Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
File:                     orEujfOr1VWfnPloCvZd0WWJ3oY.mft (raw, json)
Hash identifier:          BAnhX2xIe3vPEyKbMOyTPyXpd6UbX+ufLjZXOQkiXRM=
Subject key identifier:   A7:BF:9A:4B:32:B3:6A:83:E0:B1:D1:E8:B9:D5:DE:8B:88:B6:32:E5
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Certificate issuer:       /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial:       0198D5E35D6B1C1A9AF5FA7558C67E76C7B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
Manifest number:          167A
Signing time:             Sat 23 Aug 2025 07:45:04 +0000
Manifest this update:     Sat 23 Aug 2025 07:45:04 +0000
Manifest next update:     Sun 24 Aug 2025 07:45:04 +0000
Files and hashes:         1: 3_QUX0Y1KroB5F1-NPC5TQvpgnc.roa (hash: wdKwymD7k75WY4rShVLqlSlWCtmlMYlcDUveKBoGB2A=)
                          2: 68Je14HfbMGCfCmnq9F6n7nsxV4.roa (hash: HRQSDiqtMhKBvSd4tKgyQpXDDx18X6TpMnJXOBZsI9k=)
                          3: 6LT2Fmx2AvdvAyPEavcIF6YNISU.roa (hash: xQkludjOvnIvi3sBuHQZGgH+sEIqNW8a2/OpVWjIvBU=)
                          4: CHoPOoom0a9RnOt315mDRfUGmoY.roa (hash: YoVmfjQzsmDv9UfWF56AABjoG52HO+Hyly7TBLUKc34=)
                          5: DyWWOZN8ZTBRhf1Fm0u0zqt0jfg.roa (hash: JdiiPOalyZBqTA3/ZOTpeoS0RQEBs3JtiLIYPTkerfM=)
                          6: Eg2Wkq8DXFb0BZXy9FUsIMRvg0E.roa (hash: mk4cMuO6kmXayUvhQtWdcbVLZPOO5EQ4SMdROMAza2M=)
                          7: OcAvtCfGeHAKogvTrE4zVIYXhXs.roa (hash: ytTb8Vp57MsWC+qg8DRVK13nEW8nfvpJJgza5MGPgYA=)
                          8: QmFH5JvM3VC_JAbySWgAPqV6UHI.roa (hash: l6Fwra+B7GrB2tJFkxbVnW9ZuL62WOg2AUF3u0rUSgw=)
                          9: SDCXJRx9t-reL4bUfwMKb-d-1i4.roa (hash: 2Gg2H/tNKWSSCtlp3H67jpnMKBrH5KntZDcE5+4ZVrQ=)
                          10: W8RLhMRyvdfsKzFleWXe_i4i7JE.roa (hash: tJ8yRnMqQTHOLrrRT7uxmUewK9qaLT5zqMo4qVvP0fw=)
                          11: XACqnewxbRgjHxKsLaFopimZHeY.roa (hash: MIusKXphk72DRohBPHiq5YJIV9C9zTT6OGYs8zxk85A=)
                          12: ZDGQAv9QxZxlIAXGTSfjJC7zfq4.roa (hash: TUyDO366CQ4555rPQj40EOj67l7lgmGcdeXigo9fn2w=)
                          13: ZgFUKtoAGiNjKUo9XcPEn1qeAFc.roa (hash: TDQBb/Bd8P97rUcBMKsWbYhMoJ4eNE0/rZeeqnamWwY=)
                          14: aEWr6-EqtkKVBn1aiC7rHdjKt8Y.roa (hash: crXyg1I0M6v1iZUeG0Vpk1mS5J8AlR2ziEDMO6PLwNs=)
                          15: cZ35CSPr-e6s9ZzZ1cCpKSrcsxQ.roa (hash: Q+tgir+fUPA3KtG37Q+v+2DT+F3gXFs+ldjurtDdJms=)
                          16: dzR6au3FLXSUL6wnu3sGMtx5vuE.roa (hash: TycFADlFb4vyHMprwY7RZeMmn+iT/ePeH0EO+pcdo8k=)
                          17: e2m1aE6SKhsE0XipIBpRj8E-4hw.roa (hash: 5G1YjSEAukIGDN0dqaNWaTVLS7H1Fx4IZfxNUIjeltw=)
                          18: hT48KCBTZZmgjWNR0omilLv1234.roa (hash: RA3O16mDot75n7YV1dkz8IBPV2SpMqJkQ3E7/vV2VHo=)
                          19: hnuqfuqQFfls7WsQI7eQEfSUik0.roa (hash: 4glBckXjWMe5XR/kJnErYQjsYivbggBDZAVbZrhZteQ=)
                          20: l0OkrdC46OXcFrAyK1efk-4Xsw0.roa (hash: e6GLkxVIdJGeVoL8lxi6pYki19y1uXIM73RCaOWJKXc=)
                          21: m30AM2TdwhKzdf1N10cQP_Viy_c.roa (hash: CM1Hu68gDxVweB/504GwCoDAaC8vSBSM1qlN7Xy5w+M=)
                          22: nExuetV9MCMJWIoZU5Vd2o1iylU.roa (hash: 63bmpu0+5SyyRA291GX6DBZPH4lWBzWa267jOBa6cug=)
                          23: orEujfOr1VWfnPloCvZd0WWJ3oY.crl (hash: eub2ckFj2ja//VU1aoyiso9n/uDqJGe4jtWgvCcz5PU=)
