Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File:                     bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier:          rit0e19JiY3PpJr19s98ui42v+b+KlqyHWWUDaBDNVs=
Subject key identifier:   3C:21:2D:E7:65:F8:13:8C:DF:57:27:DB:EA:1D:CB:ED:1A:55:86:F0
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer:       /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial:       01983616C7A50AA00D2B769FD1B060CE453C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number:          0950
Signing time:             Wed 23 Jul 2025 07:01:59 +0000
Manifest this update:     Wed 23 Jul 2025 07:01:59 +0000
Manifest next update:     Thu 24 Jul 2025 07:01:59 +0000
Files and hashes:         1: 1sTgJl3sTanwlgMRcn77_2dUJM8.roa (hash: vo2Vicdpq6fz2WwOWR4dxMKYZ8Z42zVAgbzJ2M75hlU=)
                          2: 8siXkxau2138dP6m5aJN0wtpHTI.roa (hash: GwsrPvPPt7Z/Ni79LEzNptMmMFygBlI/k5u7rDJcMQE=)
                          3: AR8_wIl8DUpYP7KubtK_WjTI9Yg.roa (hash: VBK/s5fQa4YZQsAHU7WMS4ftCQ62G//BKKOQdCIew7A=)
                          4: DEkgt7AE1Iurv1gdgI4QOvTs29s.roa (hash: YYhF4Wk1OWCgiTiDwmzzUdGICChv/o9/RpFOj0wkgnI=)
                          5: EyhOhnS-dh85bLrIatnotrj633k.roa (hash: uaMbS52/Rq7xCKN1Go+BTPVuBTmDhRAWyG5p4TGatBI=)
                          6: Gfn1jwtlF8FRxL3Rz03Ea937VEE.roa (hash: RFgXaXGTO5AA2vd/LK/W065gZCsDh6ylVKtNqAJn6Qc=)
                          7: HU-EIhuZhffeHTr6oBxxd7aAP4I.roa (hash: dWetGyfBqetMsgtm2EjHhfWyWz5E9rrZ+ucVfb9UJfQ=)
                          8: QIzeMRg3Jrkt-xlR_52cuEGiuBc.roa (hash: I4+1yKNsyiVB5SA6pW3mkOMGZ2Rt1t8pp1b96alaFKc=)
                          9: QnNCDuIZzZJfBF3ECszlCfF7nQw.roa (hash: 7YHX2znxxfS3ObXlB9bs5pQPuS62yS0sohOCK8USfs8=)
                          10: X6xEtdbtx-FA89KexAHlhM8onBA.roa (hash: rlVOKfCoCiEEfjhU6f0pemc0VZKNKC23+JgJYG4rtvE=)
                          11: a0c5tAP64rJrQGbTaO53HXEP4pM.roa (hash: UZ8YKqqX+S+lHueXoZZQjZ+yCy8BoEc9t2MsAApSiJI=)
                          12: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: Qra0Y5PB3miueQpoERZHBrS66I8pFOyo6DUqkhIGZeg=)
                          13: doqSreqZ0puIFaWYepjXsiORFJA.roa (hash: xuSkxml5vM8NDv68l6QOx0gv3YZ4+ZcGerX4dTq1v8c=)
                          14: hSaLMGjt5DT9J0Q8fYxqjQ27DJ0.roa (hash: Vs4l1+koaU4BTtoLKZvO0IVoW3ur4SIH0UypyRQaGng=)
                          15: i0OpGL6o9siQU9k8jbmuQiPpOOw.roa (hash: jgZAPRJyPw+LpYm6mw4QOAGT6CLfAJ3m4VbuEluN/rg=)
                          16: jcQFU7Zk7-0Lbr1GReTX6bLuEPE.roa (hash: 6B+Zw0i1FE8WuG3O7mAFWms0Wi1ZgHxcSaTjZME1FJE=)
                          17: mYnhwnu7xK6th8xjixqpd0tj3F8.roa (hash: sG+spce3EPIId/QZOF+TJDOdXx28q2wnT9Bt9/T0FwE=)
                          18: oZj3kamLQ64qe41NAn79tJxrn3A.roa (hash: aQLWnTTQZBYLNZEs0bSmxS+Cx6vWjLj05WSdg5JVYgs=)
                          19: uID_AUaziSnLI0lAwJTwsfqCxRw.roa (hash: QtgKVOPT2HRLTAKe7wnPyZFAiV4EOv0IQt4AKIrv4xE=)
