Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
File:                     oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json)
Hash identifier:          0jKYJkoSmdLoiKOLI3IrFZLMYei0+qSGqa279VHJeZs=
Subject key identifier:   1A:86:69:23:56:79:3A:CE:32:B7:52:11:F8:85:AF:00:DD:06:64:74
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Certificate issuer:       /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial:       0198D51583B925635E932808E94E4878EB6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
Manifest number:          1718
Signing time:             Sat 23 Aug 2025 04:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:13 +0000
Files and hashes:         1: 0EOjf23f5uNRl8AKwLrSjcuzQ-M.roa (hash: TiKzyeJ1GrbpU3aFoto+cFftuRE3qJmGtPjLqVBjD3g=)
                          2: 2smUB5D8W7tuf_xW5EH9jWoz4DM.roa (hash: rTDJvm0oMNC8IUj5+JS+3prpnZefKwYKD4MK14dTYOE=)
                          3: 3a9lX76bQSJaqMppZTquI9xrjjE.roa (hash: VWrFd9vzYBvgjC7R4dgJGbGdtWDKe+wEQ3MjcA3hJGc=)
                          4: 5srUWfK2Cdi4wHjqlySTWyZ4Low.roa (hash: LNg07RRevBAHX1c+iNg80ZacJiC/7ZrA4U+xATH+Y0g=)
                          5: BkJLBllw1-ZWKgRHqGBiQqbyScY.roa (hash: 0YwDYhFvdzyYfI9IMpPvVCUOj6lVo6a8wPzczBvlz9k=)
                          6: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (hash: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=)
                          7: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (hash: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=)
                          8: FCOv2wASvqJQtZIKiccAO2bxvnc.roa (hash: B9ypN+FqEfvSTJg5rp5zO4aGYGOKJguLQr8AmroSDF8=)
                          9: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (hash: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=)
                          10: IStNe4e6LhEN0WqF0khMmbBnvEQ.roa (hash: SucxZMcCMGO/p9cXrgX+1VRtuUi5NI2PuW6+EwcCJx8=)
                          11: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (hash: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=)
                          12: Khdam5ye6nHBc4YW_yrjL25Chls.roa (hash: zu0nJg15zErx3dxZklgiK5ZzU5CwLzliF0MMLUaHiLs=)
                          13: LIDGUWG6p3GJZZCu1Hpsr5bUXFc.roa (hash: PRox2/jLDeyB3TXExAWa7wQfqJBFS5HwT01/wjYfdq4=)
                          14: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (hash: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=)
                          15: QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa (hash: yheorWCDT9lcE3+NqS0jtyjeSBpJ3B/OD/QoM3nqGc4=)
                          16: R0dlQD847tZZ6Sme0uHqVL1A8SE.roa (hash: aqwVbQ/5C0zR8yt+iaSmmHLJT4dD7bnIMHMb82qWbS4=)
                          17: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (hash: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=)
                          18: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (hash: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=)
                          19: VV3pVQmA3jL8s0bmbKamtZwlCt0.roa (hash: vCwn19zgG2GXQkWTrwcbkBf3n2pPD744DQga4uWIovg=)
                          20: VXguZ1IP4OPQ2wSfFG2Zt-8rRmU.roa (hash: FYCub9tLigFfu6QRGXOsYxtNUaq1jqWty883jSxTd34=)
                          21: YjHZVJXAnKr8xh5R9wmBVaYEgXg.roa (hash: kSLUkCF1fVqfg2Z9iMd8kS34Maa3MeKt4Z6zguLvO/o=)
                          22: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (hash: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=)
                          23: cPYOKrKiYT89IO9upkxHw5ZbR8A.roa (hash: J92jBclwmj0vXUCJUdBwqUYTP+Ud22YvPF211aGRosQ=)
                          24: eLugRLDui958XmylSjkxP3wnTMY.roa (hash: PBCwpuzp3sL6oE89Qyaa4YR3Aa/1ZZavbG6JwYcrhzA=)
                          25: em928uE801tncexTsiwdYgbCyFs.roa (hash: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=)
