Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
File:                     gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft (raw, json)
Hash identifier:          BtlJcL8UWBS43dyv3L3yIwT8MTPjNvG4PlEUUA7GsBE=
Subject key identifier:   94:D7:2C:EA:61:8C:AC:50:9A:6F:E9:0F:52:28:C8:2F:B7:8E:3A:D2
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019A4C981DF4E93A8A660739BE1AF1221F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
Manifest number:          136B
Signing time:             Tue 04 Nov 2025 02:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 02:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 02:00:28 +0000
Files and hashes:         1: 0QAnnNeRCHbjQIKIbapE3K_mn2A.roa (hash: BGoMp2YKt5XWHP/tLve0xBIrFEUyuT55R0sBaL3EegA=)
                          2: 1-JeU5Ztmd7dI2WAxKqDvuuLFfdc.roa (hash: sJa+U3LLkFzW3SprgwTcuNyrM/WIZcd29wv7V4vGIrY=)
                          3: 1-VlVAFYjBlMZmYGi-qY9ce7bzSQ.roa (hash: SuzkFP0avGuruJiAf02bw2JgvahMoj19YC/7v2xdmUA=)
                          4: 1FmAMzQLb3mLZVGeJTAY2eEJJFk.roa (hash: UUuSBt4OdzrBgISERpqSrnk6ha5b0vTb3pmBgVy4gWE=)
                          5: 3kuD3LLnycMU7BTyf9tYGmONV8Y.roa (hash: DHhMqohJkKx9UxzpEEhLQe6jqZLZmbEF5em+WhcLQm8=)
                          6: 4jmGITMHc1KqwA5kx7fOix7Q-Uw.roa (hash: XuhDvg404lU1wC8fQmwflCFqSbHj7IpbOtg5nUQ9m24=)
                          7: AAlIUhYKZK2vk4l3ia79AwMCR1E.roa (hash: RRWpadbWwBpZZlmUscBUB3C6JRJHuOmMiTDl4TROVbc=)
                          8: AJ71PM-nDIgZ6xfJcuoiXNFyofQ.roa (hash: is31a32aE/Kq1zs8CKaydJAWIMJ2+RsLidp2zWhTye8=)
                          9: DeutFtylTcjzPkjnWUHf1n4_dX4.roa (hash: U8lI84k1LNG7a45tFKpYxwOZ7SAtak5HgWpjnC89PSM=)
                          10: Dkm-SUCRilfQ4XzeJOnuoK5ZJdE.roa (hash: zTpguLAeipn8Wtst/naF+8QZOEVr2PbUrq+v8q/mGyQ=)
                          11: LI5Nt-2K3gsdcICE11EckjmUZWw.roa (hash: U9kr2zE52mxUvFJQ2bTsoVIgmPxCzGqU0iGQCUbr8t0=)
                          12: Pv8R2g3YQiREicw9ezYojXP1bI8.roa (hash: Q5Me7mq977MJBtoVkF7BzMCD7W2NdjOfsAnxaPB4EB4=)
                          13: RF_0ZoopT2OYD94ESLS8-RKGn1I.roa (hash: KhCqQ44gDiQf+0xobcUZmx22l7sjaIdtLBPHOJK8Y90=)
                          14: ZeR2y6StnT6e8iiUmqPt6QH7l1g.roa (hash: doAoquHW5ZITfsi9xWFJiGyOadFJ0V1mP2kiA85fdhY=)
                          15: Zj2OZMyP1EvTE9y_kIZLugolVK4.roa (hash: Fz6OXkuDPAQpFAzRyqTOrgEEQVqqBvo5qYV2JmKKtSc=)
                          16: aHlfuIHUUJQcmwzDL21gmtdC8sA.roa (hash: u7mqSTA1TxUCC6edmuBvm0I57irB51HjAMmfjM64bUM=)
                          17: c5vdRG5UZ5xSyih8lqmCqKsD9Fw.roa (hash: vdXhCaB+QUElAatlRVQr5dS8Tdpap0IfNjyLta7QIjs=)
                          18: fnKX5f769Te8QG9am0LCc-_EX6M.roa (hash: XCbr5Ak+yOp2aeHv0hj0Y1kgNB/dIAnyttEDgmH0nvs=)
                          19: gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl (hash: vyc8+l6TX+q3YsEGEUvCtQ05Wj2UERVxFY93sanm/r0=)
                          20: iFDfolyIwLhIHIZMVOHdEHaSYjE.roa (hash: mAf23/tsBk4ZNAVT4MnMs7xQrrbG2Oy6tHbhJCMNsOA=)
                          21: jtcBnw6BtNJ-Urk61tVxibL_AXc.roa (hash: 7NnspFQn8gvh4Xl5gqU6oevjPqD7DkpGZBtddfctzPg=)
                          22: l3DXMB2VL7c7b6xRjYGPDV7oYGI.roa (hash: o6ahrhG3L8tnPi0I3Y8P8prBnYqNAqV+4VEt68sxUBE=)
