Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          S1SgQuJaj19rwW2eYdjJklC4OKGvU73LUm+1JSFECbw=
Subject key identifier:   B0:F2:AB:47:10:E0:23:64:09:28:52:FD:BB:63:B6:02:39:05:BE:E7
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019A0AB7F797D9A91760FC4537D3408FD795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          0651
Signing time:             Wed 22 Oct 2025 07:00:19 +0000
Manifest this update:     Wed 22 Oct 2025 07:00:19 +0000
Manifest next update:     Thu 23 Oct 2025 07:00:19 +0000
Files and hashes:         1: 7uqgpP9wFK8eGPAcoJ-sEDnAHd0.roa (hash: Xz+LC7Kd3zBVRX5yVg4o11ClYwI2C9PnbUjpiLfa0yU=)
                          2: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: obYiG2KEzyw/4p0PXcKh2ju7pQB/MFrOrR8HDvvLdfY=)
                          3: G7iDQ4AJCfPlSLJm51qXvFLT34Q.roa (hash: ypV03h6J08o2WIBzZwFVWtQuB9T4WQvABamDXKjZwKk=)
                          4: HRwZymnXLOUIoxoUINYn4to6JUk.roa (hash: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=)
                          5: KZgShytB2Dg6qgF16xBAvAwz96A.roa (hash: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=)
                          6: KluOERwO7JD42tSY7SzaYIk0yRU.roa (hash: YLxJf9E85QadUhVAMwy+yrs3X+SooJumuq1itcsYnpw=)
                          7: LozgjGA37xFvEWDTYPM2lAwAduA.roa (hash: 8YO3hU1Ao5pQO7Cei7oHHsrN3p6eZUJVpQ+H7w2cew8=)
                          8: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (hash: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=)
                          9: RDzymZpCcV0bpni3siQGqq1farc.roa (hash: NbY5Sdgr9o+O/ZEjGJenKUtZltIspdl+18YYsBTTJSE=)
                          10: UGz5ST9xLeR326lNlIlQUU1TOM0.roa (hash: eBdiuMt/l6dkQCdthTlhmOdw9OFMh/UNcOXGzcvKrwo=)
                          11: UShzAf12IpfTGieZ1mCIrzrhJHg.roa (hash: qL31JBNYAcgAOjoHZe+Zvz2ftY9LCEZFAxatlXu2rsY=)
                          12: X0YGyVP66ZGqkiDVT4gjqfkDpbw.roa (hash: 6i5H9KoMGNY5mA0wdWKUYrifDwq1Buv6W9ygAz3wN8s=)
                          13: YFz6rAUzGpohLtyvc_KB5nklIPk.roa (hash: u4TO53ZBZpbqtJ9VFPMzXBqk+r34NnQWFKA4gYqkSEA=)
                          14: YJlnZEqnS37-I2Pc0d4O5814-u0.roa (hash: zdgbWKDI7O/AK1o+TR6T6xJN+uAFFoKLguHyz0cngBg=)
                          15: guLTM5a0sG8d8PuqoNee-jjL86Y.roa (hash: foLzuPt71A9R7m4Zr/AiIAiz2ulaqdDrSGiOeT2DEkU=)
                          16: hvyCjD-sr1w6tm5UxwSderd8UxE.roa (hash: yEejB8VN7eRKYdvOBcuTAVJxtwqqoPVaxdtPUz/eqYQ=)
                          17: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (hash: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=)
                          18: nOQG8M5trDQh4XjFetXQ5gl5hAk.roa (hash: jO9QLXj1bBC/jibhnilQOLleHuZugOPI3ebTy+5yP/A=)
                          19: q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa (hash: IOGkhvWvFOvN3iY+ALSxpXygSJS0I9J4sN93HYJBrcI=)
                          20: uUxZil2b159003xfkfWtUQreHkQ.roa (hash: J/52Jbvu/goI1MIOwJZWmsnYU2my4DOGAr8T0IS/l48=)