                          24: qKhGSn-anlVBbLwa8kuLCuYeIg4.roa (hash: GMbSoeO7Bt68N/Bj/6mj7uVPJ/WZKmJE6Cg5RyuDqEs=)
                          25: roPYnO0cl0ID0u7U-t49g-Eb530.roa (hash: MBSI76KPBVQQ8ytmr+JfA4yyYPQ56/lKKVRYy7vbVPQ=)
                          26: wWFdhMIO6v61Bc3PDCCNPDokWKM.roa (hash: LD5hJmV8+HaeLOGo6OUg1n5/lZTU/SRfQzXJm/qTJc4=)
                          27: xHLyst5rCdhKq_xr6fZrDygY9Wk.roa (hash: VJ+zSPGIh9+rBSHp3km7AYwrj4kH0AH2TBHOvWDDO7A=)
                          28: xY8O1HQcthonbf03hVZUJttA-3k.roa (hash: VnV3WEcdTaUx8HFdXjrg5qMNEOniv+q8hPyCeb+p72M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:e3:5d:6b:1c:1a:9a:f5:fa:75:58:c6:7e:76:c7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
        Validity
            Not Before: Aug 23 07:45:04 2025 GMT
            Not After : Aug 24 07:45:04 2025 GMT
        Subject: CN=a7bf9a4b32b36a83e0b1d1e8b9d5de8b88b632e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:57:ff:0a:17:1f:23:99:7b:24:11:d2:2b:
                    cf:2f:3c:c2:81:26:e0:06:69:13:38:dd:31:53:48:
                    aa:ca:e0:74:4d:b2:49:ca:5d:ba:27:c9:f8:92:d7:
                    ff:6b:90:7f:c4:0b:c8:17:2b:e7:3c:2d:88:0c:63:
                    77:f0:63:a2:da:1f:c6:a3:b5:8e:0f:89:9b:0a:4c:
                    e3:3f:51:0c:18:b5:1a:9d:3b:41:6d:ab:6f:61:71:
                    ab:97:e5:d3:28:5c:52:5c:e3:72:37:ff:b2:7b:70:
                    28:f1:87:c3:a3:cc:95:33:fa:c4:84:19:36:50:39:
                    21:ec:df:ce:6e:5e:54:21:f7:88:33:68:61:5f:48:
                    42:4f:5d:ac:4e:7f:1c:75:34:e6:5b:b4:fb:ae:4d:
                    f3:9f:66:ac:4e:8f:8f:6d:ce:43:f8:44:7d:1e:f9:
                    13:a5:94:e7:af:2c:cc:34:e2:74:1a:a3:8b:3f:20:
                    24:ed:1f:9e:bb:4d:0e:a9:94:00:b6:13:25:79:5c:
                    2c:cb:c4:3f:4e:b8:a3:39:f5:51:89:e8:aa:89:fc:
                    2b:fa:1d:bf:9a:26:0c:ee:f1:5e:56:e9:29:13:18:
                    ee:84:1b:56:40:f1:89:2c:58:73:f3:cf:4b:2c:81:
                    70:cc:0b:5b:c1:1d:14:b4:7b:af:31:77:85:57:ae:
                    82:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BF:9A:4B:32:B3:6A:83:E0:B1:D1:E8:B9:D5:DE:8B:88:B6:32:E5
            X509v3 Authority Key Identifier:
                keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:27:7d:fe:9b:b0:71:23:5f:44:51:49:3b:41:d6:a0:9c:11:
         e5:51:1c:25:83:a7:a0:aa:4f:0d:26:02:05:35:e6:16:17:fb:
         f3:bc:71:04:9b:10:df:59:36:23:7a:52:77:f7:92:1f:49:04:
         bb:b8:5f:27:0a:db:d3:65:d1:4d:1d:34:84:40:4c:55:4c:c7:
         00:7e:0c:31:0f:af:d1:f7:67:46:f9:40:c1:e2:05:1c:52:a8:
         b2:e6:04:82:99:f9:00:50:08:22:a2:3d:be:d2:c6:00:12:75:
         bd:78:90:e2:69:76:22:07:47:1d:e9:9a:d2:d9:d4:f8:13:02:
         10:05:67:35:d5:d3:2c:c9:19:c1:0a:79:67:d1:34:e0:cf:3a:
         b2:7b:ed:ff:a6:65:1c:79:01:ee:51:4c:2d:8e:24:5a:3d:ee:
         0e:52:0c:bb:73:df:79:d3:58:00:32:7c:e1:04:a2:f8:d2:24:
         f6:9d:56:3f:c4:22:22:03:be:08:fe:5d:61:d6:c3:1e:91:a3:
         5e:69:42:16:6a:5d:38:dc:d6:0c:f5:56:b2:a4:57:6e:95:5a:
         e5:1a:5a:4f:38:28:b4:78:50:47:6a:c2:73:79:48:4c:89:79:
         fe:c0:3f:7e:81:67:85:db:ff:92:64:08:cb:10:21:b6:6d:e4:
         8b:06:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:47 2025 by rpki-client