Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          fMlPUJ/Pk5fBdIzNYskTnuEF4Xax7v1o32deDzJF1bo=
Subject key identifier:   AD:D3:A7:26:3D:80:8F:6F:D8:E2:2E:81:A4:AA:AC:6F:25:46:33:66
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       0198D69859B00D147631D07AB0122B95380B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          0692
Signing time:             Sat 23 Aug 2025 11:02:45 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:45 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:45 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=)
                          3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=)
                          4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: gjWHA2UGhwzipJiisRVwcfX8Ifx/j4OPIcUsQyqsnRE=)
                          5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=)
                          6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
                          10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=)
                          21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:59:b0:0d:14:76:31:d0:7a:b0:12:2b:95:38:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Aug 23 11:02:45 2025 GMT
            Not After : Aug 24 11:02:45 2025 GMT
        Subject: CN=add3a7263d808f6fd8e22e81a4aaac6f25463366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:3e:38:c6:f4:1c:36:29:29:b5:61:a0:88:
                    65:ee:ab:5b:73:b6:0a:2e:ad:5e:34:44:37:d9:70:
                    62:e4:fd:1d:ea:1a:3d:c3:f1:35:83:74:1f:cf:20:
                    1f:56:51:04:70:fe:45:53:80:8a:94:0b:15:75:3a:
                    40:06:f2:fb:5f:e4:9a:a6:be:c0:6e:d6:fa:e0:12:
                    48:e4:b8:af:c4:f4:f5:a8:35:38:1c:0a:4e:4b:21:
                    4d:38:c0:0f:be:48:f2:7a:08:f6:a4:b1:87:9c:97:
                    18:33:9d:f1:57:78:ec:b9:75:a7:dc:a3:e1:49:c1:
                    57:89:56:9f:82:fb:21:35:f6:e0:ce:5a:2d:b1:bc:
                    b0:58:dc:61:dc:e2:4a:97:91:07:31:e4:df:03:11:
                    0f:f9:4c:90:b3:21:95:96:12:35:0c:2f:53:82:72:
                    ed:92:d1:94:83:32:5a:3a:41:78:bc:bd:09:43:08:
                    d6:18:1c:78:8d:57:2a:78:57:67:8e:45:0c:9a:74:
                    32:62:9a:ad:ec:45:72:0f:47:23:72:fe:39:dd:f0:
                    c9:23:30:31:69:e5:91:31:ed:2b:26:e4:c8:bb:c8:
                    f5:91:b4:9e:61:62:8b:ae:ff:f2:8a:4c:b2:b7:0a:
                    b5:81:64:6d:a9:2e:96:e7:bc:9e:f7:b6:43:28:8d:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D3:A7:26:3D:80:8F:6F:D8:E2:2E:81:A4:AA:AC:6F:25:46:33:66
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:74:45:b3:ca:19:e6:b8:67:ae:55:85:93:70:5d:a9:e6:0b:
         ee:19:b9:ed:9d:2b:31:06:7d:39:6c:70:22:bb:8d:2a:e8:8a:
         81:03:97:6a:1c:96:12:98:8b:be:c5:6f:c0:93:8c:51:f5:71:
         1f:aa:25:17:49:7c:a7:bb:e9:af:80:5a:f4:a7:e0:d8:8f:ef:
         45:14:a3:4d:e3:ea:ca:79:2a:95:50:05:7a:59:0f:3a:be:da:
         00:0b:c1:05:47:90:46:2e:e3:ad:82:2f:db:ab:e2:87:64:10:
         4c:60:37:8e:a9:c1:02:5c:5e:81:07:b1:8d:16:65:51:69:91:
         1a:90:8f:24:96:dd:6f:eb:9b:c7:dc:d3:55:7c:51:d4:90:b7:
         9d:ac:3c:6f:b6:f1:d7:4c:f8:96:96:f1:fb:ee:4f:d5:8a:03:
         36:b2:44:1c:5c:f9:2d:03:84:a5:4b:1d:cd:f7:36:a3:5c:3a:
         d3:84:ad:6b:52:4f:2e:92:dc:39:17:a3:29:49:95:0a:6c:7d:
         8c:67:70:72:b0:a1:6f:c0:82:2c:43:da:9f:3d:ca:99:8b:21:
         c2:78:19:30:6d:bb:84:ef:90:06:72:ce:d0:8e:90:d2:48:9f:
         7b:6a:4d:80:b5:da:c0:f4:5e:40:d2:38:21:ee:ef:67:2a:b5:
         24:d6:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:04 2025 by rpki-client