Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
File:                     rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json)
Hash identifier:          wAI5CJOt0cjryklvbHXiFhhtcQj4xYfkfC6K/1wtBx0=
Subject key identifier:   41:4E:DF:7B:BB:9F:10:41:11:9C:9E:B5:A8:F7:74:E6:5B:B6:2A:75
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       0198D5839977E92A75F6552490912733F814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
Manifest number:          1676
Signing time:             Sat 23 Aug 2025 06:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:28 +0000
Files and hashes:         1: 04Xl2v7VZUiTmCr_w4v8QX2gTRY.roa (hash: MycY07gNOE3Ooqi4Uv41zgpH/iEzpn8tkzRPcGSW9aU=)
                          2: 26R907b9JZTa9LMd6c9-dwXbanc.roa (hash: Nr0pZSVAGWFTdm0Q/t/4gBjJB3CHvlfJvfnTY1Rsu6U=)
                          3: 4CkYdPgwuFRB9yfCSUR4mFZ2aRY.roa (hash: uxH7iNCE7ZmZDPzgHrmT88B0442eI2IPmR0JGvSaYus=)
                          4: N8IkUZJzTBOZlu70RR-lhbMLsyk.roa (hash: ibQxnRGTbY2fQW1i2qvy/3e4lxCnd9xPyOoTE1V98yc=)
                          5: Nz5RTdbiVqvTyf1uMtVJTNrUInA.roa (hash: 6DxKi3ibNRNUsq7DVRyyl9egdF22G2yI1jKGFf7eGvI=)
                          6: OrB13yHYot_uIXf_gXlQc8xI_hE.roa (hash: FMQdsecZx+s70UXzEHExqDx9Jcs+3DRJcI4Unl+IGvY=)
                          7: Pl7-hE7wkLNvDQabKfSwU8DkQ6w.roa (hash: 27nFWy7GlxT7WEaqE4vpzeeamTgM2rIB5rRF1VNL9hc=)
                          8: R6LZ_8XH3ExvRg1dUKFNV8Ey0F8.roa (hash: qFpymdyEBp79zE8j0kfuySy0J6zv46CXUcpRwgvhrUg=)
                          9: cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa (hash: DlDoiDsmZqGB/sH+jVsLeAbtXXyd2YUnrqrE/juxJb0=)
                          10: d4OCK2D4mSeWoRqf9p5C2kL05YA.roa (hash: Elq7S05bbGTPAkW786TpCyuI8W7H2meHxaBdt6oA0iQ=)
                          11: eve0R85Bzf8fVYZiz_CwkQbNrfY.roa (hash: C31CurjzM4ZbD0eThfczK/2Jz2E+lMaCmCEqjBcpDzI=)
                          12: lGrajh7a_wa1_LmUlCkskSpHEUA.roa (hash: cqiS1zwnFw4W1rzDIACXMZPc8ZNVkVV3Hme04FAS5Cc=)
                          13: mk-EE-jomB4r81nV5hqnq3SbThA.roa (hash: s/WHq7pvPXbuGboH15G/GxJVOO9+dXTAtYjUAcjZio4=)
                          14: onb3rJiukMEmxTOk_8qYPQ5pFvg.roa (hash: rVertN8iUSrJY5Sj1WLa+FHIXHq3KLU3I9MXMNSNWto=)
                          15: rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa (hash: INMUl7RzFx1P7Rf6UvWbPgwSFgMQsbOXObYuvGU4UyU=)
                          16: r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa (hash: eOXFdxOR7gIGvVyPrVo91AN3j7CdU+E/QIH/+e1t/5w=)
                          17: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: N+SBBALpeDBMA9o8Z8omtsRTUb1Rad4EXdYa2nE8vkI=)
                          18: xgJFjaLiTqyrTAWyq4f18Pg7amk.roa (hash: 2iBDAhKAGL78CKGIrACCnUM4WIuzKixnPTq74lNq4V0=)
