Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
File:                     gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft (raw, json)
Hash identifier:          0/TrK5QSzVKy7O9ikF8DyLhs1VVGXKgNWhbbuNv6OR8=
Subject key identifier:   C4:0A:32:C0:26:2E:08:21:85:D6:DE:1A:A3:DC:46:4B:B9:2B:02:B8
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Certificate issuer:       /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial:       0197BA0F86BF412567481CD294C97434275D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
Manifest number:          1618
Signing time:             Sun 29 Jun 2025 05:01:08 +0000
Manifest this update:     Sun 29 Jun 2025 05:01:08 +0000
Manifest next update:     Mon 30 Jun 2025 05:01:08 +0000
Files and hashes:         1: 1-VklZtGfRDIv9KG76liQR83-to4.roa (hash: edjUQqiISv7wfLcTeAAL1KB6ZQeIyU0cQcVsfaTZHug=)
                          2: 1-VoUxB16sFUpabKYYCaz09m0veQ.roa (hash: jBzaCnK55nBqjAgFzIbfoxSdnwHfF10JuSwdasZO+DQ=)
                          3: 2o5lxS17-TuelE1Eo35Ac7B5RQI.roa (hash: r0p74cT43WIPOHKiilDFyNpmu7ELpn61XsWmhxelkQE=)
                          4: BD48RnLKhQNQSxwnTl5Ut3DTaaU.roa (hash: pJeqPcMqpwy5eeOtqwiuelICHhHnGVKN+Sk6N5/HqY4=)
                          5: C36u7KfhCFOa8XdN016Wy-ytnzU.roa (hash: NBROKoh3VnJzs+HifzEAW5oRrothQyJwHy1p6FD7qNw=)
                          6: C7zRH1Jrw7K4qkebKM5gx-PMLHo.roa (hash: V9v5Bwq8jAUyaBzFj3ac3ordtwBsUduLjuOy3ng7dlw=)
                          7: Fjpn_EhgQWiM2WTKdhOHYUup0SI.roa (hash: avJT71Pm6rETaFlOLm5bUihbILmnzENzyrtgZ72o/yM=)
                          8: G7qOVLwRQlkEUG0XGeZBugA-InU.roa (hash: ra5AqUSh6Ku+Y4KrCiBgkUNOkURj3FGVxxn+YcD+2go=)
                          9: HcWreomVamO6igDbYdaHvUovBJE.roa (hash: C0xWzWg0wDFX2tcQ+cbN6FO+9kOOnR2BAdkUaR6U260=)
                          10: P_H5I901p9uT4TULpcfUWpnfgxc.roa (hash: 5nYschX/VQUuVCl6HMxh2V0MkBgtU9xLQ/f2zZLAuzo=)
                          11: UgHpKlqBO-yG6MAk71veImS8A_k.roa (hash: H2wN0fclsHaCiJncl4vgreBXyhU1eH5A4SSBf1lbp5Q=)
                          12: WGNCuqp1cDIkFF52cq8hYpf58EQ.roa (hash: xEraMYTX5Ht3coCGqcmLdPzdxd+9Ax5IlYiKCRT58TQ=)
                          13: ZCBuvFzddC1aEq7LaHN61cL09t8.roa (hash: 4hCDWeY9A+fW8Nngm3WDc5TUzf0eL6aursZwqmLTRq0=)
                          14: cZ1VjXvm2kSaXyfxbG6DWvRG8uk.roa (hash: 5UVRN3VFRKsZKsanW2WSNXa8tl9mzCzer8YNhv2aLws=)
                          15: dUDoTikRrhGqdHuoRq6nJ22ijx4.roa (hash: CZEX4tVYDKiuZFQCXPesSFgD4Ewr620I1xlB1PmSx34=)
                          16: dmn9WWC1cOw8-syFOH8rVvRUYcM.roa (hash: yTiBT+PxdCbTZTX/xwUlIfZpsEgNm89xZp8RsHoNwSE=)
                          17: gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl (hash: kP3VLGNUfvYHUFl61pvJfhh/MhhbEyXHoYvQdrl67WU=)
                          18: l_Ry5FOo-OiUKRZ8cthrttm-F9Y.roa (hash: NLd7UhunGsXkE5IXHeIn2nj/Zfr5LqW+H7ZS9niwIqs=)
                          19: ltR8O9eT6M3oAU_gxp7pcWB8yvg.roa (hash: 5GhoLYlXlz1l2KGazssc6/9eGWn++CM1C2ZU91tWclU=)
                          20: qE_tcfupauq7XdXPqb7KSreupsQ.roa (hash: 3EJWNtY+Qhvm2DJ7H+6VvM2/OxiFGq47XqF2H0oCbzM=)
                          21: rU4-fu2i_puERNzqsZusptLEhxw.roa (hash: oUOtoTz5sCAfhIfBXkRUrvoxsTQJBic3IEPNnf2jOds=)
