Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
File:                     advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json)
Hash identifier:          NUkFzJcWA1KungBSkyKLaotXkmJg55XEJ4raHh4MDus=
Subject key identifier:   8B:AD:26:C4:E2:93:52:C8:6C:2F:16:9E:33:B2:8C:55:7E:D7:94:F0
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Certificate issuer:       /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial:       0198D5BBDB19E96CDEA8F2605DB7073E37E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
Manifest number:          03E1
Signing time:             Sat 23 Aug 2025 07:01:54 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:54 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:54 +0000
Files and hashes:         1: 0PY44eNhRhwBAlEI8CW_7e75Yh4.roa (hash: DGCK7O0NcOT707/3o5K5VhDn6NVZN3M0FrdHm/a2UuU=)
                          2: 356qaAYQpDV5m2Riq8A1jSL_myc.roa (hash: J+LALyAXIHBq3+bBLiTSfwMeZdohnuBRZTHDVc6I9II=)
                          3: 50QBDzaaWAWirDv35AlJpGDh488.roa (hash: U9zp626nKKun30mCMXd5d52t9o6/HWZq00zHsZoBgiw=)
                          4: 5vI96mdACUYtbrBj1hpxS2th8SU.roa (hash: +D5F/vhkd6kDEoeI5nvUAAqsYy/qD8SkAXkJnFT0scM=)
                          5: 7md33wTGzdjzkpdm2YWPb96DeAE.roa (hash: XTg5R+tAMtHvJrOV1S/6jDI/yrBqzGpGjvAacgtOwFs=)
                          6: FNzx-AXDWYQXweTOw5GW8wLwA8Y.roa (hash: pI2apPSLr8xZ4eK8bjFcepwZqTx3hkzwJixceRtYmFQ=)
                          7: GSKX6t5lJ0i4qvCaHVaNJW2pF_U.roa (hash: p6a7klkfw04BCewW69YXx9rhT4r3ImOgOYr/lCdS37U=)
                          8: H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa (hash: alhkfmIs5h48famyJbrNqD1LroO26bFxdaO2RO80rB0=)
                          9: Nx_LlHukO6YVT2BEBxBXRcLN_po.roa (hash: KT5voOJbr5oTRoQ5gvpwOS1NktXBmDgt7n2ImgfHYoM=)
                          10: RNey77PyYZ7q5aSaC4PKivPQUp4.roa (hash: nbnaDHAsWvelX6heHPYA3AE04SRORSzM43r0uMU5XGU=)
                          11: SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa (hash: Gny5FCnUJO7mwZfbJF+nB2yfn78HUv4IFWcliadewNg=)
                          12: SZniDvbA3xGyko4uBw0wSK1iTzI.roa (hash: kzzWmCXEeVZh12Lzyl4Un0cqdmZrru/ISSndxfTEtCc=)
                          13: Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa (hash: gAGb1Y5AmI4FXfL962Kn9U3vKesk+PWP9SX12mcYBwQ=)
                          14: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: wes6ld4zNt+lSWvoggIh1VB/X8NpgVY2dy0/M/GAbyU=)
                          15: ixSljlpAv7VqFqZBManiWIU_IIY.roa (hash: S7kK0yaWZD9cO4dIzOpKGjzXHLiqqB9lAeIuZmQigdM=)
                          16: kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa (hash: cRZ9xm6BVrOYd9CySCPL4z+78bjkaTOH3OZ66vuPhhQ=)
                          17: lNQAITIC5PmIJYf58oFmM4_t7ZI.roa (hash: EoC37uqzi538UDD96xogxI48SXL4t+AtWBAP3kmAc9E=)
                          18: nzL5rU21d1PlGGMQdcFTW627B-Y.roa (hash: 9reJY4cgowCz0eQpIjwulCKKRQRpF5bMWpAhQfAMQg8=)
                          19: qtSFhSVXD3loe4iYCp27H6WqPO8.roa (hash: dM5n2vL+0Slh2GrDt9ahN7jhYGcuB7d0O5MXI/IkDvE=)
