Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          D02hxJp1NTl7DUdIeJYOPBSxOggt9wvW2oZTPP/IqT8=
Subject key identifier:   39:11:A2:E0:98:58:B8:04:DA:00:9D:70:F5:92:FF:63:68:FF:BC:D5
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       019A0D81F3016A08C1C61B39F6AF6C4C213E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          0733
Signing time:             Wed 22 Oct 2025 20:00:11 +0000
Manifest this update:     Wed 22 Oct 2025 20:00:11 +0000
Manifest next update:     Thu 23 Oct 2025 20:00:11 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=)
                          3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=)
                          4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: zwhUYw1VzowUYO7Qq9/EZ3xDaC6a4jtAR5hvASuA6wU=)
                          5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=)
                          6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
                          10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=)
                          21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0d:81:f3:01:6a:08:c1:c6:1b:39:f6:af:6c:4c:21:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Oct 22 20:00:11 2025 GMT
            Not After : Oct 23 20:00:11 2025 GMT
        Subject: CN=3911a2e09858b804da009d70f592ff6368ffbcd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:f0:a7:c9:e9:a5:3b:58:e5:c5:7e:55:d8:
                    d9:11:28:5f:52:ab:ad:bf:94:e2:26:c6:c6:01:88:
                    58:5e:3b:9e:57:94:12:66:93:17:d8:59:00:27:93:
                    09:1b:ee:1e:6d:8b:6b:69:ca:d3:7c:f2:45:2c:36:
                    7e:77:66:5f:a9:f7:4d:2f:3c:3a:7d:3f:3f:03:d2:
                    22:65:c6:d8:09:8d:19:76:2c:5b:49:d1:83:74:15:
                    f6:af:e7:6c:c8:66:47:04:d2:0b:da:49:1d:91:69:
                    2e:ab:be:a0:54:4e:31:2c:53:2f:d9:e8:69:47:23:
                    bd:df:d3:1f:7f:58:a6:db:f4:4a:17:40:c3:dd:0f:
                    3c:30:d7:2f:a6:37:cf:40:d4:00:0b:71:f1:de:e6:
                    e0:db:36:18:8e:d4:5a:6f:bb:03:3e:2c:a2:f3:29:
                    85:d5:ff:14:d5:38:50:b3:de:31:29:34:46:df:7b:
                    bb:56:bd:e9:c8:02:fe:7d:f8:06:fe:c0:e3:90:c3:
                    74:f8:9c:3f:16:10:68:dd:f8:7d:67:a1:bf:37:19:
                    3f:2e:2c:ae:33:31:6a:34:f2:99:5a:a2:ee:6b:99:
                    9c:93:5e:2b:cd:b4:b9:b4:72:87:53:70:a7:22:83:
                    b7:7c:2d:4c:e2:25:94:45:ab:ae:8e:70:f4:dd:4c:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:11:A2:E0:98:58:B8:04:DA:00:9D:70:F5:92:FF:63:68:FF:BC:D5
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e8:c3:6d:7c:ff:c4:36:cc:70:ad:76:c0:ff:fc:3c:a2:6b:
         b3:a8:e9:e0:f7:de:8f:5b:3a:4b:e3:bf:6f:48:57:b2:06:3d:
         5c:23:7b:55:86:00:99:34:a1:d2:70:3e:db:a4:5d:3c:81:d7:
         8e:43:a7:fb:4f:3a:e4:db:6b:e2:f1:83:32:63:f8:c2:af:75:
         9a:ad:fb:01:d6:d9:4e:8d:b9:85:bb:82:a1:ff:fd:54:31:d8:
         f5:40:cf:cd:e7:e6:5b:98:28:cb:0d:aa:b7:ab:5a:50:f3:3d:
         c8:18:96:2b:61:68:ed:bc:0b:b5:63:88:40:fb:d4:fd:f1:bb:
         6b:40:c1:13:62:ad:5e:9e:f8:e2:a3:3a:d9:5e:94:95:e2:6d:
         7a:50:79:44:c9:6c:60:39:25:15:a1:d1:f9:19:3a:c0:e0:42:
         69:60:52:f5:f5:52:c3:04:5e:97:02:e3:d1:a9:86:66:da:77:
         a1:46:61:79:88:6f:7a:6b:59:bd:4f:62:5b:ff:b7:f7:dc:d1:
         a2:f8:76:52:b0:95:db:65:c9:44:36:65:58:f4:27:76:ec:20:
         6c:09:f5:1b:82:d9:d4:bc:5c:91:e4:25:0c:7c:77:ea:b2:ec:
         ff:13:a5:eb:e4:93:50:70:ac:47:58:87:67:30:29:c3:46:71:
         d3:5c:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:31:46 2025 by rpki-client