Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
File:                     bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json)
Hash identifier:          F517bzgiCmRAEG4NG1Bfh7P/iemjWO7EqDjLIG5EBgo=
Subject key identifier:   3B:2D:68:20:87:04:31:86:98:8C:00:D4:A2:60:3F:C5:F9:EF:0E:46
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Certificate issuer:       /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial:       0199FD33E955FE0D6AD95AE119C9E69B6D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
Manifest number:          1764
Signing time:             Sun 19 Oct 2025 16:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:01 +0000
Files and hashes:         1: GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa (hash: ycPiGraLR+oJB3cwW5Zn+sG2+Vx4fOUp8s3QYwjDHdY=)
                          2: LJGytq9N5LZAfsPYy6Q-7xTDnFQ.roa (hash: L8DANG0AVQkhh+LlhVF97AUo2a9H2Thg2+BhZTsZc9s=)
                          3: VdTIZg10bNsf97lJZgApyqs5rnw.roa (hash: JZmVNExP4W1uSJTEkKjxhG9IYISkRZKnN8IfaygiTvg=)
                          4: _RuQI5qt_gCJV8eSXJjHywGzAcM.roa (hash: DUnvGlvb0qBwrlu2PMIboP80gnaIA1d0Yg1mit2U5+4=)
                          5: _oIa1v5_qtgCStQ7Gr8CmdhmJJk.roa (hash: sBeGOfBKlFTzuSpkLUgZSpY0MFPhQu/DyIR2/KkHkUM=)
                          6: acsdEgh-dFdAGSqAE_lAYWdPdzo.roa (hash: lIvBIoA3FQRV1Et4CF8cBr7OP+IuEmQHKzZDW4s0Y6A=)
                          7: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: wMsruA2YJYpkaQL1MF7iY5FXSr4G050kFgGWlDSqlJ4=)
                          8: gp93L_YQvuGEaCDSOxiRg-T-4UM.roa (hash: cOL7dP+BUiqZrZ0lZLE/dQN9GFbGifb1tHwfI+S3noI=)
                          9: mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa (hash: ccP3x4XUmUaf8il9YXiD7LEPdeAv9/EZKZYCHAVZnrA=)
                          10: uXeorQ0KraTFvVQlrxOSwyrTRt8.roa (hash: p6Mox6CbN3FoG5SSiyHeNVnPtI+94QgKaVPxEdmTl2o=)
                          11: yE8yGiOSM9_WiLeRkIg-dqNW2to.roa (hash: lSz5irzOf2/kcuzlFP5VLqCVP2LHBpJf2WHVunZKvMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:e9:55:fe:0d:6a:d9:5a:e1:19:c9:e6:9b:6d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
        Validity
            Not Before: Oct 19 16:01:01 2025 GMT
            Not After : Oct 20 16:01:01 2025 GMT
        Subject: CN=3b2d682087043186988c00d4a2603fc5f9ef0e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:44:ca:22:86:65:4d:42:d9:f2:73:26:de:
                    56:7c:92:3c:66:50:bc:e3:89:8f:a5:10:50:61:c4:
                    94:e5:21:f7:26:98:d4:b7:b3:3a:a8:c1:13:0e:20:
                    68:0f:bf:9f:fd:fb:a0:b5:d5:6c:97:ce:43:f9:b4:
                    bb:d4:52:31:b1:78:2b:17:f8:05:b3:d9:64:e6:58:
                    9d:5d:cc:2a:4d:93:f4:f0:1c:35:b8:05:ef:e5:47:
                    3a:c8:11:63:9d:b9:8a:63:20:87:fd:f3:02:d8:e8:
                    8e:ef:34:1f:76:a7:0d:4f:cc:53:a5:50:f3:ed:f1:
                    e8:27:25:0e:b5:01:a6:b2:b5:39:12:2b:a4:67:28:
                    3c:ac:d2:be:13:34:5f:32:89:0b:17:08:82:1b:9d:
                    e0:76:a4:c2:ec:56:bb:54:4f:bf:8e:d9:03:cd:8a:
                    6c:de:35:81:75:e0:04:c8:07:23:92:1a:44:54:b8:
                    32:1d:51:34:75:50:59:16:46:5a:0b:b3:a0:62:0e:
                    d3:08:b9:57:98:ec:8b:4a:25:54:da:45:6b:a2:ae:
                    c1:f2:a5:80:58:35:b4:71:a4:51:8a:f7:12:3d:e4:
                    1d:a3:0f:1d:b5:59:eb:d9:0b:64:b2:66:a9:9e:06:
                    5b:9b:f3:d0:eb:75:ac:5c:f4:ff:a3:a8:b5:d5:c0:
                    d3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2D:68:20:87:04:31:86:98:8C:00:D4:A2:60:3F:C5:F9:EF:0E:46
            X509v3 Authority Key Identifier:
                keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:4a:e8:d4:10:3c:93:9b:aa:e1:eb:0e:4d:a2:7f:21:8f:65:
         70:02:1a:eb:28:d6:23:bb:fe:c0:7f:6b:64:4a:8a:5e:72:b2:
         3f:15:08:34:32:ca:ae:0b:c7:93:90:80:d4:c0:63:49:7d:68:
         38:d2:7d:07:6c:13:09:45:89:6e:1e:8d:c2:6d:42:66:f5:97:
         2c:3f:77:67:dc:5d:47:bb:de:7e:d9:58:56:78:b4:a7:15:47:
         2c:ad:84:85:ba:d7:4a:e7:54:e1:2f:4e:34:61:be:76:05:c9:
         65:c3:4f:5a:37:09:ee:d5:d9:02:0e:55:5f:63:f7:1b:74:02:
         a5:be:39:ac:30:d0:0a:2d:a4:39:0f:0d:ad:65:8f:5e:86:d2:
         ce:ea:24:26:24:0d:8c:57:35:fa:88:b3:05:86:5e:1d:01:7f:
         9d:cc:b8:69:09:a9:64:3c:5f:4f:0d:91:c3:75:6a:52:5b:0f:
         81:aa:f1:6e:0e:a3:42:c7:45:b7:fa:3a:86:95:e7:cf:40:87:
         41:2b:5e:5d:4a:3a:5f:3c:1a:39:76:7a:5f:ab:6e:d2:10:94:
         df:cc:3d:99:45:48:92:bd:3f:13:bb:31:d6:ec:53:ec:8f:51:
         3e:c5:8f:c5:0b:a5:16:2a:42:85:28:40:46:dc:7f:b5:41:89:
         b1:db:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:44 2025 by rpki-client