Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
File:                     4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft (raw, json)
Hash identifier:          2R6jcQjocsn9nnhZ/CcnBli/xZ+Cjxi4ukOY1oORCRU=
Subject key identifier:   82:E8:C9:A1:47:C2:1E:58:2C:C4:A5:6E:D9:50:54:9A:93:75:1A:9E
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Certificate issuer:       /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial:       0199FB0F4D5314326D2E010A0A025A593644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
Manifest number:          0AAA
Signing time:             Sun 19 Oct 2025 06:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:48 +0000
Files and hashes:         1: 4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl (hash: 3/az94PuejoqpXcbKHWKfoc/aONHXzrPFDIMQGnh7S0=)
                          2: 8PxMQW8r6gNYx6cR3PMs2yrl5ew.roa (hash: GqHXtanVRqdO2QW4vR+6/WyxTi1dfx0DVX7E+ZRdtvU=)
                          3: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (hash: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=)
                          4: Dt-A1UKjqPAgnYkiz5oOF3KPif4.roa (hash: jW2Q0BDw92rsfiM8k0/wQ6GD7kmaBburgq62TnGU9aA=)
                          5: Kn_2eJGh3EcHDuB-OJ8l3E2w8hE.roa (hash: kQ83aGfbv2Iq481MBuTu7pjTHv3tFZPurvWLoY3PlVA=)
                          6: LAI14FhpOzU-rcfdJ6U9PG061Ec.roa (hash: avAt1L3mlV+2vo4CiZ8YrFs2RggnJV+Qj20+5tYBmII=)
                          7: LbrW0uU2svuMgCfEegCflkeiJNI.roa (hash: xicAKV+b+Rrkk93cgla0jRgvKkmUQRZcuO0wo+Vll1I=)
                          8: NH99_Parr6i87GqyKHm971OOvUA.roa (hash: ejRR3IxtFm+BdQE6JvQ7L16gCRkI9epYBVSx8aKoP8A=)
                          9: OOSnnzJCzwuc2Oreq9KoON2OJy4.roa (hash: 8ZWXugZrnN7Xp4F6Xn87sRk2TjB10Ze3ouSEvaxFbzM=)
                          10: Q820-mh3gTLx3r5yd43BKUrxxh8.roa (hash: koyxE8n/nkkyiE6UfVNmxydTa2BJ9VFKJe/4B3gcMPg=)
                          11: QRvqjOpbm1bsYYXVNYJCdsL2K9c.roa (hash: gbsaPykuhKfA/rXSneeYnuzsVzL0kGuorXD/sYaSjK8=)
                          12: STuoLQHHZBzK_Ldaz7xkxpSaBqY.roa (hash: ZzI62CUIffeXt6hPl33Fk7eNbx5SV7+e0g7j7C8NgSI=)
                          13: dPORcLPPy7vGPpK7YO0ZCdg3SLc.roa (hash: M8CeF8WcmPBFysMRz6rWQ9roOEfHfMbz/n6BV0QqyTM=)
                          14: ea2ONoTt3SySSjctEUa2mvxPlk0.roa (hash: aHDpbhU3poNDj7sgG29oLTuaOz779tw43LjPP8jq2GU=)
                          15: gPbim5HyI5_coGPfod5GORXHFJM.roa (hash: WqgzuFgOy6ZgR1XpLM/1W9uFliVDMHByx6+nWg3yG7Q=)
                          16: hV1kQUu8Pdq1hwLjpsPqwMqfj_U.roa (hash: N1eliwWO7Qtxwve5drBayNA7B9DMRJgSbxRNUu9dsfY=)
                          17: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (hash: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=)
                          18: pA-Fq_J6A5SNZJF98Uix7eSPlIg.roa (hash: 7lwAf6YG9+AyLk5HAGkoZYURCw6qLQhN2f3/kdNJO0w=)
                          19: t_E9gucmaVtQD7HHfyzFWsZ3H3o.roa (hash: /86x8Ad2qWfAQIfFdegFnzg0b1Bm2R4794B+ZpXq6Eo=)
