Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          G0j3XLfdTDICoN5HrWss6PDIGrSemG5g5tCcgdvWUEk=
Subject key identifier:   A8:7F:6B:ED:EA:D7:4D:07:D4:1A:46:45:D4:4C:8D:A6:73:44:03:3C
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       0199FEEBF24277346EA98EF85CB4C4A4FD6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          1709
Signing time:             Mon 20 Oct 2025 00:01:39 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:39 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:39 +0000
Files and hashes:         1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=)
                          2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=)
                          3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=)
                          4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=)
                          5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=)
                          6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=)
                          7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=)
                          8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=)
                          9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=)
                          10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=)
                          11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=)
                          12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: W3ZxAp3iEfagWLnaG6LiZTMqUFqK7R01NbGeKFBMR5E=)
                          13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=)
                          14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=)
                          15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=)
                          16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=)
                          17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=)
                          18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=)
                          19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=)
                          20: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=)
                          21: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=)
                          22: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=)
                          23: jH8Mi3TlwvD2IeH7uCn-uJ9q0w0.roa (hash: ahI8jMGv5DDAbZ9UFRdwdOTFkupqYU+mpHR0wJIw+rI=)
                          24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=)
                          25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=)
                          26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=)
                          27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=)
                          28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=)
                          29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=)
                          30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:f2:42:77:34:6e:a9:8e:f8:5c:b4:c4:a4:fd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Oct 20 00:01:39 2025 GMT
            Not After : Oct 21 00:01:39 2025 GMT
        Subject: CN=a87f6bedead74d07d41a4645d44c8da67344033c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:29:71:db:5b:da:1a:f3:79:bc:39:0e:33:
                    8a:bb:bb:3e:35:22:0c:d1:52:20:67:08:d8:4c:16:
                    07:21:14:56:c3:b4:5f:de:38:30:75:7e:76:03:05:
                    ad:96:8e:36:68:a8:c3:ff:b6:ad:82:14:bf:48:ac:
                    4c:14:fa:e9:ca:93:e2:6f:4c:03:1a:e3:20:36:73:
                    a9:2a:7f:f9:45:d3:a0:46:1f:e8:0c:cd:a5:ae:b1:
                    35:3b:34:ba:d2:b1:06:d0:35:0d:ea:15:55:e2:3d:
                    67:89:a2:11:37:97:36:74:26:37:91:c6:b0:c5:7f:
                    a2:c5:0b:97:35:cc:72:af:1b:cd:41:73:a6:06:49:
                    8f:7e:75:34:4c:cd:dd:bc:b0:7d:41:96:79:fb:45:
                    29:6c:44:68:7c:19:56:6d:a8:4f:67:9e:07:e8:cd:
                    99:b4:3c:46:8c:1e:86:97:37:c4:b8:73:09:e2:d9:
                    5f:ca:76:17:55:5f:96:ab:b2:70:ea:04:f0:c0:40:
                    44:46:ca:c1:67:c9:a5:59:b1:0f:6d:79:72:bc:a5:
                    52:50:03:29:57:d2:8b:50:ad:ce:b4:69:39:4c:78:
                    e6:c0:b6:5f:fb:81:8e:6b:a8:97:4c:22:3d:58:99:
                    48:34:27:c1:0d:b2:74:5e:ed:fd:12:0f:ff:c3:9f:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7F:6B:ED:EA:D7:4D:07:D4:1A:46:45:D4:4C:8D:A6:73:44:03:3C
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:37:48:c4:f9:47:f3:70:17:a4:71:62:d0:f4:86:fe:f3:0e:
         0a:24:39:21:fb:63:84:5b:b0:b3:9f:8f:88:05:46:a0:95:e2:
         5f:78:17:87:69:58:c7:a1:84:ec:1e:40:9d:b9:ee:bb:af:ef:
         23:6d:d5:94:b0:d1:18:ec:3d:1c:b2:f6:71:e1:1b:7a:06:9c:
         a0:de:85:4b:c6:84:75:21:23:ea:d0:20:9d:85:2d:3d:29:e5:
         40:85:8d:36:6e:83:a3:b9:95:b2:a9:70:99:c6:d0:16:bb:12:
         76:e8:e4:d0:53:40:4d:17:0a:df:02:2d:61:bc:77:a9:16:36:
         ec:c3:41:bc:6d:f5:0e:3e:58:af:96:c9:26:f7:53:43:f0:65:
         fb:4f:c7:9d:39:82:7f:b7:7f:fb:9f:0e:26:12:f9:8e:23:9d:
         be:80:19:8f:9b:08:19:5d:90:27:4d:7e:b5:ce:ee:1a:19:29:
         68:82:a0:42:20:79:f2:89:84:35:6c:96:a9:60:dc:25:15:8f:
         72:fd:32:54:e6:4d:78:af:0f:1f:fc:28:bf:14:a2:99:2a:be:
         04:cb:1d:30:64:a1:c2:b1:8d:22:4c:a4:da:6e:70:65:67:0e:
         e6:7d:9b:f9:9e:d2:ea:5c:1c:5f:92:e6:40:16:69:88:ee:ed:
         49:26:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:17:32 2025 by rpki-client