Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          4Xa4aGx2lEfuxrKH09wELOHknit6W9OaT1gufJT6hEE=
Subject key identifier:   A3:77:3C:4D:AC:B8:61:02:48:53:ED:CF:D2:77:45:21:90:E3:C3:2F
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       01988A3328F3CE27C553B386E7A70A5BCFF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          0917
Signing time:             Fri 08 Aug 2025 15:01:05 +0000
Manifest this update:     Fri 08 Aug 2025 15:01:05 +0000
Manifest next update:     Sat 09 Aug 2025 15:01:05 +0000
Files and hashes:         1: 1-5_3bDm0VDwkAP81ZPTR8bYgxV8.roa (hash: RzW5Sxa8Ig7ortwok8le/uC8SZCAaYDS0oxlRymBz0Y=)
                          2: 1RgkxaT3trlcWJ_d2Id80-hh7mo.roa (hash: u4inV2GcSC1By83cUxCpIznGqV2yO4zF13YuBN76JRg=)
                          3: 22xPnkQrMRVtQAjJFBfwBXt-g80.roa (hash: AXYvz8bFpW9uTpIheiV0QW7dDbpVv2KWmj64d94yYuU=)
                          4: 3sf5oEr3DlOTew2qu4MNcy3qxZU.roa (hash: ouMQZBbsW6mz86Nimkj2chmQSM3lel6uX4kq3MHuBXo=)
                          5: 3uRkplLO7hdNTmsonRByvLPg9us.roa (hash: /Fhlo0mC/kjn6DqlEuYWxKB1RCedCiV3fwGGd/9C9cA=)
                          6: 7x3gWCXocoFo7Hg7TWha5wGvZTk.roa (hash: K180bZTq9p+t4Sz1GKZQlTGmGWQ/kcLvo4HYhpD25+8=)
                          7: 9iqSmqOmwYolvlUQPEw-4yG9OL0.roa (hash: jVGrDYNyV7dR3JA465skWvos0ET7GjG7Xa+KRRTUxe4=)
                          8: ELu3LuUF_RIVec7Qob2dIFhYU0M.roa (hash: wSf0qPOqXT4taNDWLndlbS/Ta5lAjuq2peZYJn7IxJY=)
                          9: FEpyM5gJNFe4ye5X-a6hHlCsXb4.roa (hash: lMssHyOmtMoqB3eYJsMyXFwkDXBST8uWHzVNWSQIBeI=)
                          10: KpE2iahav8cAforHiyJhcZBcDeQ.roa (hash: bm2F2rOtPCGG/UzA4svmEtDgCm0rSPmxuVbVp4tIlNA=)
                          11: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: lAZ4dXJUbvNBagMGfinewCMCUz08kYtowOMWubi+IMA=)
                          12: Vg1Fwygnu1-Kr8YZhORogfRj0JA.roa (hash: YRNIzo07CRZag59lc/6XkpQk7Z3ZDMo3JfgoSAb+W7c=)
                          13: VuOgcoXRVgGZnVIdFVVIMNuJkfA.roa (hash: eAmrBVrQfiVr9deEdEnjqxiLaOIBgGtZOc+6CJVvJtU=)
                          14: W-Swl_8KeYSfwOJ2jC-Drp0FJoI.roa (hash: /LAVeVuCQImOpPPb3FVNZO/gfTtSkF44Ck+t3G10yts=)
                          15: We2ZtgzVV-o2FaqtR72itzqRcIc.roa (hash: kO199FyJ7RgUqt9rreCO91K7dqx63YjPzKMufwWpwb8=)
                          16: Z7ynKEZFT49c2h-A3q8vc82-UO4.roa (hash: UIJcB+S37Xy5NXQzOgDBFDzdisqdcIk/+8k/cz1TCXw=)
                          17: _7TYsPKESqg9ZhdLg9H_vT2Bl18.roa (hash: KjzGt9xR6o8j3waREEWwOJ/yJVVkFd0w7Czm3/D5T2s=)
                          18: _VAdRV_VkXsQ_PWfO73sjnRDIgE.roa (hash: ddtoBXvOFiOlKSDPEAPrId8rwkKIvGiiLctDa5TjMf8=)
                          19: gN-2hu_naGNmVXKegivJsS1kIXc.roa (hash: o1PX4z3XIVP3ot61yPIhuQe5RAIWSCW6zKPGizaqp0E=)
                          20: gUeaJWZVhJK2kzqKS8HPTZcMU6Y.roa (hash: IOPNa6okOh4KE7VsgGqa6WpCfccJssx+kmLIQ+RGorQ=)
                          21: hfTD3RSdVTwJiDU5IW35Y9GcrR8.roa (hash: 5cNB1VxqtY5x74aWagSm/UmUf1T+t+fFw2+gts0tYOY=)
                          22: lwpTNS4b4qmd5xPcZVQTPn4FMfg.roa (hash: dffK8bAdzimKqM78J5WELOoe3Fs3GVSJCzE2DHH3tkw=)
                          23: n_VaOJr7vRySqZQrlhdcO-3-IeU.roa (hash: GTRXpVgBnyeDGEBaZDZ4AxGx/mBSplpZZWKxLbR7Txc=)
                          24: oZEeWPGfEOsJMw0F9nwHDdVOGRU.roa (hash: HNqkGeGmxCcQK39sTwTcN/DUzfSDSYIs3Ek5YRR36ps=)
