Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
File:                     mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json)
Hash identifier:          zoH2z5o5Si2SLay8rKSF1sJ/cLH0hTj0y+pLy8pikMo=
Subject key identifier:   9E:21:4A:B9:71:00:20:12:AA:CF:02:D6:38:6A:EE:B1:63:34:8B:E6
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Certificate issuer:       /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial:       0199FF9021A8FBC6E50CCC1D0BEBC13AE337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
Manifest number:          17BB
Signing time:             Mon 20 Oct 2025 03:00:59 +0000
Manifest this update:     Mon 20 Oct 2025 03:00:59 +0000
Manifest next update:     Tue 21 Oct 2025 03:00:59 +0000
Files and hashes:         1: 1-W8fXv0jttdWKlzJAXVxxYtpRug.roa (hash: gpIh638+Fcd1tAei50b0+8GVpPlev9wrd/g4gdASdjg=)
                          2: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=)
                          3: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=)
                          4: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=)
                          5: 584_8-MCCtntQOfvULwWZs9O7nE.roa (hash: 2qpHd4/GVV0NiG+wogJB5AQCeDp3yyLGq0zIUvBip28=)
                          6: 9576YYlhoP7f2pSzcYlCJOH8MSo.roa (hash: 8ylOR07mWV1t96DQR+NXsOjeZN13g3RKILzsyJYBK2E=)
                          7: AZYvtxCiQAo7McIIg5dYZPnjqkI.roa (hash: e/Nkv2lWFMKh5GkiCT+Bt9tYXmSUttTSHjKIqokHr5w=)
                          8: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=)
                          9: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=)
                          10: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=)
                          11: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=)
                          12: MRoUAROw4LH2qMua3FF0ivRRV1k.roa (hash: AM1ERkg9MkmZ5+MBy7Dj4XsMG8QwYDlhJ+3I/zu6fhk=)
                          13: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=)
                          14: Q8a1d3JDYnlpHCeBJ-ilEaaN7uI.roa (hash: Ott4lu7y1mmRSijCCygPfZ0PWm281dG6wYxdj7K5J+Q=)
                          15: QJvPeNzFvPANqEbfkIc8-3zDQLs.roa (hash: felyBGjLHZhYiBLtOS5vAZwi9iqRNucwfxHrWgkMpWA=)
                          16: TrJv_8fKTcS_JBhUlD0AOoYAAQA.roa (hash: f2kfoia7LPQzOEBZN5rSYHh6gWQLd4Eepwr2rpiJk9c=)
                          17: UhKvXl_m9nZBE-_rxYy3N0dwSmQ.roa (hash: MTKTbfYtfwy4jMu3+6j7vVJcG2UaV+0Ha/vAze0SZ3c=)
                          18: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=)
                          19: azJgsmdTDF3ELk-I19mAROWoKeE.roa (hash: oh/dgWtIFhqfW7S9fR3cOqTRk0csYkiTH2ALt2aoNhQ=)
                          20: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=)
                          21: gOur9f5G5_TsmAlnK3ja7lGjuYI.roa (hash: VbaOkcXfs2hbyLhB93vkkjUKgWJ53FBk2752UP4mSQo=)
                          22: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=)
                          23: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: /rHmxEBpf94KwXsntdBe0dVpB4OhwWN6NPqo5kdpZMM=)
                          24: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=)
                          25: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=)
                          26: sClmMBT_F-zHChOlRIEgdQPxP6k.roa (hash: ZhHXlBlX50DWtj7LBEqnVF6o2/ifQbmJsY9h3vjBI4Q=)
