
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
File:                     advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json)
Hash identifier:          0OBzMh5/Lmrb0FDSi1ic+59EuZ4ndXlg2EvQvS0UOHE=
Subject key identifier:   02:E6:70:08:55:EE:21:2B:A9:D2:05:3A:78:9E:10:B0:07:DB:5F:42
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Certificate issuer:       /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial:       019A4D3D051E48BCFC0A628659235D72F43F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
Manifest number:          04A4
Signing time:             Tue 04 Nov 2025 05:00:35 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:35 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:35 +0000
Files and hashes:         1: 0PY44eNhRhwBAlEI8CW_7e75Yh4.roa (hash: DGCK7O0NcOT707/3o5K5VhDn6NVZN3M0FrdHm/a2UuU=)
                          2: 356qaAYQpDV5m2Riq8A1jSL_myc.roa (hash: J+LALyAXIHBq3+bBLiTSfwMeZdohnuBRZTHDVc6I9II=)
                          3: 50QBDzaaWAWirDv35AlJpGDh488.roa (hash: U9zp626nKKun30mCMXd5d52t9o6/HWZq00zHsZoBgiw=)
                          4: 5vI96mdACUYtbrBj1hpxS2th8SU.roa (hash: +D5F/vhkd6kDEoeI5nvUAAqsYy/qD8SkAXkJnFT0scM=)
                          5: 7md33wTGzdjzkpdm2YWPb96DeAE.roa (hash: XTg5R+tAMtHvJrOV1S/6jDI/yrBqzGpGjvAacgtOwFs=)
                          6: FNzx-AXDWYQXweTOw5GW8wLwA8Y.roa (hash: pI2apPSLr8xZ4eK8bjFcepwZqTx3hkzwJixceRtYmFQ=)
                          7: GSKX6t5lJ0i4qvCaHVaNJW2pF_U.roa (hash: p6a7klkfw04BCewW69YXx9rhT4r3ImOgOYr/lCdS37U=)
                          8: H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa (hash: alhkfmIs5h48famyJbrNqD1LroO26bFxdaO2RO80rB0=)
                          9: Nx_LlHukO6YVT2BEBxBXRcLN_po.roa (hash: KT5voOJbr5oTRoQ5gvpwOS1NktXBmDgt7n2ImgfHYoM=)
                          10: RNey77PyYZ7q5aSaC4PKivPQUp4.roa (hash: nbnaDHAsWvelX6heHPYA3AE04SRORSzM43r0uMU5XGU=)
                          11: SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa (hash: Gny5FCnUJO7mwZfbJF+nB2yfn78HUv4IFWcliadewNg=)
                          12: Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa (hash: gAGb1Y5AmI4FXfL962Kn9U3vKesk+PWP9SX12mcYBwQ=)
                          13: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: 7wX8EpmekEYBOqSyI23B4cVHDOP/t8H+9/gwQ0ph4rM=)
                          14: ex4DOvPDqM0MHcX4072QFI1J-dg.roa (hash: hb9HDZK32mlayqYDJJsNMIHQYLFqVQuuMQ9e8DihaX0=)
                          15: ixSljlpAv7VqFqZBManiWIU_IIY.roa (hash: S7kK0yaWZD9cO4dIzOpKGjzXHLiqqB9lAeIuZmQigdM=)
                          16: kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa (hash: cRZ9xm6BVrOYd9CySCPL4z+78bjkaTOH3OZ66vuPhhQ=)
                          17: lNQAITIC5PmIJYf58oFmM4_t7ZI.roa (hash: EoC37uqzi538UDD96xogxI48SXL4t+AtWBAP3kmAc9E=)
                          18: nzL5rU21d1PlGGMQdcFTW627B-Y.roa (hash: 9reJY4cgowCz0eQpIjwulCKKRQRpF5bMWpAhQfAMQg8=)
                          19: qtSFhSVXD3loe4iYCp27H6WqPO8.roa (hash: dM5n2vL+0Slh2GrDt9ahN7jhYGcuB7d0O5MXI/IkDvE=)
