Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
File:                     10cBdWTHEby9V2gKDf0A8qXQmds.mft (raw, json)
Hash identifier:          IasBb4mY3RuQ3fwN0K2U6pKZLUCMO3RxLodx6Ma6jHc=
Subject key identifier:   E9:13:45:33:17:E1:26:60:27:36:4A:29:DF:F4:A3:1E:D0:48:34:AC
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       01987450A3F3C837F8F0F651C380A2C3DA6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
Manifest number:          16B8
Signing time:             Mon 04 Aug 2025 09:01:38 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:38 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:38 +0000
Files and hashes:         1: 10cBdWTHEby9V2gKDf0A8qXQmds.crl (hash: 7M41z56+200KqrAAIbW3MXCt5SX92WUegL7QAsjK6Ak=)
                          2: 1L7Y6OLDRX8ATBT4-mV96SZ6FOU.roa (hash: m8wwCwecp0KG21zfw+PHnUnhiPotAg/Kcldtw5QJnwI=)
                          3: 6BXLX0LH6IoFnVEgmeTmnjk3sTM.roa (hash: qSzWqPlKHdtkFhY0N3iiqf+44mjD24bSbWGh/QepF9U=)
                          4: 7DLgW1_AEJnFRBnMP9DUZFvxjOk.roa (hash: raPeEfqiYW57HqMcse3rmHrWriulB1kH4YGu8bRaYZQ=)
                          5: 7fJvelaeWRPaeeOqQiVdqp5Exxc.roa (hash: u3Jlx57PaTOE1SJ38utPoD5WJWb3hvAAlv0+GWsZJkE=)
                          6: CjTVhDRUdYeYGpfw19vf8IdBcu4.roa (hash: mdffuqPdTXZApk9676GRStovFZhT4PmFv7pCJJymj+I=)
                          7: DvLbsc5ECTtzWXwAHat2lS2CmCQ.roa (hash: 27SjmQLahfEV8/oOJ8A2X0mKS+LdBuzCoqfA36DRon0=)
                          8: E8kn7aEukt3A02XfkuhthKBKbNM.roa (hash: Tt0umHn7tFpaKFeQtx4HB3IwGyxvBq1weMf6aMmIN9c=)
                          9: Gu4fdtI6ifLBZoBrWirD7Lk31YI.roa (hash: 6g02bbz7+35Jk54vCdrzHk533LcEU45qtdmE3cJZevQ=)
                          10: Jv8CRfjds1b_ZfNR_DA8H4cnRe4.roa (hash: 73nQMY7oUme6InpZuiFQ8pzh3gvcuZ+jCA6e3CNfQE4=)
                          11: JxvXv1SK_8H7hNIOu3azheEUN_c.roa (hash: x34KV2+MPw2bH9bEpIO2qyGptTiGLHv6QYjhlgGztgA=)
                          12: LmQkPTctK2jSGiSfsndjKmsIN1s.roa (hash: nFCXSPzYZ400StRreKtw2z+wi7uGbR4CjXlF+FAF7u4=)
                          13: R4plGPMvWUjpa9aukliAnhzGe2A.roa (hash: oscewSfDrM/B93KPAN0LoRkJw9vGJj8ctioIUb2phK4=)
                          14: Wo7cBKbAs9u8S4SVJ3-l67jGwYM.roa (hash: oKk2du3XesafVCaeuT8l0tzTai4bCgh0qNTFPpfoKhU=)
                          15: akkUXfA8yjmbAbge7T9s-UuKdck.roa (hash: bTuwJwUzkex/N9xt02kabUmVlqjLA6HLXLMaFWG1Vj4=)
                          16: dKYMWOSuDbDzG_55PxQ6zWUGjo4.roa (hash: jx6o6656P1/2uAu6tNuMhpveGEMTalzlqd0P2gLiCYA=)
                          17: dT4eKxKuiMlejujStpkeBlqhlOM.roa (hash: jTmPsaj5YAbHSTlj3nB1Krnj3ip2XzfaIfy6VeLkbfc=)
                          18: eXmLXScgkQlZFJY2owYgI3HJtns.roa (hash: aE7sjemkm9QvnBnknfgKs5kPN5UFKUUkPmfsuOVG/yw=)
                          19: gIUxN2GBsUoK8BYbrzLOZ4zooEs.roa (hash: NGAW89R8AdDYifyIj10//HgW4r1O80XD0St/aLijhJg=)
                          20: gL5Y2iWE_ZCPNJrNlSdtKJmjg2o.roa (hash: wCggpARdDyZ/wAC1b4ExDASBW4uAEwHa8r5dk7EAX70=)
                          21: iPBzS_uwUzrjrIw4HXWeXeuGKQk.roa (hash: YuRhgQ6UmgVdtdBtX9QYtthLyJmtsPqkTXpg5SmzCCs=)