                          19: zNVGFbRsiePBxz6FwsPTrdVje0c.roa (hash: iOwivHuatZu0dYUoIFiY6LVls3U7FPznyEYVX0N4MfQ=)
                          20: zwam10qTIbqdFHd30kfqv_ZzWgE.roa (hash: FkxbmAbpcrj+MmOQBWMwaW9Kx0P0rYzKKqUDU8tkNdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:99:77:e9:2a:75:f6:55:24:90:91:27:33:f8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Aug 23 06:00:28 2025 GMT
            Not After : Aug 24 06:00:28 2025 GMT
        Subject: CN=414edf7bbb9f1041119c9eb5a8f774e65bb62a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:c8:d4:83:52:06:bc:9d:7e:fb:7f:60:e7:
                    81:88:b7:c8:03:0d:ad:86:77:3f:b4:07:a5:d4:2b:
                    7d:dd:cc:b8:00:6b:0a:9c:81:1c:34:c2:94:aa:18:
                    96:78:9d:5c:1d:bd:4a:3d:e2:7f:76:5a:83:9e:a1:
                    ae:e4:95:b6:fe:7b:ab:3c:c6:1f:21:9e:a0:d7:d9:
                    14:33:28:d2:df:0c:32:c7:1a:24:43:a1:84:93:6e:
                    06:9d:cf:8f:56:3c:84:aa:11:b2:71:17:3f:23:30:
                    69:9f:8f:c7:b5:44:31:49:01:8f:88:f3:8b:68:2a:
                    cd:c8:b9:32:86:25:dc:26:c5:54:e3:5e:e3:51:5d:
                    9e:ee:37:4b:b4:c3:2c:4e:66:22:59:8c:a4:94:e2:
                    0b:d7:9c:57:9b:df:ba:bc:4b:4d:56:05:a3:a5:43:
                    e7:32:8c:1f:54:1c:97:cb:6a:30:5c:22:36:7d:d6:
                    fb:04:ef:6a:8d:b2:45:01:95:70:27:c9:25:43:8a:
                    cb:4c:1e:2f:84:06:e8:1a:34:43:57:96:7c:5d:b1:
                    a6:f5:60:75:9b:13:d0:71:2c:33:d9:de:62:ec:71:
                    79:0d:72:76:bf:69:56:8f:2e:14:00:3f:3e:f6:cd:
                    7a:3b:8f:b8:3b:22:10:75:3b:b3:29:62:67:89:85:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4E:DF:7B:BB:9F:10:41:11:9C:9E:B5:A8:F7:74:E6:5B:B6:2A:75
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:b7:aa:0a:06:f9:48:67:d1:d1:e0:9d:f7:51:ad:24:40:
         89:73:ec:c0:9d:9b:df:1d:3f:0d:88:a8:fd:d6:e8:5f:ec:fd:
         01:00:44:46:69:53:bd:8f:7a:eb:09:a4:eb:2c:57:a2:f0:a3:
         5e:dd:a8:da:06:e1:7d:7e:fb:fc:a3:2f:9a:1d:3f:7a:0b:a9:
         ce:37:98:58:f3:24:46:f1:5a:cc:2c:67:e6:f9:8f:97:58:2c:
         a1:63:a6:77:45:71:c0:5d:22:c2:41:19:9a:a0:06:f8:38:f5:
         1f:c5:b3:0c:01:ee:49:62:8e:2c:ce:76:38:63:c2:09:18:91:
         e4:df:11:36:25:7c:4c:7b:ed:7b:6f:4e:3d:61:11:f4:f8:e1:
         ad:24:98:c6:ee:c4:4b:b4:98:10:0c:6f:36:10:b6:a0:a6:fa:
         7f:38:1e:5c:76:9c:dc:54:d8:16:38:cf:47:d6:ad:7b:c8:dc:
         bb:45:f1:a0:ee:2a:af:36:f0:7a:4a:7f:e8:68:72:cf:e1:31:
         35:df:be:59:75:41:4b:14:ae:5c:58:1d:e4:75:ca:f4:43:56:
         8c:bb:28:cf:bd:b9:34:8f:d0:9d:1f:5b:8f:0f:10:2c:af:35:
         a7:cd:90:55:4e:00:fb:d0:c3:83:a2:43:3b:e3:ef:db:33:d2:
         66:ac:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:35 2025 by rpki-client