Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
File:                     b3Xk6Utct0UXt7AVaAFdqebuzbY.mft (raw, json)
Hash identifier:          V6LNkvcew6infMSpoYQ2Gv/Cg3mAMDGrrxKH80wCBmU=
Subject key identifier:   31:5B:3B:DE:CC:F2:08:59:0D:29:26:83:E0:74:66:D6:84:90:A5:AF
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Certificate issuer:       /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial:       019A1A98A768A0BF559BD8EF1A17DF1560D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
Manifest number:          0E6D
Signing time:             Sat 25 Oct 2025 09:00:03 +0000
Manifest this update:     Sat 25 Oct 2025 09:00:03 +0000
Manifest next update:     Sun 26 Oct 2025 09:00:03 +0000
Files and hashes:         1: 4gI_4-IO4A-DLjbwey2IpOI1Gac.roa (hash: mQ7omWDIQV8V9vzwSyRnlClYxhElWnlIxHJNMRFaihs=)
                          2: 4vux7awz3E36tFDHIazA7-jkwq4.roa (hash: wB2NxL5iO7Z/8XbFdlxXumlf3zZuQEhQW8UuOP6HgoY=)
                          3: 6sCOzHkQ-muwDrkw5pOHoUfXNBk.roa (hash: 7FwYeaXkfgVbCXFiUge2n1VEhJxyS2ClQiqjC+nu4kY=)
                          4: COvg2MpN_oheD_zalSdxr-q7gqg.roa (hash: TNZBHXn/rFK8B0FSzij1q86AM+2q2tMbA3NjJuonYNE=)
                          5: F0suYji7pyda6Pgm_yX79A_qaTE.roa (hash: XG7UorX0bbwleiT45k2X3jyWBSNu43oe/Y2K8gmt6hs=)
                          6: Jr5Ueq6kDwQSf4OCEjyXWyv4DJM.roa (hash: MSHb++tsJ50vTtX0YOcOx6674SSj9sRa1aeYtEOqqp0=)
                          7: OM9sp83gq8JLzkuTWdaZtycRFbg.roa (hash: 6zlXFie+AwK2F8W6WJu8AHXI3dxTSD6r6hI+SWEgdaY=)
                          8: Ph2VzfPmPZtEPzSLkO7pzzgo-po.roa (hash: fkmSgLLFQNKR7Q8TZwhTdwOECOCKZn3/ppvBg4D1aeM=)
                          9: REOoP6Y8-wsgon83LmwFQJMZALc.roa (hash: A4lQGU6MhGm6OdwWVbHE5BG8fr09wGeJM7NnUUCETR0=)
                          10: TsGqxUBkJwOPQAWoVKR2AEF1ans.roa (hash: uv2TTIYvJgqngCKe+XNr+deXWi65MhBACHmWx2No1ag=)
                          11: b3Xk6Utct0UXt7AVaAFdqebuzbY.crl (hash: k6B94qm93gLxKxAeiAqrr4Ut1HSE2dR07qUPdcjyU/s=)
                          12: b7gCLwwMzjZjbVS32gLXIFWwbUk.roa (hash: D2c9HayWxHwINiQBbZzPgdJmQPa3/hDkJ/z9pkwYKxE=)
                          13: dgaS6fn3OpV72cEYNy7VeVSk2tE.roa (hash: t9/MBst/MC7EkBAyzHdTuY3YBMIxG+Elxy81Bz6kYyc=)
                          14: fK9EW2umljzRQTYND4AfmE35XCA.roa (hash: 9sqICXJrZxXGs4HmQ6by183Nbrj675bqVnqLvT99NXw=)
                          15: fzvvk5bzP10N2OQNounBbEQbNsE.roa (hash: RKFAzkj15rOGrQMxeuqq2cZQnvwnI2ibWU1wR/fhdrE=)
                          16: od1ADzeqOn5bVC20zBnBeUVSNKw.roa (hash: VVSLdqnSFTyWUJsI+ZA3ZZGNebOqLFzR1C2rEUolb/0=)
                          17: ps-zGnTGe4PKACLSOfDDMQx9t_M.roa (hash: xpFFfF+DS0D5TdCkxuXovC0W/qhotMUgVNP3M/NZPEQ=)
                          18: xaEtCauxOuaw94aBy1HzWiJdb98.roa (hash: 71FgBtN4CgG7YQ8OChZMG6Yb5A5EJWBMyJ52VwLkIRo=)
                          19: z0Qvo_o1aarIKR-qrgaRYpvfwjc.roa (hash: RiWOkvqrTFK0brETv9UpsQbvKc3QbmQ0OasKxFLAePE=)