                          25: pKJzHpKYsFNmV-pQARI9PPnQ15U.roa (hash: yxnfHnJ8DZMjj/L2CYE9hx9Vl3UpbA4b5cr24ovpjLw=)
                          26: rnTo30gsWuwO_dLuWbTrVdIJXbI.roa (hash: O1AUE4D5gDEKUTAOAFWoLQ4wie/BT4867JZodngFFPY=)
                          27: wDpbmBRWJ1UCIL7XKUDWLgNLdTI.roa (hash: MHCgrz112ammLc0W+Kdx+/NR7ldtHurOuX/nJhBDXPg=)
                          28: wHcAQi8uIPoSNIZEDrB6lp9A4iU.roa (hash: WTw2CPdpDYr7UwLDEjPSvLdXO5lHAaBKc6BFHrkeRHQ=)
                          29: yERAtlQMUNGN4I-K4fblFCD_VQA.roa (hash: WXwLLTulOV3MesWFUlCzyUDyHWdA7LpMqPRdjdqiAik=)
                          30: yXmBLTIEYAILWdo56f_HGk3cTrw.roa (hash: oNx7rrDa3VbMZqs96FQLdjk0oWiSoo47F2rgHZBnWyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:33:28:f3:ce:27:c5:53:b3:86:e7:a7:0a:5b:cf:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Aug  8 15:01:05 2025 GMT
            Not After : Aug  9 15:01:05 2025 GMT
        Subject: CN=a3773c4dacb861024853edcfd277452190e3c32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:1f:41:9e:5f:45:3c:7a:51:c0:51:ff:b1:
                    06:3c:d7:06:5f:21:95:1b:92:ca:4f:b3:9d:76:71:
                    3f:d2:6b:6f:d2:e8:e8:0f:cb:e6:05:97:7b:e0:1f:
                    d0:5c:a1:d1:bb:d6:38:bb:89:d9:ea:06:72:ca:5f:
                    19:e0:0e:82:d0:84:27:a2:31:2a:59:5c:10:bd:66:
                    93:e9:70:39:30:1d:55:76:7c:3c:e9:93:f4:97:48:
                    e7:8b:2f:00:41:85:ba:37:e6:2f:13:2d:24:ab:a7:
                    5b:9f:f7:a4:2f:25:96:da:df:5b:3f:d7:17:d0:b2:
                    ce:c7:d0:4c:c7:b2:3d:a3:22:89:3f:3b:b5:42:d8:
                    2b:cb:99:cb:98:47:cc:00:75:f4:71:d1:3f:46:ad:
                    70:0c:de:88:6c:cf:f8:ce:da:27:b1:03:61:4d:4c:
                    fa:23:35:d5:78:e3:da:4c:26:aa:29:8f:88:93:2e:
                    15:ee:69:e6:01:f2:20:06:d0:6a:74:b2:12:76:fe:
                    52:e8:ec:c5:eb:6e:0c:5c:01:9b:d7:18:3b:d4:a2:
                    45:76:33:f0:d0:18:5b:0b:49:35:ee:56:0e:05:f9:
                    9c:23:8e:8b:c2:c6:63:53:fa:67:59:9d:b3:91:5f:
                    55:fe:fe:23:6f:95:0e:7f:6a:61:89:ec:f0:29:96:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:77:3C:4D:AC:B8:61:02:48:53:ED:CF:D2:77:45:21:90:E3:C3:2F
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c4:71:99:26:08:ce:0b:c6:dc:4e:c1:77:31:d3:ad:48:17:
         22:75:76:f2:32:31:3c:b7:08:fe:84:7c:bc:06:ff:06:a4:c0:
         6d:6c:e0:57:93:ed:c4:9c:b8:b4:99:5c:6d:0e:06:9d:da:69:
         e9:e8:9c:c1:f4:12:47:a0:ac:d6:91:87:c3:7f:38:ef:f3:e5:
         92:06:ea:01:db:db:a9:8b:f4:4b:2a:4a:97:3c:90:1e:68:fa:
         ef:c9:fe:07:3e:17:fd:d5:3a:db:38:37:20:4d:67:29:cf:be:
         ab:46:fc:73:89:bc:b4:33:54:61:32:77:3f:57:76:67:75:4e:
         96:14:41:8e:f6:d1:95:91:18:47:15:02:23:06:f7:1e:60:00:
         bc:b1:c7:10:97:35:a6:ac:cf:ff:3a:f4:58:d4:65:6b:55:f6:
         90:7e:17:a0:d6:ee:bd:d4:5c:a0:dd:35:8a:4f:1d:c9:e8:90:
         0a:c3:b2:f1:79:ab:5c:d7:8c:84:29:1b:12:84:00:61:5d:8c:
         fb:bd:a2:45:7d:42:0f:d3:33:5a:11:81:14:b3:c3:2b:b3:53:
         e2:6b:5c:c1:dc:13:56:80:d9:86:a7:84:7e:b2:a2:f9:d9:99:
         5f:1d:fc:76:d8:ff:d4:7a:be:38:e6:ad:bb:bb:df:14:73:2f:
         99:58:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:52:55 2025 by rpki-client