Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
File:                     cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json)
Hash identifier:          DMbNB8dvUXjcXXTGs+fko3w5ebHW/+C6dLzNjsAAEx8=
Subject key identifier:   6A:BA:04:76:06:5A:7C:68:91:9B:8B:96:F7:42:19:C5:64:A2:CF:38
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Certificate issuer:       /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial:       0199FB45DE26642D838E0C2662BB02A7CC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
Manifest number:          1482
Signing time:             Sun 19 Oct 2025 07:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:24 +0000
Files and hashes:         1: 0vnSiPOWnmFU81unx3CiiKoqL9Y.roa (hash: DfmLpO9j7T70YWipxuVu48t55S7NoYp0HKdaTOCmQYU=)
                          2: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=)
                          3: 5hhLPsRpw9KA7o9wasEihzJSXoA.roa (hash: rLTFQz+FRyLZFkOs44WSv8ULNMp8Sfi16jOBN6XhYiE=)
                          4: 8-icgNG9YFfARW17qjTdCn9yD80.roa (hash: vebs5VRK2d7EVc4VYZnrKXN0FKJQS1X4sYhCt1gzy4o=)
                          5: ElpdsCAHWnrspf_BQqwQgScgsBo.roa (hash: qGJ7OM5aBe7dvyjzLtp4kDohE2tNL4nfvnY6+uLyiBw=)
                          6: GMWgFQwd8nrIkV51lAwKwBtEBhI.roa (hash: +zDKOCeZ+E87qba/A9Qx+V3SrLOM1wpx9qfe7qe53g8=)
                          7: JOBERo-vgg6dldBoWViTCfV7X-A.roa (hash: ce+d5taUPY+G9x5sjcA70ndAe38v7dhbZx0JrAG/CD4=)
                          8: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=)
                          9: TGAbtOOQvJAO29jntkyfdiXsA34.roa (hash: Qa/Pmj8niQ7pWqzQURSMGZYQ5K31JvVZc6izGiwMvgM=)
                          10: VvWxBpgkQSp13g1sdt8P4SzC2m0.roa (hash: 9FE7dSvN+4LiBj47pFfaG8MIDBafbeRoSmTUhhQ2sfk=)
                          11: Z5phhVwVfpK6dkc5C1-vYmhcYUU.roa (hash: iIyIPk2NBxkdVR06TYJeH+vh01QOalQb+F2tpumtM+w=)
                          12: _CppwLlq6EutxXy9VYLWRzQtpMI.roa (hash: HLVjcT4MvYXdp8jvaIO+svVJJc+g5S0hq1BnrCGWs9M=)
                          13: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: b1pWUUQLDiY7nGR9Q5H1sW1t/qJqvTmrwG1fLDT3foc=)
                          14: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=)
                          15: fC3AtSHj4uWnRNCJOJWyffnxb_c.roa (hash: k4yZxxd7Kbg9gUH1VtnIM62vxLC45Jz4VtvfU0eH3rQ=)
                          16: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=)
                          17: q56DpE6SjT4lDV119A67V9CrQMI.roa (hash: sEJe90A/qwDILaO38ksc6uM3fs95yXl9fIcKPIheClI=)
                          18: qQMnV_AHkaoypfzXBStNqOIC8i4.roa (hash: 8/gHPP6AgbL3NuW+OG2JLB+jSLFsV5WrdZq7Of0LMpg=)
                          19: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:de:26:64:2d:83:8e:0c:26:62:bb:02:a7:cc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
        Validity
            Not Before: Oct 19 07:01:24 2025 GMT
            Not After : Oct 20 07:01:24 2025 GMT
        Subject: CN=6aba0476065a7c68919b8b96f74219c564a2cf38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:12:05:ef:dc:93:6e:ef:d3:2f:f2:3d:ec:
                    0a:7a:f2:9e:ea:b5:08:69:c1:6d:15:d6:62:51:dd:
                    eb:85:49:d0:72:fa:3c:f8:63:96:7c:14:32:26:4a:
                    25:7a:80:b7:09:81:97:07:31:8c:f6:c4:b4:19:6b:
                    b0:4f:8b:2c:83:58:e3:eb:b0:b2:49:c3:05:29:aa:
                    1f:21:ec:ca:d7:44:74:c3:a2:83:7a:15:39:f7:ca:
                    02:b3:0c:0b:1e:84:8c:f0:70:b1:f1:95:30:a2:22:
                    8e:de:a0:58:ea:a2:d1:36:d1:38:ea:d3:af:6b:3b:
                    34:08:7d:e7:2b:fa:df:85:c9:13:8c:bb:9b:5c:c8:
                    bd:1a:17:0e:e1:12:87:3b:8a:c7:7e:17:0c:51:ad:
                    37:bc:30:92:cd:8e:c2:bd:9b:56:b8:ce:40:53:72:
                    c1:99:8e:00:3f:89:93:86:4a:81:8a:61:e8:87:1a:
                    76:bc:23:dc:dc:58:bd:14:37:24:e5:3c:ed:60:29:
                    c7:f6:90:7e:d6:ec:9d:b1:95:cc:35:5d:3e:91:d2:
                    f1:d1:0f:05:2d:b2:c5:1f:ff:3f:40:60:c1:d2:b1:
                    24:b5:65:72:d7:40:67:ff:88:a4:be:60:e4:61:da:
                    62:ec:4b:78:bc:cc:15:cd:22:ac:f2:ca:73:81:f0:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BA:04:76:06:5A:7C:68:91:9B:8B:96:F7:42:19:C5:64:A2:CF:38
            X509v3 Authority Key Identifier:
                keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:63:f4:ee:88:f1:2b:25:3a:72:04:cf:54:fb:b5:72:66:
         30:4a:ce:da:15:ba:b3:6c:71:81:31:e1:9a:7a:ab:d5:b4:56:
         15:21:00:ca:27:3b:98:e7:0b:bf:bb:3c:bb:20:32:e1:b2:f3:
         22:97:64:49:42:19:ab:7f:95:9e:11:f6:1f:53:1a:4a:8d:e4:
         2c:b8:36:c8:a2:c7:00:70:c1:01:5f:4e:65:5f:02:92:30:2e:
         b3:56:c1:c9:9c:26:1c:f8:41:05:3b:c8:09:34:4a:b6:8a:cf:
         23:9c:70:93:b3:6c:d2:d7:4c:8e:e5:a9:09:30:9e:03:a7:19:
         71:27:5e:98:cc:8b:71:66:04:49:79:ef:48:18:10:67:4d:e0:
         9c:d7:02:75:99:79:9d:75:0e:ca:7f:3e:53:d1:f3:1a:7d:f7:
         ca:fc:1c:83:e6:f9:2c:37:ff:5a:d8:18:20:64:52:8a:ec:06:
         29:3c:b8:62:71:96:86:57:09:b8:0a:5d:73:63:cd:97:50:54:
         ea:f4:67:2c:67:63:cf:45:5e:66:66:f1:dd:f2:40:b1:07:70:
         8d:1d:e8:b0:97:02:31:73:a9:92:4a:29:e7:60:dd:ae:cd:56:
         05:08:13:ee:b7:93:22:8f:04:14:ec:41:29:4b:45:c3:bf:17:
         0f:b1:ad:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:07 2025 by rpki-client