Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
File:                     1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json)
Hash identifier:          tHhZuSi63TkVEhCHxRGsAIIa6Fe1IKMBBJtyd1dW7Kw=
Subject key identifier:   05:DE:93:79:36:5B:67:18:45:B1:44:3A:16:D2:7D:E5:AD:AD:0A:77
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Certificate issuer:       /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial:       0197B667759E6787168962F8251BED9C8A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
Manifest number:          1648
Signing time:             Sat 28 Jun 2025 11:58:43 +0000
Manifest this update:     Sat 28 Jun 2025 11:58:43 +0000
Manifest next update:     Sun 29 Jun 2025 11:58:43 +0000
Files and hashes:         1: 1-Xr1UAtoiXYJuTpQ2ia0AgHhLeE.roa (hash: XoaPmqRzzyo9Ckrca491OGpdkbdUnPuVfVLM6C4ZsFk=)
                          2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: EIfw9bzulE+LxAUQ+bFptJBGyxfOM7KsIuTFO9MgWis=)
                          3: 97T1FKP4AB1wFygDf_IjY6gh_W0.roa (hash: b+uL1I+CF8JWEeaj5CSinTGLvmB9uwh7dpcntKLQtgU=)
                          4: BGLkzv5zmcmyNePUFl35bYyaZBg.roa (hash: Rxm9thzilr67738h2nk4GCB7hCDrlSDQC9OhJBucGVw=)
                          5: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=)
                          6: Ddl8T6zKwE4Fn8xyNZ8UvYvouME.roa (hash: 71TNe7QPRLX6HAwyqO9qFdluNXuBU2iKPpD6+Xde1FA=)
                          7: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=)
                          8: JS-Bgecde8r4aUvux6oaDYSziLc.roa (hash: pbyh/yA7joTeMLtDmSJlrjqlnHwf7lTPPfN0QpETN4E=)
                          9: Q8GhfkJiK1i0aNFsl1zpqBN38ok.roa (hash: zSrNTOjH2jHkfF8npGjnRGpLF3j5CwGhLlQ8eGbMR74=)
                          10: WSCQA0Y3pCUJ_5bceNuC3gEIEPE.roa (hash: it6NFAfi4cSW7ITlNEmWjq4Jy+DwQESxb3017kQ8n2o=)
                          11: Wm1N-1k5l17vFFDB1UYexU5pylc.roa (hash: kl5fQQCdbrMoipvYcHYjQFpF2oGH+sJK9hivbDAv45M=)
                          12: XLQiBV_ri1fMksGmND_AktarMBc.roa (hash: 9x4BHRNiA66EHCHdbrUK+jieemen0Xw/2jV5fxKC3uk=)
                          13: dMoy1ocOmEzk4dYBdRWtDeFZXh0.roa (hash: VXtb1jeW1jL5ZIe+3y/JZP2SrUZOEss2tqQVUdmb0N4=)
                          14: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=)
                          15: hQhs5l9hDP1_zmNckKA9u_WQ4CU.roa (hash: C8YDrKff0YMeob1oWr+bor5KU46B8sgXJ3+9ifdCEfI=)
                          16: i0EkDiLWxZt-jEsL0cMNpe5XN_g.roa (hash: G7FDEuJ7pS++rTMrLx6g2e+BM36bD3Jhu4w4OIPcRCo=)
                          17: nUOPR6SpMwNbQgZbj2csQN4_jAg.roa (hash: yiD/DDDeZdQPBhhEK/dXO9SrNQGZzNALEQWHpy1Moco=)
                          18: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=)
                          19: wCW2eVYs2Nv8NNhMuU_FKHQ4Qlo.roa (hash: uEFCsZgXuRGQkrbfrJ0QyCdz9fvlXRvTCckNfClSUU0=)
