Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
File:                     KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft (raw, json)
Hash identifier:          eqEybsQlD1hCHEP+5sxx9FgBjqjbnmK3630tjfbsq9I=
Subject key identifier:   6F:BD:5D:E5:6F:55:D2:3A:06:58:5C:9F:37:CB:58:DD:63:10:D5:D9
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Certificate issuer:       /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial:       0199FCFD81FAFEE0EAA653E0A3D98998CA64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
Manifest number:          0BC5
Signing time:             Sun 19 Oct 2025 15:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:36 +0000
Files and hashes:         1: 40-Fe0ClJjM3rGq3tKMY4lgTO0c.roa (hash: lMieyX7jH2Flr7s7p5R5H9gYjE+H53LSKunrL+hZLEw=)
                          2: FV9U3Yv2I7_2992_Tu4mBiIQFlI.roa (hash: /WpBV6VXQYMepV5lfUa4zJ1OtPuJRJ1gNT7mbz//kPY=)
                          3: FbAqPaVw4Lc8kzGFywuLUOLuN6g.roa (hash: 5y6ol4UAm9wCL/bXngkdTGDKDxUzmNqQsajx2DmmhCQ=)
                          4: IvOVPi4Jk0LAA7IyC_lBmoedUPk.roa (hash: iVbMNdqQVbnDfCnhCbcyzkADBiETtoTlj0kjeIAta6w=)
                          5: KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl (hash: 8DDM0fycEL85PIOFXHmL6cTFVJSUt/vomduHP9Mk8Jc=)
                          6: T16pm2MQEAUE2FMbSssYLk6CkTk.roa (hash: 7uW7JXvNCvoGIxe5Z6TwqqTVQIqIp/L1A4jFvTPd0mc=)
                          7: VJKr8K21Xfen5uk1xCfGFVJrqNs.roa (hash: kXpjzIlwN+Gv44HIvCkq7vJ72G9g6c72ZjdAcBJOo5Y=)
                          8: _54CIVi2Yw4yngdpfKbMO07oyqo.roa (hash: TM5Ay2NTiDiELYyiOeCmFyJPSSpITIxR/LNxTfFDHDg=)
                          9: ca6XJ5NiIiIJ1gn26NWoBZY1OOE.roa (hash: m0MfY3W/yHtAcpQIPruy2IhGfS2aQQkvwxrvdJx1dpE=)
                          10: ozTUlRS2BP8xxCFNOquOdzTJVac.roa (hash: l1UJXUEegLYZKNp2zf9niVjLEqjlu26RHLObHLwCBJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:81:fa:fe:e0:ea:a6:53:e0:a3:d9:89:98:ca:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
        Validity
            Not Before: Oct 19 15:01:36 2025 GMT
            Not After : Oct 20 15:01:36 2025 GMT
        Subject: CN=6fbd5de56f55d23a06585c9f37cb58dd6310d5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:94:20:c5:f0:85:b3:a6:69:fb:f7:4f:33:
                    2d:29:9f:a5:89:6e:0f:bb:db:f9:dd:e3:ee:f3:e2:
                    c1:a6:d7:2c:a1:9a:ff:a1:8d:de:f4:13:3f:dc:b4:
                    53:6a:4b:e7:dc:dd:7a:71:e2:03:c3:a6:a4:55:95:
                    eb:a9:d1:f5:9c:b8:30:c9:0e:41:64:14:26:22:fc:
                    aa:00:5e:f5:23:0b:54:c0:6d:95:10:a1:98:25:18:
                    69:20:4f:6a:8a:81:1e:5d:12:67:eb:30:fc:f8:38:
                    26:56:a9:37:40:bd:a3:4c:24:c0:8e:24:a8:30:24:
                    33:8f:7c:10:bc:ad:b7:02:70:b7:df:4a:08:38:e9:
                    1e:26:ec:38:37:19:2c:98:e0:25:74:21:5b:79:f7:
                    0b:bb:cc:e9:a1:32:1e:96:64:01:0c:55:f4:b6:e2:
                    09:52:ec:dc:29:c9:0b:6a:aa:c9:5c:cd:eb:74:c6:
                    d9:48:44:c9:8f:d2:e6:14:7a:bc:01:1c:b9:30:88:
                    62:de:d0:69:60:c0:48:63:af:1d:6d:be:db:eb:a3:
                    6d:c3:7f:e8:ea:b6:37:aa:df:63:08:f7:b9:dc:b5:
                    0d:93:01:e3:eb:0b:75:a9:79:0c:c7:10:10:12:ee:
                    3d:7e:28:29:bc:ae:9a:fb:e0:75:bd:b4:71:69:9f:
                    e0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BD:5D:E5:6F:55:D2:3A:06:58:5C:9F:37:CB:58:DD:63:10:D5:D9
            X509v3 Authority Key Identifier:
                keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:3f:c7:91:d1:8c:2d:20:59:3d:e2:0c:4f:6a:57:54:7a:1e:
         81:79:a6:44:e1:b6:06:88:69:6e:d9:a3:61:a9:54:b3:9f:49:
         19:e3:71:7a:f7:7c:d1:b9:b4:ee:49:4a:6b:84:89:ad:ff:68:
         1f:ca:81:1d:06:28:cf:45:da:ac:4f:44:60:2e:f5:95:dc:2b:
         97:72:a7:af:f6:2b:9e:92:2c:57:2d:09:77:43:4e:f6:44:c4:
         e6:9c:1f:0d:19:24:64:25:eb:31:09:84:fa:36:02:d4:af:93:
         54:c7:be:6e:a0:93:28:78:c5:fc:27:80:f3:da:c1:ed:94:7d:
         63:c2:0f:dc:bd:48:77:51:68:a5:0e:fc:a3:a9:8d:85:d7:1a:
         8f:d3:c6:a1:84:d9:26:d2:fd:06:56:ec:3a:01:af:3f:d0:25:
         43:5c:f2:5e:6b:14:ec:f7:52:b5:e0:6b:a4:f7:ee:46:2b:6d:
         4b:db:87:61:36:c5:fa:53:0c:eb:20:a5:eb:4d:13:84:44:0d:
         e2:0c:2e:be:ec:2c:6f:f1:5b:92:ba:f3:fb:2b:1c:ae:45:3b:
         f5:a4:78:33:2a:d7:54:f2:ab:c1:ce:d1:e7:01:50:16:ce:56:
         35:2a:e1:2c:f7:a1:07:62:d8:a3:df:de:61:02:5a:4a:a1:63:
         a1:d3:1c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:24 2025 by rpki-client