Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
File:                     mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json)
Hash identifier:          xxiZrd8bQUS1g3jQwb7rI40/oBFKY0oJ9aaXzX1p6j0=
Subject key identifier:   F8:5C:21:E1:AC:BA:CA:2D:9C:14:95:65:27:D8:DA:5E:B7:F6:0C:93
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Certificate issuer:       /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial:       019A017E8723D9D6606AAAADB4E0098E420E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
Manifest number:          17BC
Signing time:             Mon 20 Oct 2025 12:01:00 +0000
Manifest this update:     Mon 20 Oct 2025 12:01:00 +0000
Manifest next update:     Tue 21 Oct 2025 12:01:00 +0000
Files and hashes:         1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=)
                          2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=)
                          3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=)
                          4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=)
                          5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=)
                          6: 9576YYlhoP7f2pSzcYlCJOH8MSo.roa (hash: 8ylOR07mWV1t96DQR+NXsOjeZN13g3RKILzsyJYBK2E=)
                          7: AZYvtxCiQAo7McIIg5dYZPnjqkI.roa (hash: e/Nkv2lWFMKh5GkiCT+Bt9tYXmSUttTSHjKIqokHr5w=)
                          8: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=)
                          9: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=)
                          10: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=)
                          11: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=)
                          12: MRoUAROw4LH2qMua3FF0ivRRV1k.roa (hash: AM1ERkg9MkmZ5+MBy7Dj4XsMG8QwYDlhJ+3I/zu6fhk=)
                          13: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=)
                          14: Q8a1d3JDYnlpHCeBJ-ilEaaN7uI.roa (hash: Ott4lu7y1mmRSijCCygPfZ0PWm281dG6wYxdj7K5J+Q=)
                          15: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=)
                          16: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=)
                          17: UhKvXl_m9nZBE-_rxYy3N0dwSmQ.roa (hash: MTKTbfYtfwy4jMu3+6j7vVJcG2UaV+0Ha/vAze0SZ3c=)
                          18: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=)
                          19: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=)
                          20: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=)
                          21: gOur9f5G5_TsmAlnK3ja7lGjuYI.roa (hash: VbaOkcXfs2hbyLhB93vkkjUKgWJ53FBk2752UP4mSQo=)
                          22: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=)
                          23: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: 5xDf5Dantc2TNDfZpFR4Enz5d/DYmu6IU5Q9XTX4AIU=)
                          24: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=)
                          25: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=)
                          26: sClmMBT_F-zHChOlRIEgdQPxP6k.roa (hash: ZhHXlBlX50DWtj7LBEqnVF6o2/ifQbmJsY9h3vjBI4Q=)
                          27: sMeA9xl8ZUuMKTOiIPGJ4CDhuVU.roa (hash: die5Hli6P/WXh1sfkmGYgfVjSONOwz0N0yrCW9dYC6M=)
                          28: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=)
                          29: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=)
                          30: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=)
                          31: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=)
                          32: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=)
                          33: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=)
                          34: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:7e:87:23:d9:d6:60:6a:aa:ad:b4:e0:09:8e:42:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
        Validity
            Not Before: Oct 20 12:01:00 2025 GMT
            Not After : Oct 21 12:01:00 2025 GMT
        Subject: CN=f85c21e1acbaca2d9c14956527d8da5eb7f60c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:d3:eb:16:71:9d:30:8d:90:31:dd:53:95:
                    a7:85:24:38:4e:10:51:6a:35:49:cf:9f:4e:56:55:
                    5f:b3:23:4a:39:f1:b5:36:00:ac:52:a4:b1:35:6a:
                    54:e6:4b:f4:10:15:0e:34:b6:cc:f2:a4:18:ad:f3:
                    01:d7:23:51:00:51:03:b6:81:90:23:d2:b3:b7:1f:
                    ab:76:d7:6b:ab:f3:72:89:cf:4f:b3:8b:3b:5e:0d:
                    fb:2b:11:4c:98:f1:88:2b:f3:19:7f:f8:bb:93:83:
                    f6:53:ba:72:92:94:fc:e7:f0:82:d0:a3:08:a6:3e:
                    aa:c3:c7:5f:27:b9:1b:4a:e4:7d:cc:19:5b:b1:e3:
                    38:e1:a5:d3:f6:b6:cf:3f:43:ce:92:9b:09:64:57:
                    da:90:43:e4:b8:2c:de:d4:41:c0:37:ba:1f:e2:84:
                    1f:3c:01:68:64:33:d7:fc:4e:33:3d:66:e3:6f:13:
                    76:d4:09:c5:4b:d6:07:4e:b7:c5:47:f3:f6:2c:b5:
                    3c:7b:dc:f2:a5:6f:ee:31:72:77:94:7d:07:d4:c9:
                    cf:6f:9d:2b:6a:26:a0:bf:f2:1b:e7:76:db:0b:7b:
                    e1:64:8b:59:f2:bc:16:02:c6:3a:13:f8:c0:f9:4b:
                    7c:66:7e:3e:17:4a:0f:2f:c9:12:ae:72:7a:75:9a:
                    33:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5C:21:E1:AC:BA:CA:2D:9C:14:95:65:27:D8:DA:5E:B7:F6:0C:93
            X509v3 Authority Key Identifier:
                keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:12:07:26:78:20:b1:68:57:7d:41:c6:f6:e3:98:8e:af:35:
         fb:de:06:41:cc:fd:62:ae:50:72:6c:92:78:ed:08:82:5d:84:
         4d:eb:a3:52:b7:15:3c:4b:45:6d:fd:9e:35:a2:73:6e:22:fe:
         2f:97:c5:7a:9f:be:3b:dd:c4:cb:9f:a9:ce:1a:f5:82:12:cd:
         b5:51:ac:8b:37:a7:80:da:16:db:c0:ff:90:11:3b:56:4e:ea:
         9f:fd:92:86:10:0b:89:50:21:17:08:03:fb:11:3e:6d:1d:8b:
         88:fa:d5:ee:6c:ca:a3:92:b8:92:ab:67:f9:d6:0e:b2:93:56:
         21:7c:68:57:b5:b9:c4:47:b2:45:c4:db:9c:eb:98:f5:e4:db:
         48:00:25:d5:7d:fe:fb:e1:0d:7b:c7:82:50:27:14:2d:ce:6c:
         06:5c:a9:57:66:1c:52:45:b8:17:6a:95:10:a7:af:d4:55:d8:
         2c:5f:07:a5:47:b0:53:3b:a2:86:90:7a:4e:36:db:6a:e7:3c:
         a6:3a:43:1a:b7:51:ed:8c:21:11:d8:cb:e4:53:f4:2a:90:57:
         da:fb:54:49:d5:ca:a9:65:34:a5:6f:76:4b:78:27:6e:93:59:
         44:98:ab:af:bd:f0:46:ae:88:fd:77:ad:82:5c:88:5d:4e:be:
         ca:f2:6c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:15:32 2025 by rpki-client