Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
File:                     O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json)
Hash identifier:          78udT9NX+UXiJlzqflS0MoZP/ONVEDhBv+Mz90USlQE=
Subject key identifier:   5D:1C:A5:8C:37:12:AB:29:50:2D:75:70:5E:81:1C:B9:93:1F:69:C3
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       0199FFC86E6CD06058DA39B26F95F1700974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
Manifest number:          18F1
Signing time:             Mon 20 Oct 2025 04:02:29 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:29 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:29 +0000
Files and hashes:         1: 1-4n255q-GmhvWguY8knOSWxwWOE.roa (hash: SpMPf2vIKuvnbl4s5E51poi38FquEwM10w09zg2yecI=)
                          2: 1Z8g0XZDgC2h6ZZiZGzR-pmBQXE.roa (hash: 7whK1SRZtYZ93wf2pg24GN/SH22buAO3qk0+HbEyWJg=)
                          3: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=)
                          4: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=)
                          5: 7nQ2lmMByBc9BzSe5MpXR-7PWQ4.roa (hash: WXh7yFtrWpyCzYsrsNrvVMrVdkxW0TyL4bbT6QwTD/Q=)
                          6: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=)
                          7: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=)
                          8: DiojNNQH08E8VT8z31hy5NWp8N0.roa (hash: hxWfnXr3HMo5cijkMcL7NHIRvQIwClyV18FZj70iFnY=)
                          9: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=)
                          10: FmAKBKd-PdNqMEGk2uZifaqmnrE.roa (hash: BK0SX5WkOOtWNPjitJ2TK5CAHUK5xcu0+wg05UjWy1g=)
                          11: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=)
                          12: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=)
                          13: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=)
                          14: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: dnLmHITmtso/ahXhHbvYWL5qmN8eF51vXzNpvtpVD7o=)
                          15: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=)
                          16: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=)
                          17: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=)
                          18: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=)
                          19: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=)
                          20: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=)
                          21: YWHz3fxaOfoMOH5_cTNPFCF5TMk.roa (hash: dI7KHHPfreh/FH6NLvFMGzIK4XeoytI7/bZBWshxj+s=)
                          22: ZxbKXjnBPf3AnoMKuLNv8CQvpmQ.roa (hash: CzlDvM5gWYjkEKjDgesTwVDa95qQ0Cm38PaYGtwMPRg=)
                          23: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=)
                          24: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=)
                          25: d0QPUb9bw255FbDfGbVwKoJI6bE.roa (hash: jrR/WoS1SZ3m1OaPCDPsHF9pj1zBDeNV31JSvSAQwFQ=)
                          26: ejUJhdQv_gD6oiLYrzclBYzyLOY.roa (hash: GfeTAbqceyfp5+2gyCSPrzyUUUuMpH7hOe6M0SAay2Y=)
                          27: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=)
                          28: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=)
                          29: sCZs3Vv_mkmH1488b_8AOyu6O_A.roa (hash: IVmACBgQskh7opLtCDMMeiRu9ORobcLnBCvYU0Xoy8M=)
                          30: sIaFicGSLfWywofV-flOlj4BbEs.roa (hash: T3ig9ILGk20fQZ8i8xMsdIL3W6kPVu5G2DRrIA6L3QI=)
                          31: tGvaJqw-BkYv98JxwuYhGJMirKI.roa (hash: n1mCBZS2+2xEitKl9orN+eHu3AcNiwq8Xb6c6Ko5sAc=)
                          32: yEUQ_aJkjJZT7FqCL5XucJyCbH4.roa (hash: UhItDph40P0qmr9fzzHpHPa0fBJT60AEwUYsGPaQGNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:6e:6c:d0:60:58:da:39:b2:6f:95:f1:70:09:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Oct 20 04:02:29 2025 GMT
            Not After : Oct 21 04:02:29 2025 GMT
        Subject: CN=5d1ca58c3712ab29502d75705e811cb9931f69c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:59:43:9f:66:1d:4f:42:62:a1:0f:a7:e9:
                    42:57:6b:e5:2f:45:9d:7c:9b:0f:47:be:73:cf:53:
                    2a:12:c8:38:1b:38:48:da:e9:ed:23:c4:ac:fb:d7:
                    bf:38:fc:64:68:8f:da:c0:09:a0:6d:04:27:b9:6e:
                    51:7c:2d:3c:6c:27:d1:4e:e4:17:d6:b5:fc:c2:7c:
                    28:eb:fa:83:2b:b6:80:61:8e:93:01:83:4b:c4:eb:
                    65:a7:bb:af:57:5e:05:5d:5a:88:0e:f4:00:5b:6a:
                    50:ae:9e:14:16:31:cb:cb:3a:e2:e4:96:19:e1:7f:
                    4d:3f:06:6d:42:78:d4:4b:d1:1c:5a:ca:fc:21:72:
                    7f:e6:10:cc:29:f8:7c:4b:bc:6a:5a:81:08:9a:e7:
                    43:fc:5e:07:e7:07:b6:bd:81:86:b5:d4:ac:f3:f9:
                    b1:10:67:d1:f5:f1:9c:42:44:d6:4e:8b:a8:fe:66:
                    7f:18:3f:56:cf:ff:1f:43:ee:70:e3:42:7a:76:b6:
                    10:57:e8:47:ed:e7:93:31:da:e6:bf:bd:23:af:e9:
                    c1:67:06:ea:d1:08:bc:ad:6e:f4:d9:e8:fa:6e:c2:
                    99:0b:8a:d4:89:1c:93:df:e2:1c:eb:45:9a:a1:08:
                    4b:c1:ce:0e:2d:f5:7a:33:5a:af:39:c1:e2:27:ae:
                    d0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1C:A5:8C:37:12:AB:29:50:2D:75:70:5E:81:1C:B9:93:1F:69:C3
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:04:89:d0:c9:78:25:7e:c8:5e:35:44:3a:d5:d0:32:e0:d6:
         3b:fd:c0:53:46:a7:34:05:03:7a:eb:db:52:23:bc:e4:4e:16:
         d6:bc:e5:84:e4:97:9d:dd:fe:7f:b8:fc:7a:5b:af:a9:10:eb:
         0b:c3:28:d9:7c:9d:02:df:27:cb:70:45:a3:1e:67:1a:44:82:
         af:ac:71:4d:66:12:41:94:52:81:94:6d:2c:65:f5:59:ac:59:
         e6:a9:12:45:d4:0e:c9:bc:0f:2f:b0:76:22:93:a2:93:ba:f1:
         ae:42:8f:7b:2a:d4:d6:f0:01:cc:90:26:e1:e7:d6:bd:9d:7a:
         b8:9d:7b:af:8e:b6:ea:8c:7e:48:13:28:0b:f9:45:9e:1f:cd:
         96:80:2d:a3:ce:f2:54:4d:39:df:7b:44:e4:80:fd:df:e5:16:
         cf:ab:eb:49:82:1a:52:d1:88:5d:95:a9:cf:f0:e2:6b:79:99:
         13:16:26:f4:27:8a:17:49:51:9d:41:16:a9:68:37:11:d4:e8:
         14:be:70:02:80:b6:23:2f:15:09:94:a2:4d:6e:c7:2e:7d:dd:
         82:71:7e:6c:3a:3f:a2:0b:a0:ec:8e:ea:2f:b2:fb:fb:e3:d7:
         32:64:44:44:cf:ca:4b:ef:a3:1e:13:4c:4e:e9:02:2b:f3:00:
         04:6f:6d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:34:11 2025 by rpki-client