Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
File:                     bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json)
Hash identifier:          3nYVwtgO3ttJex2ocMtImrQgPkvJHeQUcI2sfNZduqQ=
Subject key identifier:   9E:04:A3:07:65:8A:FC:1A:FD:25:46:68:BE:F5:97:8C:38:D8:62:BF
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Certificate issuer:       /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial:       0199FEB47F3DAA10C7E3C08CB24A502D0AC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
Manifest number:          13A2
Signing time:             Sun 19 Oct 2025 23:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:05 +0000
Files and hashes:         1: 0_mR_q2PRjMrC6KY1_UxRD8g8so.roa (hash: y/csCabR2wm0syOrpZHF70QEhjDWUBWGFQAkqx7SNyk=)
                          2: 4TefOlatmM0RZvlgyykepaTA69w.roa (hash: oK3ggt3FwEGdGg67HpifWxggQ4sHuczhuCdiLpHFNGo=)
                          3: 7X_plhmrvkux1oibBja4OB7LETs.roa (hash: gnMgxFgUS9IL4J+87g7lZ1R3Q2jpCUYTvtTDs50/e2w=)
                          4: AIEW49j5InMuprcIv1re5ELo7Mg.roa (hash: CspD88WXE/VTrfWO2t59apJyKXsmRJQByqBIfAYqYok=)
                          5: N2s6KqnnW9qGglbgsxkDhGmT3aQ.roa (hash: 1ZleteROqD8Qub7BlNQREKgEscTZbJHqZvsJY5lTHPU=)
                          6: NCuZRLXUSqeQd0-K94k8sdWt8i0.roa (hash: 9KnkKk3vCESK/jiryTSBEmdsg4CHDO3QXfIZjaFh0FM=)
                          7: VDBZ-Do7oLcSjkfG0QXXLZFsn18.roa (hash: tsSmWQNC/m3Eo2x7t6PBKV0awmBGlt2M1agXJLIK2d8=)
                          8: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (hash: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=)
                          9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: cssqf1fZZ+j8E4GViw1KeNdFVA060I7pwZ6X7PEf4ow=)
                          10: eIFvvK-ivxwVefbgEMRWrAvh218.roa (hash: enbiuy39QSMflYfm+7UJdD/VijdNzRJOnnOULTcOwog=)
                          11: lRDpcMs9bdL5LekISXn8HOYdt5w.roa (hash: wQgu4dQRpBf8xSuiFs4AOLGSs9pN4U3S1WwC8RUnajc=)
                          12: sCxYlTWiDhdRMcngf850A6XqaOE.roa (hash: kqrC9Mj0ll887+4wrCmPGnjHuKfBNUmVpy0g2oMFtCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:7f:3d:aa:10:c7:e3:c0:8c:b2:4a:50:2d:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
        Validity
            Not Before: Oct 19 23:01:05 2025 GMT
            Not After : Oct 20 23:01:05 2025 GMT
        Subject: CN=9e04a307658afc1afd254668bef5978c38d862bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:54:e9:65:fc:bd:97:f3:e9:05:52:0b:46:
                    1c:56:f2:b0:65:df:37:7b:4e:27:70:e9:a4:68:b5:
                    dc:f4:28:5e:cd:2b:e0:63:39:af:92:75:db:cc:fe:
                    b4:52:c6:d3:77:c1:6c:2f:a8:4f:23:37:0f:21:49:
                    1f:9e:fa:28:ed:97:60:2d:f7:32:2a:40:d5:bc:82:
                    27:6d:1d:1f:d6:08:d3:9c:32:e2:d3:ec:26:ea:96:
                    5d:c0:8e:90:8e:6d:d0:6c:fd:70:82:c7:4b:91:73:
                    4c:b4:55:1d:61:55:90:e5:44:4d:2b:e8:51:0c:84:
                    f2:27:cc:6b:d4:64:3a:39:15:11:da:c8:31:5c:d3:
                    92:0a:bc:f5:5a:00:e5:d8:83:f1:0b:b9:33:1d:df:
                    74:91:da:de:03:a1:7f:b1:d3:53:6d:de:f6:9c:6f:
                    69:9b:84:97:56:f6:b9:53:c5:d0:92:eb:f5:9c:f3:
                    7b:93:82:69:3d:4d:c7:0e:d9:a9:5f:28:ad:73:73:
                    4c:e6:56:b8:82:55:5d:00:dc:ef:e9:37:32:ae:5a:
                    84:1d:03:68:2e:86:56:9b:26:f4:23:a5:00:bd:4a:
                    24:9e:5d:cd:8d:d3:ad:a5:90:29:32:6e:fd:9a:03:
                    db:58:0a:a6:c2:94:98:3a:a2:1a:65:fa:ad:f6:d6:
                    45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:04:A3:07:65:8A:FC:1A:FD:25:46:68:BE:F5:97:8C:38:D8:62:BF
            X509v3 Authority Key Identifier:
                keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:89:d0:4f:63:40:e7:37:b7:0b:52:85:90:12:ca:06:30:f4:
         8c:18:95:03:fa:e6:14:90:9c:ba:35:ea:55:1b:ef:ad:c1:d1:
         ad:3f:77:09:3d:02:35:d6:50:40:d6:d9:a6:73:ef:b5:3c:2f:
         0c:31:1a:b1:82:74:c1:47:73:cf:c5:96:f8:4e:5f:e0:6e:fe:
         b4:53:06:75:2b:ac:ce:cc:5c:87:e2:52:fb:e8:28:af:85:64:
         21:7e:b7:78:1d:14:6d:5a:48:21:73:c9:7f:02:07:70:5e:ea:
         ea:a6:94:aa:d8:6a:28:7c:6a:13:44:c1:c8:75:5f:42:14:1b:
         03:d9:31:83:26:ac:35:68:4b:1f:cc:80:4e:99:ff:76:ac:ae:
         0f:fd:d3:8e:9e:b6:90:1d:34:95:53:b4:61:90:4e:98:93:d4:
         0e:41:fa:67:52:f2:ee:b7:a7:87:1e:22:95:5f:0a:83:be:16:
         20:c8:08:db:4f:eb:40:c2:e2:6e:a6:19:83:9e:bc:63:f3:4d:
         45:83:5a:88:6b:2f:64:cd:46:c3:f7:db:03:c9:c3:0f:63:6a:
         9b:78:f1:dc:eb:46:2a:62:ea:8e:a9:f6:0d:b5:1b:7e:c9:6d:
         9d:cb:75:be:0c:d2:85:67:37:9d:99:73:74:c1:f0:55:48:ca:
         67:3e:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:20:35 2025 by rpki-client