Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          A6GmR1DP0lI3wKUtlIaSig8Od8hf+3iq/u7d3f/hHfY=
Subject key identifier:   10:8C:BD:4A:40:3E:95:83:D7:9F:DC:47:55:72:E3:6E:79:B7:59:40
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       0198D4A7913D0D7DCFF53F301A0767374266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          1682
Signing time:             Sat 23 Aug 2025 02:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:08 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:08 +0000
Files and hashes:         1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: yDh/+pcw25XLDodDa5riZtuI6Jsa94wVpUiRZthml/A=)
                          2: 1U6WyMqsZGid0T3NYQ9DAZ6gJQY.roa (hash: F8XNKrvuc9Q1Nu4SwuceqF3nF6Xwjfiv6CKLGF36N9o=)
                          3: AOzgmFptP-TTohv3IqoDSstHBco.roa (hash: E03eZxbf/EuXdLKDt7qVPONNosnX3JMcim9Rf3ahviw=)
                          4: ARYdkedt9hArm1X7hp83_Cg5tpQ.roa (hash: JuBJSBaOkvov17EXCYN32IfgGgf0k5Tgl6lj874nn5w=)
                          5: DF4R54GK1qwRWFDBGUSLGBLlvGQ.roa (hash: hSV4Oh/5jJRGVFTBAtkBDd7jCrElG8uSHu25zzZr1Fg=)
                          6: GkHiDHIr7HTOUId4AyJatL1OA68.roa (hash: ry2bBxXk4C9dBw82DZVtUnDVRsGRjPykl7o+jmf06RM=)
                          7: I5QYvq4IicclfQWoviXNqVkoJ1Y.roa (hash: 5MBWFEJVGuF7S46IjtmTYb6qp1cvuLGpPvqKkXBXql8=)
                          8: JD10CY-i84YcUMqJlGDowbidmN8.roa (hash: XMDhrcZoGK5i42ls2n+Jvun/2Ta8y4audrWdpm2Fv7o=)
                          9: KeM1ORJvG57zJzj1K2DwpMPSMZU.roa (hash: XHsHlY/bthSxdaTkdBh4Cmp1Xjdn7NaEjSx+3/K5zJQ=)
                          10: NDTb5wEV6mi4gNG-Fu6rF-wbgiA.roa (hash: NEy4PeHLS5dO/ZjNCa+Z5peBIXcrVaqt3QmALKubiB0=)
                          11: NfUnQ-O42D51XKIYtUM-enrgq28.roa (hash: QhgxpbRg3wpHFfse32zYgTIu0IaNj22usVCm4EOvDbg=)
                          12: NjLk2e2zqXQskhSwEvgc6VrieSE.roa (hash: /tSrJbpm+cVRf2wVaaTrsH5ognA/ZAO3z9nKKazqJL4=)
                          13: Nv12FFJAhm76vmtQvLtk0-qb9uU.roa (hash: GWYX+UV7jTRToJvscvGnDmcfi+hdjE9fs/PSDIO/qXI=)
                          14: P6DmMh6gJbdEiU32OPNgOyp7mCY.roa (hash: 88yaz4q97O5d7cXTtRqRjBiGFSE36MGooJOUALTPCRA=)
                          15: PVvGYWt24uzVlwnsAFMPqAtNvZQ.roa (hash: jUjkhiHyuibAHI/mM+xTuAPWbIQGwY5NVpAGVowuUvU=)
                          16: QxCHdL_DO5UkqQDm4B0DxWPXNic.roa (hash: jXTnakGaPMOncSQ2f0DTPKgHoa8Usd/9PNuE9fdJytw=)
                          17: REFW6rSHBTfRsUnwOYyR16B8o0I.roa (hash: XB70ye/c1KysdH/4/hccAGTbjaBXhCjgy7hTvmJtugk=)
                          18: RchhUq--77MGlYxNBSaODwJIwKM.roa (hash: sr2MOGN6k36I/3FkeO3PjW+1iVoi3mf8hYsQtvAbkCg=)
