Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
File:                     Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft (raw, json)
Hash identifier:          MjO6Z0DKxejR2FcSwp13m5qljneJ/Sm5yeFUTINo6Uo=
Subject key identifier:   80:BF:E3:DD:12:5F:60:A2:7D:DD:21:7B:9F:14:22:D8:E4:0A:D2:7B
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Certificate issuer:       /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial:       0199FC583A9228CCE622F6F64C0433AC6944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
Manifest number:          172F
Signing time:             Sun 19 Oct 2025 12:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:04 +0000
Files and hashes:         1: 1VXvbDpj35hpaFQZ8UXzXybD-bg.roa (hash: ilxkB+Px1Xt9GikiES31bq5CQR5LG9QlAhVrMmrXVW4=)
                          2: 44H6reyMjlJh9wXB8StInUQIzhY.roa (hash: e3J3/VTcHLBMV6AYTwkdZ91YDCZIqBcqVKzRD5SgwbA=)
                          3: Sy_7FwJL4d0NCZFbpKtzGVhM2AU.roa (hash: 0a4IE67+d81k9vL/7brMNSoVSXJKNVsrM4mlAuPhbYs=)
                          4: XfuXo6o_rAvS3auaRDpRyYbh-Ho.roa (hash: UXkgT+p8/Vdf5Yzbn+kQFWB0bdLGQBqp49YReLFZmdw=)
                          5: Yn15-lSTYzCSP9GpLWZu207hyyQ.roa (hash: ZRDear1XR2zxFa1Zzdm3ZmOBKV2EW2XYwQOhJXSb+c4=)
                          6: Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl (hash: 9LjJW8dByHKXZSXEEuMLECWYoJZbo9cfe0YH5YxndxA=)
                          7: ZzzCKQYXEyyoRJqn08ir4qRnYoY.roa (hash: v3CMJYaM4YjhgyRlCZi9VHNC9/ejVg1WlIGKxQSHOFU=)
                          8: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (hash: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=)
                          9: cmFziYev2vZctSPYHCuJUahmrts.roa (hash: q804av0BwiqkRQu8gnJltLcVXPVfUIsNBKBCcl2mC3o=)
                          10: d9T8_jMA5OOlUFBzolig6e4lFl4.roa (hash: 1O/cLZtIVt/wqkV2Y55eMzx0OCuyozd0/DXaB7TJnEc=)
                          11: dME3uKuz9qhKb6fYAv1PRSHYQPc.roa (hash: uScRfDQwv2RoHdAU0NPUzUenqom6BB3gL/e217qP5bU=)
                          12: hNVJZaf1Q742ZOf5V7GGPg6DwoQ.roa (hash: qJB5V0i6XcC0nn5IoRQOg8JgvG9umWvqWjmz3fhyEgU=)
                          13: nW-VI6IYWUyxTPN5fUvx9ToESUM.roa (hash: W6Eutg2L38NW+fx+Oh7St+PRc+4apbrppDeqMeQevZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:3a:92:28:cc:e6:22:f6:f6:4c:04:33:ac:69:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
        Validity
            Not Before: Oct 19 12:01:04 2025 GMT
            Not After : Oct 20 12:01:04 2025 GMT
        Subject: CN=80bfe3dd125f60a27ddd217b9f1422d8e40ad27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:eb:01:53:9b:14:36:95:82:8a:17:39:52:e1:
                    0b:11:d7:f4:cc:95:ff:9d:7f:f5:06:4a:3e:d6:69:
                    d7:08:b5:1d:e5:a0:a2:86:25:61:73:29:9e:08:fc:
                    91:ed:59:01:1d:51:77:22:48:37:47:fb:3e:dc:c8:
                    22:7a:04:7c:e2:0d:d1:f6:ad:58:5e:18:48:60:7f:
                    3b:7f:c6:f7:bf:a8:5b:06:5d:9d:fc:29:54:c1:38:
                    47:0b:a1:bb:58:9b:6e:ef:04:ad:01:c0:ec:83:7b:
                    48:7b:f7:71:03:b8:95:ae:08:f0:e2:d6:c6:f1:75:
                    96:a6:94:6e:82:36:ee:cc:ae:7e:e8:38:53:d6:0a:
                    95:1b:c0:73:f2:42:11:5b:79:b8:2b:66:da:6a:f8:
                    99:6b:b2:7f:57:e5:0a:ed:a2:30:53:80:89:a5:56:
                    cc:6d:14:dd:a5:8b:42:1c:70:36:da:ec:e1:e5:39:
                    25:ae:48:d8:e3:d0:b7:32:ff:56:fd:cc:f6:50:b6:
                    37:bf:46:68:c1:ac:9d:8b:62:97:a4:c0:08:9c:fb:
                    a4:9b:c2:71:38:ee:d3:df:19:62:2d:5b:82:ef:02:
                    43:d3:cf:81:f4:a2:91:3d:db:f4:e3:30:18:24:14:
                    11:2b:88:72:12:e5:b8:27:a6:67:70:cf:f9:87:c3:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BF:E3:DD:12:5F:60:A2:7D:DD:21:7B:9F:14:22:D8:E4:0A:D2:7B
            X509v3 Authority Key Identifier:
                keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:72:c7:a9:f9:ac:fe:70:61:48:4f:e4:4e:00:af:ff:ea:08:
         c7:b1:e4:62:0f:26:b8:cd:1f:c0:00:85:95:44:c5:8e:27:4c:
         28:3a:d4:88:53:da:53:4b:78:d7:8f:ef:e9:ba:57:28:9f:af:
         26:ef:c0:14:37:ff:b1:d4:bc:fd:14:70:ac:ae:94:89:d5:df:
         43:bb:3d:15:76:32:e3:f4:89:8d:78:32:95:78:c9:b5:49:1c:
         65:64:33:03:bc:d2:16:b9:41:10:63:d8:1d:e8:94:79:15:84:
         50:0a:a5:89:08:a6:22:d7:30:6e:31:50:86:77:a4:f3:29:05:
         98:02:93:fe:a6:d9:7c:21:07:d0:5e:3d:b7:ee:d7:64:bf:75:
         72:d6:d1:d9:45:60:ed:2d:fb:74:cd:8e:75:6b:a5:ad:c4:9b:
         cd:1d:bd:0f:4b:35:30:68:a4:a2:0d:2e:83:73:cb:62:83:9d:
         b3:0f:48:0f:d6:fc:00:c9:4e:e6:3c:03:a8:55:b6:aa:f8:c6:
         14:e2:8f:b4:17:34:12:d2:6d:8d:86:51:40:c6:ed:9d:a4:77:
         b4:ce:78:d9:4b:09:c7:86:11:1c:3a:d3:72:63:fb:c7:7a:14:
         34:e2:db:55:a4:f7:f3:c5:14:5c:db:49:3c:f3:ec:b3:9f:57:
         c4:fa:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:35 2025 by rpki-client