Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          iC//7GSTEO2WDS/TKCTL9Ax06Y/z9nm3NKuhcoq4qhw=
Subject key identifier:   6F:45:6B:A4:C5:7D:39:7F:FF:49:D0:F4:B0:01:DE:CB:F1:77:5E:5E
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       019A0C3873B3554A271170A50DD13EF7C6B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          0B22
Signing time:             Wed 22 Oct 2025 14:00:17 +0000
Manifest this update:     Wed 22 Oct 2025 14:00:17 +0000
Manifest next update:     Thu 23 Oct 2025 14:00:17 +0000
Files and hashes:         1: 1wvnbg6Q8117K_nteTTte4S7nxg.roa (hash: ENgyyDmLjUOckKDAZj9H4d3tNAHS1prBGM7EEwWm16I=)
                          2: 9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa (hash: Xv3UwiZDLnCoNcJK6yL4jK5x2OhDSbCPqqehYPRB424=)
                          3: CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa (hash: ISITsHZjmPxvc/MPY47Wu9xllgRRtuPX5xEX6qhzCKw=)
                          4: EEEX0e66KOWTKOERpFoaxtXp3uI.roa (hash: JFPlKxMz0/Nj8vpjBsVBD96v5DpLlvYLrr+f6kqewt8=)
                          5: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: p0hkYpTxVAeEttebWtxsDcXSFe14t3Djl4PJ23ryl7w=)
                          6: MTmWvr8uibadZE8o6jRrxqRGRzE.roa (hash: 0jqsfFy8FlNhCDstxSZBm5rl+QTt+KMOpAYA4a3i8co=)
                          7: O3desnRLE4eMtaLYXnU5Nh4QOG4.roa (hash: M/pLCjMkuIdvQFjtWmiXKAnVxVqmcU2sbBu8lSfc//o=)
                          8: Ox9GZAka0glhoxQ2kcpTG40p5TY.roa (hash: 9fZOyfSbu8PtJINC4B8NBR5wPhorryRlu5FEj0R87qc=)
                          9: T_tBIVOnk6atlnO-qvOB3SEZFOg.roa (hash: l/bz7iGuLSVMu5+jIvFJJiOT8fpLOG7JuBRb/GRh10A=)
                          10: UDwlK5i6kK3A947K1F2f3Nxg72M.roa (hash: /9gSFN6Jh6IOVjlZNhRpSBitYWPHct6GZTgiTAiwPR8=)
                          11: WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa (hash: 5/nNeU++Tk3tTxk1UDX88TCuqrCoToCpYKSrEibPyls=)
                          12: _-qLuY0dJaZaSWjtWCqfvkINW98.roa (hash: wQKawmTp+JnLi1nfzjxaxc0y+Fv2NQma/wD/xIsptVw=)
                          13: _1lqE5scJ0MBH0b9lTR0YHuGOuU.roa (hash: 4TZYcGOcfHMexmHJPq3AcWYTwMqwPGPD0OgXI/Zx1Ik=)
                          14: f9P9TOtw3B1yLwWd-zzgWOHgFyo.roa (hash: eY72IEUw47OrnHrbzBE3H8Hn9IWCmc+eDQ3PnvNlgzc=)
                          15: h4Wdvms4wuQVg2v8lAhl_FvWiDU.roa (hash: qgpyjP3KxvlInp3FHrdBXgF7d6QXTNIjbw3bJgQTHgw=)
                          16: jR6B6upcDz-k-D33X5cUCpKNQhY.roa (hash: 17bzKKAmw9P5KCIa3O7ZZ3Gz7ehvl9SAXpWrtnaB8HQ=)
                          17: keTJqY7deNugwlmSUKuLVvK51wo.roa (hash: q6jipuf1WpKULW6CAfzHiIY9EHwk4hFmc5paPypsmNQ=)
                          18: leAvVKB-KF9YkNjyBGLznG9z208.roa (hash: sNz5PxJVA3WdR6kA9tPYVEIxVQ3UHzFMpibhNTNaOv4=)
                          19: lsTY6AmWoYOLDn9vJEopaPrCzaE.roa (hash: zdYo35yHHZ9h7IbD1O6eQ0PbAdPIh6AmlbW/iwXvWFw=)
                          20: mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa (hash: N9byFHS2GD4WLMaI+ZrMFbqxvlxUMFZZr0x2guAAd5g=)
