Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          aZyvRwTI2n81vLVHD35CPXts5+crJiQvTdOKHoWBXiY=
Subject key identifier:   56:61:E9:57:F9:E0:6B:9B:E7:36:9C:0B:5E:07:FC:B4:A0:ED:09:BF
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       0198D583B73086B938033D3BB3A8ADA98ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          16A4
Signing time:             Sat 23 Aug 2025 06:00:35 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:35 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:35 +0000
Files and hashes:         1: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: kFw/o1yERbW9RxVbd4rXq3cUIAYFXC/kNVXjwmJ/8cw=)
                          2: 3bnDZUsDXnEjZmLC2l6TNlR44q0.roa (hash: wvyAIrwBTPizl931rTr7kAFeltcDxlBFhYT3hCElsC8=)
                          3: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (hash: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=)
                          4: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (hash: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=)
                          5: 9Du2tHlplI8cqKMhQkDQrma7ABw.roa (hash: tHZwo/QnwGrZt6X37EyHYtZuWfqyTSrPiMBPcRX5QtA=)
                          6: Asu0DH_A5v7HQJH6cJ--acq6gs4.roa (hash: p83oT8k8StFZXPPk4WZFA6xLSJnWFONbnXX8tMyuY+E=)
                          7: BPwP4_eaRC-ExEMmsEHbE_XcDyk.roa (hash: PuWly/aliHEqwaBp5Lw/IykpWGderMcstp3zqAZSzaU=)
                          8: HkpMpgcE2miG9qn79yi3XbK_pOE.roa (hash: 0Rr449PN12HQpu7nIek/UBDMZP0dQl1SRcWWzh64TnM=)
                          9: JXrXWWEdrlOAxsLEb215YsP36OI.roa (hash: LxUCqn0JmTO3q5jDUwaHYrVbupf5Tpjdv87Nft/gs/M=)
                          10: Loa4kWXHd_gyVar7KKfuCbOTQSI.roa (hash: V+IAftZbMV1uaMDIpq8IX4vqfn+FazLdtHW0Gi6raiE=)
                          11: OiUKYkPvCpqnOXZ9zOVHLonU2AY.roa (hash: Lhbego4QvDRSaxc+Seq5OHB8z3WLSv1waMp2zJgiuoA=)
                          12: PwHMe4i6pz51Ahrp1W-49Rgc_vo.roa (hash: DVJmDnhZvnviJ4n66jT0o+c4DIjAzAehQrpeXl6SGUU=)
                          13: R0cDHc3n2qmMEAUS6woEeV4DrUw.roa (hash: QJ/g2HXWAm89HNayhA1QKb5SEB9BRX6t6S4vbuLEEGQ=)
                          14: RzWktUnWleyuAASpHpH94KSShkY.roa (hash: BoPLXDFgsIgaZzKNJy1XCZ2/akxih7lLoVGkf52tsHE=)
                          15: TKWYs3n3hIoN-hoFqew_mEdXrIo.roa (hash: USDKgLhBpQiNnUXhTAkFdSI2pQG1VTBMCqyXVi79H/o=)
                          16: WfonxlLMZwy-HhCvndkmDlWeP1U.roa (hash: D2to2wlUfQBqZmE9EvBIj/W3y3+jGxVEf6JIb4l/qG8=)
                          17: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (hash: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=)
                          18: fQowbtBwRpKjCzhE3ojDTNtTyaM.roa (hash: 5hmuOcmFlB2Eh4C339cOr4B957mNZCHeN0L/cBjITLk=)
                          19: gL8L6RZ2XqjaOf7a7aVACmgbZKI.roa (hash: kLhGxAypt99j/jO34VpwpOJzvqgyVsGY/56bargYYM8=)
                          20: lGSh8HAGsvLzJWijuCn5mOFbAtA.roa (hash: g6Sdp9SO3zguPzUUGeNhkKmFB7oPgHI90W+QRmIj6bo=)
                          21: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (hash: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=)
