Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File:                     mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier:          mU5NVnMvLeNwEdtIJxhyJdwA+jnoRjbMTU6Z21zh5RM=
Subject key identifier:   E5:FD:6A:F7:0D:FD:A2:DF:C7:12:CC:C6:ED:AA:46:25:BC:53:F1:29
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       019A1CBECE10AC2400C84567F8CF5D88B354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number:          10F7
Signing time:             Sat 25 Oct 2025 19:00:57 +0000
Manifest this update:     Sat 25 Oct 2025 19:00:57 +0000
Manifest next update:     Sun 26 Oct 2025 19:00:57 +0000
Files and hashes:         1: 9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa (hash: Hm59eKak2mRBLnGzAb7+vw2g+CNCplTmTg9aukFT0JE=)
                          2: Cm5DqrbsctqFvXQRRyRwNPG00IY.roa (hash: O06PA3Ks3knW3J57m8lSN/Hv9kQ6nHGAf+goTnk1j04=)
                          3: FPzxN2ymmUH78y5haV0PaZXdLVY.roa (hash: DdUQ7lpUro6lEFuSiN9fKQg9b9UllNMKrwO6ynxkjos=)
                          4: JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa (hash: kV6T9GvL2JmIx9RKefMlHDbvnYr8DiGL3xFPvQ3Jx8U=)
                          5: JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa (hash: ucBbFh4z7Smi+4uRRA6FLN/GqDjNQS+yFNEoMPGwvug=)
                          6: VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa (hash: onaEyOz4ocmnu3HOOu4gakiggdji6MdLGBGGPS11inY=)
                          7: ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa (hash: WTUxj+sidK096ykp4PAhTaXWq6bYZtjXmE5iUhcAutU=)
                          8: a0GKpzKa2l-eFBlKQIWeWorMYWE.roa (hash: ToDMarZPFqTg+Vik2NKe1VnAgzMIR0HHOC5Xh17RUK0=)
                          9: aEXJ-GLDzjyP60FhTQdWJ8Fvt7E.roa (hash: 0YpF7CPYi6PyoAg9TvQlat07FWQyIu8cHA137q7nQSc=)
                          10: bmd97yvzsY5Yo2HfnEE_aGsiLVw.roa (hash: rBbiHBTIds8AVFd6SWdPqBeLyfTxB+l6zirCVR5u1u4=)
                          11: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: fBQ7bPt+QoVxN0kZ4DmoE+oD6O2eO2PILq9rleWk3II=)
                          12: pygxQHbvGZKVLzuvUJnRE055Ymk.roa (hash: jTpMpBKEIx8o2FyniDrKdnhuTZAZvNKL8hZwfmfGnMs=)
                          13: qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa (hash: WBI5DwkHHee0G2mSopIcnWotDs7K8/Lvby/GArK324A=)
                          14: vY3Y3etrniGVDWVqa-wGwlb4wOM.roa (hash: 3iBpAllkx0+u9qLlhBtBBscqzISkhr+UuWv9+CbK7ew=)
                          15: yQafrAusZTwTPZBFL3M0qrFQZ04.roa (hash: Bj+Dm5K+2i3MwGi4viuLKNvUn9KDeSK+/ogiA8Pwh18=)
                          16: zsat_Kz6NAhfzEasx4a9lQm7pnc.roa (hash: iKI5HEcwbfP2kx1h4h3ET7Ssp+IpbRLbrY2f8G6eDr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:be:ce:10:ac:24:00:c8:45:67:f8:cf:5d:88:b3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Oct 25 19:00:57 2025 GMT
            Not After : Oct 26 19:00:57 2025 GMT
        Subject: CN=e5fd6af70dfda2dfc712ccc6edaa4625bc53f129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:11:16:11:17:27:5e:59:c9:c8:62:28:70:
                    ec:c5:92:96:4a:f1:ca:02:06:67:a3:6a:7a:9f:71:
                    a0:16:e5:1b:ad:c6:4e:b3:41:06:cc:1f:f9:a6:d6:
                    0a:a8:dc:a0:ca:fb:f3:d1:ac:f4:b1:08:a9:55:7c:
                    08:a5:7e:f4:11:6a:9c:80:35:72:ce:a5:be:37:77:
                    31:17:23:ac:03:ec:b9:b8:63:34:d6:53:64:71:ef:
                    43:b6:0a:7b:31:51:3e:d9:ad:07:13:67:69:fd:e4:
                    be:65:a6:0a:b2:25:a6:4b:4c:cf:0c:b7:22:52:cf:
                    2b:f8:ab:9a:12:e0:7f:e2:de:ee:cc:6d:37:e9:9a:
                    e6:8a:aa:45:4d:ed:32:88:06:a1:e4:3e:28:df:8d:
                    4f:fd:d9:f5:32:aa:bd:af:e4:39:e2:32:e2:f3:90:
                    88:17:f8:d1:e1:c8:ca:ed:53:88:48:67:c3:d3:48:
                    5b:14:1d:30:e6:cc:ba:d6:e5:52:ca:01:25:f6:47:
                    56:82:1d:71:d7:5b:82:41:2d:57:6f:78:89:1f:69:
                    d5:47:17:a6:fa:9a:84:dd:ba:8a:85:1d:c6:13:0c:
                    f6:80:57:e9:70:b4:28:37:bd:34:67:99:ce:1b:9b:
                    f6:74:13:24:af:ce:37:01:7e:55:61:46:d8:fc:b3:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FD:6A:F7:0D:FD:A2:DF:C7:12:CC:C6:ED:AA:46:25:BC:53:F1:29
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:66:92:b8:2b:f5:3c:8f:68:19:6e:a2:ed:ea:aa:3e:7a:26:
         ee:76:5b:96:61:61:9a:41:b9:2a:96:ff:6c:74:7b:43:c0:69:
         03:bf:f5:91:ad:81:68:9c:b5:90:77:af:ee:9c:8d:b3:4f:35:
         14:54:d6:35:00:b6:5d:f3:7c:de:44:1a:39:48:78:b7:e2:62:
         9f:d4:f7:60:bf:0c:42:58:a1:e1:ba:0a:3f:45:0d:e8:8d:9e:
         67:e7:6f:d4:ec:30:c9:60:66:d5:b0:4d:ee:99:05:ab:ca:5f:
         11:cf:fa:03:71:d4:f7:a5:53:6d:fb:f7:8d:77:01:3f:58:c7:
         05:0f:e5:0d:1c:7d:64:25:1a:68:90:9a:47:ce:51:6c:e0:42:
         4b:c8:3e:2e:47:a9:be:5d:8d:d5:8d:fb:2d:b9:1b:2e:62:a4:
         bb:c9:da:01:a6:30:87:51:93:f4:08:13:2b:d7:cd:9a:90:d1:
         e3:87:13:fa:77:c8:b2:01:0d:b5:8d:59:76:86:a6:a1:f2:ba:
         f6:7b:32:21:42:b7:19:43:65:54:ed:9b:11:1e:34:3d:e8:e0:
         b4:3d:7d:e3:28:e4:11:04:8f:2b:a6:22:88:c6:45:d2:a8:72:
         62:4b:c1:1e:1e:bb:f3:72:ad:45:ec:aa:c5:fb:d8:d3:b0:3b:
         9b:2b:06:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:27:58 2025 by rpki-client