Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          3YncgIUpOelJRzbRbHUa1wqgJ5P/6xkwaK8bwDyDs80=
Subject key identifier:   18:30:33:6F:1C:61:95:65:BB:8B:EF:75:C1:C4:EB:EF:74:C7:81:84
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       0198D54E36C212071487A1E89E7F7179ACBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          16C2
Signing time:             Sat 23 Aug 2025 05:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:09 +0000
Files and hashes:         1: 0a-KrfdskF1P1eak9gMq_rpHwLQ.roa (hash: 1r6R/eLHp6yqNJSUm5rRHogfjj+timL04ipzPj2uofE=)
                          2: 1-z0xCJwtZ7oNjVyEZRiUl707L_U.roa (hash: kH96KZu4zVwqWimn8lprbltf+L6jN14xGOOzu5+uka8=)
                          3: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (hash: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=)
                          4: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (hash: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=)
                          5: 8HMlEMu_BSHgTuVZxYXkPOUH-XA.roa (hash: nzR0epdeX2+WJtESwgq5prAKeUM2fNXd9Y9hluvNjBg=)
                          6: 8WOfV91hbQYdAjxlTShs8uS2qZo.roa (hash: qdOgiq3j/uyZoQiWebZOCQ+/u3LpOi/JdsIzY2Q5Yjw=)
                          7: EU4QWvJeKnbJ2gVJ_l-zXW58tiI.roa (hash: 2GTsiEN1pVkfT8wxoGUw+kBia4yRrXQI1p3cFmoAfU0=)
                          8: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: czNJACc/m2Y1SIdrjqDHTCEy9PgE7WEx4Tr+mS37Dus=)
                          9: F2_wmuIlF_Fr4vPu8BktVcIEbJc.roa (hash: C0sIjHqlElpVFUnaeluaj4Gkav9vDU7HqpMYLEQ16Xw=)
                          10: IZW8Cqwr_D-Po8j-rY2wg4gV9R4.roa (hash: faXsZmEmW7RzlcMaOmIqHP7qeNNDTUksCHYYQluTIl0=)
                          11: JY0sVxRmdyc5WAgUY19lxnxmM4I.roa (hash: 86gvkJrlTS8XF8/W3CjtN+tW5tBzNGMNDhj7XFXK96U=)
                          12: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (hash: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=)
                          13: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (hash: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=)
                          14: PICG-s3Q4YZkop6Z75tQ1uqUjjc.roa (hash: RYwj25TTRgCRFd7rjmY1yuMhB2tlpTJT7SA0DAX0bR8=)
                          15: PyyzXUdlmoA9Bk7oa0uF75YdupI.roa (hash: KrKiurvSNPj8UgpNpGVtpzLAre3QiNcGoEwUhT8E1Zw=)
                          16: RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa (hash: fpJ4KH8CMslY9U5qvXp1614yNP772K6f37C+wQxE5Ec=)
                          17: S-G_dbIhIfyciWMeJ4Xikt2V0PA.roa (hash: AyVT0BIvnYHoTRwIRLkHdIA6fb+l4qQoJ5RCeXEh0iM=)
                          18: S_3Ac8fpJNmr4_Jqg37fnSZrQTA.roa (hash: kXDSSLoM6qJEx5/HbAZQ1hKhZOVmnkuIzLWPNIFvHc8=)
                          19: WGVFdHdOhrZ6oEGNKaADeEDXEkc.roa (hash: upyn2YAU1bBK3yksfLZUYvn/2Yyr6nO1tneR3QTm/D0=)
                          20: WNxwGRqjvkzEEIFtJUKhx8EpDnA.roa (hash: NuJcsLFQveWA7JrekR32MafYf69Fr1QL8arEGvczy7k=)
                          21: WdrQA2XxuRSob5fch_vmulfj1p4.roa (hash: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=)
                          22: YshAp7kvzSEqzUAJqYQaXPlimXM.roa (hash: 9wAijCHBf70P9HVKz7vJxcgO3NSgfGywCSLu5rKQFcc=)
                          23: cvu6AF9AbPQ5N7Uqaphvk_JniE0.roa (hash: IBo2+GfVZ1wUI21/57/jiuNuhDw/yLxaNs96bhzy1Eo=)
                          24: dcujdY7nZpLDRD7umvphEez-qpw.roa (hash: DCDyLYPDKXFLZDtPjhfGEgVVy0YwKX5izGR8g7lqUrY=)
