Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
File:                     rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft (raw, json)
Hash identifier:          YO/qiFGtAtlQhxQCIzS9JONTopGO2omKe80DrOkq4Q0=
Subject key identifier:   8F:0A:17:24:71:7B:43:44:4F:C1:7B:5F:05:AC:BF:6A:F5:F6:88:61
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       019A0E5DEDFF05CEC867ED5D98BB682481BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
Manifest number:          1712
Signing time:             Thu 23 Oct 2025 00:00:28 +0000
Manifest this update:     Thu 23 Oct 2025 00:00:28 +0000
Manifest next update:     Fri 24 Oct 2025 00:00:28 +0000
Files and hashes:         1: 18oxWhArE0RhfvzLv5hZQE6tik8.roa (hash: PaOcC02WGlDWNTRr4QEBVY28nvkxbfJiDXU25ZKRrIU=)
                          2: 1mXcyLzjkRbf9Hznb8JyWzO3osQ.roa (hash: f2wNSKamLqv1NifvdMo7pGYLH63iUBhW6JiyWXjIzX4=)
                          3: 2aV3N-zVZuLxH1xgoESnI1WsF2U.roa (hash: kY//omI2YAMe7y/9xDO4ClcNSgGn4TldTCED2msOL0w=)
                          4: 39MxobbrpAQOtON-sui4Ceno-cQ.roa (hash: N9pxd/h1OsCWGB0hBqC8JheO5FgETKpxzAleviuHpyk=)
                          5: 5XvdTcJxyA4Pm4_pq9JEbtFKUUI.roa (hash: GwuUh1bHH+3sFVWj2a9pfKD+XUZ4KqBl4+B6GijU6Ls=)
                          6: B9R7j-0-BgaCSy3boeQLonLKm0k.roa (hash: WH3s6YayhFNQdUbUDmK2H25xLVDh9LZv/S7MHi6F+EQ=)
                          7: HPL5SSm-juGYaMS6oE3ZODqLcNQ.roa (hash: FXftbE3hkNwaKhmnG5qdVD3or4AxJTzdSUUIBPayFjE=)
                          8: HjFRJwOWDqBnApxaTtF0TpsbyYQ.roa (hash: OJbfZZsxLOCgQrK35DXHBmPs1yNnWYKSyp7qwV6yc2A=)
                          9: IEpIdrCrgoruzvNRphWAKjLFvck.roa (hash: 1hcuHiArqaJrsWO8fxvod3HELsUVIN5XphYvjL0kx6I=)
                          10: Pr96fu6AKoC9ocgKy4gmk6FiiQ8.roa (hash: oICV/Rv8Fz6p+4kh6JDj/CQGRipc30QQX+8qXRhhMHw=)
                          11: SD_VRQTvMC7vuyqV_wFD-fKVUsY.roa (hash: mBhitXOwr6QfmoyB84HxFE/38Mo9fz7gg9e1zxivAvQ=)
                          12: VaCnyWX6jU1U7x4phZq4UQ3hGtE.roa (hash: HSskmvZRBur17htQDGL9L7zkIxXiCpAQFXJXh8sPXXw=)
                          13: XZes0nTuYVnyyfrFPRRjs8Jx51Y.roa (hash: 0BBkRTYLYp0bNpkG9KKvJ443VFVkJBIrpGAocXr8JCM=)
                          14: YtuOvUFMVo09mKrknt-ojMdPYWM.roa (hash: T3A2RIZNQBMqUeBCZdKs7FFJQLtQse8C79U49VQid+I=)
                          15: ZD4zfJBXtlUtpYCHz7StMH6hulA.roa (hash: c+18Xi5sqUiw5ex0D7d55PJHoiJTJkLgBs1qlEL1OYE=)
                          16: _7kpaS2UowFnBiDzlZIsC6T4jPU.roa (hash: Uap1nQF5HIXbd/fuDO9f3i3zi5VRkj05CB6xiL5G0NM=)
                          17: bRY87MFOFRXK_3ijOZHxEiuxCSU.roa (hash: ZoNRVUnVuV1tqZ3OI46I3nsh2LZo1vS0lIAk/gHkBmI=)
                          18: cSRmR2jdWhIYKKIkNZwNstEHVSs.roa (hash: Yno/y4yf4qO8RguL818J/rZjcH+POozcS6bAx4zw4Xk=)
                          19: ej3Rsdg7iZ6dO_YprWJoHaQvuKI.roa (hash: hvD3zqBlyrs1GGJZ6xBTzfTDwo6icPaxgxmp7ExKh8c=)
                          20: fhdkzDTpIIzXI7UR-RRqfn8yYK8.roa (hash: 5G8k94mJ+piuCkdBnO5V9g3FiuOM9TQAN0h6Zu9iGPI=)
                          21: iSVHW1QIe7YgLfhsMRsWXDdHgaE.roa (hash: xfy4rZ1pJspjyIzKFNFqMhcKLJ7Q1syk5sZcIn8SuS8=)
                          22: ibQxcJ8BcsDznHwW8cvvdWCtIaQ.roa (hash: pIty12QAvgK/GvUKpxuo60iKFff8hEDBVoxlkVE06EU=)
                          23: ksJUh4hG5S_P4p1TTcqh_SUbIjY.roa (hash: mTM6a+O+0K+OAJZ6HZM/A5EVh+VOa0DKYpPbMPy3aoU=)
