Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
File:                     Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json)
Hash identifier:          HDjkMP4ACFW+yoKakM9BOuKzFkn+sZX1jL3VV+O5a8E=
Subject key identifier:   2F:1F:A7:ED:15:1B:01:1C:E2:C7:6C:B1:3A:4F:D2:91:CB:A2:C5:85
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Certificate issuer:       /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial:       019872615AAE9F35B8C9474D4AA496B820F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
Manifest number:          0E77
Signing time:             Mon 04 Aug 2025 00:00:39 +0000
Manifest this update:     Mon 04 Aug 2025 00:00:39 +0000
Manifest next update:     Tue 05 Aug 2025 00:00:39 +0000
Files and hashes:         1: 5B4j8yKBhhDvEBdgU40qsGaWwrs.roa (hash: 5SNJTgM1hkc04DigOXVBPbCaLDFxKR5EdZH2q32FFl0=)
                          2: 5cshQDWiETJPEPkneLCI83DOyB8.roa (hash: LIJ1tw2uisCtRY2n9m+RNwJ+29+O3wio1q6NVdwtWkg=)
                          3: A8RTU3pbGtIgr6vqM6RgMhjB6S4.roa (hash: CblthdeWJ0lL4bSVOXyipIfCv+fQM/AOSVpBlIGAJ0A=)
                          4: BIlQDTjBunsd7fPXD6TudWu_EEU.roa (hash: sGVBCV/UPx9VtvJuhPB1KSdcfg28Ma7r663EM0juNak=)
                          5: CBPtnesEfNUTLO83M40v2FLsUKE.roa (hash: gEmKmqEe1iVBq2VtUbZ6sUTHDVd6gLuvblbf8hO0DF0=)
                          6: DGYTbW9Ir9KMBgCraqJM7GTIy4A.roa (hash: Mirl8dOytZmD+kKVHs6j2ofk7bwQ7qZrvcazoL5oyCw=)
                          7: Ee2H6_iXTtyXntUCMAu2AihLvlM.roa (hash: 5YDEWPExFbOSzBtia3HkqBXo/RhuLr3JbgG8/6n6bSE=)
                          8: NeeW1a3OUAE3Ua5ADXdv_S3lRQE.roa (hash: 33Cf2uaphAIB6YphxBLYGntEtiim3urfAS0w6mYeqhc=)
                          9: OoiR-n17kDohxKF4sG9PntPgQTs.roa (hash: Iy2iaD3knFRFm0z6lgIQYM+wnzj2MJQzp2rtlFberlM=)
                          10: SlYMmAICb8HbyGHP_Vnxv-4Fj6w.roa (hash: HgRW+R9snP3UMWLesDAzp78gH6EZAYQYPah0SUB/b8E=)
                          11: SrGEFkRv-kGu56ttKL_qFdN3BDI.roa (hash: 8+ZK+qLWkqsMHYW4gjEPukuA1HuYbjxcqclTJK6q/14=)
                          12: U69EMMQKPz0oXoV_qrCEsQ1OpG4.roa (hash: 9SJk+9pO0ggpn2oUKmNeGSv0g1Nw2b98Tnz7XfaoIII=)
                          13: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (hash: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=)
                          14: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: oVKb+fOtlSJ9iOU71AkXNROE505QAD5Lk+yEZlP5dYw=)
                          15: YwT_q4Kig3_g-NeH9DT3auGxCgo.roa (hash: ZaE3qib+0ral12KqqE3Ve01vVTpIeV1MSx94xxKpbME=)
                          16: ZtIwmuJqF0ZJ2jJC2j2S68PxD6g.roa (hash: J37V1vpVdCUFrybWRqqYzjxV2+eOckvx6e6zW0T0izc=)
                          17: adPQf24hxp0NRP9LVP6lepe7aK4.roa (hash: 5NvcgSyi39N6k9bGG4geItYICvgoSCdwPVGyZgUNKlQ=)
                          18: hE1OEcZdiVTXtSCGk4RAwE5PqIY.roa (hash: 6zzQx71jmNb7/isSS16zRdFvGPrC7dR2HDMdKb/fg/o=)
