Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
File:                     dGNlNVtmVWSiEMNYxooBF7f765o.mft (raw, json)
Hash identifier:          Gu47e51WZd/Km1vigkhyOiNoZOjJtzKDE3bMXZuf7sg=
Subject key identifier:   12:88:61:66:FE:AF:45:38:C6:C1:23:08:AF:EF:00:C7:8F:D3:AC:FB
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       019A4F98CA319178E3B1EF500993018E8623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
Manifest number:          177C
Signing time:             Tue 04 Nov 2025 16:00:04 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:04 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:04 +0000
Files and hashes:         1: 0Z8yTYlKjkqvKh6kY-kM6OXYfz8.roa (hash: fwm0Gtt1RFKV50/Ms+CgVe/rwlPJ9Q3VLzTFIW1v2aw=)
                          2: 4AhKQoLmAk1YQIBQspZfyfaiu0s.roa (hash: 1kEaOXNNkPEAuTvrZqrQmCGg/Uu08f1ofkHwiva1rBk=)
                          3: 4VJyAeGVgAs2ysdZRw_rlOWdRTY.roa (hash: Xd7f6Is8VkQ7huxtuAE7hUXnUe/NIXlF2TbPODpbZHk=)
                          4: 8xmePB-pGcDcrQ-prX4UP_SBy78.roa (hash: OO9rzem914ccJuV3c6Pdstzz47bnogLMsoJtrFTJhQo=)
                          5: 9nwJkf06ywYV97ycnHX8xephiLw.roa (hash: E/N+tJSxegWf0b+66cYXz6Gw0s8y/7JfEZqjs9iWYvA=)
                          6: G1nDGEYcV0zuKzKuOXzDx75r3GI.roa (hash: 41u/KL+MWJdDf84HJGznj8QmpQB0mJMrGBzkwlxjtIc=)
                          7: HtGtnD1WG-uR4lNZ5h-A8-pjUrU.roa (hash: JiGHlI4PQlUWbSzc2TBFb2wXm1bs25OSgaV13SVkmqE=)
                          8: JPWgfoIicBY7uqLCE-abW2DSU0c.roa (hash: A927JecYLMujCKzkMKtyVfZVMSoezFJjSy/bYsYd8SE=)
                          9: Kvx3aMKyyHxozL3U3ap2oLWDca0.roa (hash: Zz8Vm/BEn2VlT/RjADj2XxnM/3K7+ZuLbhNPkP9kcOQ=)
                          10: LMdQpYE9dBNTzanGIqV59og3G5Y.roa (hash: O9iBbYU6FJx61oOEQm4eZUxrBSFdJBoBF1RZ/jgTxRE=)
                          11: M7UMw75zEMferpyTZliqTtxFYGw.roa (hash: bhGEILsyYzSvD2gGTZix+BRHPPr9Z15A13HndBQFJh0=)
                          12: TQNP6hoAf66GZWfHy5k78DAiiCU.roa (hash: uABddS+djXpmQc7iz2KFGbyJ5oeYnTC/ey9Ec918mow=)
                          13: UMHCyN1PhpnvoYUbs1CT_48YLGk.roa (hash: i765qk64qL4Uog5FTQxpy5y2jivRwNCYq0ub5NcQaLk=)
                          14: V51fQsmdOucWQLFJANFvs_Ma2i0.roa (hash: mhzDbXcVW4r5ZjsZqcqDKjjyLnY5MIVjnfy6m1yWpyc=)
                          15: V5HLYQX7OEpLFK_MH5_sUYR0JBQ.roa (hash: 6cm5gNEppEG5XD2KabFv9dmbCHQEnB7rCQFwcW30ZWM=)
                          16: WWDr2Um8NXXwWukbK6cj1BF3t7Q.roa (hash: KB4bFVPkGqmvCaRGbBdpA1si7s9CexKnU66M/mHt/0s=)
                          17: XZET7dFa5OoJqf73WGd1UHo9Trs.roa (hash: FbxqvpbDfsQRYaW0n//PgGX2T+UQY1wiBpKlSWUYJQg=)
                          18: YmJQTVDgl6pT6ifoZvYr6OgSo-4.roa (hash: IEA1sge5kazioWkKzPv9VfD2BEf9Xg5te8xiJRghijI=)
                          19: dGNlNVtmVWSiEMNYxooBF7f765o.crl (hash: P//MAZmtHGHxKUgHFNTm4aPyuhieHY+wTKmzuQMxmCg=)
                          20: dc2g-kIH50S7LA2o26AVsv4LItA.roa (hash: anV8AfiZnJM+uW7z2xYGvooxLoCl6L/cGFCY34WgBTU=)
                          21: hbkDGu-27NQwuA34KKvsthuBpoc.roa (hash: gs4QclFDIW6OH3AQHoXwFFecYQ+OpwQ25vhb21IUnck=)
                          22: iHslhtFiuKaugZuIjgDSTM4F6Sk.roa (hash: 43DehRvyD4BSrfqUpPUdy+zsjmfPk1hQcSdYylB1zpo=)
                          23: jJYsZg4wnTyX9mV0JNA_riAb8aI.roa (hash: 2YSmon6Fik8vSjQAeDBGETPmH22iZ7Gu1aYziQraG2Q=)
                          24: jmqPtt5Ns_W-iBFLphm9TOPqcBk.roa (hash: Q0XLFkj7/QEzPnBRybOs7B/q1S4uk4+SdVBsy+OCL8U=)
                          25: kMJn1HheqQ9Rsacjsd3PZ6CXhTk.roa (hash: QHx3y/n5TxjTD6iBbFsTYJr5O+YrfK0OyTuVkyzqTiI=)
                          26: lkYJ-_nXwt_j8sYXcXEPI8XjVSs.roa (hash: H5A3LLoCNjemShwdfzZoOLg2oRcQfw/qyX1Up4Fug7w=)
