Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          7yIVawjVhZczPZAimFtIXBTslZm+dZgR0CHsqi+LTXc=
Subject key identifier:   CC:1E:86:94:BF:3A:41:83:22:A9:39:F9:5C:1A:9B:FD:8A:48:06:5B
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       0198D5BBD48ACBF5E10A6A07312EAB189D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          0ECC
Signing time:             Sat 23 Aug 2025 07:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:53 +0000
Files and hashes:         1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=)
                          2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=)
                          3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=)
                          4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=)
                          5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=)
                          6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=)
                          7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=)
                          8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=)
                          9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=)
                          10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=)
                          11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=)
                          12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=)
                          13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=)
                          14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=)
                          15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=)
                          16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=)
                          17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=)
                          18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=)
                          19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=)
                          20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=)
                          21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=)
                          22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=)
                          23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=)
                          24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=)
                          25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=)
                          26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=)
                          27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=)
                          28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=)
                          29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: lU0r7TLSVxPEc9AsGaNrbnw2c/nd1ZXeM+EsKglaxjQ=)
                          30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=)
                          31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=)
                          32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=)
                          33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=)
                          34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=)
                          35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=)
                          36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:d4:8a:cb:f5:e1:0a:6a:07:31:2e:ab:18:9d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Aug 23 07:01:53 2025 GMT
            Not After : Aug 24 07:01:53 2025 GMT
        Subject: CN=cc1e8694bf3a418322a939f95c1a9bfd8a48065b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:d9:ac:c8:2f:76:fe:51:91:ba:40:9b:67:
                    42:02:4f:fe:ba:73:71:ec:b6:ca:38:aa:52:54:c7:
                    ee:f3:16:12:25:98:42:98:4d:fa:b3:0e:e6:20:c6:
                    94:38:21:8e:b5:9e:82:e6:56:4b:79:4b:9e:c7:18:
                    a3:81:fa:2f:1a:f0:90:cc:c2:c4:97:73:d5:2e:fe:
                    81:34:b8:68:95:8d:9d:01:fe:42:ef:15:1a:86:47:
                    60:1d:a9:29:73:88:0d:1d:fe:97:46:63:64:1f:80:
                    92:30:05:04:42:d2:aa:d7:ec:32:d6:d1:19:3b:0a:
                    1a:cd:ce:2a:ad:17:48:3d:9c:17:50:18:cb:77:da:
                    14:ba:dd:ed:6e:db:dd:77:0e:49:af:6e:44:6b:98:
                    9f:19:78:fe:4b:0f:d1:87:39:5e:1c:30:64:2c:18:
                    c0:a4:1c:bc:4f:19:51:82:a6:45:86:ad:a3:09:7a:
                    45:84:b6:4e:6e:d3:14:31:24:8d:b6:0c:cb:4d:ab:
                    04:96:e9:15:8e:b2:7e:2a:3b:f6:e8:8a:40:dd:c8:
                    39:7d:1f:8d:5d:4c:a8:28:54:2f:a0:e3:84:23:32:
                    c4:fa:f4:0b:91:10:d2:db:85:26:17:a7:06:a0:ec:
                    95:65:44:f6:76:2f:b4:53:be:88:82:2a:87:4c:87:
                    98:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1E:86:94:BF:3A:41:83:22:A9:39:F9:5C:1A:9B:FD:8A:48:06:5B
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c6:5c:f9:2b:01:b0:5a:2d:00:83:fa:ef:fe:dc:73:04:49:
         27:7a:ba:a8:b8:dd:c8:d4:71:6b:31:f8:8c:ac:e4:d5:e2:61:
         5a:b9:d6:77:f2:32:90:0a:e7:f6:1c:33:6c:45:5d:a3:4a:4a:
         33:33:4e:ee:93:8d:4a:9f:28:cf:7a:47:98:b7:b8:fb:1a:17:
         e3:ee:d0:40:66:ce:61:c7:7a:ae:a5:1a:86:ce:69:0b:6e:7c:
         62:53:21:5e:ed:9a:48:53:fb:b7:db:fe:53:c1:e2:7d:71:78:
         37:75:af:aa:c4:70:b9:f6:1d:6f:49:0c:16:94:04:67:55:79:
         6d:d6:8b:31:da:41:b7:4d:62:8f:60:3f:e7:49:23:11:27:cf:
         8b:5d:97:e1:7f:1d:37:88:be:52:a4:d5:0d:13:3d:0c:bb:b5:
         d5:ef:c4:6e:dd:cc:91:dd:28:19:54:0a:b3:d8:0f:99:50:5d:
         58:7a:79:6d:2d:9a:62:ef:ef:65:2a:cd:45:5f:6e:78:85:dd:
         17:f1:42:93:15:40:ed:8a:9c:0d:7c:3b:b0:c2:31:95:d3:46:
         98:17:7e:6f:d4:17:26:3c:e8:45:1e:98:ff:3e:95:60:11:45:
         09:d3:ce:5e:48:33:ea:7e:0c:86:df:24:59:4d:0f:a1:48:91:
         37:54:59:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:36 2025 by rpki-client