                          25: gg8zzgS55uq5P6kGkuaJFoKcCTA.roa (hash: nEDs7oqRrIVyofxdHlPaduwYU8FU0iwSUVYcN9fZIC8=)
                          26: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (hash: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=)
                          27: pHrarVnk95oQe2hI0xpt7DgCX4I.roa (hash: sJ3eEhOn7jQjhfcoZ42EdbEeYJY/zzcWxgg/rji7kDE=)
                          28: pxErwoucWB8yQbaQqe1v45Sxb10.roa (hash: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=)
                          29: ul3uv5hec5ukIf7FCGeau4nCEHc.roa (hash: pc0UTa1zNFc4D1XbCiXp6Zxm7lOslpwK+C/ygH0+nGg=)
                          30: x9hv5VI53E9lfmCoCZYbXA2hByU.roa (hash: /EpYHmEUvDFytn2JV2b/puVDndIWdyEA5WbCaF8KMCM=)
                          31: ys8EEYV9duz4vQMnV4A63KTELEI.roa (hash: Mzw/QCxXFE0BItwPGjx2i5l7tZTi3Kn7VnGnniz1APM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:36:c2:12:07:14:87:a1:e8:9e:7f:71:79:ac:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Aug 23 05:02:09 2025 GMT
            Not After : Aug 24 05:02:09 2025 GMT
        Subject: CN=1830336f1c619565bb8bef75c1c4ebef74c78184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:28:9a:09:26:90:2c:72:c5:70:ea:78:a7:
                    d5:6b:44:92:1c:8f:63:02:3d:01:9a:f5:65:31:90:
                    62:2c:c8:77:ca:51:6f:7e:51:7a:38:87:51:57:20:
                    3c:73:5c:a3:79:33:b9:d0:18:8b:8f:d7:13:47:16:
                    90:7f:46:77:a8:9a:1c:cc:c6:c4:7b:28:3a:2e:b5:
                    18:7e:52:1b:41:a0:c4:b8:6e:d0:46:3e:e3:9b:ed:
                    71:b1:e3:c0:60:9a:87:2b:d0:1b:a4:92:45:06:75:
                    3e:10:5c:7f:47:48:5e:02:18:70:0a:fc:e7:09:c1:
                    a1:14:bc:68:9c:a8:c8:1b:0c:12:5b:36:4e:ff:3c:
                    6e:46:57:42:5c:1e:af:9c:e2:93:06:e5:36:20:c4:
                    71:43:07:50:db:97:ca:79:74:9f:be:8d:74:c3:ef:
                    e8:ae:b6:de:40:fd:ab:6a:de:42:a7:43:35:03:fd:
                    e5:aa:56:6b:65:55:d1:95:ad:ea:99:f5:a1:97:0f:
                    1c:e9:9d:41:5f:06:9c:b5:3e:0e:c3:b5:63:3d:8a:
                    2d:7a:79:97:cf:31:c1:ac:ea:cc:7a:f5:54:bc:c9:
                    27:c3:d9:af:29:18:82:7c:e8:68:b0:8c:0e:e2:20:
                    8c:dd:75:7c:8e:8e:d5:8e:cc:12:99:02:82:56:7d:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:30:33:6F:1C:61:95:65:BB:8B:EF:75:C1:C4:EB:EF:74:C7:81:84
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a4:1c:fe:f2:1e:c3:0b:67:98:43:67:14:66:37:e9:4f:d4:
         d2:79:f6:e0:e0:31:7c:bf:02:32:01:b6:01:22:45:50:b0:54:
         34:15:01:9f:38:16:2d:b8:38:dd:e8:20:d4:47:f6:86:8f:21:
         4f:1f:1b:28:9c:67:ca:8d:16:a5:c7:9c:2c:95:69:8b:24:22:
         54:32:ce:17:35:da:97:ac:d2:b7:ac:62:4b:0a:63:df:a5:35:
         4e:47:40:62:0a:cc:e8:d8:11:d1:31:97:43:7d:db:98:f1:ca:
         3d:68:4c:96:6c:2d:b9:f5:01:81:22:3f:8b:ce:6e:d3:72:3e:
         7b:5d:5f:c1:ae:e7:60:72:31:72:eb:8e:b5:ec:f7:72:1e:3d:
         3b:04:22:d0:40:4c:ca:25:9f:bc:7e:42:7e:a2:b4:dc:09:00:
         39:a5:77:ea:1d:ee:b4:9d:14:6f:e3:39:57:41:a7:e6:06:ac:
         eb:fc:73:85:74:81:bb:f9:a0:43:69:67:7e:c7:74:fc:b8:fd:
         f2:c5:e9:8e:5f:80:c5:0e:b7:ca:dc:51:34:c0:ef:c2:7b:da:
         6d:e9:1d:cf:21:2e:cc:b7:be:ba:c7:e5:4e:51:22:65:b7:24:
         a1:78:47:8b:10:ac:9c:65:f7:b1:51:dc:ee:7a:65:e8:36:54:
         d5:62:e9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:55 2025 by rpki-client