Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          Aq/sCJW4T2X3jEM/uTjvia2EtBpyp1MAgGYylShKZso=
Subject key identifier:   98:4F:76:37:19:27:47:97:FA:99:AE:5F:B3:26:66:63:DC:10:1F:BD
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       0197BAB4733C6DABA6B8EDA759F181BBCCE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          05FF
Signing time:             Sun 29 Jun 2025 08:01:17 +0000
Manifest this update:     Sun 29 Jun 2025 08:01:17 +0000
Manifest next update:     Mon 30 Jun 2025 08:01:17 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=)
                          3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=)
                          4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: Ss5s//klKxhw5lUdxsZyg5/nG0axTc5qpKVlbuqjmFk=)
                          5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=)
                          6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
                          10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=)
                          21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:b4:73:3c:6d:ab:a6:b8:ed:a7:59:f1:81:bb:cc:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Jun 29 08:01:17 2025 GMT
            Not After : Jun 30 08:01:17 2025 GMT
        Subject: CN=984f763719274797fa99ae5fb3266663dc101fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7f:ca:58:68:ce:fd:51:41:01:f1:dd:dc:9b:
                    e9:c8:83:91:8f:79:fa:43:f8:d3:e5:f5:08:89:a0:
                    67:e4:ef:9a:e3:99:fd:a1:7b:4e:7c:b7:7d:99:f3:
                    60:96:bc:b5:11:28:bc:73:df:63:9c:f7:2a:b5:be:
                    ae:75:11:56:0a:02:b0:2e:c3:33:39:bc:d1:f5:3b:
                    4c:29:e3:ab:85:b0:dc:5b:53:1d:5b:bb:20:eb:97:
                    0b:22:10:de:4a:77:6e:64:2a:6c:bc:54:34:3f:0d:
                    bc:19:f7:a1:80:8a:f1:fb:c0:a7:6b:68:65:20:76:
                    70:60:d2:6e:2d:72:00:70:ec:6c:43:37:8f:3d:11:
                    bb:11:1b:aa:54:ab:59:3b:99:42:06:ca:98:34:92:
                    29:6d:3d:2b:ea:4f:51:54:d7:33:c1:54:0d:19:d2:
                    b7:37:b5:f5:cd:88:c0:2e:b3:ae:98:28:7d:cc:bc:
                    1c:c2:73:f7:28:9d:04:ac:63:0c:cd:4b:8c:c8:52:
                    02:fc:ee:89:6c:3c:2d:69:6a:68:27:73:14:a8:03:
                    ca:5e:9f:98:a4:5c:dd:27:6a:92:4d:44:8a:ca:48:
                    24:a7:52:52:6e:c2:82:81:f1:4d:f4:c8:96:ad:98:
                    85:be:06:e2:2b:30:77:df:06:95:c0:cd:cc:16:7f:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4F:76:37:19:27:47:97:FA:99:AE:5F:B3:26:66:63:DC:10:1F:BD
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d4:88:16:98:b0:9f:96:a2:39:70:9a:02:29:17:ce:65:b9:
         53:85:26:6e:e8:e4:12:a2:5c:07:2a:30:6d:6b:ca:88:ff:8f:
         5c:b1:8e:dd:7e:90:0e:29:c8:01:d6:14:8f:e4:c0:03:b3:0e:
         5c:c6:0e:c4:2f:be:1c:63:ab:c5:04:3c:e6:60:14:1b:3a:a2:
         15:3e:5b:0b:9b:bc:b6:f1:ea:eb:8a:5a:48:dc:f8:71:8f:ea:
         d4:6b:67:0b:d0:d2:af:60:40:e3:af:ca:cb:4a:ff:f3:0f:ee:
         8a:29:0f:60:7d:c9:f6:47:0b:5e:48:b0:c1:a7:dd:1e:e2:46:
         d7:1f:56:80:ca:d4:8b:3e:8f:68:60:e6:13:70:b3:13:77:f2:
         ea:ad:d5:96:e4:76:2d:9c:58:a1:27:7f:77:db:0e:cd:cb:fa:
         eb:0f:f0:70:d4:99:f9:45:4b:f6:d2:b4:8c:df:d7:63:24:49:
         40:83:d9:d8:f1:8a:9a:05:fa:7a:1d:9a:ad:af:73:53:84:07:
         9e:75:e4:c2:78:61:54:b0:a4:e4:92:4b:e9:e1:e9:7f:e2:5f:
         c8:6f:a7:aa:89:67:9f:5e:50:9e:1f:d2:07:ba:07:48:a8:71:
         7f:99:28:3e:06:54:15:26:1f:12:d4:21:c6:ea:ca:48:2f:a4:
         06:fa:51:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:26:09 2025 by rpki-client