Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
File:                     WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft (raw, json)
Hash identifier:          ommkvtKTFFPlVkwlbUCnaEGvgupzGP4kb179fOAggYg=
Subject key identifier:   61:64:A4:93:08:EB:FF:95:CE:F3:0D:0A:EC:E7:DC:AB:24:97:F3:E9
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Certificate issuer:       /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial:       0198D54EA006FB168D4FD1F5CA18C99CED64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
Manifest number:          1666
Signing time:             Sat 23 Aug 2025 05:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:36 +0000
Files and hashes:         1: 0yv-YpT7EAlDFfaPmF8_vcpGZrw.roa (hash: FCFF4a6p1Kz9hIASitWn3Cuesp3ppA1vaf6u6HK9VUE=)
                          2: 4hbMBM1nzDwcq0Z5poawjitTY60.roa (hash: XP1CU+CY23GAE6mFffgmeePRICbliFurLSIMPRQ5f40=)
                          3: 7WcUp7VboIfJPuJw_2eN0YJowc0.roa (hash: hMptUTx/SKmaFCbNu4ZMxGpB4nXnLhPIpWMOPwFNEdE=)
                          4: 83DWjPDI0qHPOk7NLbQWjtD2D1c.roa (hash: AxnYuoBRuJSqvAH9Bx3fTRR+QoVXwEkv5G6gCkg2Bao=)
                          5: 9IywKX9fS2qo6y4BwiBKFOJ_RRo.roa (hash: Ac1uBlsnhCZRDyKHF7yrUh45o1zwGsvgTvH8xD0tKfw=)
                          6: D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa (hash: +8YA8GsmgHc3axYa2P7GfhxaqtQ7FE/tjUAeHRPwr9g=)
                          7: GKke9u-g19ORaszjeZzhH6pAcUM.roa (hash: xdtY9xo6gnGlpB3ETcBJ3YBkjHIlQqwLDRHWq8GtahI=)
                          8: Ig1WTTEJWSAB8ImVaoKPLwHQgbc.roa (hash: UMRsVJllHBv632Y31OJYoImld0QNRvOFUdYe6AzQydE=)
                          9: N5rVf1hY_OzEZp1xY8pg3j4it1A.roa (hash: Ue3CSgwWVTQ+G81bsGOQJFm164xkm8Ru6ylUCKhvmpA=)
                          10: SOIu77MViH9HrW2wOhBa4ctl-s4.roa (hash: EeJItN2QFTFRmLAW0Mvz7rV5W+XgeuLcsUy4tvkAsoI=)
                          11: TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa (hash: lTO5embQ4JVR03qf/66D4vxj/cbH77aYRTX0QvQ4wLY=)
                          12: TaAWX6RunIkoavVYyto4LyLZbsg.roa (hash: LLRLNHFstGywhUJHWDeOxplmy9vdy8UuI67N0/rWKkI=)
                          13: UQnmCoONwiJ5kPJipbbPRWpehRQ.roa (hash: R7SJq+v1gPef9CcZYgNLA5yueggHvGhRS4pnX+i+42s=)
                          14: WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl (hash: KCGB4a8AhcP1PqkMDUno9uvm6DRM/netNblroSeX5g8=)
                          15: WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa (hash: OpV4tgEanecwJP3L/2htD3wFwFErrWLFYPu5S83daZo=)
                          16: Wj9UBZ8lyGpizZyCVs5Soop7w2k.roa (hash: nghObD8IVMMvgf7Cs34GYm/ZtGFtMr/E9cOGO8F0TDk=)
                          17: iystaYSJXuGKhhCiyAWE4u7UEyk.roa (hash: XXypNZES5+tt8lWlXBej3/0Gq3tgIRPeDyU4cGhm/qQ=)
                          18: j8S8_OZUpxB9k7LHRFPXRAKfkWU.roa (hash: k8mQUf/NuQPokL0zcpiZfvFdtMY/J1/bRRQuRB+KB/M=)
                          19: qMr-LBReCBqYRhVBoJttXFZAERs.roa (hash: +wcj7meQsd/DFjEen1Pm4EtbrLhEFNBjzasK/qwIzFY=)
                          20: skag_VnN9GBJjb3tko75iVexHSM.roa (hash: C1SS1bYL61kZQdi8QWgGkq7ptTOfGOQLi9q7iiXlFU0=)
