Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File:                     vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier:          hfWbKiXV/HW6EG3Bbfrx7hUFfmSOsfkeyOXjsc6BLbY=
Subject key identifier:   82:1E:A8:FC:77:9C:CD:B2:B8:85:89:E0:C8:CC:F1:B1:49:C5:5D:D1
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       019A0712784BF01C871928E4880BFCE80635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number:          145E
Signing time:             Tue 21 Oct 2025 14:00:42 +0000
Manifest this update:     Tue 21 Oct 2025 14:00:42 +0000
Manifest next update:     Wed 22 Oct 2025 14:00:42 +0000
Files and hashes:         1: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (hash: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=)
                          2: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (hash: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=)
                          3: 2P8shKd_220nYdZMZlSUBMfyDxs.roa (hash: DHVwQ61Uemg4pxo94GshwMHSxRxws7x9ytMWEMfUpCA=)
                          4: 47Db6II4VWguGq1fmON_zyxfDTw.roa (hash: EtXOL534BY7YerRgShjwEr47qYY33r1iCEI0u/06D0o=)
                          5: 7-GhubYtfN_LHVkFF6zgqVFEil8.roa (hash: nMY0AubUAwGxLZdATA5AGoarINwqSaBiO8weqjvyFYE=)
                          6: 8SguPHIphMGnD7X3CTG_nndU6mE.roa (hash: Of38WddSvMyNlDKwk9utKdII5/SSSiTvKKiNw3Nm+mE=)
                          7: 9USzYLBawhQVkHZbF2gEbzhvC5s.roa (hash: gAEvHU7vjJHAyOa+y6y8BFG0zaydLqnsUXwSsV0Q83s=)
                          8: 9X2bVs01Q2tfw1vRsiEx9bwgnng.roa (hash: xUZPkg/6d28gZt22/LQ5MI3h9zeoZfSZKL8cddD08VU=)
                          9: GDi32Sl_OrQquHaF5eRnZJe-JNU.roa (hash: SiXuwxSrm46q0wZ0C2mDE4OXGGQ9n7xN1flM/SzNXRA=)
                          10: K8EjZ_3WPjwv0W2aNfotejGzQUI.roa (hash: ZD6jTjKGAi5Tbhse2TYNz3HcAvqRtLDhJzjyCqSgJiE=)
                          11: LrE2frxOXcAoeq_ZVzCqNTXk33M.roa (hash: mwK8Mh8KOX9KMr5MZyXTGGmMVq9yTgz6tm3vdRw+NkY=)
                          12: NaTaPKfujJr1Jp0amujqpmQcKM4.roa (hash: D7evRFh9Yxe+0NOmwrrS5eICjJ6z7dDqjSv+6CysBxM=)
                          13: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (hash: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=)
                          14: WhC5y6HpYw6m_MGiQ6XfIsLdv2c.roa (hash: Nv/Imvyk9dKOiF0TKduhR4D3FxweHs4gpbY5BnEHT2A=)
                          15: _B--CuBhqTjZFsr-jhEXlNZoRk0.roa (hash: jcQpONRIAvkERwo6Ybngiz+/HwyvO0eTzP8ZF+C5RuI=)
                          16: bKDzGVLS3_6865mtln3Kw5WmywQ.roa (hash: 1z8bJ9Dv0gvS7Kzr3By8Hyv6gfSz5rRy8bS1g5sgkAA=)
                          17: dGOEJpiLqXr1GxRQGfDAi5gIbkg.roa (hash: +wCypBByvXlOI7hJJjkhkxo33K/FrkpIIcsdMGYENyU=)
                          18: kP7-2BrCdrR1vflyzN6bCG-bC4Y.roa (hash: uhNV7zf/NfCBx0RNf+uccZmVPDDvd1bgU3gAxdkEF5g=)
                          19: sucSe0eC1r3sihXi_iaR2SOp89U.roa (hash: /HwnUsqpfauRDshlfSmbLyvgIlTpLPydMX0GwSKwT/o=)
