Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          I4rv3YoUfSNFCyoPaU7VHMAo+ynbmdfjeC8YlMHvmMc=
Subject key identifier:   AE:50:6A:11:2B:EB:58:AA:79:A3:27:69:18:86:58:5F:D8:09:92:98
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       0198D69835C2639A7977BDCF6754FFC633A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          117A
Signing time:             Sat 23 Aug 2025 11:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:36 +0000
Files and hashes:         1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=)
                          2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=)
                          3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=)
                          4: CDi8vSg_fdYRotnSbMRPDSasq6c.roa (hash: 7OEMcqwogdkJNcoA2dzyUv5/KIyWaJVisinKvEvTiik=)
                          5: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=)
                          6: HTIT17mRc9e31Xn9TEUf-JUYEKw.roa (hash: o+qmexnhIWhbYDzE4H1wC704iZvwZtN0i6d8jZKUoCg=)
                          7: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=)
                          8: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=)
                          9: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=)
                          10: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=)
                          11: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=)
                          12: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=)
                          13: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=)
                          14: fyZQsu5bzOst03Al5FJRpvSLsoo.roa (hash: MRRTMhVAXN/buVo3idrb+5O9n9y8Lo0sdRtwg3OeKfA=)
                          15: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=)
                          16: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=)
                          17: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=)
                          18: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=)
                          19: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=)
                          20: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=)
                          21: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=)
                          22: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: GnuHZ7Ld9rkluWCrDY+qmKilOCDydDZRTTfcMV1LhRA=)
                          23: zvVbccPOezRcenUxgZYT6IshvbM.roa (hash: 012XCVnoNirJiTB9TmAZ50WFMIRiHKAXPZ8XS3U9P3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:35:c2:63:9a:79:77:bd:cf:67:54:ff:c6:33:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Aug 23 11:02:36 2025 GMT
            Not After : Aug 24 11:02:36 2025 GMT
        Subject: CN=ae506a112beb58aa79a327691886585fd8099298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:e3:2e:61:b9:56:09:8a:cf:4c:2d:3f:76:
                    90:37:a3:8a:fe:4a:65:71:9e:49:f5:f6:25:6d:31:
                    eb:7b:b5:6a:70:73:04:df:2a:9e:46:1b:88:fc:6f:
                    c4:58:55:db:36:4b:1e:84:f0:dc:8e:3e:93:4c:80:
                    83:3a:b8:6d:eb:6f:e3:0b:bf:0c:fa:70:1f:f1:91:
                    f8:97:31:63:d7:a4:a2:b4:ae:07:ee:30:e8:a6:61:
                    e4:47:c4:81:7c:39:61:8a:ab:0c:ab:c1:50:bc:12:
                    5d:f6:ee:c0:05:4b:f8:5a:04:c0:46:04:16:ca:71:
                    dd:e3:26:e0:f7:ab:a7:e0:5c:75:f5:ba:08:99:d7:
                    bd:c1:ab:d6:b5:9e:7d:a9:ad:60:77:7b:e7:fd:96:
                    a3:d8:62:8e:f4:6d:cc:8b:cf:20:0a:43:7d:a6:74:
                    99:92:6a:f3:e3:f3:f6:91:b3:ae:66:08:0a:2b:97:
                    bc:fb:5f:a9:57:be:5c:ab:e8:57:ec:a0:f8:c8:78:
                    a9:d3:cd:7a:80:a8:02:3b:12:00:9b:a6:6c:97:ba:
                    93:da:b5:1c:fa:1a:21:4e:5a:12:23:9f:cc:c3:94:
                    c8:d5:b4:ea:6d:b6:82:ef:a8:d5:6c:b5:02:f7:9c:
                    05:4e:53:31:35:d6:0c:53:40:f4:84:b8:45:69:0b:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:50:6A:11:2B:EB:58:AA:79:A3:27:69:18:86:58:5F:D8:09:92:98
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:72:25:4b:fc:28:ab:b8:47:ff:a6:48:14:3e:66:01:45:9c:
         90:bd:b3:e1:c3:c1:5a:ad:13:98:86:86:99:22:9d:2f:96:b1:
         66:a9:7d:53:c7:b9:71:93:11:d9:58:c7:a4:0f:10:45:c3:35:
         64:3c:88:1f:2a:fa:24:e0:3a:c2:85:ce:90:56:11:e3:d4:07:
         84:43:ed:5d:7a:2d:90:cb:c4:59:c9:85:aa:ba:53:cd:a9:63:
         b2:b9:ee:e1:e0:73:fa:8d:7b:2a:9f:2a:52:b2:33:ab:c3:5d:
         05:9a:c3:18:6e:e6:e5:cd:37:e8:05:c9:86:86:ec:84:4f:4d:
         d7:36:0b:e5:b3:15:dc:cd:98:b2:70:1e:f5:fd:66:e0:dd:32:
         9b:24:65:7a:09:ad:f7:48:42:82:68:75:66:6b:c1:78:13:c7:
         dc:16:83:60:1e:76:c0:71:50:b8:33:02:12:ca:00:34:80:aa:
         20:38:5e:58:a3:de:b1:bd:7c:e6:6f:47:5f:e3:e6:4b:da:d6:
         5e:47:a0:8e:e1:95:be:d3:40:a3:c3:e3:ce:dd:ef:57:6d:5d:
         31:c4:80:55:fa:dc:6b:4b:96:6e:67:bb:fd:2d:0b:f9:46:d1:
         52:e4:91:e0:c5:e5:f5:ba:d9:42:25:18:56:7b:15:11:be:79:
         f2:fa:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:10 2025 by rpki-client