Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
File:                     nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json)
Hash identifier:          HebnGyryONB4lNgaJSp0xNIQ0HkrxL+Kt/BRtBOgVxc=
Subject key identifier:   A5:96:87:A2:F2:1A:B3:F5:C8:D0:AB:2A:06:3E:36:F8:B6:1B:AD:8A
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Certificate issuer:       /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial:       0197C726B14DDADA088ED3971533556E137A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
Manifest number:          09D7
Signing time:             Tue 01 Jul 2025 18:01:31 +0000
Manifest this update:     Tue 01 Jul 2025 18:01:31 +0000
Manifest next update:     Wed 02 Jul 2025 18:01:31 +0000
Files and hashes:         1: 93UY4dqb05zYXsrBSgY_SUWy1OE.roa (hash: SWhjxZR4qmQCp7MeCgzZuMrb6QG5ysKe/Q0l50PE6Rk=)
                          2: BorusD87l5J2TYxre3Gw8ED14c0.roa (hash: xxXysVTbA/0WGCy4sb2ruRMVMBKnhW6YWf0n8anG8zk=)
                          3: EEKlI2T6FZUgLn4m9dFt2jmmjug.roa (hash: NhLG/JHJb6nBfntTyOXn48rJIGdq84bLDpAP5xe+ZAE=)
                          4: KnmFh3qNXzClOAnP3N3_zOdYRAo.roa (hash: +qqI3RCcMPzqW1FNd6qeiI1Hp+fo8ydp1FHu51Tncg4=)
                          5: MHNWn_bNBX1lqcEOD0mTT7wACrI.roa (hash: clLcaYzI7DQcX+Fv2rNG1C3Zllntv/UDtJxJ/vRXxoQ=)
                          6: Re_UifNbcWs-_GiyHAPPOm-yvBI.roa (hash: /7ri6bimyKdV62h18w2ONkdLybTnrpaymT5BH6L1jYA=)
                          7: VcO4qJxU40K9kxUnEeW--IFaX04.roa (hash: X/O0h17oYuRQs7Z/RvZag6iy4Bl2stwkspMMrvsPNYY=)
                          8: XbSJLVClFYLx347mvDQ0S5hsX4g.roa (hash: lybO1wHjq/XifCJ733TrvdLHgJspRMxJWxwTnG2IJ3k=)
                          9: _FIw_A5dt1xU03Zbhge-_m33JRg.roa (hash: detBPIO7UYh9KdSe2E/Nz7Rkxgy8iMeWzoXOu0ZPnXY=)
                          10: _eUdNns9K3pmktpDjbsJKL25mLM.roa (hash: H1epmYT39WpWPDkyNBRD00gVA4UMe6PA7lYf9t27Nt8=)
                          11: cRJHBNdmbpUyHqOEUpwKzTFuNCk.roa (hash: SS69vXe4PhGUYENzPrsqk18OCamPGc10AVGsVohBJGk=)
                          12: epelwHANh7OiGsK_9lXuxpfMg6A.roa (hash: cvIngfrBRq+miG7IEBZb12qk6qbFmlm6tUzWI+SSFws=)
                          13: exmtqeslQldhovSpOC-CSOrLj4s.roa (hash: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=)
                          14: f8sPYD1_ERQWqtoiJ9r8nmuqohM.roa (hash: PlyFIyn6Ktx6v1YDTiEOpjCU7XEpYkgWQS4fgop/Yp0=)
                          15: irT4DdDzgeP-65AGXrk0PHCAQVY.roa (hash: RsayR2J7jayb/ZHPN+8XPFdXktAjeGK/x5tQjIbG8/Y=)
                          16: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: YAR84E1lvPZuqrrupvzRYcIxbzSaY4MADuKoMPOCSTQ=)
                          17: tLYzkh1BF-tCSd6mxGxyzygsbR4.roa (hash: h8GnmhIYy53LscGvoe8iZQsO+S2ED0tqpDH/o5FtGHA=)