                          21: uu7x8ws28T4QdM70FvKBJCd6ke0.roa (hash: mYpdS0B5YDMrQaeH22PB2fPiErznb3n7AJTmk2e5j1U=)
                          22: vgsTODUN4DNu4XsvZWX7_dDziEU.roa (hash: OpvsJv1O2mE0888WpNjBckKl+Q9vODkDoyJf989gi1w=)
                          23: xzuQISkcD-LDwaStk5Po8cHtiJw.roa (hash: MTlh23S7S0fGqADN5d5jEOMtMCQeo6fF2QEVS5QqY6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0a:b7:f7:97:d9:a9:17:60:fc:45:37:d3:40:8f:d7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Oct 22 07:00:19 2025 GMT
            Not After : Oct 23 07:00:19 2025 GMT
        Subject: CN=b0f2ab4710e02364092852fdbb63b6023905bee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:de:09:16:64:6a:54:eb:6a:ff:69:90:00:c5:
                    96:7d:78:cc:a6:57:85:bd:29:8e:f7:14:86:18:c0:
                    a0:b4:a1:e4:b1:ea:1a:d6:57:a8:2a:16:17:7b:04:
                    99:ce:82:ca:4c:58:69:22:13:9f:43:8a:45:79:f0:
                    f2:9c:7f:69:3b:98:df:78:e7:ec:62:b8:d4:df:a6:
                    cf:b4:b7:a9:d5:20:0f:56:d5:ac:30:52:d6:4d:99:
                    7f:43:d2:ea:d7:8a:63:2b:55:b1:9e:50:e6:f1:d0:
                    12:ad:61:e0:71:c0:66:31:63:ea:63:c9:61:f3:8e:
                    ec:14:ab:c7:72:43:54:72:58:8a:8d:0d:44:3c:b0:
                    22:44:df:66:1a:ed:2f:1f:f3:7b:2c:c9:c9:ea:ca:
                    a9:83:3e:47:b5:11:24:5e:7c:8c:1c:36:a7:27:5f:
                    2f:80:26:f4:76:e0:1d:89:5b:63:14:5d:7a:2e:ab:
                    7f:61:49:bd:19:4a:15:26:1a:7a:9c:ac:9f:2e:7b:
                    9d:a6:19:c6:46:95:41:ef:21:dc:cb:76:06:c8:52:
                    8d:95:35:03:94:ff:3c:cb:b4:93:f0:fb:d9:d4:10:
                    20:68:c9:a0:0c:29:f6:37:6f:36:d9:01:d1:e7:b5:
                    37:42:35:26:37:42:87:b9:11:b1:d9:2e:fb:c0:6d:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:AB:47:10:E0:23:64:09:28:52:FD:BB:63:B6:02:39:05:BE:E7
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:86:87:c9:28:9c:79:54:1f:3b:ce:ec:78:f0:ef:b4:c9:37:
         7d:44:b2:ad:a3:c8:dd:3b:90:c5:6c:48:33:be:d0:2a:b4:d6:
         38:84:f3:ef:88:0b:66:6e:ca:0f:43:25:f1:8b:c3:3d:71:50:
         a1:b6:c5:a4:03:8c:89:83:00:1f:b3:97:e4:81:a4:ab:e7:81:
         bf:4a:10:2a:d8:e9:bf:ad:39:12:b2:c9:4d:f3:21:ad:dc:ee:
         00:a2:b9:70:8b:7e:32:6a:72:1a:f5:55:4e:b7:e5:45:2b:d4:
         fb:9a:6f:e8:15:fb:08:19:ad:26:dc:e6:ff:73:1e:33:82:b4:
         46:69:c4:53:8c:22:d7:29:1b:19:e2:df:aa:9f:7a:28:a1:ca:
         3f:9f:57:ac:28:98:bd:2b:b5:34:b7:c3:89:5d:ab:a9:66:e0:
         b8:56:92:67:9b:49:07:9e:ba:62:d9:26:3f:90:c9:00:3f:ff:
         ee:d8:b3:c1:68:0a:84:fd:f4:5f:0a:90:15:48:52:5f:1a:77:
         00:83:3c:7a:7b:2c:02:9f:ff:ab:b0:26:43:4d:7a:12:39:9d:
         2e:1a:c3:0d:ca:93:f5:9d:e8:f1:ab:42:bf:31:de:a6:b6:6d:
         a8:c7:9d:53:03:20:fc:b9:58:c9:da:b9:bf:ae:7a:71:ba:05:
         4e:15:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:38:00 2025 by rpki-client