:4d:35:9a:45:56:fa:
                    3f:bf:a0:b1:76:7a:fe:ee:f9:93:09:50:88:df:35:
                    20:b1:76:a3:f9:f8:c7:a9:36:e5:f6:94:cd:21:17:
                    fc:ee:c9:7b:4f:4a:6f:6e:39:77:9d:b1:00:49:be:
                    a1:55:75:06:e7:1c:ba:14:3b:46:37:72:09:83:12:
                    6f:19:d9:1e:e5:8e:94:b4:f9:fd:ba:63:e4:af:d7:
                    ea:ef:e0:c9:bf:57:ac:c2:81:0e:73:db:37:8f:f3:
                    43:44:2d:7a:9e:80:2f:ee:29:30:5d:d2:e0:32:9e:
                    0e:ed:07:13:54:03:91:5a:09:b9:d1:9c:9f:d8:c8:
                    c6:64:b6:38:80:ec:db:89:94:ea:bc:f4:d4:68:28:
                    f6:ed:c6:74:82:5a:76:d8:1b:86:8e:45:dd:d7:c4:
                    3b:64:8e:b9:ac:f3:d5:df:6f:1b:c4:58:58:fc:d1:
                    97:21:0c:14:82:fa:5d:4e:39:97:6b:98:ac:df:52:
                    e2:a3:47:5c:b5:58:4c:c7:03:48:f0:99:8e:c9:18:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:57:6F:FE:83:33:E9:B2:D7:71:C2:44:0B:F6:E8:59:35:44:FA:2D
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:4c:ea:d7:13:5a:b9:48:c4:74:77:ce:6b:2e:3a:78:ca:4d:
         b4:a0:42:41:c8:a9:85:c4:6c:91:b1:80:0a:ec:00:a3:1c:5d:
         43:f7:55:fc:ad:74:c6:09:26:ed:22:ce:57:0b:cb:1d:18:3d:
         25:de:47:cb:b5:3a:e4:53:8f:37:51:27:03:05:0d:d0:41:1e:
         8f:ab:03:f8:a5:8a:bb:6a:29:15:1f:7a:8c:14:0d:18:3a:82:
         04:dc:11:1d:10:64:7e:43:58:c2:d6:bd:73:9c:69:ab:40:0c:
         49:c9:17:69:22:58:8e:29:a6:73:ad:4f:a9:77:6f:6b:10:cd:
         6d:51:ee:4b:8d:e2:d3:56:a8:0d:f0:40:99:a9:7d:66:70:04:
         50:0d:d0:34:fe:4f:1e:80:b2:54:80:e8:90:76:70:62:0b:af:
         82:cc:da:0c:c9:a1:c8:48:10:75:cf:f1:22:a4:88:c7:7e:b8:
         84:72:2c:21:90:c5:28:91:07:a0:72:b4:3f:4f:10:f3:f9:98:
         8f:f5:40:0c:3e:60:12:c6:6e:fc:a9:9f:20:5f:13:6f:ef:33:
         5d:c2:11:f8:97:2a:31:85:5d:e8:e4:78:b8:6a:05:37:75:0d:
         39:7a:da:fe:01:8d:90:4b:88:b8:24:fd:04:1d:9c:58:23:bc:
         64:9e:8e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:08:10 2025 by rpki-client