                          27: m095Z-7KR0K5gXucbWhKiz12Uqg.roa (hash: pKKUCvxcyqiDYUVY3jhLgvu4uMJ7RTYnDW2HPLpWkkY=)
                          28: nMVuUhhQLd_p2MmIFg0uk6oN0DA.roa (hash: VPC3QfM3Xk9o/TFr02RnouDa7yDlwB8VvuZ6tJbURMA=)
                          29: nyslHXPfyz0FM3udFOE-7tndyMk.roa (hash: gPoCAQJEwCTv4wbyGKoKpT/fwNV2im1/jc8HR0EwRAo=)
                          30: oEbBV7xx5_jwLtoklKva4-Dg2v8.roa (hash: i+aaCmiUXCVg0OPcM0SwO92pJsKLDZGoxx/fXdMrMgQ=)
                          31: oQY8Ggs-WHGozgLdlzn62PGvTmo.roa (hash: Rm3b27WZnppZmsClSvXbSesr4c+ogRwCEVrSLNbiwvA=)
                          32: sTAcEeIlslVpuXMYkyeJBskGwEo.roa (hash: sDqLs0eEA0fKuxXHljiO7Zt9np/B1YWaKWKNaP6grbA=)
                          33: si-h3EMZPum7ZeFVKrM-JgEvS5s.roa (hash: e6RNF3nCZ80GPAqffnrYJBWzKtbs1gbwLTkQ6jY31gw=)
                          34: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (hash: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=)
                          35: yTFqO5xiaIDSCJNJ_ZUqbKSypdQ.roa (hash: zRFFAOZDcEueQQ2liuDNq8EtejJKoUyry9Flbp6zROU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:98:ca:31:91:78:e3:b1:ef:50:09:93:01:8e:86:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Nov  4 16:00:04 2025 GMT
            Not After : Nov  5 16:00:04 2025 GMT
        Subject: CN=12886166feaf4538c6c12308afef00c78fd3acfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:6a:79:04:36:78:08:25:e3:a5:fa:e7:45:
                    b5:4d:96:17:c0:81:89:a9:14:23:6a:5b:40:8c:6f:
                    ce:43:89:d2:1e:61:a5:b2:d7:30:71:c2:18:d3:04:
                    ab:1d:af:86:6b:8b:40:c1:29:f8:29:db:bc:54:b0:
                    ed:1f:b7:64:a0:0e:74:7e:a7:ce:c7:a9:64:18:96:
                    f2:59:52:5d:8f:6a:e4:02:36:4a:aa:51:1e:16:5e:
                    ee:9d:a4:f8:47:5a:be:4a:76:8d:e2:b7:b0:a4:ea:
                    c1:05:38:2d:b4:5f:fa:92:b3:f6:9d:59:a5:48:27:
                    8a:8f:b8:cf:1c:f3:c2:7d:41:e7:d2:a9:5a:af:5f:
                    72:98:ed:18:1b:99:68:53:24:8c:34:bc:88:c0:b0:
                    ad:a8:21:a2:45:40:e2:d0:9b:d9:d2:47:37:c0:cd:
                    37:ff:9d:5c:fe:2b:c3:d1:74:31:f5:98:10:85:a3:
                    1a:da:7c:3b:13:e7:37:c3:b1:83:d4:32:b5:15:04:
                    6d:cd:c8:a4:af:ec:a2:6c:30:05:18:21:03:99:0f:
                    04:3c:6b:a9:c1:ec:57:a5:48:fe:bf:01:10:01:ca:
                    ee:57:1c:48:d0:5b:89:f2:37:2d:b4:02:be:32:c9:
                    36:4e:20:a0:2c:03:21:3b:6c:ae:55:c2:ba:37:ae:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:88:61:66:FE:AF:45:38:C6:C1:23:08:AF:EF:00:C7:8F:D3:AC:FB
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ee:bc:d0:56:1a:15:b8:98:ca:4b:53:ea:32:09:3f:8b:85:
         c5:f6:25:52:96:cc:b7:ea:ea:a5:47:6f:47:fa:79:75:30:00:
         e4:55:54:e0:a8:56:9d:16:53:3f:1d:9f:52:b7:8c:50:48:16:
         56:83:49:7d:52:2b:b9:a4:ff:d7:99:1e:41:07:42:cd:bc:71:
         dc:50:b9:c6:40:d6:0e:93:4b:6d:79:c8:17:27:50:8e:e5:e4:
         fd:b4:8f:31:66:b6:ca:25:7e:c4:81:6f:0a:2e:d9:2f:73:3b:
         bc:8e:65:c6:72:70:76:e4:42:f6:8a:6e:20:d9:2a:c3:dd:f2:
         df:7a:9a:f9:e2:ce:06:bc:bb:a6:f4:76:7b:5d:c4:ce:c5:ac:
         53:4d:bd:47:f2:62:10:64:08:9f:82:1f:31:25:e2:3f:0b:e8:
         9c:f6:0c:44:a7:f7:e2:06:16:a7:08:d6:94:7a:d4:0d:4b:0a:
         25:e5:bc:62:72:74:f2:f4:ce:33:5a:04:54:e5:31:ed:57:e5:
         91:e4:56:a7:1d:e5:cb:1d:cd:32:c8:88:b1:f1:f9:0e:c5:39:
         cb:be:6f:59:de:36:19:65:a6:07:08:2f:ac:db:6a:c7:6c:31:
         a6:88:68:06:41:f0:d5:0c:84:4a:b2:b6:69:c2:c0:ba:cd:80:
         46:1d:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:16 2025 by rpki-client