
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File:                     C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier:          cupw0SstKFMqiXebibtrKGu3LS1FbDxLI+BJlSzWCbI=
Subject key identifier:   B7:5B:C5:CF:E4:D0:0C:B7:9C:10:9F:76:8C:70:80:DD:77:01:6C:EC
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer:       /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial:       019A4DE22EAF7A6B010D05BDF571E0D3CC10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number:          03ED
Signing time:             Tue 04 Nov 2025 08:00:59 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:59 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:59 +0000
Files and hashes:         1: 1-l_gre_pxhYS4_zZwDxZG1Nt_5c.roa (hash: 79+LUQppQGCR1ma6gkDs/MxaDYgg8iUK7GVvWKXvzJ8=)
                          2: 4EVIucA70gYtRBC_kvd8S_jO4G4.roa (hash: f24fNYbERcDJzGGGVxLcXRg46QfyX7NJWLWSxrMNmcw=)
                          3: 5jJR8ex_Cu2DpLymyUyPZOMyOkE.roa (hash: xzEHQ5rCOad65DlaTD/0zOgecwAYSd4+GjZ0k61Ou6I=)
                          4: 6YJjObW1_CPDgXKpHS-TcyIptqo.roa (hash: jjGiP1pdwyr2zLGuJkHaIJCjcU/oN7YWkJKwf34n+BE=)
                          5: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: IjDBteYqTutnG3eSsM/9GSV4He29Eid1m4N4waFJsrM=)
                          6: DOAEIvCj-u7rs38MBt2OY5TO5ck.roa (hash: L2KlUD/3hwbtTHy39+u/XA4u/e4Wc7hTiaNnBwb1Xl8=)
                          7: E0upJVXmvrb9QB1vHUoxxOXLw38.roa (hash: 4mhxGqIUoY4Bc+dX0kK4RcxfBAsMjNcaP7xXT7MwJUE=)
                          8: EvZmdpYLd03WERL_L0i0mrtj944.roa (hash: CV2qEuFjtfL/Sdsin89UXRGI8h47pjbkcQWbmiCWOHY=)
                          9: H49hyQPEQJXxJVi2iR8A2ADQ41U.roa (hash: eqi7i//uHcpOg1OfB0kupkpo9kTQKxZE6a6NNvU+Pyg=)
                          10: QqRdYAKP11yK_Y5Yoe1GlCLvPIM.roa (hash: B0QgrQfgkvXm7vAQLsl/pTmN0f26n576ETmzI38WdjE=)
                          11: Tv3eHkTibu1-NKazXj-AMkMj7Sw.roa (hash: lHAqhVPifaQjD9rLTD+uDdEniFd0R32cYJ3zWnuqKHM=)
                          12: U8Lz-woBuayQCxonI-hxDcK01_Y.roa (hash: 418Oc771TIXqLSF+QH4I7VyOD2EV9+QkDmHN3kvRN94=)
                          13: UoCD-Jw-d36aunkLRuz6ly1x2v0.roa (hash: IL5ej7uIEFxvULFt7FLIix+P1FPdxsPj2Yas43tG1o8=)
                          14: XKsWSdLhRTm8gjvClV_GNNpoCtc.roa (hash: KzhS3En/I42C0iMadSwm0isXBogBsqCsvnDb64RYfSg=)
                          15: b7g_AfGKRKl1uxe-BoiQM3sl0nw.roa (hash: Zf9ZuQPGxN3TX6S4uzmoIy9WChIwMZZm6ZNHezb6N+U=)
                          16: bCaBS4aQHjuaa_tTVMTRXq8OR_U.roa (hash: 7H4q9uVHSlMkwQO5xRA3Q4nmZoDkIn1SJmtZoSSXixQ=)
                          17: bsbpbOfEUspT2FSFU7Dpjg5QFsw.roa (hash: 1S0gGuFvbVkAU0skMefR3m5Pq9v5mIgplTKpElL9/XI=)
                          18: i9pP0UdC60SIkPjAyVnRvnkLQpI.roa (hash: DCLA36TFrAK5MuagUyc5DT4JGQhrH1BUGZII4pznSfI=)
                          19: lO1MSRjPmSLDkgv8jGt5ktPBHoc.roa (hash: og5imLvn3cUBwDvPoHiD1z3A3c1NAGRPK9XyazGlNpE=)
                          20: lzUrfdjvi4X0daNPvReXYlaxfUs.roa (hash: mmPPsLggwrEErlARtsPqmojwc7jNfBJKDlKr0vM/KnA=)
                          21: mFwXB_3EhYgPmb02XlkNrRIYAks.roa (hash: +phEwBPGNbWcGWHb9f7x0gtZyCJo2VWruE9fcfo0yZQ=)
                          22: mrriTsp_r84VvXOZ9vwCDiafNfA.roa (hash: 237ftlrT6P/fqAsRok2Wq3N6bqs/PXVVGhXC7gyjJzY=)
                          23: pPTTLhksK7v4ipvrbQpEGSDbgjk.roa (hash: o2I/GTIezXoCE5dcTj8iZrNN0OoZ4v7wD/kJ0bQOHoc=)
                          24: qa2CW4uODzDkm2CmPACzVMfywlo.roa (hash: hm7X8GWW08mhXHAmgZF26ZoPtjwf8VScQbQBIGqBTN0=)