                          20: v5F31cV6XBvE5243s4oHQBqQQDM.roa (hash: +2WzyiNTSNMZQ/+SFfQYAFWtFS/6Ce5PKrWiHjJlqng=)
                          21: xbbY79UbNbRYIgyXeBU4cy_zCmI.roa (hash: c0Ac2LrLggmLnLPt492ZZRPubOLwoYV4rcik5rRDaO0=)
                          22: zw1raLzJkOzuLdWVP5BWRU84p2o.roa (hash: XIzDwzNdh9cyZCy+DakAR8zEkFIdZM7IKTxs2TBKsWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:4d:53:14:32:6d:2e:01:0a:0a:02:5a:59:36:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
        Validity
            Not Before: Oct 19 06:01:48 2025 GMT
            Not After : Oct 20 06:01:48 2025 GMT
        Subject: CN=82e8c9a147c21e582cc4a56ed950549a93751a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:17:dd:ab:b4:11:13:d3:8c:fe:fa:08:c3:9f:
                    b3:de:f9:69:aa:0e:5b:4f:01:12:1b:9a:44:92:81:
                    62:fa:b5:d3:dc:21:42:06:01:f6:89:e7:c5:17:3a:
                    72:6a:36:ee:3d:ef:16:06:59:7b:aa:d2:2f:14:7d:
                    ed:0f:8c:18:5d:0d:43:7d:39:82:9a:b8:04:da:cc:
                    1b:86:05:e8:84:b9:94:52:f1:65:7a:99:6e:36:cb:
                    84:51:35:91:73:43:cc:04:d1:7c:a5:87:8f:60:58:
                    0a:9c:17:f6:c9:f1:6e:8c:89:f7:fc:78:76:a0:32:
                    e2:76:94:d9:c3:ea:3e:8a:75:0d:94:56:a2:90:69:
                    d8:83:33:bb:ba:c1:cb:10:a6:78:9c:7c:4b:fa:af:
                    e1:00:80:f3:e9:be:9e:76:e0:58:1e:74:16:90:13:
                    70:aa:06:ff:0e:53:cc:28:14:e3:dd:d4:00:26:08:
                    e0:84:84:42:03:6d:d9:61:6f:d8:e9:b2:8b:f9:af:
                    a5:71:f1:1b:eb:3f:a7:f2:08:48:8d:58:f6:30:cf:
                    a5:40:9f:a6:c0:41:69:d4:eb:c7:7e:6d:39:29:fd:
                    dc:b6:d9:bc:ba:01:6e:fc:51:89:5b:12:55:ad:39:
                    ac:0c:e7:60:7f:b6:62:d8:d1:38:28:41:c3:04:59:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E8:C9:A1:47:C2:1E:58:2C:C4:A5:6E:D9:50:54:9A:93:75:1A:9E
            X509v3 Authority Key Identifier:
                keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:5f:de:d9:49:52:4b:fb:c5:38:d2:c3:17:ad:35:b3:3b:
         8c:62:23:7e:41:dd:2e:ef:d9:2b:8e:25:80:ad:be:e8:8b:12:
         f1:49:cd:e9:71:a0:50:42:de:f8:66:a2:2d:39:bf:6f:0f:d7:
         0c:b1:91:c3:ae:25:be:86:b9:ef:d0:8f:3b:11:68:0f:43:ff:
         f2:53:27:e7:d6:6f:e4:8b:e2:f3:71:c5:04:59:8c:41:b0:2f:
         0f:5d:36:78:56:71:ef:96:c4:05:cc:e8:fc:72:32:08:11:c8:
         a5:51:cc:38:d1:04:39:7e:4e:a3:f8:8a:e9:8d:36:f5:c8:54:
         8f:6a:c9:2f:f6:8f:89:a8:99:9a:03:1b:9a:bc:82:1a:ca:8b:
         7b:8d:92:a7:f0:1c:40:3e:c2:c7:c1:74:5a:cf:10:ec:66:05:
         fd:62:77:1b:9e:4c:56:3c:cc:b5:7b:65:84:7d:1a:15:fb:14:
         3e:ce:26:9d:cd:c8:b5:f6:65:91:a3:4c:25:8e:2d:05:28:a9:
         82:e6:58:ae:2d:a7:a4:dc:cd:52:d4:6c:20:2d:5a:6f:5e:d0:
         7d:2d:f9:8b:1e:56:c4:b2:b8:51:20:51:54:a9:b5:35:32:aa:
         74:15:0d:89:4f:8f:1c:17:7d:13:73:ff:35:a2:25:85:57:e5:
         bf:2b:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:34 2025 by rpki-client