Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
File:                     b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json)
Hash identifier:          Hq3YHNs064EpL2gez4HxYoS6XgdRvCejkVtx9pEVYms=
Subject key identifier:   FD:BC:69:9E:32:3B:B1:07:6B:6F:50:50:EC:A9:4B:50:7C:6C:2E:D2
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       0199FB7C9FA4263F155BB6CED9FC79BBA2E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
Manifest number:          1711
Signing time:             Sun 19 Oct 2025 08:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:12 +0000
Files and hashes:         1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=)
                          2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=)
                          3: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (hash: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=)
                          4: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=)
                          5: EYPDvxacKnqAiwCcH_eLh5D-wzo.roa (hash: SGm3Pfgt15u6hgkLS+1eCeSmFoagCG2dGfjKmmJu+Tg=)
                          6: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=)
                          7: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=)
                          8: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=)
                          9: PYK2EWVjncskVSm_Hdlre_awIFg.roa (hash: VWAN/Yr75jkjvzOpnYs2pejQXpvZbkMRMFEQFcncIVo=)
                          10: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=)
                          11: W1iU6dEXCAbvhe2vd34tim5xizw.roa (hash: YozzXBe30PzSXaZDLGORJxpoX87WhdRqewFqwkX77GE=)
                          12: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=)
                          13: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: QBmar2TOZhui52LYBzrsrLd5FXdM3bgA0iL3wffvYxE=)
                          14: dAxQblLMTskbiV73n6rfpF9mCXE.roa (hash: w4rhN/gv9cU9YP2OvBE0kIQ1XppJ8UD1siwlpRvp3Fs=)
                          15: fc4acbvNm8eL7oGsRsgVou-N-Dc.roa (hash: +7YGm7DsfQNaJ/x1pn93s/gp9V84BIKegCYeTVVZ0jE=)
                          16: hz97jgo9bqt0uT-ArAt9KzOXsP4.roa (hash: bhze+d6pD3xd6tpzBiM9HUGCjaef6tJylvnHETr5GxE=)
                          17: mxHk_x4_7-pXmkuBflFU5C_xuDU.roa (hash: gtzHct2NI5Df3c0cYS0pdqVMvUN2VqKpHBWx5S3TAmU=)
                          18: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:9f:a4:26:3f:15:5b:b6:ce:d9:fc:79:bb:a2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Oct 19 08:01:12 2025 GMT
            Not After : Oct 20 08:01:12 2025 GMT
        Subject: CN=fdbc699e323bb1076b6f5050eca94b507c6c2ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e6:42:91:a7:46:34:4c:ba:f9:5c:e7:27:36:
                    95:9c:bf:86:7a:ca:9e:d0:fb:cb:91:17:db:09:3d:
                    2b:93:65:dd:69:90:96:cc:8a:b4:9c:e4:a6:b8:40:
                    ec:3c:a3:5a:f7:45:e1:b4:5d:2c:c6:ef:4c:91:fe:
                    28:af:7d:f8:6d:b0:4c:f4:de:98:4d:38:78:5e:d7:
                    14:2a:4b:28:f1:9c:c4:ef:08:12:a4:30:4f:00:ef:
                    ec:56:c8:cc:0f:4d:8b:78:34:f7:a7:22:53:dd:84:
                    6b:31:62:13:48:ba:1d:d0:8b:5c:b3:ca:a5:bc:73:
                    a0:b6:cd:4b:f6:bd:90:9c:e4:54:11:ad:08:99:01:
                    f9:d5:54:4a:68:c4:eb:64:69:35:5a:09:35:50:c6:
                    36:cb:24:06:c6:b2:9c:64:6c:07:90:f8:50:f7:c9:
                    3a:27:ab:06:a7:a8:15:e6:7f:f9:a6:3d:74:77:ea:
                    33:0a:2e:fe:39:05:d5:02:59:d5:01:0b:22:f8:72:
                    6e:79:1b:f1:55:f2:59:00:cb:81:21:b9:c0:f1:97:
                    56:65:30:29:e0:c8:81:1b:1d:f6:e5:e7:b0:a5:8c:
                    a4:aa:ac:74:fc:7a:a8:4e:c0:b4:89:59:e1:40:bb:
                    a0:26:60:1d:90:44:73:13:b1:bd:9e:43:4d:f0:6d:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BC:69:9E:32:3B:B1:07:6B:6F:50:50:EC:A9:4B:50:7C:6C:2E:D2
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d9:cd:c2:bc:c8:38:e2:67:48:f4:4b:80:e9:38:1c:ca:2e:
         71:43:ea:50:1e:eb:7f:3f:62:08:55:9f:7b:31:0a:a4:a5:02:
         d6:bc:70:58:f3:3b:a8:46:4d:b8:42:bf:03:e3:1a:f7:e2:80:
         b7:5a:2e:a7:22:97:03:23:50:34:67:b3:36:83:f0:39:99:36:
         29:4b:af:2f:5e:91:64:93:e3:f0:34:c7:2f:51:25:a8:97:3b:
         cd:b6:23:d7:8f:02:de:75:f4:dc:a4:23:c3:5b:c1:f0:a7:bb:
         f8:1b:cc:0a:74:8c:a8:c5:47:a9:0a:8d:82:a6:ac:90:fe:e4:
         97:d8:3a:59:e2:21:05:8a:f3:cd:de:d5:cb:82:76:5e:bf:5b:
         17:6d:f2:c5:fb:30:b5:90:69:28:c9:4d:1f:f5:aa:90:9f:a8:
         10:a6:d0:86:9a:36:bd:96:d1:0f:d6:bc:a9:96:d3:5c:99:3b:
         6a:55:82:86:28:8d:d3:6d:fa:a3:2e:fb:19:c0:0f:50:cb:f0:
         82:78:b3:da:37:37:4a:1b:fb:ee:5e:4a:33:b0:c8:86:14:5c:
         ed:ef:7c:a2:c4:05:8f:02:43:fe:5a:1e:5f:45:61:2f:dc:82:
         ae:b7:e6:1d:55:49:77:ed:70:43:1b:f1:58:db:2f:36:a7:82:
         74:b9:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:34 2025 by rpki-client