                          20: zLs5eIQla7JvuOsDIVylY_LlW9Y.roa (hash: EWXm1Aj94qBaUfmc96DwvRvWK77ZtmJaOaVeqhh7Bw8=)
                          21: zWw8lAKfrFF4RG-Mj_n5dY-0UOY.roa (hash: DKYofoTdihA+aTa5YdADLPg4Qah6RWaucr279EDCxes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 02:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:98:a7:68:a0:bf:55:9b:d8:ef:1a:17:df:15:60:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
        Validity
            Not Before: Oct 25 09:00:03 2025 GMT
            Not After : Oct 26 09:00:03 2025 GMT
        Subject: CN=315b3bdeccf208590d292683e07466d68490a5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:11:28:e0:a2:d5:ad:24:6b:43:96:a7:39:
                    6b:8f:41:22:e9:40:d1:68:1b:30:0a:d9:17:34:bc:
                    7c:5f:57:b8:19:ec:46:1e:f3:36:ba:16:68:bb:ee:
                    3d:9b:9f:39:a1:61:ad:86:23:c2:90:02:dc:c6:e3:
                    48:73:e3:cd:ad:60:90:4a:ba:01:25:ce:26:fb:63:
                    a9:dc:ab:1d:02:9c:ef:9d:c2:cf:49:c8:f8:f4:07:
                    f1:88:19:6a:c4:c3:10:e5:71:ad:60:06:10:a8:d8:
                    80:ae:65:4b:c4:cf:3f:6f:ad:29:87:b7:1e:16:c8:
                    a0:87:bd:ac:2f:05:cc:5e:bd:ab:b5:24:c6:84:19:
                    74:60:80:d9:f2:f5:00:07:11:42:5c:ea:c1:9e:2b:
                    65:18:3c:78:9e:c3:e9:ce:e5:54:9d:d5:44:31:4f:
                    6a:fa:9d:a3:fd:7a:32:00:e3:9b:cc:ee:13:fd:71:
                    da:03:f3:76:ed:b2:6a:ed:29:aa:df:ec:e5:e3:e7:
                    24:c4:4d:a6:43:8c:28:92:62:d3:5b:b5:d4:0b:1b:
                    20:83:53:14:60:ca:03:cf:85:63:c4:82:4c:c4:64:
                    57:5a:fd:fe:4c:b6:3f:a2:26:06:f2:88:e4:a4:81:
                    99:d1:8e:ca:d1:98:07:25:a8:92:88:4e:c6:d7:ec:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5B:3B:DE:CC:F2:08:59:0D:29:26:83:E0:74:66:D6:84:90:A5:AF
            X509v3 Authority Key Identifier:
                keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:10:d2:73:ee:53:5a:15:f8:3f:b7:3d:bd:88:55:7b:d8:03:
         75:4b:3d:ec:97:1f:44:01:de:8f:50:da:0f:6b:76:98:ff:02:
         56:0a:aa:12:0a:25:75:90:8c:01:66:74:8a:17:db:bc:91:7c:
         45:45:57:cc:e8:c7:ee:e1:65:5a:f6:52:9c:8a:a0:36:5a:78:
         ec:13:bc:af:68:9c:65:36:77:c3:6f:33:2a:a2:3c:64:3c:dc:
         4f:f0:cf:bf:a1:22:49:2d:f0:f1:74:76:ec:ba:27:d2:c9:46:
         97:63:fb:4e:81:04:f9:0c:4e:09:e6:ed:f0:da:52:e0:0e:2b:
         22:61:d7:25:0f:a7:86:43:bd:65:95:4f:03:70:51:7c:9d:e0:
         a8:1f:57:7b:2a:67:7e:58:16:2e:81:e2:2e:ec:d4:21:35:41:
         ae:63:45:ff:74:64:88:90:6d:4b:62:b1:23:fd:60:9e:4a:80:
         8a:3d:9b:04:c6:8f:c2:fc:ae:69:fd:93:02:9c:30:c3:17:ab:
         b9:16:78:53:c3:ee:a5:fd:b0:55:ac:f9:7f:cf:17:df:c0:91:
         b8:23:63:b5:1c:8a:6a:04:f4:7e:e5:74:87:b1:22:85:ae:f0:
         1a:dd:c2:43:c6:c0:ba:e1:ac:69:6e:6c:23:fd:0e:a6:3e:0f:
         e3:6b:f8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:24:07 2025 by rpki-client