                          25: sbkxRvSrfQGNdpGANqUogURHroU.roa (hash: GVO8i7AC/aFii+I0dhy+QGbxHH4AqRNBV/o41DJJYK4=)
                          26: tVTdYwnYYp3b_eUhbVSQRQeadEU.roa (hash: 4Nl3NSw+3Qg0hgNeV3S8TaiNWf3yjru7QAcwwQS9RII=)
                          27: tra90j-TkDoNhw2jYUOuCLQtLHQ.roa (hash: rMHYa+7snR9OTOD/IZ29XHnehX6LzLjK9r4pNKm+rGM=)
                          28: uuTcIhmMVylXKoo0d8I18SaHjWU.roa (hash: a8ZKg1ASt06tQrhILg7SaB6+2r8ufbJSPrndEQoQ7X4=)
                          29: wPGbhSOTVO3W6IHlbrSy3bcGNLc.roa (hash: JCi40r9Uzz4ur2p29IZ7AQpEQaCcaPWxmQf31vmLka0=)
                          30: xHqvlNpd7IJ2_bWmni8VAvmQhSo.roa (hash: RLG5JtYf55FcGjS6lNHNnXjb7AxYPOv8Xo1vraqegr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:59 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:2e:af:7a:6b:01:0d:05:bd:f5:71:e0:d3:cc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
        Validity
            Not Before: Nov  4 08:00:59 2025 GMT
            Not After : Nov  5 08:00:59 2025 GMT
        Subject: CN=b75bc5cfe4d00cb79c109f768c7080dd77016cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d4:dc:62:7d:16:bf:e5:ed:a7:fb:d8:64:db:
                    c9:95:97:1c:43:63:bd:5a:ea:d0:9a:4f:99:05:7e:
                    33:7e:3c:ae:29:d4:d0:8c:4f:95:31:34:a7:07:49:
                    79:4c:44:16:13:5e:18:8b:e2:6a:f9:44:02:92:88:
                    62:af:6f:f2:57:3c:d7:00:ba:46:20:a1:b8:1f:87:
                    a5:cf:2f:03:dc:36:7e:da:fe:d4:0d:62:d7:e9:ee:
                    44:01:85:43:02:20:3c:e4:f6:8d:06:03:10:3e:c1:
                    8e:60:c7:e6:98:60:53:e1:18:9c:d0:4a:79:1d:91:
                    09:fd:ca:bc:6f:0a:48:de:ac:fe:07:93:de:27:87:
                    b3:01:55:d5:a2:67:f7:22:ac:9d:a4:5b:bc:4d:df:
                    4d:16:60:81:e7:24:4d:8c:70:06:28:d0:54:4f:11:
                    a4:cf:44:73:76:8c:33:5a:db:a5:4f:f9:2b:f5:76:
                    8a:47:c7:79:9f:18:1d:a7:09:11:e8:47:9b:71:22:
                    df:ae:c4:a2:1a:e7:13:6c:f4:33:4a:42:cc:d3:e2:
                    60:72:5f:0e:4c:4e:de:5a:8c:0f:c0:a1:ce:e6:39:
                    fc:a2:7b:9d:4a:ea:12:e0:98:e8:67:48:97:82:f6:
                    3e:b5:0c:cf:44:e6:5b:c6:b5:9c:40:2f:10:ef:d1:
                    08:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5B:C5:CF:E4:D0:0C:B7:9C:10:9F:76:8C:70:80:DD:77:01:6C:EC
            X509v3 Authority Key Identifier:
                keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         35:48:d1:a0:33:87:ad:59:e6:ef:fc:01:77:3f:1b:72:cb:02:
         69:21:a3:17:ce:5a:ca:d3:b2:c6:44:6b:43:83:97:fc:3a:c1:
         50:af:c2:c7:11:cb:cc:12:0f:54:57:8f:d2:58:51:fd:14:e6:
         c6:12:ad:c7:9f:df:40:85:c4:e4:85:6b:71:60:d9:71:47:9d:
         13:89:c4:ab:88:1f:80:0b:09:18:b6:57:52:06:fd:19:1d:5d:
         8b:ef:9f:df:ca:cc:ab:74:0e:38:10:20:5f:59:58:59:31:ff:
         c1:c9:23:25:33:fd:bc:a5:f4:78:21:7e:46:14:eb:2c:27:9a:
         bd:ca:b6:23:0c:4c:43:ff:f6:01:65:26:6a:0f:59:4b:b0:3b:
         0e:e8:ce:ab:7e:53:da:ec:34:72:d6:07:35:70:fa:ea:e6:5b:
         a7:66:03:3f:3e:0e:df:b9:aa:c2:c7:dc:c6:0e:5a:f4:dd:9e:
         ba:2d:81:2e:b8:d4:ec:d4:5b:e2:7b:e3:ea:c2:ce:89:60:81:
         ce:df:a8:c3:55:e2:48:78:06:f8:c5:30:72:c0:61:07:b1:40:
         db:af:34:4c:d0:7a:54:8d:ea:72:69:83:4c:de:de:ee:99:09:
         12:72:44:b0:8c:01:d2:73:b3:0d:d2:78:51:9a:75:63:8a:13:
         a6:74:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:01:47 2025 by rpki-client