                          19: TFiXnA69SUIjZxShh655vlYs5os.roa (hash: iue8xNO+FBfmf0WBI+KQBXMK4ZDijvqm8QzG1kL5NP4=)
                          20: UL_XqoqGTTWGEVhImq5X-9zOVrE.roa (hash: g+ulsD4HEDP8q2GNuKa/nIFiaIn0ZbF6fYEGT+Sdri0=)
                          21: VWY8XiWq4Jote7W-6rigfrKoiY4.roa (hash: ON7HuggQtcTWGIVCoLH7d6Q/DUJJsZCop+RTdEiL82o=)
                          22: X_FL5W5PaBcXLOauRMxOwRuyYlc.roa (hash: kCKDT8tcDr1dP8XE79tCmIW9bJ4NTTFNxriENFz7kC0=)
                          23: Xdb2GonGqu9DkyPtW1xL_ewg_Bo.roa (hash: GVGr4S1zTr+dNdiuuONrJJ2q6Nn0ihVO0n5qN0zw/pQ=)
                          24: ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa (hash: Tk3A5shWtfiSwwuDcCc68dVXd7yvds9RfjT7MSIEjKQ=)
                          25: _YFT4hVNYyXh4lnoEwOwHf8FvbM.roa (hash: tlgEY6jYUU+UF0+FT6gUJlgYou8+Ams7PkVw5ofCpx4=)
                          26: b77IgHc-0C0Rr_dfvuGtS4avGl0.roa (hash: pUFCLnY0Uuj86mPeajrETTuvcuysKr2jMpqMVsvwa6w=)
                          27: eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa (hash: qJu+C3kZMtw4Lzr4RPWfIIggz4SLZ1MdPm3V0ZSYkCA=)
                          28: grTxe7kxw6ZzaQqpTIbiKf1m4JM.roa (hash: i5OkfeqChX4b5A5gBGr0b6nOiJOg7XT/mMLOR9RIW50=)
                          29: hNrTf4PE5wrSnR7cUGP-FWLvavA.roa (hash: 419lgUmCiB5WepdJkvKnWC8TY9QzFCGf/bRs/Tt6fMo=)
                          30: ki55bfqHhRC77pU-EJ0EZN9IsgY.roa (hash: AccLPwD52wvMA4/Hsn0acDKYYBn7x4JHw/P1GwnYSwA=)
                          31: lAsvBALGAB7ffanhsI2XBbzGjwg.roa (hash: Lfmd3jAWkGrnZmmpvbr3VmK27pHIPidZbcCZnfMNIH8=)
                          32: nmXKG7O5Y4Y-3VQd-oJvUHMEIEY.roa (hash: qsL3cjqC+DzRSqTDxZdudYHZ+K/KlZvY/xyn2uR0PZU=)
                          33: oTJV7UQNW4Frhbnp-iOPDIxOi0c.roa (hash: 7xRtMaqLg3Ad/2cU30eSFfbxnUqbSU5++XxDs5sKABI=)
                          34: skoFlpQBI8LF51NmTT39lnjZrMk.roa (hash: l+MFPkSAFr/Bu/aMzD3WDDtaslazJr/lXcJRueoJtKQ=)
                          35: u3IeL1WtwZrppYb7gzyGvxoAWq4.roa (hash: u4/0Flhb+g2HVbYnU4CFZNSkHaVHi6ldxHLZ21W79Xw=)
                          36: v2MIzwur_YBYLaC93lV_QCNZAkM.roa (hash: i9Txq1PwoSa1dtJUPXYcpynz/2PAkBZiK33z/81vpJw=)
                          37: vVo5jg2GQAZIqK4h2tPzZS3ji70.roa (hash: VyY0O3FHC/dgFA8HrUMfqDla8B1EBlXwEVoR6qUh5T0=)
                          38: xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa (hash: lnF7laQENq7wiyRjfsr7hJCvC1X60Wd/Bj27GtnwCQI=)
                          39: yxG7yWv__YoAWY_L9hRp3vU2XYs.roa (hash: CSF3TOKK7qqalDdJcfVVvwt3T7McADmGuQ+vP8UJZjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:91:3d:0d:7d:cf:f5:3f:30:1a:07:67:37:42:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Aug 23 02:00:08 2025 GMT