                          20: t65dNvZ6mIPWzEgYcMlAUQutKR4.roa (hash: IJP/pC4d01Se7R3R057e96hfMZC2OpsCJpYV3fv+Wfw=)
                          21: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: dM3dM01dQujwL39f/+NbhGPtylKD3mws7nzlk/6Pedw=)
                          22: xNLoxQtBTrsDYCoH65tbo0fGdFg.roa (hash: yD4EdHjgdB7qynHghTscrUeU4YcPg+faYfRSy+GnRMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:07:12:78:4b:f0:1c:87:19:28:e4:88:0b:fc:e8:06:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Oct 21 14:00:42 2025 GMT
            Not After : Oct 22 14:00:42 2025 GMT
        Subject: CN=821ea8fc779ccdb2b88589e0c8ccf1b149c55dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2f:6c:ac:9a:6b:db:89:38:99:ff:f6:cb:39:
                    aa:53:eb:53:46:58:11:d8:ee:c6:da:2e:dd:e3:d9:
                    3b:b5:3a:aa:ef:a1:d0:4c:32:a8:dd:1a:f1:65:99:
                    08:49:4c:86:d2:a7:8b:49:f5:1b:5b:37:45:a9:88:
                    ac:b8:5a:0d:2b:e5:59:1f:4b:bd:92:b6:05:96:8b:
                    3b:e8:a8:2c:11:42:58:03:95:e4:a6:24:39:d6:55:
                    7a:e7:27:10:b2:78:92:f1:92:ec:71:61:68:95:24:
                    9f:03:fa:f8:03:b5:6f:b1:39:14:43:9c:43:f6:ba:
                    28:3c:e3:4e:46:c6:77:66:0b:eb:2f:b6:a4:c3:08:
                    4a:13:5f:f2:e4:cc:b3:ee:66:29:8d:4c:af:35:ab:
                    90:7f:91:9b:fa:ad:22:76:46:26:cc:35:f5:37:0b:
                    f4:13:68:bb:7e:9f:70:da:92:ae:64:84:52:3d:d6:
                    1f:25:63:ed:1f:07:98:52:ef:4c:7f:d4:25:2f:af:
                    bb:e9:1a:9f:bc:a2:73:98:1d:a7:3c:c7:2d:14:35:
                    29:da:cc:36:18:25:2a:4e:c0:08:b8:96:3f:87:72:
                    5e:2c:e2:12:f9:9a:d3:11:30:d8:dd:90:e4:9c:02:
                    4d:27:bb:3f:cc:92:e9:f1:0c:05:b9:cb:1c:57:6b:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1E:A8:FC:77:9C:CD:B2:B8:85:89:E0:C8:CC:F1:B1:49:C5:5D:D1
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d7:6f:5f:36:d6:d4:f6:f1:df:50:68:44:b3:cd:68:af:24:
         af:29:d2:de:7a:8d:13:c7:a7:ab:08:cc:e0:56:c7:3c:ab:fc:
         1c:2b:c3:ad:c4:da:cf:ee:31:f9:db:12:44:94:b6:42:23:60:
         35:e3:a7:23:92:54:13:ba:8a:24:f6:99:a9:1a:5f:05:a2:3e:
         d1:02:ad:bb:d9:8d:1a:ea:cc:93:ce:39:9f:b1:2e:1f:32:6f:
         62:4b:cf:24:6e:cd:a2:5e:86:62:61:c6:9b:ea:9f:e5:c6:f4:
         8a:92:b3:e7:b8:55:49:a3:8b:43:a3:c4:f6:3c:a7:c0:b4:0a:
         08:60:17:98:86:8c:94:73:15:aa:f3:93:a7:34:5c:eb:0f:a7:
         9b:29:e1:54:ed:67:0c:77:68:16:0e:66:16:48:62:43:7d:11:
         4c:34:ba:3c:95:3d:d7:34:ef:39:96:54:65:9f:e6:c0:a0:bb:
         30:ee:e8:84:8e:31:4a:a5:66:92:3a:54:7f:3a:c2:24:a1:fb:
         8f:a7:39:4c:c1:c7:d0:e9:03:76:1d:22:24:e9:33:e3:6c:89:
         ad:1e:a4:cf:9c:ba:b4:75:54:f7:84:9f:76:dd:c3:b4:90:29:
         72:06:42:b5:6c:86:35:4d:57:48:cd:5c:95:ee:8c:1e:e7:d2:
         59:c1:c1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:26:36 2025 by rpki-client