Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          cwjoRxeHIXvOI4wMS/UfPkU4L7bM1INug/SEMNEs62A=
Subject key identifier:   CA:9B:F7:E2:DB:CF:C6:8C:29:45:E0:1D:27:98:98:42:0D:B2:3F:1E
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       0198D583CD92C29CB222EC612293F2DC54C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          166F
Signing time:             Sat 23 Aug 2025 06:00:41 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:41 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:41 +0000
Files and hashes:         1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=)
                          2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=)
                          3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=)
                          4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=)
                          5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=)
                          6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=)
                          7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=)
                          8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=)
                          9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=)
                          10: Cpqn7LsS0bcJ2RaNQ1m7A6LeDTI.roa (hash: M0rYp/RCf1KwjUnXOEa9Bql0WWcUrXdf/3JYDVzWoPQ=)
                          11: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=)
                          12: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: MBPSrfiDA5fBQBKcH91UKfLn9ZQx2sxcmj7pai9vRjY=)
                          13: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=)
                          14: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=)
                          15: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=)
                          16: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=)
                          17: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=)
                          18: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=)
                          19: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=)
                          20: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=)
                          21: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=)
                          22: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=)
                          23: jH8Mi3TlwvD2IeH7uCn-uJ9q0w0.roa (hash: ahI8jMGv5DDAbZ9UFRdwdOTFkupqYU+mpHR0wJIw+rI=)
                          24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=)
                          25: s-ub-KTv9kBJthUAx3CIvlPJdn4.roa (hash: z9QEo8+aPD+JH0fzOpwr2kgJnURem+BNpNnI45BF5AA=)
                          26: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=)
                          27: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=)
                          28: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=)
                          29: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=)
                          30: y_fBzhFDFpXYD5-P69yOnSESFA8.roa (hash: 66hQUv4u80sC++++GHLtVK9LyFJNEcqWA7bIT6IlRaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:cd:92:c2:9c:b2:22:ec:61:22:93:f2:dc:54:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Aug 23 06:00:41 2025 GMT
            Not After : Aug 24 06:00:41 2025 GMT
        Subject: CN=ca9bf7e2dbcfc68c2945e01d279898420db23f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:6c:e3:ef:84:91:1b:9b:9c:4f:cc:06:b1:
                    74:30:2e:9b:76:fa:c6:6f:4a:45:3e:74:7b:a4:c6:
                    54:ba:4f:06:ad:fa:8d:30:70:8f:f6:73:50:23:7e:
                    da:eb:ea:1d:f9:d0:22:e3:bb:ef:55:aa:a5:65:92:
                    f8:98:36:31:12:74:79:c2:4f:35:66:08:ac:57:1b:
                    56:e9:6e:ae:6e:31:e1:d6:bb:1e:0b:62:5a:5e:71:
                    53:03:4f:b6:4b:d5:10:74:a3:96:d6:d9:aa:e2:6d:
                    fd:84:17:3c:77:e8:0f:40:06:6a:e4:ee:40:31:8d:
                    99:b3:4c:27:52:76:3f:02:57:42:ba:a9:23:3c:85:
                    fd:7a:7f:60:15:82:91:86:2c:6e:f8:bf:81:37:e4:
                    a1:04:3f:40:d8:d4:34:6f:b2:b7:53:90:01:c9:a3:
                    39:de:3e:a4:54:a6:d9:ac:91:1d:56:03:c4:4c:df:
                    ec:a4:85:e5:7c:ad:a8:64:e6:50:05:d8:f4:05:dc:
                    fa:e1:94:b4:1d:04:7e:49:f1:ee:71:ed:a5:61:80:
                    83:27:33:70:bb:5d:4a:e0:8e:26:85:5b:76:f1:47:
                    27:32:4d:f5:b1:71:9b:c7:3e:cf:a2:b2:f5:8e:d8:
                    45:87:81:5a:11:e6:47:61:67:4e:66:7e:dc:6c:3a:
                    c1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:F7:E2:DB:CF:C6:8C:29:45:E0:1D:27:98:98:42:0D:B2:3F:1E
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:4b:06:ed:35:75:e7:3b:48:1a:c9:bc:9c:0a:64:e5:91:10:
         1b:f5:9b:6f:02:49:ae:6a:0d:e8:5c:b5:9a:4b:2a:68:e7:81:
         1f:c8:d4:e1:cf:39:e8:7e:75:5e:54:dd:8a:dc:eb:c3:64:90:
         24:a7:81:ed:ea:85:e5:27:d8:11:22:09:c9:fe:9c:61:63:90:
         27:77:f2:91:b8:7d:de:4f:d8:ca:cf:1c:a3:dd:50:ca:67:a7:
         0d:40:3e:71:16:16:95:49:66:ff:c4:27:78:35:26:89:2f:76:
         00:f8:90:bb:9b:fb:9c:57:a8:dc:d2:8b:77:5d:95:e9:f1:0b:
         44:d4:3f:de:04:2d:55:7f:21:2e:be:3d:94:74:4c:de:06:0f:
         0a:6d:7c:e5:5f:29:e1:6f:39:fa:9e:fa:04:7a:57:17:a6:35:
         11:a3:98:c5:24:a5:27:0b:e4:f7:f3:48:ea:5e:76:3e:41:ec:
         14:ab:76:23:aa:6a:f3:fe:9d:1a:10:dc:5f:69:5d:2a:91:9b:
         d9:bc:c4:a2:8f:b9:09:65:c5:91:43:c4:22:5a:51:32:15:03:
         5f:fe:3e:e2:a6:f0:16:10:25:e8:3c:d9:04:1d:e8:d1:f4:92:
         2c:e5:6f:02:fd:7d:21:51:0b:1e:ef:4c:17:9a:f6:6b:20:9d:
         02:99:6b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:37 2025 by rpki-client