                          20: xu908d1x7ZZAyJSQllDU6MuExl4.roa (hash: lNKGrgJxnj6QPFbpQgdciCH/wYNErsT7dmA1/kh6l/c=)
                          21: yMOpAmqxqg0a6EDYQWzT4EavBvw.roa (hash: yicZ1paw2jc8xl9euKIWprR6Ij78FDs/LCEhj1EOd9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:16:c7:a5:0a:a0:0d:2b:76:9f:d1:b0:60:ce:45:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
        Validity
            Not Before: Jul 23 07:01:59 2025 GMT
            Not After : Jul 24 07:01:59 2025 GMT
        Subject: CN=3c212de765f8138cdf5727dbea1dcbed1a5586f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5f:fd:e6:69:b4:61:db:38:48:6e:c2:13:34:
                    66:31:b3:d6:b0:15:61:d6:09:f3:6d:0d:17:19:d5:
                    be:39:85:27:26:37:4a:7d:f1:0a:7f:96:6e:77:49:
                    4e:54:7a:83:12:5b:87:dd:27:13:bf:cb:0d:88:62:
                    68:16:9f:0e:42:e3:ca:55:c5:1b:c9:4d:f6:c6:9d:
                    f3:ec:b5:d9:24:d2:84:46:9f:3e:2d:39:91:bc:f5:
                    a5:6f:aa:90:66:27:e2:5f:d2:f3:f9:d3:a3:57:94:
                    37:46:03:92:b2:e8:50:df:45:33:ad:36:9c:c4:ad:
                    e3:7c:20:2e:e8:27:f1:1e:dd:4c:64:47:f1:b2:c1:
                    0d:65:fb:d2:5b:49:09:27:12:d3:d1:6b:55:c7:da:
                    44:9e:7e:f9:8d:01:f0:4a:ae:d5:2c:36:b9:bf:5b:
                    9c:de:69:48:f8:89:40:6d:4b:ae:cf:16:fd:78:64:
                    c9:57:15:8f:d3:92:b9:44:51:ae:df:a6:7e:c4:e1:
                    c7:ea:6d:43:69:5d:6b:f4:1a:af:24:7b:77:55:a3:
                    b4:72:9f:71:e5:42:4f:ac:fb:2f:e9:db:d1:43:0c:
                    68:5d:2b:9f:68:f7:ad:26:9e:a2:72:5b:15:b5:bf:
                    0b:62:3a:15:63:f7:02:08:24:80:2f:a6:1f:42:80:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:21:2D:E7:65:F8:13:8C:DF:57:27:DB:EA:1D:CB:ED:1A:55:86:F0
            X509v3 Authority Key Identifier:
                keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:49:84:99:65:c9:9a:f6:b8:0c:a2:86:23:72:b8:76:58:94:
         9a:77:32:2d:49:4c:b8:ee:80:9b:6f:c8:62:26:5d:d0:f6:54:
         ec:f9:82:e8:6a:78:93:87:97:46:81:26:92:41:6c:3a:9f:3a:
         27:b8:0f:5c:23:f8:17:86:01:36:5c:21:1b:c4:9a:c4:46:85:
         a8:f9:4d:77:35:9e:ff:8c:f0:d5:86:96:4d:ef:fc:9a:da:ae:
         a4:3f:c6:ed:da:77:f0:f5:0b:7f:eb:62:1a:1a:4d:5d:f4:5e:
         09:71:9a:cf:04:70:44:7d:cc:94:91:48:11:65:0d:b7:0d:02:
         3b:1c:c2:54:b9:fc:c8:11:c5:2c:69:8c:3d:10:78:9f:af:74:
         0b:cb:12:60:6e:ff:55:05:f1:56:8d:fc:cb:a1:f9:2f:1d:4f:
         71:c7:b6:49:d8:7d:26:41:a7:1a:75:ff:1e:09:ec:bc:1d:7c:
         e7:f9:1f:2f:41:f4:5d:3a:d0:44:79:9f:a5:e8:d8:37:c8:68:
         b8:75:63:e2:3e:f6:e3:bb:35:ef:f3:d8:1e:b1:2f:ea:a9:eb:
         e3:90:1d:2e:d2:c2:36:02:ba:d6:6c:ff:3e:b8:e2:91:52:92:
         0c:91:b1:29:f9:ff:08:ca:a1:42:3f:4a:0b:89:2b:16:1b:93:
         ef:98:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:45:30 2025 by rpki-client