                          18: uO1pFwRy8AJGX4SwnDjfNrYIKos.roa (hash: 2ZU1WLrzVVRfNgET3SFbUEMACq2+Y8CsJcuFHw7Rrv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:26:b1:4d:da:da:08:8e:d3:97:15:33:55:6e:13:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
        Validity
            Not Before: Jul  1 18:01:31 2025 GMT
            Not After : Jul  2 18:01:31 2025 GMT
        Subject: CN=a59687a2f21ab3f5c8d0ab2a063e36f8b61bad8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:49:9d:e9:0f:ad:af:9f:13:51:e0:9d:6d:
                    a3:9b:e4:7f:00:6e:66:73:bd:fd:4b:fa:2f:16:7f:
                    09:51:f3:99:5c:c1:1f:18:38:58:e2:10:13:a1:7b:
                    2f:25:b9:db:ca:c5:6f:85:1a:3a:37:fa:9f:b4:d2:
                    91:f4:54:a4:9e:9a:14:bc:fb:df:b3:e2:71:fc:1f:
                    ca:81:fb:1d:e8:31:50:a7:82:e3:7e:b4:a0:7e:8c:
                    dc:2d:01:c2:f7:b6:34:a1:ee:56:e9:51:6a:5d:6e:
                    aa:21:3f:65:e9:85:57:dc:b7:40:02:6b:41:ca:05:
                    e5:94:0d:ca:94:f4:03:de:bd:77:3b:ca:b1:d8:f5:
                    ee:58:c8:f2:aa:20:89:34:14:1a:f1:1e:95:f6:ee:
                    56:43:42:d8:06:ba:38:6c:81:e3:fc:3d:e4:bd:b8:
                    51:b6:9d:be:1a:89:bf:c7:09:39:b2:92:fb:b2:8f:
                    bd:4c:cd:e7:d2:be:26:0e:1c:4a:ea:2e:b9:00:a5:
                    ed:ba:06:b4:3b:d7:b6:73:72:f9:fc:e5:87:0e:90:
                    f6:58:06:d4:77:0a:52:1f:18:3c:8a:72:15:8f:d5:
                    cf:a0:f1:3e:d1:bb:01:10:53:34:a6:f1:41:6f:69:
                    f7:c9:bd:3b:f8:d9:81:e6:86:d5:c1:27:c2:58:bf:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:96:87:A2:F2:1A:B3:F5:C8:D0:AB:2A:06:3E:36:F8:B6:1B:AD:8A
            X509v3 Authority Key Identifier:
                keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:03:35:c9:78:73:d2:e6:72:6e:93:e7:54:81:86:48:76:d5:
         f6:53:e2:cd:7a:d8:7a:bc:3f:72:68:86:2a:9a:f7:b4:3b:2b:
         17:6f:c0:10:e7:77:44:af:16:3d:71:fe:7f:44:85:8d:9b:39:
         66:5a:2a:2f:95:b5:a4:bc:02:a8:c3:fa:81:69:12:49:3c:ce:
         91:54:67:60:df:86:5b:2f:dd:5b:02:f3:11:bc:46:fe:c8:bb:
         9e:05:11:e3:be:f1:f4:e7:46:a1:24:83:87:e2:11:06:48:66:
         8a:8f:2c:02:f0:72:51:a4:f6:1d:5b:60:2c:fc:cc:66:9e:c7:
         fb:0c:43:d1:40:cf:76:57:09:42:b3:c8:d2:31:ce:36:41:54:
         7f:12:e1:1b:80:8b:ca:6e:87:6c:71:26:31:cf:85:9d:03:4d:
         3b:e5:87:40:87:d5:32:58:23:64:87:18:7d:42:18:0f:cd:20:
         d1:a6:d9:64:63:5e:25:08:d6:fe:1d:e7:d1:0a:a6:80:3d:75:
         db:e0:a9:14:66:91:c9:63:f3:ed:fe:41:74:6c:43:fe:58:7b:
         e8:3f:bd:7d:fb:1e:a5:67:54:49:14:cc:24:5c:1b:a0:08:eb:
         90:e1:9a:b6:c9:7b:02:78:d0:b4:cb:4c:41:a2:cf:32:66:4b:
         f2:3f:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:32:36 2025 by rpki-client