                          23: oL2YreV4BlLI3MMQYSRrLkg-icI.roa (hash: n0TIXYhUKwSIhM4PJj4FipZO7bEbLjqNdWXuulpeces=)
                          24: rMiGbs7-FQs8_ORoPv4QNfKryhg.roa (hash: n/VAII6UmUdHSSyio94w7g59PL2HlvN5WYUB1jdsc2s=)
                          25: rjmwrzCXEu-XcGuAIXSGal63JtI.roa (hash: S/yADj+wUms3LGPnEcE9tuD1RjvuWJaXGWgabDMNL1M=)
                          26: rjoLb6xRWSPJtXMLtPqwuFtEkcg.roa (hash: /M6nuA1R9V+fnffp6tJmgxeR7pu/I0EBNNvcUnAVpwg=)
                          27: zxOOVaQxZCsuoovtejMYuScjI8o.roa (hash: LDEZSLVz+t8ZGQvsKj/MSr5CS8tXcy/ENL+KLbTXhvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:98:1d:f4:e9:3a:8a:66:07:39:be:1a:f1:22:1f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Nov  4 02:00:28 2025 GMT
            Not After : Nov  5 02:00:28 2025 GMT
        Subject: CN=94d72cea618cac509a6fe90f5228c82fb78e3ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:36:7d:0c:b0:11:74:ee:ce:35:65:ea:99:62:
                    49:24:32:f7:01:37:74:a0:59:6e:bc:1f:fc:c3:a0:
                    86:c4:df:10:52:15:8e:4b:35:05:b8:e1:64:ee:3c:
                    9e:4a:1d:10:08:ec:05:bc:d6:d0:00:c0:fb:14:01:
                    10:67:27:c7:ec:59:20:09:6f:07:99:ae:ef:b0:c6:
                    0a:50:f4:df:bb:76:00:d3:da:77:26:69:37:ae:02:
                    ce:74:75:4f:70:e2:4f:79:17:ab:1c:5c:8b:62:fe:
                    77:ec:9f:13:55:0a:98:3b:c1:93:84:bf:69:b0:8f:
                    a7:fd:e8:9b:96:60:32:5c:7e:9c:24:16:07:91:3c:
                    b7:80:12:0c:8a:4a:b4:fc:83:bc:62:40:4e:f3:07:
                    e1:dd:05:0a:73:b3:38:c1:2d:f9:fc:35:de:11:53:
                    f6:5b:7b:72:f8:d9:68:eb:52:4a:7c:fd:e5:c0:96:
                    d0:8d:c2:fd:f8:36:e6:3e:b3:2d:2a:e7:47:e8:da:
                    41:02:86:57:66:be:3e:7c:50:63:d9:96:bd:c1:07:
                    87:e5:25:9f:1f:d8:d2:a2:e6:83:65:8a:55:9f:2c:
                    ab:97:17:3e:d7:65:ac:06:47:e9:85:83:ad:7f:cd:
                    53:ad:39:fa:0a:52:24:43:ce:9a:b3:b6:51:f1:50:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D7:2C:EA:61:8C:AC:50:9A:6F:E9:0F:52:28:C8:2F:B7:8E:3A:D2
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:66:26:9c:6f:2e:2a:71:6d:07:3b:f4:a7:7d:c4:d8:83:66:
         4a:fa:fc:f2:e2:32:a8:b7:94:74:ca:dc:eb:3c:ab:26:b6:a1:
         39:8b:c8:79:71:7f:b2:49:4a:b9:94:e8:8c:4b:d1:ad:6e:a5:
         c0:a7:1d:d9:56:2f:a6:ba:0d:54:20:1b:98:41:c9:cf:d2:c1:
         91:7c:6a:7d:e6:75:df:9a:15:ab:4e:73:d4:44:a9:7b:c9:4c:
         ff:76:d8:bc:00:40:79:b1:38:02:fa:ad:4b:09:f4:bf:7c:b6:
         cf:34:e8:8c:1c:ae:62:3f:60:4c:3f:bd:dd:c8:8b:41:0f:17:
         1e:6b:0c:83:41:88:72:7f:41:ac:00:2f:64:4b:df:5f:3b:24:
         a1:65:bc:55:0b:8c:8c:99:d6:8e:81:03:ef:5e:95:db:b7:e7:
         92:0f:7f:f3:b3:82:1c:e0:06:f5:e2:84:1b:51:e6:11:60:21:
         3f:2c:b3:cb:7d:dd:13:4b:ad:4f:33:4f:58:d3:30:4c:1a:f8:
         cf:59:5a:1f:e9:94:32:7b:86:99:16:06:1a:c8:fc:3f:71:d9:
         c5:d5:74:72:4c:a7:a8:bf:ef:f0:e2:a3:e5:a4:8e:36:81:c5:
         1e:1a:6a:e6:b7:80:37:47:f2:60:f0:20:4e:8b:e6:d3:42:84:
         71:de:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:56 2025 by rpki-client