                          21: sqtDA5C4zTAF8EU1UanGLhNGqBE.roa (hash: mht2D+EpFezejVvclFV759gknFNR6V1vy0XD94YDkwU=)
                          22: tY87YHYk1jzljqskwBqh88_jHsI.roa (hash: FBXRg/+4zdN4ns//wS8kZR1MilrJbhk2IEaV/fnAsd8=)
                          23: vWXWhkktZWC2_i0zKz5vdi-IvuE.roa (hash: D7lRMIA1f5sBgefITMxbK3yGHotRr10qyY6m4yVQx28=)
                          24: w_nsALBEni9bN7oziLT6x-v5vMw.roa (hash: bV1O6/pTWkVcLgUfCwZY2geOQH931QXPvOJiCvTyGdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:a0:06:fb:16:8d:4f:d1:f5:ca:18:c9:9c:ed:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
        Validity
            Not Before: Aug 23 05:02:36 2025 GMT
            Not After : Aug 24 05:02:36 2025 GMT
        Subject: CN=6164a49308ebff95cef30d0aece7dcab2497f3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:b9:1a:08:b2:bd:d2:ee:5b:1c:a0:f2:e9:
                    d2:77:b9:05:28:26:08:01:4f:d0:36:6a:03:0b:c3:
                    12:9c:66:f5:d5:40:9f:00:68:80:ee:23:71:06:3f:
                    4b:d4:47:00:72:9a:b3:af:05:8a:8c:ce:9f:a5:f7:
                    dd:91:a4:f1:4a:64:09:f4:40:14:fb:87:dc:eb:2a:
                    81:ea:da:39:a2:54:7e:80:50:a2:02:d1:95:d9:f7:
                    cf:37:d4:07:91:72:a7:27:4b:b6:1e:d2:6a:53:8b:
                    a8:9c:af:4e:4c:4a:e6:4e:63:ed:22:b1:a6:d3:36:
                    22:67:32:07:89:a9:78:84:1a:b7:3c:b0:78:62:6b:
                    d1:31:42:c3:f7:80:0d:4c:06:5b:51:be:27:e2:13:
                    d6:e4:0e:8a:f0:cf:dc:23:a0:de:d2:bc:03:2b:b3:
                    df:64:12:7a:d1:2b:d6:39:2b:5a:c9:d8:8b:9f:20:
                    09:46:31:77:be:5e:89:5d:c5:b1:fb:b4:ec:6a:27:
                    c1:52:d7:7e:6e:cf:c9:fb:a5:fb:f2:bf:10:14:98:
                    6e:27:f9:2f:8f:72:17:4e:d1:b0:22:b4:9d:6e:23:
                    a6:b8:a8:c2:a9:41:68:75:95:5a:17:29:7a:c4:25:
                    29:bf:41:bb:b1:c1:29:3d:47:d9:f1:b4:ed:e7:5c:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:64:A4:93:08:EB:FF:95:CE:F3:0D:0A:EC:E7:DC:AB:24:97:F3:E9
            X509v3 Authority Key Identifier:
                keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:77:2b:50:dc:60:88:06:56:77:71:d2:c2:c9:0c:69:e7:0f:
         0d:09:a5:f9:59:c7:cc:7c:84:46:2e:34:8e:ed:ab:bf:0a:cf:
         7d:fd:72:60:18:03:f3:44:80:12:43:47:b7:72:f1:a0:cd:90:
         21:57:01:fd:38:6d:29:19:96:bf:a3:ec:80:34:8b:6a:23:ea:
         2a:13:94:ce:41:a2:76:e4:39:75:cd:25:e5:49:fd:84:6b:02:
         40:46:ab:ef:93:09:99:9a:69:35:41:c8:76:4b:35:c5:80:27:
         da:b6:59:9b:86:04:12:d8:5f:dc:18:38:ff:0a:b4:1c:39:ba:
         3d:58:e6:4d:85:6b:f7:38:aa:89:f0:50:b0:8d:5f:73:59:dd:
         e4:b9:3f:32:6f:98:f2:9b:7f:4a:c3:4a:b8:71:9c:91:88:ed:
         ce:fd:05:2c:be:fd:20:84:cb:f4:68:80:80:43:e9:f5:9d:bb:
         38:80:3a:43:c9:13:ec:7c:64:85:db:d5:d5:58:35:63:b9:23:
         37:cb:ea:02:05:62:18:7a:a2:b5:f7:64:cd:61:ed:59:46:09:
         26:d3:bc:06:b7:ab:4b:1c:96:f0:cf:19:ec:dd:0b:2c:a8:96:
         ed:11:b0:cb:ae:29:d9:6e:dd:a9:22:06:a7:f1:69:23:e3:5b:
         8f:ed:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:24 2025 by rpki-client