Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
File:                     BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json)
Hash identifier:          SjLG79A3BlXIBbciO/EDI26v4OCJgRRNSNekXsSI1ys=
Subject key identifier:   78:1A:13:E6:F8:DF:1B:6D:DD:0B:B0:75:22:B2:0A:A9:DF:04:B8:AF
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       0198D4E0423977773F108D796DF0B6A1A49C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
Manifest number:          0253
Signing time:             Sat 23 Aug 2025 03:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:03 +0000
Files and hashes:         1: 1OPAOSK7XI2PXkMWLZC__kR6e7o.roa (hash: zgqjLOdmhIKV08eKyZe0XmQH3UqGhIzXdKtUIZFpvvE=)
                          2: 6SPF9wUKHrZ6dX8XvKxjnVR5gSs.roa (hash: fkqYDZXkVkcORjtoFgL9LCKCeNFqQJ4NJn9PSDeEfBQ=)
                          3: 8-yw9B2nPkCfG0ri-05wxbzK95I.roa (hash: D9ViM4Gvio4pjQlbZ1UG+yr83bOB/c4pGt/sWMwpAIo=)
                          4: 8h_JebN18U-DQLa7g_VNQTnzmD4.roa (hash: qaZfGE5JnXlAKOoOZ4NfG/E3st+EoiejWrngTgnqPGg=)
                          5: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: 0fde0mf12PPSpJ5Hg960I+VJfAYQ5rrYFOp/x8iDnko=)
                          6: ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa (hash: dRJ7Xfhd2IktdnYweUcsqpbKflQdcxF/jmr99tlC1i0=)
                          7: CNtM8zejZ349bsOx94QsI819vZU.roa (hash: xxnS1MVGHtYdDD2abmYeFD2yf6kRsOETWylSJhltDEE=)
                          8: ExusXckLrxsZNqKlfCaNi76wyn8.roa (hash: 958U6++7iG9JMRvtU0OfoU8TdGPIQhNtWPh5XYFfc1E=)
                          9: KBH5_k1ABLmKeJO7l-34IXPXqRs.roa (hash: P/JtMtW3yU+sxA5fXStKTboD+4DMtOGbsll537HWOk4=)
                          10: OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa (hash: PbCMLXyHRgfKX4P/i6p6IrPplONleRWnbtsOIMdtbRA=)
                          11: PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa (hash: cKqK7iISq+hHAlg/ZJ1m7UofToF0VF0S/PulOyt8vLw=)
                          12: T-WQUbMA2opCoWmz9iIpBVDop7w.roa (hash: LxZzYTsPv2oZVsXtK1M9TpzKZjJLXQwZ4LXrHPlJD7Y=)
                          13: V6Fx8HKW5vYtwoUl9-FGq139rH4.roa (hash: VbwVmnD3kf6YOoUlp8nFzAYfvI3kHMT1G3evyq8grxI=)
                          14: XkrAuYt5bWDNalFKdD1fn2vuVPE.roa (hash: k2nDFSwdIaXg9g0PcPlS7HCXiUFGFi0knKbFslTOR8U=)
                          15: a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa (hash: AjkSxRf4m/hDIVmcEg8Nz3dPC++vr47UARhugAtRJG4=)
                          16: bfi17XKfoQv_Pklhy_iWS-yvXWo.roa (hash: 05HfZ+6uBWn/eosoqV+13/r9i72s/MRFf2Ny+SGpO7c=)
                          17: bkj_9Heh0C9FpUqLrf65_9tMX1o.roa (hash: bkX0VT2UTOwEY8RRSJ6fL2Rs1tekiUyjrTzbnadeNds=)
                          18: boJmz216E2pVUR2unuNVUplfhyM.roa (hash: i+zLjdL9F/qjZdj6l1k7yZCeKyy95BgZFZ1ZAYbGuBs=)
                          19: f2D3UV4sYjo4Otohoy79vFEF0Ag.roa (hash: KRgW361Frr8F6yZbGVOnQ7xVzqdchF195Wcn12RxysE=)
                          20: gicegBW5Q1xikkf_SLe1-6lH06U.roa (hash: pqN+I3n4dBN3SZnpQPA/6vzrG5l7HojgVKb3SXvaH9M=)
                          21: iuwR3gymafKwUArlmGbUUJNbSa8.roa (hash: EtXzdV3cLqZcZzSgtMiBpL5x/7d8YbZUcgnJOjOuNu0=)
                          22: kNKW14Dxh4X2xbIOHRvhO-4tzcE.roa (hash: ENDHKI6G3Ef3eUled5c74JZlLpucyibX5X1QKlCy8/E=)
                          23: kP1MLzfrQwWk1GVdDlBjhCK5JJM.roa (hash: +NDOnTtKyng4Xa7G5fvhPU29tORd7PYP5BmWYtRjBxk=)