                          19: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (hash: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:61:5a:ae:9f:35:b8:c9:47:4d:4a:a4:96:b8:20:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
        Validity
            Not Before: Aug  4 00:00:39 2025 GMT
            Not After : Aug  5 00:00:39 2025 GMT
        Subject: CN=2f1fa7ed151b011ce2c76cb13a4fd291cba2c585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:82:fc:50:f5:8e:3f:c7:e8:1c:d0:9f:c8:
                    86:4a:e6:78:14:1e:0f:76:33:ec:5c:7a:ca:5d:6e:
                    91:12:38:c0:eb:5d:77:96:7c:02:84:f1:1f:f3:7a:
                    e9:2f:c6:c4:26:ed:93:f3:4e:8c:72:85:d9:3b:4e:
                    59:ed:21:0c:e0:4d:3a:01:88:40:ed:e2:f8:20:f3:
                    33:3b:84:24:f4:8a:ed:d1:ca:ee:a4:5b:71:e3:9d:
                    9f:2c:d0:7f:4a:c8:cc:1d:2a:67:8c:c1:50:39:0f:
                    45:4a:54:b4:72:05:bb:66:36:3f:c6:bb:82:f8:ff:
                    32:0d:3f:d4:9c:d9:4f:d9:c9:72:0a:87:4c:0d:d5:
                    f1:64:81:97:6a:39:95:e8:4c:df:45:0b:1f:73:71:
                    c8:03:fc:17:31:c7:df:d0:91:ac:e2:0d:e3:e9:5c:
                    be:69:81:e0:5f:93:6a:17:14:98:09:2d:cd:be:6d:
                    7b:5c:11:ab:81:74:b1:38:33:ab:64:19:48:f5:f0:
                    52:0c:c4:37:d4:1d:d8:cb:9c:b8:a7:25:35:82:a6:
                    5d:57:c4:8a:3b:e9:73:0b:44:66:61:a5:5e:d7:8e:
                    dd:3c:83:52:ee:e3:1f:5f:38:06:5a:3e:5f:5e:20:
                    fe:bb:1f:0c:a5:df:29:67:bb:fa:7a:9b:8f:75:2c:
                    87:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1F:A7:ED:15:1B:01:1C:E2:C7:6C:B1:3A:4F:D2:91:CB:A2:C5:85
            X509v3 Authority Key Identifier:
                keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:44:09:67:4f:e7:c6:7a:c2:be:05:ff:1b:57:d9:9d:3a:
         9b:35:5a:ac:68:21:9d:fb:a1:78:be:97:77:d0:df:d1:66:70:
         16:4d:c3:9f:8f:64:6d:93:14:b9:4b:49:39:e2:91:76:be:62:
         a8:b7:a1:9b:51:2e:90:9c:da:7e:16:3f:18:49:65:0d:3e:3c:
         e0:56:c1:f2:65:d7:96:c1:0b:8c:e8:4d:a0:f2:1f:a0:2f:5e:
         b1:cd:10:29:96:d9:02:ad:57:8e:9f:98:8c:f0:cf:de:13:04:
         9d:af:65:bf:0e:12:d6:69:af:2b:31:09:d3:32:0a:a1:97:51:
         5b:6f:2e:9f:e0:a5:16:13:a4:b1:3c:1e:eb:36:0a:5d:9a:88:
         7d:ac:c3:48:ce:8e:13:5d:f0:26:77:2f:7d:9b:42:2e:3e:79:
         ba:86:28:5d:b6:b9:5b:a9:0d:06:52:85:af:03:28:a5:7c:02:
         c4:1a:4c:9b:77:0c:c1:5b:33:29:d1:38:f0:47:22:91:5a:44:
         a7:bd:1c:5a:4f:73:a1:f8:40:74:5b:f1:81:6d:9d:f7:7e:46:
         1b:9b:06:2c:f1:af:55:d0:53:88:21:17:82:39:6c:c2:98:d6:
         65:99:37:07:65:51:fe:a8:36:f4:55:6c:e1:73:e3:9b:c3:ff:
         69:3f:3d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 03:35:35 2025 by rpki-client