Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
File:                     ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json)
Hash identifier:          BiV21dnoA55pxmsJQwwlGmIQ8B5fzFQ6kdL5LJZVzN0=
Subject key identifier:   71:12:8B:3D:73:B3:B2:18:45:BB:8C:4B:49:71:DD:C4:E4:1C:A7:61
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       019A51BEF4BC045EAC1A343BF0747FF807D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
Manifest number:          182C
Signing time:             Wed 05 Nov 2025 02:01:00 +0000
Manifest this update:     Wed 05 Nov 2025 02:01:00 +0000
Manifest next update:     Thu 06 Nov 2025 02:01:00 +0000
Files and hashes:         1: 0SPY3ehqSJEunmmMtILqWyyAEMs.roa (hash: cgmnKIR+3Qr00X4S8IcJLsQ9ZXGxUN8YiwVkY/6EiLQ=)
                          2: 1-Lrf6QEOtW7p0YEBQBk9_eAKdfc.roa (hash: GcIdkWXxbD3EPOagH+CvJ+B9W4u493QQvBk9yfBntE8=)
                          3: 1-WBvajt9a9vMz3Gf-bxrEIk5KFI.roa (hash: ixOZ900fztMk7OjhYh4vnjfATcXP54nswes8la4aLuA=)
                          4: 6gbYECNEsSZ7q4JdusnawAW762k.roa (hash: mnrnhi6Fsht+ntxveCOn/XM8T/ttUxP0oCf5rM/Eilo=)
                          5: 7MZR3mjsAfILO-kcvcAwJd6d2Ao.roa (hash: 34KPCBnRe8nkhxBNb/c94bJh+NIbMikAhxDsnW5Rhtk=)
                          6: B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa (hash: 0LrUFyOJZXBRyQDcmvsLMHIZlAZinGZnG68VlQ7rxjU=)
                          7: BNeQ1Y-6ghm6Jz331HbcDRKwboQ.roa (hash: +0l7YztwQDQArPnJt6igFHNv2i/ZBpGklADdo/eE9MM=)
                          8: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: RwK38zFu0vqxekLguGkg7eY9xBAdH4/FuVxBzQcio3U=)
                          9: IuoGE1LhM6KQyRMF4ZQTklKoNhY.roa (hash: tPXJfugEyAwH3omQI4oMkcg62Um1mpl4Ndx9Woy+knY=)
                          10: LKRcEUY_mkvA56OOH74rd1Cs5SQ.roa (hash: 8IxdTM7SUkvg9nQlJ/k159ukvLl/f0FXKt0rkgzHAmI=)
                          11: OCPVGl1peHlEh5xCGuK3bL8qTL8.roa (hash: ODjW3HaeaPU7MMPg1i99Po/ddkSUNUhgFTUigxFDscw=)
                          12: OXDburmqsWp39gpmUTOgbVXHVBs.roa (hash: mNS+LGMav0ddJkfNmtmb58edob24sZRzDSDw0sXgGL0=)
                          13: OaJSkzPg47mQ4rIOwkpdoPx8kX4.roa (hash: UyojqcoIyduZyG+Ubu8/4tRZIqXeRa/61802aE+vRWM=)
                          14: PoqIcHLT6RwTf2RC-TsgBT176QU.roa (hash: a7kdE+P1J1xHevvlZNEK9zX1UpQH5zqGH+jW654+ozI=)
                          15: QtkpYFVkfpGCc6muBgcymFsYmcw.roa (hash: cTasgEqCWORockiyCZ3h8oJtqhnmA7saGpgSFUUMyRw=)
                          16: Rh_lGayRGbOt5ieswPshE5gVHRQ.roa (hash: mC9VCpAqF4feJF5prCrA3SZDDjWRV8WzJ74r+/aLdvg=)
                          17: RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa (hash: 5WZhQboymyKPaLswcG/VmWNce1ChWZNZjnINMA2NbP4=)
                          18: TMHOC9wHX1rJxaiSMLx9Echx3zw.roa (hash: 6/uJg6ZI9mm5TR8x6Rj4/9T2uacQMFztBl7MRd/GXGE=)
                          19: VoolzUwqWdjT_6ym6OldKRkJu08.roa (hash: P83IslquU55GgGeVulsKAXE7c1EVmhXTqnamoFvTaus=)
                          20: WAhJZAlTDUaB6vmjVLZqksIGzmk.roa (hash: Ik7C6qmxni3KBC9zQeT1wej9gtYUxK6ifPjNRKdWczs=)
                          21: WJktxVFLpTm6tpO2__Lkr6DHPsA.roa (hash: zm8yGpp7f7Ndi5oR3wIlntqY2OUTsGH2t+cJacynsIA=)
                          22: XHgKjO38pNfBvguSYH5AzB6NU48.roa (hash: cLraLK0HrBC1+uwEoZJlLzb/oO0jxC4wj9o4Xo8AIII=)
                          23: YaOOJKipTyIBbM4qEXiHrQP0U6I.roa (hash: P6xkjZGBPMqn6JqsiXNk8vUeROoYT1I2lFLCd+RGl44=)
                          24: g8HopqbG0ETACMkk_zXl3liDZDA.roa (hash: IlJyMCJEwJhYKwqsXmSH9IsBc+u/zpqyYvsIqkn0FEo=)