                          20: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=)
                          21: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 11:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:67:75:9e:67:87:16:89:62:f8:25:1b:ed:9c:8a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
        Validity
            Not Before: Jun 28 11:58:43 2025 GMT
            Not After : Jun 29 11:58:43 2025 GMT
        Subject: CN=05de9379365b671845b1443a16d27de5adad0a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:c6:15:b5:d0:27:89:93:f4:2b:82:90:11:
                    02:25:b1:ac:c0:47:d2:c7:3a:1f:8e:c4:50:f8:19:
                    e4:7d:78:e6:b9:1f:f4:af:84:d1:56:eb:8c:48:9b:
                    91:5a:e0:2b:06:35:d0:94:5c:62:bc:2b:16:86:4e:
                    fe:a9:52:b6:1e:1f:25:e0:d3:0e:41:f0:0f:ab:0f:
                    3c:1f:b0:79:ae:c2:17:81:b5:db:30:25:8a:6c:9a:
                    8f:94:8d:b4:98:21:e4:2a:88:34:dd:24:b7:61:e2:
                    fe:89:9c:94:30:e1:71:6b:29:f3:17:b2:08:80:a7:
                    a3:b1:a2:ad:c0:91:3e:06:4b:08:e6:44:25:38:c3:
                    d5:73:43:5f:18:9d:bb:59:26:99:9e:60:90:53:31:
                    e6:7f:7e:2f:71:27:47:58:85:9c:33:50:92:35:79:
                    ce:7f:3f:d4:f0:3b:73:3a:83:57:cb:5c:2b:83:a8:
                    4e:e9:c8:36:c6:9c:5e:91:09:6f:9b:b0:7a:ea:19:
                    bf:2f:de:90:23:1b:04:fa:37:78:7d:19:4e:07:e9:
                    f0:cb:67:d1:32:50:82:68:e2:5f:9e:66:6f:b7:d6:
                    e6:c1:48:17:e2:4e:5c:cc:3d:0d:a6:b4:59:66:f0:
                    10:29:d8:0d:fe:a8:e8:f1:e8:2c:a9:54:1a:f7:7e:
                    51:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DE:93:79:36:5B:67:18:45:B1:44:3A:16:D2:7D:E5:AD:AD:0A:77
            X509v3 Authority Key Identifier:
                keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:08:f5:5a:06:29:69:9c:f7:c4:25:a4:ea:28:bf:56:d5:
         ac:0b:79:ae:91:70:d1:5d:f2:d8:3b:4f:dd:a1:ea:e5:db:a8:
         92:b9:25:56:8f:ae:dd:99:f1:65:ad:26:71:b8:6e:1c:ab:6d:
         05:bb:89:63:e4:f9:21:08:de:16:2c:e3:5c:89:61:54:47:17:
         27:91:98:de:01:3f:a1:fa:d4:e7:b5:88:c8:00:0b:5d:94:b7:
         a0:29:96:97:42:98:62:de:ec:17:e6:24:0f:c6:a3:31:bf:53:
         e8:0b:39:18:f8:77:72:62:cb:ff:b2:b2:6e:ba:c6:53:c3:01:
         df:a9:97:be:0e:21:1f:eb:37:62:a1:25:a8:82:18:39:a5:c8:
         1f:5e:35:9e:b0:c6:0c:52:4e:84:5d:a1:42:1f:2b:cd:12:45:
         91:88:c3:23:fe:05:04:f1:75:85:f8:4b:26:ac:06:31:74:38:
         ad:01:dc:4f:c2:b8:ee:a5:c1:bd:b7:e9:4e:97:30:37:7f:4c:
         cf:2c:af:ad:36:90:fd:42:23:90:c0:ed:6a:69:d1:1c:7a:32:
         84:6f:9c:ed:d2:b0:63:f0:ce:d7:c7:3b:d8:5d:b9:e7:2e:7d:
         8c:ab:d5:b1:13:f7:20:6d:77:d4:7f:6b:f9:ba:a6:a1:f1:d3:
         5d:f9:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:56 2025 by rpki-client