                          20: rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa (hash: l8U8iyph5EKJjwuIU1Ch+SfAGqICGB1ZppWFQqcO0KU=)
                          21: uPVNzfaFCEVH8pgEcujrS2hKdGY.roa (hash: 624lPGVpaWFoqr9oTQxsUT+zutBPV/3xF9eLcAlFX3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:db:19:e9:6c:de:a8:f2:60:5d:b7:07:3e:37:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
        Validity
            Not Before: Aug 23 07:01:54 2025 GMT
            Not After : Aug 24 07:01:54 2025 GMT
        Subject: CN=8bad26c4e29352c86c2f169e33b28c557ed794f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:3d:04:c8:a6:8a:5e:4f:db:84:83:92:29:
                    5c:fd:e1:05:77:78:f2:4a:a2:9f:78:97:77:df:60:
                    f4:53:b0:86:da:95:d1:b5:6f:c9:3c:16:06:ba:71:
                    12:53:a4:0a:b6:6f:f6:d7:98:1b:5b:2e:7d:89:db:
                    dc:b7:13:1c:1a:95:c5:e7:bb:4e:bf:e4:34:49:14:
                    7f:a7:69:69:c7:ac:1e:fb:c3:45:39:b1:b2:8c:e2:
                    26:7e:93:1e:93:72:45:88:9a:45:1b:d2:a2:ee:55:
                    db:cb:38:5f:df:4b:79:f1:fc:a8:78:88:99:b9:7f:
                    47:85:63:74:6f:7a:83:be:95:15:55:e0:71:0e:ef:
                    eb:07:e1:9f:2b:2d:6d:f0:c3:10:dd:ad:02:a6:22:
                    9d:8b:ed:7f:c1:3c:74:e2:e7:aa:50:7c:ca:3f:21:
                    9a:61:f7:2c:14:e2:9e:85:5d:92:4a:af:e3:48:65:
                    38:19:d9:2a:93:99:7a:49:70:f5:9e:9a:72:1d:81:
                    ea:56:35:77:29:47:d5:ad:f2:f3:68:15:46:a6:37:
                    6f:53:f0:79:5c:fa:02:4a:a6:44:d6:22:54:90:7e:
                    75:35:8e:69:29:31:85:ff:ed:b0:f3:b6:b4:7c:61:
                    7f:0a:b1:8a:0a:56:ce:a7:a7:25:80:99:b0:ad:1f:
                    df:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AD:26:C4:E2:93:52:C8:6C:2F:16:9E:33:B2:8C:55:7E:D7:94:F0
            X509v3 Authority Key Identifier:
                keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:24:56:19:7c:71:0e:48:75:2e:1e:47:45:a8:9e:e7:fb:53:
         d9:be:52:72:81:9e:df:85:69:8f:6d:d1:0f:a9:31:4e:c9:ee:
         e1:0d:5a:16:e0:ee:19:04:a8:74:26:93:87:b6:9d:bf:bc:02:
         77:c7:ec:fc:1f:00:bf:97:78:6d:d1:d6:45:51:0d:a6:e8:38:
         47:e6:5b:44:fc:54:25:bf:77:07:00:ab:24:dc:eb:3e:02:92:
         e1:bb:19:64:0e:89:4c:d3:6a:73:a3:b2:a0:26:fe:64:de:f1:
         26:c2:5b:be:57:d1:26:03:ee:94:72:47:cc:b9:d4:3b:d3:45:
         67:d8:ea:23:fc:71:cc:b6:85:0c:2b:51:ec:ea:00:6b:98:e5:
         38:f1:4a:73:c7:7e:f5:ae:8c:00:f2:f1:8e:e3:16:59:8e:d9:
         20:50:90:91:40:bb:3a:2a:9c:42:81:be:c0:3f:65:0c:29:59:
         45:3f:6f:0d:7e:55:a2:99:5e:94:c1:bd:00:56:b1:21:d8:c7:
         3a:38:ae:1e:8f:c3:1a:8f:ef:bc:bd:d7:15:ed:15:8a:5a:ef:
         db:00:4d:43:54:43:14:ee:5d:d0:e0:9b:df:51:86:6f:f4:4f:
         90:3b:69:8a:25:9b:c6:5b:ff:f0:ea:4a:5b:b0:48:8a:ae:94:
         4f:58:d6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:05 2025 by rpki-client