Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          Q+t2iq6GVq8NwaqQrjNdX4JFTqcpzhT7ZF3ySf8SsOY=
Subject key identifier:   E3:B3:76:6E:B0:5C:9C:C2:6A:8A:3B:95:C9:B3:DC:6C:55:BD:C6:91
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       0198D54DF97CC72EF39C634ACFD38C706AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          168D
Signing time:             Sat 23 Aug 2025 05:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:53 +0000
Files and hashes:         1: 2HcLLIfy1JMDCVGEVTptM8elLd4.roa (hash: LoXji0ZJfkE3eJjr+G7N7ZYdU5+oCyWMzqs03IJOVrg=)
                          2: 4h8DSu4LCqLu5y5DGLyVNLDaW_8.roa (hash: 5dgH0nSjVBTs16em525/U4kAjurzhSSV9U/WWc+xCEs=)
                          3: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: L1FkFkcUE3ciybu0D3NKAukLQihirzCD6NlpURL6rgw=)
                          5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          6: LwR5e-3XdDXFjm5eJuuKPbFg1wM.roa (hash: 4JsswUG9Ou5/9jUtsWyiDQhEMAGV7MLxdDyUU0ZVg4A=)
                          7: O-s7sLwyvER4n7KZ25-xO-rbC6M.roa (hash: S3u//Ykp1StY/C11qR48/ymNimiE+nEYX14hg2A2Bbw=)
                          8: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          9: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          10: X0X7YHZdxd-Fm-vSH2gkoaNKSEE.roa (hash: 0wypLX2pYlj/wkC9RZ/dWCbs3OnpHFJIgo8rTP3dhfk=)
                          11: XyJzr7K8kDR7Crh0eGA64cNXh5o.roa (hash: O/tUpYLyJqFNhTOL8oVDzZYICuybOlG7LlJD8DubnZc=)
                          12: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          13: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          14: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          15: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          16: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          17: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          18: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          19: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:f9:7c:c7:2e:f3:9c:63:4a:cf:d3:8c:70:6a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Aug 23 05:01:53 2025 GMT
            Not After : Aug 24 05:01:53 2025 GMT
        Subject: CN=e3b3766eb05c9cc26a8a3b95c9b3dc6c55bdc691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:fa:37:ab:36:49:e7:9c:94:7a:7e:0f:a9:
                    97:c6:fd:58:f7:2f:81:c6:1d:df:63:7f:dc:a0:8a:
                    4d:31:0f:f0:27:07:c3:54:80:1a:71:81:74:cb:46:
                    d5:74:a4:91:f3:89:68:67:9a:13:e5:bf:68:f6:68:
                    ec:a2:da:e1:e4:d3:c6:59:fe:52:ce:d7:8b:4f:64:
                    14:9b:ca:f8:c9:ab:01:eb:08:25:2d:11:5c:35:91:
                    28:7d:86:80:ee:b8:e8:9e:8c:26:37:ca:0b:9f:23:
                    95:d4:29:bb:6a:ca:65:67:b4:0f:36:14:27:c8:78:
