Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File:                     pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier:          BE8VD+/pFSskFwZca49q55KUZ/t5K7d2vPQ9RetKUh4=
Subject key identifier:   EC:A4:4E:27:AB:F6:6C:78:55:DE:E9:38:24:78:32:69:20:60:32:35
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer:       /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial:       0199FAD82D428F6091D915C5AAEADFABB38C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number:          010F
Signing time:             Sun 19 Oct 2025 05:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:35 +0000
Files and hashes:         1: BLL7KvTCffO6tp4kIOP_sSt6WzU.roa (hash: K2KxT9evveKUcS3Zp6W/L1otqyWrsiDb4Q4jrBUnW7c=)
                          2: Eh7LIuW42CvtdPZwqzRnb0iAEKM.roa (hash: j2OXrFqgsDjaKg5s5TvNOiiSOulderYWQlkF+sXQtfA=)
                          3: GXNfhhCLmXkcBaMcM3Wqb41chEc.roa (hash: rifz7ON+2GOQGOKbBBrmdaYyl9eb/JIR5S1cj3TU4jE=)
                          4: JoDgj6_aYuH2h_z7acYlnllXJD8.roa (hash: s9ZiFfWtjJJRskfMKESh5wPV+ucKeG1v2mAsgKvSMUs=)
                          5: TH3AhVbNZPfpfze9jk4P8EYhJRk.roa (hash: CvDuj4p8KBdrmQoz9VsmO+AYAN5CIQ+jW9RXbyF9x5g=)
                          6: U5q4QiR4WiBSQSOv2vD1W1J3XSk.roa (hash: ZdJ45ZazcA/TtNU+GF97U74ZRNYKvCtVCEwip83Krrs=)
                          7: X1OJBmObFYHg6-TEw8S-Kw2Q7ic.roa (hash: Oyq+zf+xTb/nBsWGWwl35Zcj+K8DjFf57comG4rLZLc=)
                          8: Y8i3rrn4fUUiKvEOTWMIpo8Wdg0.roa (hash: lhJRliSxc8nIrWSQMwOkXfftJXTelhvnTEYCqHEODt0=)
                          9: Z1M_6TrqOd8wD9NKtj0iTyQonVc.roa (hash: aDWP4uHhbYWLYFp3XR/+E+EeJ5Rm4IXEZcu1iYff0qg=)
                          10: ZDayT6lDLS2GCPR-v8fqvcLoQK4.roa (hash: +ziQ7srcO8pPuSJWXnBHZoMe2FpncGGdN6aXUGmO+8s=)
                          11: dHXXvm5G29XbZTMm4RwPjpLYBp4.roa (hash: Y17gdHapZNrAnkNJtHU7rPFemKpgw5uE5ulxbMkkwBE=)
                          12: dv3-UDRo-QCoPMwkT3OMYFFbOg8.roa (hash: pBj1g6kNC1lCzmrnByXYXnQfvQx7VuBxAQQxYeHelao=)
                          13: emjANyISkJRoOdzxCAt2kq4CVQE.roa (hash: 9W1oN3mBYbWV8A6Uo6B7h78llPTnM+uYRLY9fCXhQlY=)
                          14: gchhAVJFDCU8blLfh1bBR6nV7eE.roa (hash: i4UDZqnLoafc9IhMJrDyMFSOYLmIkEVFeY6p5LZlGi4=)
                          15: hLDp0R1tKZ1uQpk7clza_OXTeIc.roa (hash: 2IvvdqWOvjCen06JgJKZvx4rVETFnJduNU5B5/20Srw=)
                          16: hok1h3DBZfbszYTqi9gXzI5jkqU.roa (hash: Rrp79AM7R2rghKYLAtKfPleubz/8AHn7KNcJJOJ8/Y0=)
                          17: oYGGiYdbxpGeCKboMYRmQpGsbJg.roa (hash: 4Tb5SbH+PWEL8ZWRvMbss+TVaZCN9gSpmDVf6SCXqwg=)
                          18: p2_7XpLZT8F42rihOd0TzCMxmCo.roa (hash: f2RKPMbWax0ofSjG9a3ohFFR7biXce7y0gFKOZaUepQ=)
                          19: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: sRtS1NfxkWegNeLIwldcFd7N7Kqet05ZfTF16Se38S0=)