                          22: itabYXi3irEL53byV06jkZ3aC48.roa (hash: QjaQucmPtw8duEVnsbQImiTK3kNOasMc0swqbwK8Lu8=)
                          23: v7T9_oyFYAPN_vUJUuEgZ_WQNJI.roa (hash: XchZv6OupInQB4mmV3EszoeFc599qe/XG+jbFEKYskA=)
                          24: zZcPwXd3-9CVbOi6b88i7sOrBco.roa (hash: 2GF7Rjb8NN/bKnG12nbz2lxITDWGz7Whf8AG3sw8XcQ=)
                          25: zhUAhL2EdvfFS-YlGh5Iqcos6Ww.roa (hash: gyYfNwxUTJ6w/PF/66IV9SQklQuOl14GHolxHTxn8Mk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:a3:f3:c8:37:f8:f0:f6:51:c3:80:a2:c3:da:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: Aug  4 09:01:38 2025 GMT
            Not After : Aug  5 09:01:38 2025 GMT
        Subject: CN=e913453317e1266027364a29dff4a31ed04834ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:3d:4f:4e:1c:67:b6:ec:0b:f7:7f:b3:a1:
                    77:5f:6f:03:c2:b2:48:ea:0a:8b:ef:f9:c9:c7:cc:
                    bf:c6:04:12:5d:cc:2a:c1:58:d8:18:db:da:08:66:
                    83:e8:c7:b2:44:81:87:f6:ce:b1:78:69:72:f9:b1:
                    10:98:64:de:54:12:5e:b0:85:46:18:d1:d5:a3:f3:
                    fe:5f:58:de:b2:99:cb:10:b0:11:0d:77:d1:25:71:
                    f9:1c:79:81:d3:02:b5:50:61:93:e2:ec:c7:8a:2a:
                    a4:86:57:d5:62:52:84:10:b8:b2:40:92:3d:12:eb:
                    b4:87:e1:64:00:a7:71:fc:70:16:53:0c:08:e6:50:
                    10:b9:17:f8:59:fe:3d:35:11:9f:b6:a6:31:40:57:
                    af:52:4c:ad:9b:0c:0f:5d:f1:c5:84:6f:81:09:84:
                    33:f9:0f:b2:87:a0:d3:e2:3e:76:61:e1:f9:e5:bb:
                    46:90:46:73:96:a1:e2:63:1a:52:be:79:70:38:df:
                    31:3c:61:b5:24:11:fa:da:0b:ce:7f:5b:5b:29:41:
                    81:e1:39:e2:65:a5:2b:13:e1:41:f9:bb:ab:d6:8f:
                    e4:82:18:d6:98:dd:08:41:00:0b:05:4f:23:73:99:
                    dc:ac:de:01:39:1f:77:63:fa:d9:99:bf:82:60:ef:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:13:45:33:17:E1:26:60:27:36:4A:29:DF:F4:A3:1E:D0:48:34:AC
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:48:41:b5:96:28:76:55:f8:12:e3:6c:71:9f:94:a1:5b:03:
         ac:fa:3d:1f:22:0a:c3:19:08:09:da:a8:e4:a4:3c:e1:2c:04:
         b1:b4:c7:f2:58:a5:f3:b9:3e:63:fc:ab:2a:dd:f3:48:fb:d7:
         97:43:56:b0:f7:3c:93:fd:e4:74:8b:13:1b:22:27:69:8c:89:
         2e:96:25:5b:1b:e1:1f:43:84:ea:4c:bd:52:7b:03:92:c9:40:
         77:13:e4:7b:22:f6:fa:a2:85:87:95:20:88:9b:ce:30:07:4f:
         cf:17:ad:2e:40:6f:3e:43:38:bd:cc:fd:c6:86:05:7b:91:c1:
         7f:04:91:82:25:6c:0e:aa:6f:19:84:46:4f:f0:5b:86:db:67:
         fd:92:28:6b:0b:a9:3a:73:ca:8b:48:dd:3f:24:b8:46:aa:60:
         06:9f:a5:d6:f2:1b:cb:a7:69:3e:db:3b:2c:0b:18:83:cf:66:
         cc:9e:1a:80:93:10:7b:34:21:d6:bf:fc:38:87:59:89:12:05:
         22:a5:89:52:4b:14:0c:9e:19:34:75:5a:13:ab:4a:8c:58:c8:
         41:61:e8:c7:14:e2:b5:dd:d4:7b:29:fb:15:80:73:0c:9a:6e:
         9f:2c:f5:bb:d0:42:70:d5:7c:05:e9:91:c3:34:a2:f3:b4:8f:
         5f:b8:d5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:11 2025 by rpki-client