                          22: vx0LBPGo6U2A4w4ADzD_udSk_bE.roa (hash: 1BQsFPNT0rTtzolZzu4KuR7RQiaLrcqqi5uIXl00aQQ=)
                          23: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (hash: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=)
                          24: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (hash: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=)
                          25: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (hash: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:b7:30:86:b9:38:03:3d:3b:b3:a8:ad:a9:8e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Aug 23 06:00:35 2025 GMT
            Not After : Aug 24 06:00:35 2025 GMT
        Subject: CN=5661e957f9e06b9be7369c0b5e07fcb4a0ed09bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:67:22:ed:87:28:27:33:89:26:e0:a3:3a:7a:
                    95:88:05:4e:37:4a:c6:52:53:0c:7b:30:ea:4f:d9:
                    96:f1:72:be:fd:43:57:29:be:f9:d6:b9:e9:e6:a9:
                    13:5d:1e:b5:92:d7:a4:c1:a1:eb:95:3c:53:d4:17:
                    dd:37:e8:91:ed:bd:ca:97:d3:c7:15:69:d7:a5:b3:
                    44:10:81:ac:66:3b:29:9a:a1:5e:18:3a:79:19:8d:
                    b1:63:76:9e:b2:62:9c:67:00:78:b7:f5:a0:cf:7b:
                    7a:c0:64:c0:e3:d0:d9:d8:9d:23:0a:14:5f:88:f9:
                    51:79:01:5c:83:6b:87:9f:e6:5b:b4:79:14:5a:3b:
                    60:b1:c7:4e:5e:e5:0d:12:85:e1:76:d2:33:0a:c5:
                    ff:1c:65:47:8b:96:d7:54:35:2f:a5:e3:54:01:e0:
                    74:a1:a9:be:f5:d1:f9:98:9b:4a:d3:35:ba:94:f1:
                    e5:b1:6d:02:d5:84:d1:07:fc:00:c8:b8:9b:ca:27:
                    07:fe:26:94:e6:5e:e8:44:78:71:d2:11:f0:85:52:
                    b7:11:31:e5:ae:8d:b7:a7:0d:91:16:4c:16:26:89:
                    da:72:67:dd:26:1e:45:5b:2b:38:28:80:4a:5f:81:
                    cc:9a:71:b4:5e:9f:74:fc:1d:ed:62:c9:5f:fb:76:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:61:E9:57:F9:E0:6B:9B:E7:36:9C:0B:5E:07:FC:B4:A0:ED:09:BF
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:80:d9:76:fc:8f:6e:52:18:5f:66:48:2d:e9:d2:b6:7a:99:
         30:51:3e:c6:57:5d:c7:b8:ee:33:60:5c:9a:c9:a8:cb:a4:b3:
         68:83:5b:2d:f5:92:9f:47:7d:fd:1d:e0:1b:23:40:ab:95:cd:
         59:77:d6:f1:62:dc:54:77:d3:49:c8:2a:df:70:1e:f8:87:f9:
         da:57:82:93:01:17:4a:0e:04:91:a6:70:be:89:be:06:45:d8:
         df:e6:b4:db:6d:05:44:1c:58:3d:b0:95:06:3f:f9:41:c7:ee:
         39:3f:ef:09:64:2d:c0:59:72:bc:78:91:72:13:45:59:53:63:
         b9:3c:ce:be:3b:7f:9f:f9:7c:1e:dd:49:27:3a:89:4f:e0:43:
         35:bd:58:c4:c1:31:c9:c8:b6:4e:3b:e7:40:d6:fe:67:05:a6:
         4e:72:a4:87:a0:8d:8e:a5:eb:d6:60:a8:fe:6b:9a:e0:4e:38:
         a2:50:17:02:e7:bc:82:fb:07:2a:74:97:77:83:47:96:d8:d4:
         64:73:10:52:16:28:c3:52:5b:60:b1:4a:4f:33:68:e0:e0:65:
         24:4e:9f:f3:29:67:c5:ac:2d:96:a4:32:df:71:d5:7d:e9:cd:
         a1:70:26:ec:b2:60:1b:a7:6a:54:7d:67:c8:5d:60:27:4c:b1:
         f4:51:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:29 2025 by rpki-client