Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          Mwpi4nqP2Z8ZHbF8DE5p1mktaLbSHIWIrMzbte3Khs8=
Subject key identifier:   74:AA:EE:60:40:67:1C:9F:68:74:03:59:EB:13:21:35:68:1C:AD:B5
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       0198D515660E279B8EA60EC78F9DED6388A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          16F2
Signing time:             Sat 23 Aug 2025 04:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:06 +0000
Files and hashes:         1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=)
                          2: 0r24pIQSTUD5N5L07GOWGFKPpV8.roa (hash: trXkO9svjCxRC078/qaWkwZVcRw/r/RbNzaK05elAEs=)
                          3: 1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa (hash: jNjeNOA7d8RyKrYy4kXSP0ufCj18S8yCDg4Nofw0dAY=)
                          4: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=)
                          5: KQ1oNR09mKgd5ku7SR1U_e9V9fQ.roa (hash: cs83TD53Tvlf/W2SbQnH3f+S/haNzyXJayHuIXfao20=)
                          6: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=)
                          7: R4JA4ZrzZRT6P7L7s0XA8tBlvow.roa (hash: UZWxFLVEGSwKY6r7vPrE+HW6Om5TTOD3+yQvi0X4C9A=)
                          8: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: SBEziJyWvczgRVMX9FIty1OLkZEtmtNKfvy2InZ/ZPQ=)
                          9: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=)
                          10: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=)
                          11: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=)
                          12: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=)
                          13: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=)
                          14: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=)
                          15: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=)
                          16: iPxdZuzxvDtlhje1pBxfz_ffoSI.roa (hash: 5nZeFKjMPEJbsRI/uBt0UR440fY87EaeHxRz6CkKzyc=)
                          17: igfswpczVEfMjm7rXy2pimjD7X4.roa (hash: hNuYzqad4FMypVvrep7dgecmR/mSIvVwXcEovIMpz3I=)
                          18: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=)
                          19: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=)
                          20: vqrqFiZ6XbejAb9FwHtSr9yQ4m0.roa (hash: T2iIwoNA7Vg78DvVyOs8Q+hHpGA9zpQtyMB17nDMScY=)
                          21: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:66:0e:27:9b:8e:a6:0e:c7:8f:9d:ed:63:88:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Aug 23 04:00:06 2025 GMT
            Not After : Aug 24 04:00:06 2025 GMT
        Subject: CN=74aaee6040671c9f68740359eb132135681cadb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:67:52:cb:a2:cf:d3:b1:ad:55:25:6d:fd:
                    54:b8:a2:4f:11:1e:eb:c3:e0:01:6f:80:09:0a:20:
                    42:ce:53:dc:c1:95:8d:a4:a4:fd:85:c6:08:18:c7:
                    b2:9b:7d:37:54:36:30:9f:0c:0f:26:70:7e:1e:de:
                    06:b6:8d:65:df:e8:ab:16:d3:a6:ba:0b:51:19:b0:
                    73:47:46:81:93:ee:51:9e:bc:68:0d:81:2f:93:6e:
                    d0:89:9b:32:44:62:38:59:6d:11:8d:35:31:75:84:
                    41:9a:f3:75:1e:db:b0:b4:ba:de:f9:eb:fe:17:d4:
                    ca:3c:30:c3:64:d6:e9:bb:fe:65:d2:4f:13:b3:e5:
                    de:a6:c2:f6:fc:54:28:95:5e:06:23:7a:da:f0:85:
                    98:ac:bb:c4:af:6c:7f:71:52:50:d2:e5:96:f9:ee:
                    5d:c2:48:e3:11:69:33:e8:ab:cf:33:ac:e1:9a:9e:
                    9e:50:39:c8:bf:45:0d:09:b1:9a:02:40:19:67:ae:
                    22:24:88:d3:10:8b:61:a8:f3:d6:d9:54:ae:b3:21:
                    06:48:9c:dd:b1:78:45:76:52:1d:e3:c0:a4:6f:4f:
                    cc:9c:37:76:f2:2e:49:4c:4e:ff:93:f5:9c:5a:fe:
                    53:03:7e:08:29:02:89:cd:81:54:ab:37:5d:cc:c9:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AA:EE:60:40:67:1C:9F:68:74:03:59:EB:13:21:35:68:1C:AD:B5
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:09:5b:42:48:5d:18:65:c6:c8:f3:1d:c8:a6:3e:9e:80:3c:
         52:dd:3f:cc:b8:fa:92:7c:37:10:75:31:43:d7:d0:9d:af:7a:
         22:24:00:93:90:6a:91:06:3d:38:7c:76:a9:8d:fe:84:74:ec:
         42:1a:3a:fb:bc:4f:3a:8e:d5:83:24:69:24:00:5d:6d:9d:e0:
         78:4c:9d:f9:c6:4a:ef:df:22:8a:65:9a:5c:ac:08:02:13:06:
         35:f7:5a:74:bd:23:55:fd:2b:2b:a3:fa:5b:61:a5:53:d5:fe:
         a1:e9:33:b3:bb:6c:23:0f:6d:9e:b4:ab:22:ae:ce:f0:41:07:
         d9:85:59:4f:13:bd:66:c2:b0:d3:13:91:93:46:f2:34:8d:6f:
         85:e3:0b:f8:e0:af:92:a9:1a:32:de:d1:0e:cf:99:37:dc:61:
         df:0e:e8:74:f2:56:6a:04:10:2a:ca:0f:40:38:46:f7:88:6f:
         15:78:f0:d8:f8:a4:3a:40:9e:0c:27:94:0f:50:a4:d9:53:f7:
         b0:23:78:c5:dc:a1:bb:7d:c3:69:e4:0f:d7:75:5b:ee:91:84:
         13:27:73:80:44:d2:09:d3:ab:3f:f3:d8:68:cd:f6:a3:9f:2f:
         6e:01:5f:68:d0:a9:87:92:25:25:4d:3c:cf:d3:4f:3f:f2:c6:
         19:7e:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:23 2025 by rpki-client