                          22: sjGNR44IPNB6YOE5kbYUMAmAQ2c.roa (hash: sEDrCkJksXTVWaboHfAfeMVVlrdjOtJNi3rs1KmLVVI=)
                          23: tl_UOyVyvLiZ56go_zbUXu0w1RU.roa (hash: xLobW8IreRrUrnxI34BPjIORJjKfBMmVKGYJD5SGe5M=)
                          24: vQxaXFFye15rTmMFdspwW0lZXXw.roa (hash: WNFAIP/uQ0hPHaicgwOuJZAO7BjrvK7w6Kv17nLJESM=)
                          25: whutfHrGbrMoUBiwqU4xPdyhmA0.roa (hash: IJxHyhxFaVshf8NMZql5Td0GAvIXYopqx9xBaH+8idI=)
                          26: zCFasBm0EYXOg5wMczyui1g8P7w.roa (hash: vMOSU2/g4EkiB4e8USpsHbmF4Ns22ciWga/oRAR99+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:0f:86:bf:41:25:67:48:1c:d2:94:c9:74:34:27:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
        Validity
            Not Before: Jun 29 05:01:08 2025 GMT
            Not After : Jun 30 05:01:08 2025 GMT
        Subject: CN=c40a32c0262e082185d6de1aa3dc464bb92b02b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:88:87:59:c3:aa:5a:a7:92:97:f6:53:ac:
                    d5:bb:7e:de:fe:6d:9a:99:7f:aa:88:ae:ea:7b:eb:
                    80:b7:7e:ac:93:23:04:f1:30:23:27:86:69:57:6b:
                    b4:69:eb:dd:d2:f5:33:bd:89:db:c0:3c:38:31:e6:
                    fd:c3:97:9b:d6:98:38:7e:9a:cb:10:f7:c8:4c:e3:
                    f0:8a:9f:b1:16:71:41:55:dc:21:e6:2c:de:c9:a3:
                    8b:6f:5a:06:9e:22:ce:e6:81:a0:55:8c:3b:50:df:
                    0a:88:b6:6d:d1:2e:53:19:6a:f4:6d:f1:95:e2:64:
                    64:01:09:b1:cd:56:23:19:6b:76:1e:4a:9f:bc:48:
                    a7:e9:d9:17:e2:c8:9a:a9:21:e9:c8:12:6d:f4:d0:
                    c3:01:9a:13:17:09:77:32:2d:23:b3:b1:8e:25:b1:
                    1a:52:93:5e:45:39:f3:50:d7:1b:31:52:1b:5e:b6:
                    3c:d6:1a:1c:9b:d4:fd:b0:08:a4:ff:c9:5d:33:be:
                    67:1d:99:7a:ed:78:fb:27:73:4c:7b:8e:a4:4e:6f:
                    72:c7:6c:a5:4e:2d:58:a0:86:aa:a4:b0:81:ef:9d:
                    4e:a6:62:46:0b:ab:c2:be:51:d9:0b:70:6d:e4:b2:
                    3d:da:2b:4b:7b:98:b6:e9:e6:d1:33:75:46:3a:ad:
                    0f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0A:32:C0:26:2E:08:21:85:D6:DE:1A:A3:DC:46:4B:B9:2B:02:B8
            X509v3 Authority Key Identifier:
                keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:90:8f:0b:2b:2d:65:01:cf:11:d6:d0:17:54:0b:e8:4b:39:
         20:4e:b4:a9:25:47:dd:ee:fd:dc:a7:cc:ea:4e:6d:de:46:ff:
         03:89:a5:f2:b0:a1:2d:25:79:94:13:ba:a4:1e:1a:63:2d:4b:
         67:a6:b5:09:c6:a3:27:2e:e2:0d:83:43:b7:9d:fa:39:f5:b5:
         4d:d4:07:81:32:a1:ac:88:51:a2:25:7a:7b:d0:0f:9a:2b:e8:
         21:82:0c:13:1c:21:c5:50:b0:37:d8:f7:28:57:9a:4e:c9:20:
         27:ae:4d:24:46:ca:a8:8d:d6:9a:ba:fb:7b:a8:3a:00:3e:c8:
         9b:3d:5d:5a:32:28:6f:72:c0:f9:4c:1b:07:39:d5:51:01:ac:
         b4:95:51:58:f0:56:83:c1:4f:e6:7f:75:33:b1:58:95:b3:61:
         77:aa:b4:1f:dd:5a:a7:1f:ab:af:7f:c3:21:9c:f6:7d:5a:60:
         c7:12:79:2a:d0:3e:8f:7d:84:71:bf:da:61:53:1a:1d:ea:c5:
         5c:ad:58:37:8c:79:11:21:da:f0:47:fa:63:59:ad:e2:06:89:
         4b:5a:85:2d:bd:12:61:90:65:bb:8f:49:c4:23:3f:b3:cb:e1:
         05:c6:71:9f:b5:42:54:68:1a:7c:84:ea:79:5b:2e:30:8a:16:
         5a:c3:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:35 2025 by rpki-client