                          20: rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa (hash: l8U8iyph5EKJjwuIU1Ch+SfAGqICGB1ZppWFQqcO0KU=)
                          21: uPVNzfaFCEVH8pgEcujrS2hKdGY.roa (hash: 624lPGVpaWFoqr9oTQxsUT+zutBPV/3xF9eLcAlFX3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:35 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:05:1e:48:bc:fc:0a:62:86:59:23:5d:72:f4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
        Validity
            Not Before: Nov  4 05:00:35 2025 GMT
            Not After : Nov  5 05:00:35 2025 GMT
        Subject: CN=02e6700855ee212ba9d2053a789e10b007db5f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:56:a5:df:c9:13:a7:3a:a4:0f:c8:72:65:
                    8e:06:5d:c4:7c:5f:a9:a6:06:29:9b:37:bd:eb:38:
                    de:1a:e3:11:3c:4e:df:a3:49:b9:7e:93:f7:94:7d:
                    35:e9:9a:7b:03:10:44:f9:6d:52:80:fe:24:71:e2:
                    52:5e:45:28:d0:b8:17:d3:2b:62:e1:5d:7d:a1:cd:
                    a1:ca:25:8a:19:89:d0:ac:11:24:3e:9c:aa:77:67:
                    6f:dc:2b:53:4c:6a:fe:92:86:b5:6c:6d:4c:3f:25:
                    9f:8f:f6:9a:9d:3a:d5:a5:0d:84:7a:0f:c5:b4:f5:
                    6f:11:65:2e:09:62:7e:b4:0d:eb:86:86:eb:9d:fa:
                    d9:78:01:3c:45:16:46:10:bd:85:17:28:75:e0:30:
                    1b:11:99:98:a2:e4:e5:7c:0c:f9:27:9d:51:9a:75:
                    a9:79:b2:a9:e9:a3:bc:bc:54:93:35:88:0c:67:19:
                    1f:f7:b5:c7:b9:c4:54:5e:3f:2d:a8:cb:a1:0e:b1:
                    5c:f3:e2:81:47:dc:5b:33:4c:74:fb:12:3f:fe:59:
                    52:a7:5c:c1:72:57:d1:18:fd:c4:cc:41:cc:86:61:
                    ee:fa:4b:75:c6:7a:42:68:31:1f:67:fc:d0:18:74:
                    d6:41:c4:b4:f2:49:72:04:63:ba:47:d7:13:2d:c1:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:70:08:55:EE:21:2B:A9:D2:05:3A:78:9E:10:B0:07:DB:5F:42
            X509v3 Authority Key Identifier:
                keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         b1:96:f2:da:58:4b:7f:73:cf:ce:fc:1b:d9:38:92:b4:06:88:
         71:e5:5c:14:13:79:6b:7c:7b:12:f2:56:fc:f5:a3:60:a0:84:
         b8:41:93:85:eb:ad:04:6c:fa:d9:a0:b2:88:00:40:51:3f:50:
         f0:1b:c9:3b:82:74:53:a0:c9:89:8f:1e:8d:21:62:e4:90:53:
         f3:0c:04:40:68:6d:81:2d:44:7f:fc:2c:51:9f:59:30:94:7f:
         f1:f6:01:2f:61:2c:d8:9f:99:07:55:0b:65:dd:b8:c0:13:c0:
         e2:0a:e0:41:8d:24:29:44:18:38:50:2f:70:ed:7d:a6:d3:2f:
         0a:5f:0e:eb:7d:9b:c2:61:ec:15:6e:77:cf:cf:3c:80:4b:bd:
         ec:2d:57:ee:22:8b:14:f9:bf:57:9c:29:6f:db:20:d7:f5:fa:
         1a:30:64:77:e9:37:7d:f9:3d:c4:74:bf:ab:cf:d4:ec:b6:b1:
         2b:bd:4d:2e:a2:c8:42:ba:2a:ae:61:e7:e3:64:a7:2b:fc:df:
         5f:88:f8:98:05:0b:44:d9:3a:2b:f2:e2:01:b3:47:fa:56:54:
         c1:8a:34:45:49:53:9f:ea:56:b2:ca:6c:c1:5c:01:94:d6:3d:
         a2:50:0e:65:18:46:46:32:8b:a3:ca:6d:9a:77:0c:9b:19:02:
         26:87:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:01:52 2025 by rpki-client