                          26: fCUGFfWzW4S1F4DnK4n7a0AgUjI.roa (hash: Aef8TeyLWHEX0HhoAhmS5O45O1FHLWTrY+cesMIs6t4=)
                          27: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (hash: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=)
                          28: knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa (hash: dim/8umOJ6epBF/Pi+TF62ZYesagnxCU/L0WDdWu3/o=)
                          29: mygN9EXv15Mv_R2x5EM_di5X8p4.roa (hash: +hnEnqUqGPQ5/+etnnWXKfILgh8ttS98q0vUC8Q5rns=)
                          30: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: sIbdWzEDKwmFe/cxSbHwOZwBTaUjlC5N3TZ4eDU0M+k=)
                          31: q-kzFzWdHxYVd9BrFrKLJ4d0RIQ.roa (hash: GMAkDMrzsWCnVos+xh1WbimGMP/CqMUvIS+tRaFTcOw=)
                          32: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (hash: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=)
                          33: t4_sItGLetnCYeXERod5-ebrm9I.roa (hash: AiOBn1us05R9pPuObBSz8aWjDmfVrdiLt6SCizxK1Rw=)
                          34: vQvAhs3X9SIrwTiZLcGRbLHAse8.roa (hash: NgpNHRkuHeYtV5T9QGV0qWm2Ew38Qqs1VxG+Tb300CI=)
                          35: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (hash: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:83:b9:25:63:5e:93:28:08:e9:4e:48:78:eb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
        Validity
            Not Before: Aug 23 04:00:13 2025 GMT
            Not After : Aug 24 04:00:13 2025 GMT
        Subject: CN=1a86692356793ace32b75211f885af00dd066474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:13:25:ad:75:a9:3f:ee:63:ea:a1:27:a1:
                    da:e1:a7:e7:b0:a4:19:af:ad:21:49:a2:b1:e8:54:
                    7c:68:c1:c1:7b:d9:24:af:d5:4b:5c:46:ed:03:e5:
                    a9:9c:7e:19:e1:5d:a9:27:ff:f2:ec:18:b8:2b:30:
                    60:e1:5d:f3:75:e5:a9:4e:10:0d:3c:0f:f1:c2:f6:
                    98:0f:ac:06:00:03:23:50:65:e7:0c:a5:07:5c:76:
                    1d:d3:a6:c1:c3:9a:83:c7:28:12:d7:37:fe:b3:87:
                    c6:3c:1d:e9:29:31:51:85:67:4d:ce:e8:3d:2d:8a:
                    61:28:7c:d0:13:de:86:23:80:42:8f:a1:be:3b:19:
                    00:b8:e3:70:fc:79:a1:c8:c8:48:6a:5c:09:32:1d:
                    fe:fd:1e:dd:29:79:55:1d:48:1f:16:f8:95:f5:6d:
                    b3:6c:66:33:cd:0f:20:61:dd:9e:2c:f2:ed:4e:e3:
                    1a:57:06:d4:38:58:ed:d0:59:74:88:ea:61:73:86:
                    85:13:47:6a:03:38:37:36:e4:04:ec:04:b5:ec:e3:
                    55:f4:21:05:32:90:a9:49:29:ae:39:84:d5:e2:d7:
                    ef:b3:3c:ab:b3:ea:ef:a6:d5:0c:1d:2c:0f:cd:f8:
                    5c:3e:60:71:65:c0:33:b1:b3:0c:d5:ef:04:57:d9:
                    c3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:86:69:23:56:79:3A:CE:32:B7:52:11:F8:85:AF:00:DD:06:64:74
            X509v3 Authority Key Identifier:
                keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ec:1c:f5:8e:ff:a2:48:3d:c8:2f:97:09:bf:25:f9:b9:25:
         8e:8c:15:e3:e7:80:4d:89:de:69:dc:f4:90:a5:1d:9a:0f:f6:
         2b:6e:a1:29:c8:42:b3:a2:f1:0a:42:77:82:f4:0b:b0:2c:a6:
         10:09:7e:0c:cb:1e:40:fc:7f:75:f3:03:2a:a2:cd:dc:14:08:
         a4:46:a4:5e:cd:1f:f3:84:3f:d0:66:09:86:02:8a:cb:1f:ec:
         04:34:53:32:66:f5:10:b6:9d:52:e2:54:9a:a9:65:95:5d:92:
         01:53:99:d5:2b:19:bb:49:19:0b:6a:62:d5:14:af:fe:d4:7c:
         93:12:67:25:cf:6b:4f:6a:33:b8:99:ae:7f:ac:de:9a:6d:ea:
         91:d5:32:62:c7:29:1e:89:2a:3f:33:3b:52:45:d5:dd:9a:4f:
         c6:64:ff:1a:a2:6c:4a:d0:22:6e:c7:88:a5:30:ee:e1:f8:17:
         43:be:f1:3a:27:2b:01:7a:9c:c9:28:d9:37:3b:91:32:2e:62:
         06:17:53:98:01:7a:d8:84:a7:b9:e6:92:6b:ba:27:1a:11:c5:
         16:e0:0e:f0:24:14:ba:e2:91:80:28:4e:df:12:f9:f5:4a:37:
         51:a5:f0:e6:6d:09:b9:81:30:88:72:80:ac:ab:7b:57:d8:e4:
         de:1c:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:24 2025 by rpki-client