                          21: olxf7ZsuzIbb2ywWmhByxe-xLw8.roa (hash: fH7TNj8hlrTs9pJaEkQ+/5PSjQ7A59ZxCk5/AxaRv18=)
                          22: oq_bdGbnwKTXTnGXJdYy9S7WicU.roa (hash: p8oLPJnZdi4G9SjZfWCHDdPw6B3VXekrGGf+ZY2rnv0=)
                          23: s-ve3F8tXP4595quse_pLEBwHiM.roa (hash: etXcDa5JBalQlJuVD2B5TBUIJ+CVNp1v8p140S4caec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0c:38:73:b3:55:4a:27:11:70:a5:0d:d1:3e:f7:c6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Oct 22 14:00:17 2025 GMT
            Not After : Oct 23 14:00:17 2025 GMT
        Subject: CN=6f456ba4c57d397fff49d0f4b001decbf1775e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:ba:13:28:8e:f2:00:90:cb:a7:56:f1:87:
                    86:31:ce:30:bc:7b:89:7f:fe:15:4c:01:80:2a:6f:
                    fa:cb:78:46:8e:41:e3:2a:22:3e:8e:af:73:a7:86:
                    07:9a:8f:4f:95:ad:67:6a:58:60:7b:65:6e:0d:df:
                    22:40:d6:47:ea:2c:72:92:f1:fe:5e:6e:a4:a5:5e:
                    d1:b6:25:38:c2:d2:07:31:fa:64:14:da:8c:24:b0:
                    90:ea:22:b5:16:5a:e0:e6:37:14:77:14:ad:63:31:
                    ae:c6:c2:54:ca:fc:e1:17:c0:91:ed:1a:b1:7e:d7:
                    b2:0d:42:86:89:d2:85:c1:09:87:be:23:14:8f:e9:
                    c4:d7:3d:b0:97:bc:84:66:7e:28:be:7b:c2:ec:a7:
                    a0:b7:db:8e:8e:2c:4c:18:c2:59:76:ae:02:1f:4b:
                    e0:83:49:82:ce:16:04:a5:22:7f:20:c7:a4:4a:df:
                    b2:c7:d6:2d:6c:a6:65:0b:69:74:70:ac:7f:88:ed:
                    5f:aa:24:b9:32:78:c2:dd:81:33:98:71:d0:a4:b7:
                    10:03:74:bf:57:59:a5:2b:36:16:85:76:9b:88:34:
                    76:d0:35:b1:ba:9e:4c:1d:89:b6:da:40:6e:b3:02:
                    c0:5f:7c:f4:a5:a1:15:f4:0a:fa:f7:2a:e1:e6:06:
                    90:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:45:6B:A4:C5:7D:39:7F:FF:49:D0:F4:B0:01:DE:CB:F1:77:5E:5E
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:ab:6d:b9:eb:09:d4:75:27:18:df:f0:bc:d4:a1:52:0d:
         08:08:a2:a7:2c:f6:4d:60:35:b5:d9:b8:03:a4:71:97:0d:41:
         0b:6f:d2:9b:35:da:78:92:4f:24:66:49:27:a8:ca:08:f7:47:
         fa:94:da:6d:48:04:c0:09:61:96:33:30:e8:7c:2c:16:9e:e9:
         82:ec:6a:a0:26:1d:99:a1:0d:79:ce:a4:79:f5:ef:29:5e:7f:
         2c:71:a5:fc:c3:6c:2f:33:d1:55:0a:96:c8:c2:fb:21:71:50:
         31:b4:30:64:83:62:71:90:6b:10:69:7c:b0:b5:7e:98:22:4f:
         f4:3b:21:e5:c0:f6:35:d5:b3:ea:5e:25:c1:06:1c:cc:66:b5:
         f5:f7:28:32:e2:d1:fa:d9:e9:df:2c:6e:e2:5b:6b:69:48:a6:
         ef:2b:d4:21:9a:00:b3:9e:5f:47:7d:d0:73:a7:4e:45:99:ea:
         87:3b:a9:4b:42:7b:5d:41:ca:0f:09:65:93:96:e8:e6:8b:98:
         37:55:61:96:b4:27:65:c7:19:8a:ea:fe:50:b2:68:61:1b:88:
         25:d0:91:04:d0:6f:29:76:30:f1:bf:97:0f:7e:0a:12:6f:a4:
         00:61:ce:49:af:25:5f:92:02:70:d4:86:fe:ee:4c:89:c6:1e:
         fa:1c:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:53:54 2025 by rpki-client