Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File:                     C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier:          jzmmS6v7n3HtSFdPGWvF8U+f1aEtv3hAEVcRpObkdFU=
Subject key identifier:   2F:BB:CB:74:3B:99:13:CB:F0:8B:B8:23:5D:B2:17:59:26:1D:0C:FC
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer:       /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial:       019A0C390E120EE090ACE2FD6AAD6A1E20F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number:          03CB
Signing time:             Wed 22 Oct 2025 14:00:56 +0000
Manifest this update:     Wed 22 Oct 2025 14:00:56 +0000
Manifest next update:     Thu 23 Oct 2025 14:00:56 +0000
Files and hashes:         1: 1-l_gre_pxhYS4_zZwDxZG1Nt_5c.roa (hash: 79+LUQppQGCR1ma6gkDs/MxaDYgg8iUK7GVvWKXvzJ8=)
                          2: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=)
                          3: 5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa (hash: xzEHQ5rCOad65DlaTD/0zOgecwAYSd4+GjZ0k61Ou6I=)
                          4: 6YJjObW1_CPDgXKpHS-TcyIptqo.roa (hash: jjGiP1pdwyr2zLGuJkHaIJCjcU/oN7YWkJKwf34n+BE=)
                          5: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: bWGKkXqNZPu9RK+NUDO3vMmBEBD58XOt2tnYmUjmcDQ=)
                          6: DOAEIvCj-u7rs38MBt2OY5TO5ck.roa (hash: L2KlUD/3hwbtTHy39+u/XA4u/e4Wc7hTiaNnBwb1Xl8=)
                          7: E0upJVXmvrb9QB1vHUoxxOXLw38.roa (hash: 4mhxGqIUoY4Bc+dX0kK4RcxfBAsMjNcaP7xXT7MwJUE=)
                          8: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=)
                          9: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=)
                          10: QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa (hash: B0QgrQfgkvXm7vAQLsl/pTmN0f26n576ETmzI38WdjE=)
                          11: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (hash: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=)
                          12: U8Lz-woBuayQCxonI-hxDcK01_Y.roa (hash: 418Oc771TIXqLSF+QH4I7VyOD2EV9+QkDmHN3kvRN94=)
                          13: UoCD-Jw-d36aunkLRuz6ly1x2v0.roa (hash: IL5ej7uIEFxvULFt7FLIix+P1FPdxsPj2Yas43tG1o8=)
                          14: XKsWSdLhRTm8gjvClV_GNNpoCtc.roa (hash: KzhS3En/I42C0iMadSwm0isXBogBsqCsvnDb64RYfSg=)
                          15: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=)
                          16: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=)
                          17: bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa (hash: 1S0gGuFvbVkAU0skMefR3m5Pq9v5mIgplTKpElL9/XI=)
                          18: i9pP0UdC60SIkPjAyVnRvnkLQpI.roa (hash: DCLA36TFrAK5MuagUyc5DT4JGQhrH1BUGZII4pznSfI=)
                          19: lO1MSRjPmSLDkgv8jGt5ktPBHoc.roa (hash: og5imLvn3cUBwDvPoHiD1z3A3c1NAGRPK9XyazGlNpE=)
                          20: lzUrfdjvi4X0daNPvReXYlaxfUs.roa (hash: mmPPsLggwrEErlARtsPqmojwc7jNfBJKDlKr0vM/KnA=)
                          21: mFwXB_3EhYgPmb02XlkNrRIYAks.roa (hash: +phEwBPGNbWcGWHb9f7x0gtZyCJo2VWruE9fcfo0yZQ=)
                          22: mrriTsp_r84VvXOZ9vwCDiafNfA.roa (hash: 237ftlrT6P/fqAsRok2Wq3N6bqs/PXVVGhXC7gyjJzY=)
                          23: pPTTLhksK7v4ipvrbQpEGSDbgjk.roa (hash: o2I/GTIezXoCE5dcTj8iZrNN0OoZ4v7wD/kJ0bQOHoc=)
                          24: qa2CW4uODzDkm2CmPACzVMfywlo.roa (hash: hm7X8GWW08mhXHAmgZF26ZoPtjwf8VScQbQBIGqBTN0=)
                          25: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=)
                          26: tVTdYwnYYp3b_eUhbVSQRQeadEU.roa (hash: 4Nl3NSw+3Qg0hgNeV3S8TaiNWf3yjru7QAcwwQS9RII=)
                          27: tra90j-TkDoNhw2jYUOuCLQtLHQ.roa (hash: rMHYa+7snR9OTOD/IZ29XHnehX6LzLjK9r4pNKm+rGM=)
                          28: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=)
                          29: wPGbhSOTVO3W6IHlbrSy3bcGNLc.roa (hash: JCi40r9Uzz4ur2p29IZ7AQpEQaCcaPWxmQf31vmLka0=)
