Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
File:                     Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json)
Hash identifier:          R8S7j2qEi7CI50rbtwJt0WClinY+brWdfya40NWVB1k=
Subject key identifier:   8D:EA:4B:36:0B:7B:F2:8F:00:11:76:93:B3:D6:40:82:FB:E7:A9:37
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Certificate issuer:       /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial:       0199FAD804DA6369A38CB8A0905C636A39D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
Manifest number:          0AFC
Signing time:             Sun 19 Oct 2025 05:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:24 +0000
Files and hashes:         1: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (hash: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=)
                          2: 2JQiF-KuxisBuWKzCCYjlMYezbU.roa (hash: SXSN+jTHRj/1XPCNhGNyMfhXX6aenkr84XXZn44oBus=)
                          3: 2wuDk6nFqqGYiaSC6iucrRXcbQk.roa (hash: 79MFBQJOifCFih1gwOm9utzcHryDlN0MlgfAlM0KB/E=)
                          4: 64__ti8-v70UmOgEukqaYVnNiPA.roa (hash: VerqmgWX+ipN/DN9t0GnBufDYhut1qzOjx4DnJxcXoE=)
                          5: 8VGto6-m3ZhEtMlMk4okhMSijsU.roa (hash: SKlBiSxKydLy7D3Ilb/NXQqcAfFABqE3nA6lfv3eM7w=)
                          6: ABJisPvnQcjHBVgXGi4ydoloSZE.roa (hash: RVwFroWgpI+Qhh+kSCs8kXZIQCp91O1HkIX07p2fRcU=)
                          7: Dd0lNs2hky54dQAv3vPisZjCFp4.roa (hash: NVL0LmaHqGXfi7RWJ5Z26iREn6xhTna8KN7jsCj7oR4=)
                          8: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: gRWXxkhMBxAmZOMA1gz1YzP1Bv+2ZPzUTaa8tcPFGcM=)
                          9: MtXcqoleDqMSyVWGFxd3850uGF8.roa (hash: 5zTGwHssmIeS5Ukj/HGoA7Wxq1gUaItGj34ri17+IlA=)
                          10: Q6bkyyQLjY5spQCrn9goEf71pPU.roa (hash: 9lviglTOByJ8RQWmZ8UPa2cM7z/LltLd8urB8JmBNnE=)
                          11: U93bZjAVh1P1joBT40YtFgkj33U.roa (hash: zo9QHI0N0+rtiU9CTdPl68EA0JwhDa16Oocr2Zm0PWg=)
                          12: Uaif5mluHcrJUGbfFQOQv5aGmqo.roa (hash: 4GcANOdK85GtkfgKCJ6D/Bc//mwXx0P/TVTNMp8rznY=)
                          13: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (hash: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=)
                          14: jyDBS4SlMdZTmgBvwq4TdZHy1_k.roa (hash: LeAOH2iyHYZi5p/Iq7kAMVJlSvm2ZJXwY56cgcvgz+I=)
                          15: wQmIukKER1i2VgSfKkNt8Tv2TII.roa (hash: DpzLTx/qXAbnfH+ej2Fwp80KfukeDoQIFE/iVUll7ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:04:da:63:69:a3:8c:b8:a0:90:5c:63:6a:39:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
        Validity
            Not Before: Oct 19 05:01:24 2025 GMT
            Not After : Oct 20 05:01:24 2025 GMT
        Subject: CN=8dea4b360b7bf28f00117693b3d64082fbe7a937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bc:b7:95:66:39:ec:1a:63:9d:d7:9f:0a:2d:
                    9d:fe:c3:e2:ce:53:79:1c:cf:08:43:60:50:9c:7c:
                    71:55:bf:35:fb:b4:98:5c:62:bc:ed:6c:64:96:88:
                    96:6f:8d:00:81:78:db:7a:24:31:ca:74:71:c9:a3:
                    39:15:58:20:65:6f:56:e7:76:3d:2d:6e:14:a2:25:
                    71:02:4b:08:63:ec:b5:6e:b8:21:51:6b:1b:3e:85:
                    96:f1:83:23:01:c6:bf:d4:7e:37:e2:79:1a:0c:39:
                    d8:50:9c:5e:18:b3:ef:ab:62:b4:14:77:c1:31:ed:
                    ca:73:b0:37:84:2c:86:4b:aa:3c:c5:78:cc:d0:e9:
                    d7:87:cc:1c:e7:df:af:49:97:d0:5c:55:ff:82:bb:
                    16:56:13:a9:fe:74:22:d0:77:47:5d:88:53:97:d1:
                    26:c6:c7:78:74:45:50:b2:9a:61:42:32:7e:1d:e5:
                    61:ae:d6:fc:da:e5:60:7b:36:d1:91:cb:f9:71:ff:
                    f2:56:ef:58:74:ad:5d:33:56:e6:83:ba:e2:5d:51:
                    c4:67:cf:c8:6c:f3:89:b9:bf:1a:33:6a:b2:f1:6c:
                    2e:71:15:a8:48:f9:67:ae:0c:4d:15:1a:f5:91:6e:
                    a8:b2:8f:43:83:d5:92:91:40:84:97:2c:22:01:49:
                    67:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EA:4B:36:0B:7B:F2:8F:00:11:76:93:B3:D6:40:82:FB:E7:A9:37
            X509v3 Authority Key Identifier:
                keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:48:90:4e:88:75:4b:e0:ce:be:ba:fc:a6:43:d4:bd:52:
         b5:48:11:05:63:27:61:25:e8:ba:59:84:72:a1:8f:91:36:77:
         af:ee:06:34:90:66:5e:dc:77:0d:02:42:bd:ca:16:3f:06:42:
         fa:03:81:97:11:dc:4d:1f:52:ff:8a:eb:ad:51:ce:9d:ac:08:
         b4:b9:1a:10:57:58:9d:e7:fc:e6:34:7c:27:97:44:ba:b9:91:
         7c:4c:f9:d7:df:7b:f8:28:fe:bd:71:78:09:e2:c6:6f:2a:2a:
         25:08:94:a6:1f:c7:32:fa:32:b6:b4:fa:70:54:6c:2d:8f:64:
         f9:76:da:2f:48:a9:17:ab:5c:10:8a:43:7f:56:ed:89:ee:a8:
         68:a5:6b:77:59:6f:fd:c0:68:ff:11:dd:76:d0:bc:65:0c:52:
         a1:db:d1:cb:0d:14:2a:da:70:14:eb:d1:86:1c:8d:e5:80:40:
         ee:fd:58:8e:fd:67:12:df:51:7f:17:30:52:2e:b7:d4:c1:8a:
         bf:79:2f:b4:0b:47:41:41:e9:b3:3a:3e:9b:e2:e4:4e:ef:3a:
         4f:33:d2:a0:cf:09:e4:1a:fb:f5:b7:84:a0:f7:9d:22:a5:27:
         16:9f:97:bf:b3:7c:1f:da:11:45:b1:5e:bf:3a:42:17:f8:b9:
         99:bb:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:11 2025 by rpki-client