                          25: ktcqxAf9XWnhPgmKBbr7As5-heo.roa (hash: 9QvIXC9WoBWenzAN8bSHAexhWlQYZfqW7gB/2x+k8pQ=)
                          26: lce29TxMLeElQDDpQ8Ij3c0X0Tk.roa (hash: 78Yo5skViqQdWGup+psFTOfViVx1RTBcrcCMhgyvzbM=)
                          27: o5ChnZN8Fh2UfQkol6pllSa8vlg.roa (hash: aGdO4WpQUBPqENnqKDVSzkgV5hoyIVh/xhrIeTDF4cA=)
                          28: ohD3TSEkEdM-PEEipx0msk3NGoY.roa (hash: UobzF4Ih29CsL2q3mlcXCRKWRUrTB3lKffZcV/pOE1o=)
                          29: qI9WHjgMw1_hMgDyFfsyl5Q8XI8.roa (hash: kUZge94xDziC/Hhnp4VUTNZYZON50IF36lrqmTjwTLI=)
                          30: rRKhiSrbatFvYmuo6ymeVxGwrXE.roa (hash: FCC1G1laSHKy+MJRui/+QVk4PwxHWgeFN/8JBKnvpeQ=)
                          31: v7J0SuAlQFdaHot7td83uoznPPo.roa (hash: Ag0K9C9c2TlJAt8MNSulsrKBKAnHlI2lTalhgszhcOc=)
                          32: ybt1ga0_vsN4KgTOqCIx6p76TyI.roa (hash: +Au68nUXgRDHemgu2ODT+EBUxbABQU2c90g5EDmI6o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:f4:bc:04:5e:ac:1a:34:3b:f0:74:7f:f8:07:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: Nov  5 02:01:00 2025 GMT
            Not After : Nov  6 02:01:00 2025 GMT
        Subject: CN=71128b3d73b3b21845bb8c4b4971ddc4e41ca761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:f7:e0:ff:8f:97:83:f3:4c:26:ec:67:b3:
                    f4:fe:dd:72:0f:0c:42:50:cb:fd:fd:3e:77:05:03:
                    83:85:e5:4c:65:c6:19:97:8f:bf:18:51:e8:fe:c1:
                    29:0a:20:c8:42:cb:28:e3:c2:b4:fd:01:02:39:47:
                    d3:a0:30:50:04:b2:7e:c2:0f:19:c5:3d:68:2d:9d:
                    5b:06:12:cf:54:bb:0a:e0:69:70:52:b0:e1:79:ad:
                    6f:3b:ba:b4:3e:19:c5:d4:9c:ee:1f:ee:72:7d:0e:
                    9c:cc:bb:a4:6a:13:10:28:e2:ac:9b:ad:25:5d:5f:
                    5a:2c:b4:65:a6:bd:01:74:91:e9:91:2d:76:1e:7a:
                    35:d0:d3:44:88:2e:06:1a:1c:0a:0c:95:1b:98:49:
                    74:8d:3d:59:47:14:f6:0a:35:4a:f1:d7:81:6f:b3:
                    79:1a:e2:58:42:52:83:5a:b0:9f:df:23:43:05:a2:
                    60:b0:af:f5:fa:68:6c:ce:ce:ef:d3:ee:1d:f9:80:
                    8d:ea:df:08:49:a2:f0:15:cd:ed:12:7f:3f:56:b6:
                    6b:6a:e9:27:ae:12:ac:9c:aa:af:cb:fd:a4:62:c3:
                    77:49:38:8c:21:29:7a:3a:60:d4:cc:de:aa:52:f3:
                    53:74:50:a3:8f:c6:70:fa:eb:a1:3c:b0:15:ae:95:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:12:8B:3D:73:B3:B2:18:45:BB:8C:4B:49:71:DD:C4:E4:1C:A7:61
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:13:f4:83:dd:1a:69:41:08:a4:21:92:98:e0:c7:3b:52:9a:
         27:01:b6:3e:7a:ae:65:ca:de:c4:ea:ad:b9:4f:e5:0b:03:d8:
         7b:9e:4a:1b:77:d9:d6:33:80:0c:a6:fa:1a:d7:ae:f5:cc:f3:
         c9:a8:fc:2f:9a:30:5b:78:7d:69:6f:1e:20:9f:76:1e:a2:00:
         9e:ee:98:4e:cb:d0:00:09:3b:f2:e7:e7:1c:d5:b2:f8:d9:51:
         0a:68:ff:29:71:60:20:62:19:f4:37:de:57:fc:fa:09:a0:5f:
         ce:27:e1:5a:bf:a4:b9:eb:1f:4f:8d:45:31:a9:ea:d7:61:62:
         ef:48:58:24:5d:c5:60:7e:79:e6:da:11:ac:e4:11:fb:53:8b:
         8c:69:af:fa:d8:8b:ae:e8:92:57:6b:ae:1a:10:7c:42:b2:a7:
         26:69:02:85:09:4f:b4:cd:42:54:ff:40:e1:f8:da:9d:45:ef:
         ce:a7:d1:70:d2:1f:34:19:1e:ce:95:0d:3b:46:66:88:e9:bd:
         ce:61:4b:31:d3:70:bd:4b:df:c4:3a:46:77:1d:a5:ef:6f:d9:
         b6:51:db:a4:01:b8:cc:de:77:fe:f5:ec:55:4c:f0:6f:ba:3b:
         e0:cc:63:79:7d:87:a8:f4:c5:65:2c:c7:fb:39:36:cf:34:fe:
         7c:63:70:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:27 2025 by rpki-client