                          27: sMeA9xl8ZUuMKTOiIPGJ4CDhuVU.roa (hash: die5Hli6P/WXh1sfkmGYgfVjSONOwz0N0yrCW9dYC6M=)
                          28: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=)
                          29: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=)
                          30: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=)
                          31: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=)
                          32: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=)
                          33: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=)
                          34: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:90:21:a8:fb:c6:e5:0c:cc:1d:0b:eb:c1:3a:e3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
        Validity
            Not Before: Oct 20 03:00:59 2025 GMT
            Not After : Oct 21 03:00:59 2025 GMT
        Subject: CN=9e214ab971002012aacf02d6386aeeb163348be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:42:f2:7f:be:3b:38:ed:0b:97:af:c3:63:
                    30:34:67:45:b6:e8:39:aa:72:df:39:d3:7a:76:ec:
                    aa:34:89:f3:57:c9:fb:00:62:4c:44:f4:cf:56:65:
                    91:38:e4:9b:33:cc:c7:66:3b:83:dd:79:59:57:7d:
                    b2:38:b9:99:c0:6f:01:4a:81:b1:9c:89:70:64:1d:
                    fd:15:a2:af:6d:b4:0f:a9:8d:a0:36:5b:f1:13:fa:
                    a5:72:8f:32:1d:c1:23:89:31:39:50:81:f2:4c:f5:
                    3a:1a:51:68:92:6b:fa:18:c5:e0:09:b0:0a:38:ce:
                    98:ae:ab:08:83:f3:bf:33:b6:30:ba:9a:5a:25:01:
                    b3:70:1a:a8:f2:88:ff:e5:0d:4d:d2:8a:e4:6b:22:
                    62:a4:3a:2e:d8:3e:8e:09:c7:94:17:4d:58:16:14:
                    08:e3:2b:c7:09:01:a3:e8:90:c1:b0:ad:62:ab:6f:
                    42:a7:03:29:27:b9:b9:44:4d:ab:d4:2b:9a:ca:b5:
                    3b:3f:a9:c9:ce:b8:d0:10:1d:0a:9a:b4:15:f3:bd:
                    0e:a2:2c:22:f4:ef:8c:3b:ff:1b:c2:2c:da:06:14:
                    71:09:98:e3:35:3b:e5:2b:2c:ff:44:e5:3a:32:54:
                    6d:d1:08:63:13:18:5b:e5:63:6b:b1:de:69:23:b6:
                    2c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:21:4A:B9:71:00:20:12:AA:CF:02:D6:38:6A:EE:B1:63:34:8B:E6
            X509v3 Authority Key Identifier:
                keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1f:4e:8c:bb:13:b7:1c:e3:ab:89:a3:fb:de:9b:75:99:e8:
         15:82:12:07:f2:6b:64:3b:18:fb:ba:dc:e1:99:fd:93:c2:01:
         6b:9f:29:ca:96:ab:1a:ff:c8:4c:eb:d9:5a:c8:bb:f0:17:e4:
         6c:c8:99:30:b2:72:4a:92:17:a8:99:4e:ac:e3:f4:93:5b:6f:
         37:01:d9:22:87:3e:0b:42:d9:99:b0:d3:27:83:54:7e:c7:76:
         ff:a6:8f:76:1a:6a:27:3e:8c:c9:96:3f:b9:71:4c:1f:d6:72:
         ef:b7:40:e7:b9:13:b7:71:19:38:dc:1b:d3:5f:a6:89:2f:7a:
         47:94:86:22:e6:82:85:26:bb:17:c8:7a:2c:d8:9f:f3:6a:34:
         e2:46:47:6e:9a:ba:c4:af:24:d3:48:7b:11:c4:42:df:29:00:
         d1:22:f3:5a:52:a4:c2:97:4e:92:dc:24:88:d5:dd:e6:8d:ed:
         ad:0c:99:43:aa:49:d5:c4:45:d3:b6:62:e3:ab:12:ce:7c:23:
         cd:7b:86:f9:3b:24:4a:41:9d:99:b2:31:ca:27:6c:63:99:62:
         db:ba:ce:87:f5:56:b1:22:34:2f:10:1d:63:c1:d4:b9:0d:c7:
         16:47:2f:6c:ab:14:d2:51:c5:9a:7d:f8:65:4b:37:56:42:61:
         b5:9e:79:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:36 2025 by rpki-client