Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
File:                     4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json)
Hash identifier:          jWpvKmjSsZOD3hIL9Hq27IrWNhaJ+Hzi9hmG2tsJVe8=
Subject key identifier:   B2:16:4D:64:61:68:BC:EA:75:91:DD:47:40:D1:81:5B:03:61:B8:D9
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       0199FF22F13628156D9915E78F59AF9E2EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
Manifest number:          13DA
Signing time:             Mon 20 Oct 2025 01:01:43 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:43 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:43 +0000
Files and hashes:         1: 1-xvBLiVIr5eO0ojnuxuHIDpGNj0.roa (hash: aK7ZmDyAzamzfU5scYPlW3gVBsMwISXT9xd5u5skngQ=)
                          2: 2BXalnRCdxlKBucFyUnY3v8NXIE.roa (hash: qbascniAVekJiZabGEHd3VuxY6P4azJ4yMUjYrzFjJo=)
                          3: 4gUeII5uNOSsk7ig0e6KHlG6BHA.roa (hash: xRGa4dvp0FYk/JLyi3pQEJ/XtveeLwqm3x3hfczzGhM=)
                          4: 4oFgbvjivonc75j6oWwkurpCHuo.roa (hash: wfNIhptalUUsPvpgzrp9sVZFBDTSEW8d7lJfHh/ba4k=)
                          5: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: Mnxit5GK6Dkm1gd5pea9GAi5FWH4lvC0OptNzy6ISFM=)
                          6: 5pnldwPETCzwQT8iJkyiSoWD3_k.roa (hash: oJntOrxxRhN9f3IdHJXmdQbwUKQGLcIDOqq/1tPI4PI=)
                          7: 6uM9geMN5E_JocXQTslv41Eocx8.roa (hash: Dlfx02PXvOyh1z3EkOuN2tEacNYqoH0GaOFD4WRWv7M=)
                          8: FBdxjOu8SX4p5g9e-XxmzyShdHQ.roa (hash: mngc3R66oJgb9rQ/5d73AA7n7b16oOQZDw1SHYqnhTA=)
                          9: HglCnD55qDv-Q0rgVR2_h-nRZkY.roa (hash: Qc4gkZG+SuNlsvP0f5FqX4UkqgAGysqsANOz/SQ42AI=)
                          10: HtZ57OBsmdXhe-F5g-lmzijNxck.roa (hash: P0xwVuTg9ir4CIbwZxsA+9nWaNItfve6TrNuKY2zqxM=)
                          11: PeZtOK6XcrYqlf82Nopp1BFWAXQ.roa (hash: y6xfqENV86+DxwWiv0cIANxmFCLNJHi4fntVAOoYQLI=)
                          12: RlHI2VPMUxz4vWMxsz_aSP7Y58A.roa (hash: o2Eco/oz0OjYhDyp8QR2quUuINLwT9HDpRtnEqaVUfg=)
                          13: SMigdfBEZBCpmCAUQemz1HzXzsY.roa (hash: rYoGdgZTMvC2OSoASCQvWU0g5tSPQxjtZ99HNktE1UI=)
                          14: _DswbRpVkPXQzJnopc-2rpO7ck0.roa (hash: sOdG0gaxCyeQh9EtJRGptli2IEmCGrHJQ/h1DmBq1IQ=)
                          15: dkbWTo4bq_yPPRqYmeLtAion_fk.roa (hash: DMCPEeMn/42xBYmE/TT+llc8dW4AkHYEj+Bu1a5chCg=)
                          16: f8wMF_0nYOjBC4T-3T9maTV9XOg.roa (hash: HH9Xx2RMXttctrpMSPb7lv2kW9EcD2NdHUms9yLQH2E=)
                          17: p_QYv0L6aYK512B3fR5CFvOoznk.roa (hash: aDfS/bDbCsW3S/qJ7SubMpjp1TuE7mqqhF55UFptL5k=)
                          18: sP_P89Gjqv0cRXNUr9_pv6JCftE.roa (hash: V9LKomJ1OLCr/vLBTnJjw6UPEUZRVYDPDN8HoyzesJg=)
                          19: slG7etJhHMxEF_RaKXpH3iT7Jqo.roa (hash: Jw4LSw8veeGAScSQy+xbjepFLappzSdTU9yGBS4At04=)
                          20: wMpCtJuJnMKH9PZbiphThxb5p3I.roa (hash: ho1eRYtOPimdRyr4aEbAZG/GlZlHUFROWz250IKu38c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:f1:36:28:15:6d:99:15:e7:8f:59:af:9e:2e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Oct 20 01:01:43 2025 GMT
            Not After : Oct 21 01:01:43 2025 GMT
        Subject: CN=b2164d646168bcea7591dd4740d1815b0361b8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:50:26:cf:03:7a:d9:cc:af:a5:db:25:2f:
                    69:ee:14:2a:49:9a:34:bf:1b:65:b3:39:a6:df:9a:
                    ee:da:ed:8c:53:90:50:8e:7a:7c:7b:ec:9b:ad:ba:
                    2c:3f:8d:ef:22:7b:57:73:b1:ab:ec:0e:15:df:af:
                    b6:83:24:cb:2c:9b:a4:99:4d:37:47:e9:28:e1:80:
                    f4:b1:0e:73:02:5e:13:4c:6c:08:25:79:32:45:fd:
                    17:a8:7b:44:78:4c:0a:34:6a:70:0b:57:37:bf:a8:
                    c4:8e:40:25:8b:92:eb:a2:01:9f:8b:01:34:89:63:
                    15:a8:bd:ac:36:32:44:7d:d1:b6:7e:61:2d:36:f9:
                    44:40:f3:4f:9f:6b:7a:19:d8:e0:49:de:b8:1c:51:
                    46:36:42:6b:7c:a2:57:b1:57:2f:20:c9:89:d3:d4:
                    79:94:45:b3:cf:39:68:7e:7d:3b:44:14:4a:9d:ed:
                    af:f1:77:d9:56:dd:a8:83:54:a4:45:72:6d:e0:e8:
                    be:b9:cd:1d:74:30:0a:5d:a5:58:9f:4d:53:09:00:
                    45:82:fd:db:d6:f7:75:97:44:aa:91:40:85:f4:f2:
                    28:70:6a:1d:b6:3f:2b:a4:53:32:38:82:13:95:5e:
                    d5:df:66:db:51:e1:eb:0b:8b:44:ba:cb:6c:e9:0a:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:16:4D:64:61:68:BC:EA:75:91:DD:47:40:D1:81:5B:03:61:B8:D9
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:4d:82:37:67:a7:b0:34:88:2c:f3:bf:a9:02:8b:27:1d:
         ea:31:6c:50:f4:79:3b:2c:3f:38:34:28:83:a2:dd:be:89:59:
         5c:a7:37:ad:19:f1:f1:eb:2a:d3:11:5f:6f:49:b3:35:b4:47:
         b3:0f:58:e9:25:07:e8:f1:2a:6e:36:1c:15:03:ca:87:81:e8:
         33:38:16:c0:b7:bc:5d:18:a9:3e:36:df:97:81:8b:79:ce:92:
         9a:8a:f5:a3:56:8a:77:5a:43:21:90:1b:71:57:c9:5c:16:a5:
         da:a1:1c:bb:bf:27:ca:8e:1b:98:0b:d8:9b:02:90:7e:a6:e7:
         01:b3:8e:89:90:30:bc:90:9e:0b:86:6c:58:b8:d4:33:7b:ea:
         0d:cc:4f:28:45:04:9c:72:0f:bc:93:61:38:c0:bd:de:12:cf:
         c1:48:08:ea:61:1b:44:1b:dd:4e:61:c0:e8:26:26:90:9b:49:
         a3:1b:92:d9:a9:34:ab:19:a0:eb:8d:11:ee:a8:1f:85:02:29:
         32:15:b8:9b:dd:8b:0f:d7:2b:ef:b8:0d:38:e1:33:f3:d0:32:
         75:cb:bc:56:52:b3:14:e5:69:f7:d9:ec:9d:70:85:97:ab:d2:
         2c:9b:87:8e:d3:df:04:2b:c8:77:8d:35:31:63:bb:1b:fc:83:
         8a:81:65:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IvE2KBVtmRXnj1mvni6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjUxMDIwMDEwMTQzWhcNMjUxMDIxMDEwMTQzWjAzMTEwLwYDVQQD
EyhiMjE2NGQ2NDYxNjhiY2VhNzU5MWRkNDc0MGQxODE1YjAzNjFiOGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDxQJs8DetnMr6XbJS9p7hQqSZo0
vxtlszmm35ru2u2MU5BQjnp8e+ybrbosP43vIntXc7Gr7A4V36+2gyTLLJukmU03
R+ko4YD0sQ5zAl4TTGwIJXkyRf0XqHtEeEwKNGpwC1c3v6jEjkAli5LrogGfiwE0
iWMVqL2sNjJEfdG2fmEtNvlEQPNPn2t6GdjgSd64HFFGNkJrfKJXsVcvIMmJ09R5
lEWzzzlofn07RBRKne2v8XfZVt2og1SkRXJt4Oi+uc0ddDAKXaVYn01TCQBFgv3b
1vd1l0SqkUCF9PIocGodtj8rpFMyOIITlV7V32bbUeHrC4tEusts6Qo5bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIWTWRhaLzqdZHdR0DRgVsDYbjZMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxJNgjdn
p7A0iCzzv6kCiycd6jFsUPR5Oyw/ODQog6LdvolZXKc3rRnx8esq0xFfb0mzNbRH
sw9Y6SUH6PEqbjYcFQPKh4HoMzgWwLe8XRipPjbfl4GLec6Smor1o1aKd1pDIZAb
cVfJXBal2qEcu78nyo4bmAvYmwKQfqbnAbOOiZAwvJCeC4ZsWLjUM3vqDcxPKEUE
nHIPvJNhOMC93hLPwUgI6mEbRBvdTmHA6CYmkJtJoxuS2ak0qxmg640R7qgfhQIp
MhW4m92LD9cr77gNOOEz89Aydcu8VlKzFOVp99nsnXCFl6vSLJuHjtPfBCvId401
MWO7G/yDioFl6g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:43:14 2025 by rpki-client