                          24: mN1SF0jqXFbA77Cv4kSAFM7eMrI.roa (hash: bd+gRbyeXkhCADuawPp6Y7Zl70oz5JVqv5T2uQOkFmM=)
                          25: nE08znyGEROzN-ZPpvH871B_YXc.roa (hash: rvo0J7csjKxABmc7ZJ4UjX/IGGVkIizjnr+3tXbkjRg=)
                          26: vZmH2bvHl1nSGW5nMPLYnxBlkRU.roa (hash: JOoXAeAAIZEiWY0Rg+/OZMN4l51Mdx07GGAUcyh78VU=)
                          27: xWNsCw4Wm17UDjnUmJUpC1lzZ3Q.roa (hash: NIpf4SimRF3YYu1N0AO553A+ccCpp95SQAsoP+cL9IM=)
                          28: x_kmwuaD2Uv2HFLODCKAcngkZmI.roa (hash: YzInZ8+3078RATQFSI7n9ucYtfrzyFiROEAN+YuWwao=)
                          29: zwse5TQa1KwU7PqLUxa1Kne0wLw.roa (hash: vR4GdsgcZFcL1UVu/nRbrE6/e6gF9I3sc1PWMJywHGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:42:39:77:77:3f:10:8d:79:6d:f0:b6:a1:a4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Aug 23 03:02:03 2025 GMT
            Not After : Aug 24 03:02:03 2025 GMT
        Subject: CN=781a13e6f8df1b6ddd0bb07522b20aa9df04b8af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:32:41:ab:24:3f:60:bb:38:92:88:18:c8:
                    33:68:d4:3d:80:3e:14:7d:19:73:26:6e:0b:df:5a:
                    c4:b6:a2:ca:43:75:66:92:0c:cb:70:99:24:01:69:
                    72:3c:5a:ee:a3:3e:2c:a9:3c:17:20:04:f8:cc:e3:
                    9c:e1:f7:53:68:1c:d4:f1:a4:16:8b:f1:fc:13:42:
                    89:99:55:24:49:6c:40:08:8c:f4:47:a9:d3:46:de:
                    6f:67:37:fb:ae:df:92:f1:d6:93:ae:7e:bf:38:8f:
                    37:5d:4c:43:20:b8:b0:fe:13:ab:b9:3a:4c:6e:98:
                    7d:19:1a:27:e7:d7:91:fc:b5:7d:6f:92:3c:54:3d:
                    af:05:4f:2a:8c:04:7e:de:3d:c9:cf:e5:08:51:78:
                    90:a4:0f:cc:aa:b8:0f:bf:d2:f8:07:e8:73:5f:5e:
                    45:77:bf:69:45:e8:d1:52:b0:be:0d:b5:5b:87:19:
                    92:06:bd:ee:15:1b:ae:b3:a8:e5:ee:4c:f3:01:2e:
                    dc:ff:24:bf:3a:b9:b9:7f:05:2e:d0:9c:30:c0:3e:
                    7a:bc:27:52:1d:95:ee:84:2c:13:95:f8:fb:a5:d1:
                    89:34:bf:dc:48:75:7a:a0:30:0c:a5:7c:bb:50:99:
                    e8:d9:83:fd:26:0b:88:a7:f3:4d:fa:80:c1:c0:6a:
                    0f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1A:13:E6:F8:DF:1B:6D:DD:0B:B0:75:22:B2:0A:A9:DF:04:B8:AF
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:44:60:dc:ef:38:66:e1:aa:1b:4a:3a:57:d2:aa:82:55:69:
         a6:69:fd:d3:e1:6a:15:31:0a:8f:30:ff:ae:07:0c:f5:fb:71:
         77:87:0c:15:41:e5:f5:5e:b8:8f:75:2a:fd:8b:e9:3a:d9:46:
         06:f9:cd:ab:d4:e7:df:20:0f:35:81:d7:11:c6:d5:02:32:83:
         2e:68:3c:02:81:b6:b4:77:5e:78:35:76:b0:36:12:5b:8c:97:
         8f:28:3d:4e:ea:66:04:63:3a:2e:17:17:40:e4:2b:23:2c:3b:
         2a:89:b2:7b:38:59:f7:89:67:67:75:1f:22:05:0e:cd:d5:8c:
         69:8e:4f:2a:d7:ce:a9:01:6e:d2:b6:d8:b3:e7:73:90:41:9d:
         a9:54:21:3c:14:0f:90:3c:57:6d:ae:f5:7b:0a:4e:89:a5:00:
         d6:46:29:11:0f:cb:cb:d7:c5:ae:58:01:8e:eb:85:4b:01:55:
         44:60:ec:10:66:10:44:99:c1:99:fd:6b:ee:09:df:e4:91:b9:
         07:35:6f:a2:9f:30:ec:5c:cf:22:c6:f7:34:c7:b2:d4:b5:53:
         94:3b:dc:63:a8:cc:54:c0:a4:51:df:1b:8c:6a:fe:3d:88:ea:
         ee:87:9d:ab:31:4b:84:99:a6:69:0f:c6:2d:6f:c0:0e:0b:04:
         2a:7a:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:06 2025 by rpki-client