Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File:                     _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier:          DC/pM5llBKSCJU3oNeQZHDlILafEIov0bu5H+fW3Gu4=
Subject key identifier:   FF:E4:07:DC:05:D9:8E:B6:A3:25:7E:A0:5B:3C:6C:54:56:7E:F0:74
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer:       /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial:       0198D5BBF87EFA7E61BA74212B246ABBA11D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number:          1690
Signing time:             Sat 23 Aug 2025 07:02:02 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:02 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:02 +0000
Files and hashes:         1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=)
                          2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=)
                          3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=)
                          4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=)
                          5: 8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa (hash: v8PEoTepb8SY5IPZDmMyByiGGEsM8VZnFBHuEpMHhf8=)
                          6: Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa (hash: tJ0CFUjWGpQHeBJKiYedBkhtxvRYSIaLu2u0ULfF3Dw=)
                          7: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=)
                          8: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=)
                          9: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=)
                          10: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=)
                          11: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=)
                          12: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=)
                          13: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=)
                          14: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=)
                          15: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=)
                          16: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=)
                          17: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=)
                          18: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: lID9rIelL6ycUm/NmVoZus8jbWOStmkyYVvwB5Yp0fw=)
                          19: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=)
                          20: bloAk3yeA7RnUogV_JT9EWIP-hM.roa (hash: 2fE3VucaSZiB1/IjzEIuOiCkE2iec+1KGKY3worRZJI=)
                          21: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=)
                          22: fBlvBTMJM3ddqp2rUiQB8ldjkd0.roa (hash: ETihZGojVJlaCJwQ0UQbamp7h1DxH8Yq4UnyjKrHjTY=)
                          23: iUM8bJHwQ48CpEg1dQgbuZoF2F8.roa (hash: FAU/hqJaw9dZlVsB9TPc90NTrKoL6yNGJeYIXg92yTQ=)
                          24: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=)
                          25: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=)
                          26: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=)
                          27: ug_XierUONvwggKOMaZkJe81loY.roa (hash: XoFHm2sqFbn3YwKVKBV5bvDEJtDLvYE5/kOQORtiPDE=)
                          28: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=)
                          29: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:f8:7e:fa:7e:61:ba:74:21:2b:24:6a:bb:a1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
        Validity
            Not Before: Aug 23 07:02:02 2025 GMT
            Not After : Aug 24 07:02:02 2025 GMT
        Subject: CN=ffe407dc05d98eb6a3257ea05b3c6c54567ef074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:1c:ee:3c:4d:d8:8a:82:21:05:08:ff:49:
                    06:00:8e:d2:3d:42:26:45:87:49:c7:f1:b1:1b:df:
                    0a:b1:58:b2:7c:71:e8:bc:9d:1c:b1:84:4b:4b:83:
                    3c:8a:7c:93:09:37:ef:41:ad:21:ac:66:84:60:7a:
                    80:7e:96:93:f4:18:8f:bf:23:05:7f:1c:9f:0c:8e:
                    3e:2c:ba:0d:2a:0a:6c:1e:b9:53:2d:18:24:07:77:
                    f8:44:f9:30:7f:a7:c3:73:2d:80:fd:d3:05:35:04:
                    e3:eb:18:24:46:5c:6c:cc:2f:fa:6e:5c:f3:a8:79:
                    e6:da:7e:56:a0:9d:68:e7:15:19:34:e7:06:cc:cb:
                    6b:32:9b:a8:6b:37:c6:de:8e:62:e7:a9:f1:48:c6:
                    f7:2d:b3:4b:4a:d3:81:05:8b:07:22:40:17:24:28:
                    f6:d0:2f:8e:59:67:8c:de:13:e0:71:c1:7f:ff:e6:
                    91:3b:9a:2a:a9:3f:1d:46:01:a7:d3:e1:eb:f5:f1:
                    c3:12:76:67:b3:54:10:65:65:7a:f1:cc:b4:a4:11:
                    76:e0:09:39:24:2c:83:f2:10:cf:77:45:5e:85:60:
                    b6:6b:b6:ce:81:9a:a7:b0:f4:37:32:a0:2b:8a:d0:
                    01:fb:d1:76:fa:d8:85:81:7c:f9:e4:5a:c3:0c:9c:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E4:07:DC:05:D9:8E:B6:A3:25:7E:A0:5B:3C:6C:54:56:7E:F0:74
            X509v3 Authority Key Identifier:
                keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:84:cd:a6:36:9f:fb:1c:de:e1:4c:c6:d0:ac:a0:cb:89:ba:
         4f:c5:bc:fa:71:db:64:2d:43:75:53:ab:a6:ed:b2:55:9e:88:
         c2:5b:21:05:c8:86:33:84:d0:48:d1:8b:d2:f3:5a:b4:d8:7c:
         3d:a6:bb:d2:59:4a:97:60:25:45:bc:ed:75:f1:dc:af:48:d1:
         ec:5b:00:be:78:6d:69:0b:77:47:a4:6d:b1:9c:c8:17:73:94:
         17:00:3c:91:81:16:d0:d7:f4:c2:09:be:e2:95:1e:21:f7:d6:
         a2:23:29:21:88:dc:64:03:dd:c9:9c:c7:f4:af:68:aa:25:59:
         c5:16:33:6e:54:56:ab:33:ed:63:16:12:36:6d:51:bf:e2:e9:
         41:5a:7b:e6:11:ae:6c:bc:41:57:25:a3:20:cf:ca:52:67:2d:
         9b:11:5d:91:f4:fc:59:8a:40:53:c5:f0:19:5e:e0:49:69:31:
         98:11:49:d1:53:f5:5d:3a:f4:d9:a7:ff:7c:1f:c2:8f:ef:a5:
         60:86:71:26:ee:73:36:b0:f1:b1:66:6f:b8:a3:cb:26:e4:fc:
         6b:e3:87:02:c9:b9:fd:9e:90:9e:59:95:0d:cb:e5:81:b8:06:
         e8:b7:0e:42:56:39:bf:28:68:23:10:68:3c:57:6b:93:84:a5:
         a9:6e:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:00 2025 by rpki-client