            Not After : Aug 24 02:00:08 2025 GMT
        Subject: CN=108cbd4a403e9583d79fdc475572e36e79b75940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:04:7d:85:22:61:c0:0d:36:bb:5c:8b:1f:
                    69:04:dc:2f:7e:48:c3:8b:61:ea:31:0f:08:8d:21:
                    15:47:f2:fe:09:3e:80:88:0e:fd:66:bc:99:31:52:
                    9a:f8:ae:64:ed:19:ac:4b:00:68:f1:b7:b6:25:7f:
                    29:80:29:4d:cc:29:61:cd:ce:5b:7e:21:6e:f7:5a:
                    69:86:31:11:74:a8:0b:2d:c3:c8:b1:8c:c6:39:cb:
                    f3:77:32:40:65:34:9d:1a:59:ca:d9:4b:05:a7:1a:
                    1a:d8:16:b8:3d:bd:fb:a4:d0:7e:f0:cf:c5:65:58:
                    19:32:02:df:b7:66:bf:44:40:8f:48:8e:c9:ce:94:
                    55:25:dd:b8:f0:fb:4a:cb:87:45:e3:86:4f:94:24:
                    b8:56:2b:e8:88:e1:03:23:d5:b5:3e:4b:b2:f0:f9:
                    4f:e9:ca:39:34:ab:7c:e9:af:28:37:17:ea:45:f0:
                    72:22:14:4d:16:5e:ee:21:e8:c8:aa:3e:b8:c6:a8:
                    96:90:77:5d:4a:07:92:f8:14:e7:96:80:94:a3:3c:
                    00:8f:31:d1:37:14:f8:bc:3d:de:8a:49:5a:db:d2:
                    1c:55:0e:06:28:87:38:d0:06:1e:c8:54:b6:5a:f4:
                    c8:c4:26:40:bb:a5:d8:a5:1e:c4:7a:ab:f8:04:d8:
                    b1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8C:BD:4A:40:3E:95:83:D7:9F:DC:47:55:72:E3:6E:79:B7:59:40
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:07:fe:05:0d:09:72:ac:1b:8d:35:f2:96:b0:6b:e8:0c:39:
         cc:b4:f0:cb:5d:a0:b0:69:95:d6:fc:2b:ec:45:01:66:58:79:
         e1:3f:a8:20:56:38:8f:ba:6a:d9:04:2f:72:07:b6:22:bf:7c:
         34:9b:4b:dd:b8:e5:cd:76:4b:d9:32:eb:c8:c0:3e:ab:a7:82:
         12:3b:af:21:a6:21:7c:13:76:ee:0a:cf:75:82:eb:d0:4c:08:
         27:93:c5:ed:30:c8:d2:59:26:80:4d:06:da:d9:d8:c2:f2:e6:
         a2:e8:23:1e:84:82:cc:db:d2:00:71:3a:6e:a2:0d:67:bc:e0:
         27:97:e3:59:77:61:06:3f:6a:87:88:45:79:ea:bd:77:f6:ee:
         2b:3b:cd:3c:b5:77:1d:2c:17:18:fe:77:60:cc:3e:8b:0f:22:
         0a:4e:64:11:f7:cb:97:7f:2b:f9:48:b8:6c:91:61:3a:8e:e3:
         89:d8:b9:f5:b8:a1:5e:7e:c4:9b:a9:77:d2:7e:dd:2b:fa:aa:
         f4:a1:a9:35:4c:1b:e2:b0:a8:d9:c7:e7:3a:0b:dc:77:d5:ed:
         09:0e:bd:a0:69:35:90:f8:0e:92:5e:cc:1d:12:a6:b3:c3:6a:
         99:75:e1:e6:ec:f3:20:c6:01:14:fc:46:76:ab:e7:45:99:53:
         29:50:89:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:41 2025 by rpki-client