Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
File:                     RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json)
Hash identifier:          PgDfLVO7ypiUC0mQNKRsMYDYG6yijylMIhaSj9aFSOg=
Subject key identifier:   C4:B6:7A:81:7D:C1:FF:EF:DB:DE:50:AC:7C:F5:83:25:A6:74:5A:1D
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Certificate issuer:       /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial:       0199FEEB92A7D755D02428C293253395FF78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
Manifest number:          0A8E
Signing time:             Mon 20 Oct 2025 00:01:15 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:15 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:15 +0000
Files and hashes:         1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=)
                          2: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=)
                          3: 9-Cs-wlSKolkQOZlHuZ6o38xnW8.roa (hash: /LvilRmKOS6giT5Dw0+bvBLFwH/Vk7jUGiOc4qBQkvY=)
                          4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=)
                          5: CshdLYgm8KyBI5ue0kfqXsT_Uys.roa (hash: DVS6FpXLV5zruadQ+b5hngh4jzKnFCNJRTeuOL+rHMo=)
                          6: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=)
                          7: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: E3mdD2N46FWkrVRmBai5Zb5N7Om6Nc58XukGGKXwg+Q=)
                          8: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=)
                          9: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=)
                          10: bsJ2xZlOkw1plvuA7l4e3XmHypY.roa (hash: 1vESi505hq9zZ4EhI/OkoYePF4oay9Y9KHYuJ7nDjEk=)
                          11: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=)
                          12: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=)
                          13: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=)
                          14: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=)
                          15: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=)
                          16: s34gFp_Dg8YCv8xU55YOYuR_tp0.roa (hash: 6OSop7WtLWi7lLLdg7yDCXvjXq4AkQqEA6GX04GSf58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:92:a7:d7:55:d0:24:28:c2:93:25:33:95:ff:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
        Validity
            Not Before: Oct 20 00:01:15 2025 GMT
            Not After : Oct 21 00:01:15 2025 GMT
        Subject: CN=c4b67a817dc1ffefdbde50ac7cf58325a6745a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:32:0e:c2:4c:33:65:4a:e8:7f:c6:64:0a:
                    1a:48:ce:fb:10:93:34:f3:f6:cd:4a:5e:aa:2a:c8:
                    81:e5:7d:1c:f1:9c:ad:8a:de:d1:40:01:d8:b2:ff:
                    e5:bd:15:d6:c8:c5:c5:17:f7:50:a4:eb:b8:1d:d2:
                    f0:e6:f6:07:11:22:1c:17:05:de:22:8a:b2:36:6d:
                    fd:cb:bd:10:2c:91:e4:52:62:a8:66:47:04:c4:5b:
                    58:28:22:30:0b:35:18:8f:e8:5e:99:38:c6:8e:72:
                    bd:42:39:13:5f:08:ae:e4:6f:50:27:a4:01:44:3a:
                    b6:b9:2e:a4:40:eb:26:44:d8:71:fb:94:41:68:e7:
                    00:75:72:4e:a2:44:82:17:89:73:55:67:be:40:6d:
                    bb:ff:94:63:95:bd:3b:f1:93:c4:2b:c0:ab:06:45:
                    1d:69:e4:f5:7a:2d:76:97:6d:90:0a:ce:8e:e8:ac:
                    6f:34:ff:17:15:cf:c8:6a:ff:ca:49:ea:51:d0:11:
                    d7:15:e9:82:a6:15:f4:2b:22:f7:16:11:cd:b2:b8:
                    c2:8f:2c:9a:34:91:83:03:48:a9:a9:0f:1c:8f:c3:
                    49:0f:d0:33:69:fe:00:7e:d8:fc:2f:d5:60:23:03:
                    cb:33:3b:5f:c9:ca:3f:46:0f:73:2a:d5:36:0b:1c:
                    ce:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B6:7A:81:7D:C1:FF:EF:DB:DE:50:AC:7C:F5:83:25:A6:74:5A:1D
            X509v3 Authority Key Identifier:
                keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5c:0c:79:58:0d:d0:53:83:bd:9d:68:99:44:31:a3:e8:90:
         94:53:13:7e:01:9d:87:a4:88:50:77:ec:fc:5b:e0:30:f3:6c:
         b8:48:36:7f:bb:d4:7e:89:09:fa:e2:28:2a:93:44:fe:07:e1:
         a1:82:ad:f8:6a:1d:90:b1:a5:d4:c5:39:90:0d:33:e6:cc:f9:
         54:d0:0d:df:48:c8:db:59:33:63:cd:4a:eb:02:d4:be:af:5e:
         73:2b:57:93:07:b9:0b:f1:35:34:1f:a0:18:3a:92:fd:5f:95:
         f3:71:df:23:52:f7:63:97:9c:6e:6b:4a:d8:0c:be:43:a9:7f:
         ed:f1:0f:76:d3:91:1a:55:2c:00:ba:b6:1c:3f:c5:df:eb:fc:
         82:97:d0:d9:d0:39:27:9a:d7:8f:16:75:d5:8b:c1:6e:83:58:
         ee:31:0a:09:16:c5:1f:ff:d3:10:28:e2:4b:c5:56:b4:ec:76:
         14:7d:a0:d8:12:28:af:af:39:03:ce:75:9f:45:52:e0:5e:9e:
         3d:d8:18:fb:aa:d6:ba:2b:5c:37:33:ce:c6:2e:6f:aa:62:f3:
         84:70:21:d1:a9:54:97:0e:c1:56:72:15:9a:cf:72:68:eb:fa:
         41:36:6a:02:8b:14:5c:bf:51:34:8f:8f:4c:80:d9:51:19:ea:
         54:9e:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:19 2025 by rpki-client