                    a4:2e:3f:f8:02:7e:ac:b3:18:c6:80:10:64:09:bf:
                    89:11:f3:1c:c6:ee:a2:b5:46:79:25:4f:0d:9d:ea:
                    1d:07:da:22:f1:71:83:e3:b5:8b:09:5b:49:d9:7b:
                    81:0c:c8:45:58:06:b7:59:1e:c5:44:70:2a:7d:76:
                    9a:a6:0f:16:c1:aa:01:d8:9b:71:b4:3a:9d:cd:fc:
                    b2:86:0e:36:8f:1f:7c:9b:cc:2f:39:f2:4e:66:01:
                    1b:a5:b9:79:50:c9:f2:5e:bc:44:8f:21:d9:f2:ed:
                    f0:53:e6:a0:84:31:84:93:28:30:82:ae:b4:08:f3:
                    2e:4d:5e:e8:3a:de:f1:49:ae:0e:b4:73:36:51:96:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B3:76:6E:B0:5C:9C:C2:6A:8A:3B:95:C9:B3:DC:6C:55:BD:C6:91
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c5:5d:87:ff:b4:5e:bf:c6:25:7f:a9:61:ba:40:de:91:99:
         73:c8:18:47:9d:3e:c4:c1:c4:bb:b8:25:22:d2:55:50:58:9e:
         45:b3:0d:fb:1b:bf:7c:69:14:e5:4a:34:56:54:a4:0a:f7:b6:
         b6:96:92:68:99:c8:9f:9a:4a:37:96:03:54:07:7b:81:65:86:
         69:ca:e4:7a:7b:e2:3f:dd:f7:2e:91:f4:63:4b:fc:73:b1:6c:
         4b:d8:8e:82:e5:53:92:78:6e:3c:fb:50:84:3b:f4:65:bc:d4:
         75:dd:c9:14:6d:a5:cb:8b:8e:f9:e4:6b:93:18:24:30:0c:4e:
         8f:62:81:07:05:5a:17:57:11:99:bf:75:fe:e5:ea:2d:56:42:
         ce:ce:2d:1b:0e:5f:08:b9:82:6b:76:ff:94:39:da:92:b2:e0:
         b7:b8:bd:9d:4e:aa:5a:c1:02:c5:7a:37:ba:cf:81:f3:38:53:
         3f:50:a8:b3:53:61:49:02:1e:6d:fe:aa:af:a3:10:bc:48:4d:
         79:0a:19:cd:88:da:ee:1f:ec:16:89:9c:9b:bd:af:94:b0:47:
         52:58:4e:6c:db:aa:49:c4:c4:4f:52:30:0c:70:ad:77:28:08:
         bd:db:4c:23:9e:54:1f:52:23:75:18:f2:20:c7:4d:c7:d3:71:
         87:59:b9:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfl8xy7znGNKz9OMcGrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjUwODIzMDUwMTUzWhcNMjUwODI0MDUwMTUzWjAzMTEwLwYDVQQD
EyhlM2IzNzY2ZWIwNWM5Y2MyNmE4YTNiOTVjOWIzZGM2YzU1YmRjNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEX6N6s2SeeclHp+D6mXxv1Y9y+B
xh3fY3/coIpNMQ/wJwfDVIAacYF0y0bVdKSR84loZ5oT5b9o9mjsotrh5NPGWf5S
zteLT2QUm8r4yasB6wglLRFcNZEofYaA7rjonowmN8oLnyOV1Cm7asplZ7QPNhQn
yHikLj/4An6ssxjGgBBkCb+JEfMcxu6itUZ5JU8NneodB9oi8XGD47WLCVtJ2XuB
DMhFWAa3WR7FRHAqfXaapg8WwaoB2JtxtDqdzfyyhg42jx98m8wvOfJOZgEbpbl5
UMnyXrxEjyHZ8u3wU+aghDGEkygwgq60CPMuTV7oOt7xSa4OtHM2UZYzeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOzdm6wXJzCaoo7lcmz3GxVvcaRMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs8Vdh/+0
Xr/GJX+pYbpA3pGZc8gYR50+xMHEu7glItJVUFieRbMN+xu/fGkU5Uo0VlSkCve2
tpaSaJnIn5pKN5YDVAd7gWWGacrkenviP933LpH0Y0v8c7FsS9iOguVTknhuPPtQ
hDv0ZbzUdd3JFG2ly4uO+eRrkxgkMAxOj2KBBwVaF1cRmb91/uXqLVZCzs4tGw5f
CLmCa3b/lDnakrLgt7i9nU6qWsECxXo3us+B8zhTP1Cos1NhSQIebf6qr6MQvEhN
eQoZzYja7h/sFomcm72vlLBHUlhObNuqScTET1IwDHCtdygIvdtMI55UH1IjdRjy
IMdNx9Nxh1m5xA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:27 2025 by rpki-client