                          24: nlW2BhzbrhZqQt_kjdeJrjsFzqg.roa (hash: isLx6NhOWvsktPKmSuP99hPtTj1m+Qrqe7ue+9WegW8=)
                          25: rmopece1hPnDrxGUQXbePfbuW3g.roa (hash: LzehuaAVFk7vmeksMGf8ccgZKNu8yikV/yTbs25QbhI=)
                          26: rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl (hash: yHmmwaO71smNRjAE99NSdBpevrjn3QhzXGUOhyV6F6g=)
                          27: t3r2cSXLI7fMZi5tra_aZAQyFak.roa (hash: v065bTN3/ayGHNsmj2ZNOgQk8b4xLfobBPDbQcgY5/Q=)
                          28: v8rOWOc0p2GChxfqKFkmuLIdT3E.roa (hash: +xzj+0LiqVTk0R99ZJrfx7A7Nmd2wLsoo1QNj6wIDCM=)
                          29: x05F2Z9Ii5NfBHcv5t9U3DVcvc4.roa (hash: TCunqfbRifiNySN7ycYsI0OCZSixtWJdHstGs7qYQWo=)
                          30: z0zrbZGTZ0iqKhgiO4o-T6JBleI.roa (hash: ToFqBI4XuElIAABZ+J4JnW1Geuu40xhhzkV2D52WyP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0e:5d:ed:ff:05:ce:c8:67:ed:5d:98:bb:68:24:81:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Oct 23 00:00:28 2025 GMT
            Not After : Oct 24 00:00:28 2025 GMT
        Subject: CN=8f0a1724717b43444fc17b5f05acbf6af5f68861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:c5:6b:7a:a4:18:ec:16:67:56:85:5b:20:
                    07:06:97:86:0e:72:6f:e3:f5:0b:67:3a:5d:93:b0:
                    16:49:9a:fa:62:b6:82:7a:53:15:a4:33:3e:51:83:
                    45:ee:47:a3:31:5a:21:26:b9:fc:96:a9:ef:31:86:
                    8f:63:ba:c4:ea:bf:f8:8e:9b:72:3b:86:ae:8a:c7:
                    6e:ce:ba:c5:1f:c1:c4:be:b6:11:d2:53:0e:79:c5:
                    b2:85:38:bb:94:fe:7e:91:f8:f9:6a:c5:61:0d:2a:
                    c3:2e:a5:b5:18:c4:77:70:19:26:fc:4d:87:2c:bd:
                    7f:af:24:8a:4c:9b:0e:01:a9:46:36:df:54:da:e9:
                    54:31:c7:43:70:13:e4:5f:eb:b5:8b:12:f7:66:2f:
                    93:28:81:a5:89:f6:c3:fc:52:84:c7:d4:a0:9d:a9:
                    f0:ee:8a:13:04:ca:76:5a:02:0a:69:b8:24:44:9e:
                    df:e8:c0:cb:d1:44:cd:4a:0c:4f:b7:c2:57:4c:82:
                    52:15:2a:9d:81:4a:d2:5c:bc:d9:e3:b7:b4:b6:93:
                    1f:92:85:ca:24:45:02:7c:36:fa:70:26:93:e9:cb:
                    45:76:73:9e:0b:b5:02:85:f6:41:59:d0:8b:ca:78:
                    28:8e:eb:82:b1:c9:31:3e:ab:62:75:b9:08:b0:75:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0A:17:24:71:7B:43:44:4F:C1:7B:5F:05:AC:BF:6A:F5:F6:88:61
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a8:e1:ac:e2:b3:3d:7e:20:55:0e:44:4a:c8:64:71:09:33:
         3b:02:03:30:84:17:2f:8e:48:9a:74:9b:ca:6d:32:46:41:5a:
         d8:18:15:dd:10:79:33:c3:8e:ac:35:7c:18:c6:20:28:64:89:
         a2:80:c3:b9:ef:d2:8b:65:4f:2a:be:4a:6c:0a:6e:66:69:ab:
         03:c4:2a:dc:73:76:01:54:52:bc:f3:fa:db:ac:1d:b3:14:95:
         38:24:a5:bc:25:29:1a:61:24:e8:b5:0c:98:49:6c:ef:98:ab:
         58:41:74:3f:e8:ef:db:ff:eb:cb:0f:98:a1:f6:6f:93:bb:82:
         48:88:3b:46:d0:79:8a:d7:29:9a:ba:ed:fc:5b:9f:87:98:f2:
         73:dd:13:30:2b:fa:e2:8c:dd:95:f2:67:ae:b3:6a:28:ab:44:
         45:93:ef:2c:7d:ae:d1:75:3c:77:4f:6d:86:15:26:6d:19:e7:
         37:a1:98:f4:5c:96:13:21:aa:83:f8:7f:b6:69:35:0c:0f:44:
         9b:0f:c9:6a:16:15:75:75:7b:e2:fb:55:92:98:1d:76:fc:2e:
         b8:54:f2:cf:da:0a:8f:40:db:96:ba:21:87:ab:b3:cb:e0:f2:
         d6:c5:18:89:63:6b:49:67:49:34:79:d3:13:1d:ee:42:cc:ab:
         06:ba:fe:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 08:02:59 2025 by rpki-client