                          30: xHqvlNpd7IJ2_bWmni8VAvmQhSo.roa (hash: RLG5JtYf55FcGjS6lNHNnXjb7AxYPOv8Xo1vraqegr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0c:39:0e:12:0e:e0:90:ac:e2:fd:6a:ad:6a:1e:20:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
        Validity
            Not Before: Oct 22 14:00:56 2025 GMT
            Not After : Oct 23 14:00:56 2025 GMT
        Subject: CN=2fbbcb743b9913cbf08bb8235db21759261d0cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:72:09:a4:30:26:7d:bc:12:fb:fb:e1:e7:
                    1b:7d:ed:1d:cf:3e:07:ff:5b:ff:61:9d:59:dc:8c:
                    4f:1f:82:fd:b4:7a:3b:01:23:05:9d:b0:fd:59:d6:
                    17:e5:de:53:63:9a:b1:22:b0:bb:a7:fa:19:82:73:
                    11:86:72:55:1f:58:66:4e:d1:01:8f:7c:21:9a:cb:
                    28:65:86:cb:c9:8a:ad:37:79:07:ec:ad:7d:36:18:
                    b2:79:96:87:08:90:ed:eb:4e:4e:2b:c0:1e:02:51:
                    f4:83:6b:0f:34:c5:fa:f6:88:d9:c3:78:63:a5:05:
                    95:9d:f5:7e:11:17:68:fb:ee:20:b0:e3:71:93:c9:
                    88:ee:14:4f:dd:8c:cf:12:3d:d2:04:8d:a9:44:d6:
                    72:9e:c8:d6:72:14:06:4f:b5:11:d3:d8:6c:4f:df:
                    4b:88:04:c9:a1:66:dc:56:f4:56:3b:23:08:86:29:
                    eb:6d:2d:b9:1c:2f:ab:b2:eb:87:9e:86:72:de:3e:
                    e3:ae:50:f7:f6:75:86:e3:45:5c:53:37:70:c5:77:
                    45:43:65:2e:55:8c:32:9a:89:75:bc:b7:8e:90:fb:
                    ae:b7:af:2a:29:5a:f9:64:3d:3a:a8:34:04:72:8e:
                    4d:58:a3:f4:ba:97:14:a9:a3:a5:5f:bc:59:da:f9:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:CB:74:3B:99:13:CB:F0:8B:B8:23:5D:B2:17:59:26:1D:0C:FC
            X509v3 Authority Key Identifier:
                keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c2:6b:65:b5:a4:e5:ca:e0:23:bb:41:74:87:15:fd:c0:16:
         60:8f:e9:f5:ac:75:da:79:eb:b8:0d:76:cd:33:80:20:c2:5e:
         c5:04:7f:ab:37:81:d4:25:8d:dc:37:e7:3b:17:1b:cd:fb:06:
         e4:17:73:ed:a5:4f:6d:76:29:11:b9:e9:f3:76:4a:10:79:f4:
         64:60:94:9f:c0:22:7b:04:a8:87:b6:27:94:7d:a2:82:48:0d:
         bc:5c:4b:15:34:e9:18:dd:8f:b4:62:65:4e:b3:70:66:4b:38:
         eb:ab:6e:64:7e:c8:7b:36:72:2a:90:a7:23:6f:4c:81:e1:cb:
         0a:5f:f8:e9:c9:1b:d6:60:b6:cd:69:6c:2c:f8:23:71:71:ea:
         03:e3:aa:96:c1:02:7c:87:56:e3:88:17:ed:66:0f:89:b7:f0:
         29:ee:b7:1c:08:2a:4c:03:6b:c4:b7:c4:87:24:95:64:93:8c:
         94:53:47:0a:d9:63:0e:b9:cd:5b:fb:c7:9a:eb:e0:8d:a8:d2:
         05:1b:4c:58:30:4a:25:65:b9:c4:06:20:0a:f6:79:5d:56:ba:
         a6:d9:cf:39:00:3d:5b:a4:e0:4b:3d:11:69:28:70:a6:04:81:
         b3:f1:84:0c:30:6d:6c:02:fe:26:e1:37:ef:82:ea:1c:68:3d:
         08:8d:9f:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoMOQ4SDuCQrOL9aq1qHiDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjUxMDIyMTQwMDU2WhcNMjUxMDIzMTQwMDU2WjAzMTEwLwYDVQQD
EygyZmJiY2I3NDNiOTkxM2NiZjA4YmI4MjM1ZGIyMTc1OTI2MWQwY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIVyCaQwJn28Evv74ecbfe0dzz4H
/1v/YZ1Z3IxPH4L9tHo7ASMFnbD9WdYX5d5TY5qxIrC7p/oZgnMRhnJVH1hmTtEB
j3whmssoZYbLyYqtN3kH7K19NhiyeZaHCJDt605OK8AeAlH0g2sPNMX69ojZw3hj
pQWVnfV+ERdo++4gsONxk8mI7hRP3YzPEj3SBI2pRNZynsjWchQGT7UR09hsT99L
iATJoWbcVvRWOyMIhinrbS25HC+rsuuHnoZy3j7jrlD39nWG40VcUzdwxXdFQ2Uu
VYwymol1vLeOkPuut68qKVr5ZD06qDQEco5NWKP0upcUqaOlX7xZ2vlgXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+7y3Q7mRPL8Iu4I12yF1kmHQz8MB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8JrZbWk
5crgI7tBdIcV/cAWYI/p9ax12nnruA12zTOAIMJexQR/qzeB1CWN3DfnOxcbzfsG
5Bdz7aVPbXYpEbnp83ZKEHn0ZGCUn8AiewSoh7YnlH2igkgNvFxLFTTpGN2PtGJl
TrNwZks466tuZH7IezZyKpCnI29MgeHLCl/46ckb1mC2zWlsLPgjcXHqA+OqlsEC
fIdW44gX7WYPibfwKe63HAgqTANrxLfEhySVZJOMlFNHCtljDrnNW/vHmuvgjajS
BRtMWDBKJWW5xAYgCvZ5XVa6ptnPOQA9W6TgSz0RaShwpgSBs/GEDDBtbAL+JuE3
74LqHGg9CI2ftQ==
-----END CERTIFICATE-----
Generated at Wed Oct 22 22:37:05 2025 by rpki-client