                          20: qYUhOlm7rxtE24ifggtJupvHC-U.roa (hash: Eq0prYYqmBCy3NmWTbhlJMhDQOJrr51MgbHFrPYHpts=)
                          21: z1lDJAYiSGQWP0hQT2qsq0NQckw.roa (hash: +w84SriAFLfwafgawze6gO/oCWYDdlLPo2xuwocy9KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:2d:42:8f:60:91:d9:15:c5:aa:ea:df:ab:b3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
        Validity
            Not Before: Oct 19 05:01:35 2025 GMT
            Not After : Oct 20 05:01:35 2025 GMT
        Subject: CN=eca44e27abf66c7855dee9382478326920603235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:f2:e8:ce:3f:db:5c:ea:f3:fe:98:0d:00:
                    eb:5f:c8:93:97:10:95:61:15:21:80:44:a6:74:57:
                    ab:3b:ad:d6:55:e5:1a:61:00:09:0a:04:d0:e7:96:
                    8e:38:67:db:eb:75:28:90:34:e9:2c:06:14:74:52:
                    0b:01:dc:e8:49:80:7d:e3:49:ac:c5:2a:7c:54:17:
                    53:d0:d6:59:84:b2:c0:f1:7e:f0:50:7c:e8:81:5d:
                    e6:13:33:db:b3:c1:7e:8e:8a:e3:d3:50:eb:dd:52:
                    8e:9e:80:64:20:b2:d7:eb:91:9a:ba:08:0d:0d:8c:
                    b3:7d:7c:a8:81:83:b1:dc:2e:11:1d:1d:68:c2:1f:
                    86:c5:44:66:9e:6b:17:5d:f9:e3:95:da:c8:41:aa:
                    63:14:63:22:07:61:1c:4d:65:52:30:d8:fe:d2:ba:
                    e1:5a:a6:88:1b:51:e4:e9:fa:12:92:e1:9d:90:af:
                    2d:16:2c:24:8e:8a:f5:81:08:c3:2b:d4:60:0f:45:
                    12:f7:e4:69:4e:a6:7c:87:04:6d:62:33:3e:e8:23:
                    31:bb:13:4a:04:c0:ff:e0:36:b7:7e:47:9e:45:63:
                    10:cc:31:a8:22:a1:6a:a2:8f:77:40:03:8b:a2:bd:
                    6d:3a:97:16:e3:4a:9a:35:0e:e3:cd:1a:81:d8:a1:
                    ba:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A4:4E:27:AB:F6:6C:78:55:DE:E9:38:24:78:32:69:20:60:32:35
            X509v3 Authority Key Identifier:
                keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0f:7d:a8:9a:45:54:61:bf:f6:d4:0e:bc:23:31:df:d8:36:
         97:ea:8c:2e:5c:bd:4c:98:1a:d1:bf:67:d4:3f:8f:56:02:24:
         a4:95:fb:16:b0:1b:d2:45:3a:34:d5:f2:26:76:3f:e9:c8:81:
         d6:76:c9:b8:6d:0c:78:80:83:7f:c6:93:42:69:59:7b:65:ce:
         d7:08:8d:a2:25:44:16:b2:1c:98:00:e4:d4:fc:40:63:d9:75:
         a8:34:15:e5:5f:7f:e6:dc:09:d5:33:f1:c2:a0:09:7c:2d:fd:
         01:27:6a:f5:69:75:a1:f3:57:d8:c9:c6:13:8e:1e:98:79:fc:
         3c:21:45:38:59:fe:3f:f6:bb:b3:34:ca:4f:44:33:16:a0:ac:
         a1:9b:2c:3e:2e:60:2a:7e:20:07:58:bc:df:8d:6b:64:cc:96:
         f3:8e:20:ff:bd:7e:3c:19:15:8d:5b:c2:84:12:0a:2b:ca:af:
         70:06:79:4d:cc:89:ee:1f:cb:e5:25:4a:22:c4:9a:0c:bf:5e:
         36:99:62:e4:38:61:fd:c5:cc:84:d5:d2:18:ea:14:84:da:31:
         6c:5f:df:06:ef:3b:1e:13:dc:6a:3b:93:2b:50:24:d0:c6:84:
         92:00:07:bd:06:d4:45:0a:e8:dd:ca:c8:73:1a:af:e4:54:1d:
         c9:8e:19:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:08 2025 by rpki-client