Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          jiZvs1C+l5vI7NKeDBYyxIBu+2uJvf2gQJ8uIZWNKLw=
Subject key identifier:   95:A2:6F:77:44:27:16:1B:3B:C1:99:14:6B:A9:76:77:DD:14:A8:E4
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       0198801D5A7CF76B9BB13E745EEE4F40C879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          1652
Signing time:             Wed 06 Aug 2025 16:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 16:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 16:01:03 +0000
Files and hashes:         1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: Ukv4umIfEVZQjoCbLSvtIACiicFdIaIPxOpqag54BGo=)
                          2: 1U6WyMqsZGid0T3NYQ9DAZ6gJQY.roa (hash: F8XNKrvuc9Q1Nu4SwuceqF3nF6Xwjfiv6CKLGF36N9o=)
                          3: 1kQumq_e6uZMuznoqft2SVzuZ3Q.roa (hash: O5Pgdgj19C5uGPu9CgP8o2xOs0u0sxX5vxusIg1OjbY=)
                          4: AOzgmFptP-TTohv3IqoDSstHBco.roa (hash: E03eZxbf/EuXdLKDt7qVPONNosnX3JMcim9Rf3ahviw=)
                          5: ARYdkedt9hArm1X7hp83_Cg5tpQ.roa (hash: JuBJSBaOkvov17EXCYN32IfgGgf0k5Tgl6lj874nn5w=)
                          6: DF4R54GK1qwRWFDBGUSLGBLlvGQ.roa (hash: hSV4Oh/5jJRGVFTBAtkBDd7jCrElG8uSHu25zzZr1Fg=)
                          7: GkHiDHIr7HTOUId4AyJatL1OA68.roa (hash: ry2bBxXk4C9dBw82DZVtUnDVRsGRjPykl7o+jmf06RM=)
                          8: I5QYvq4IicclfQWoviXNqVkoJ1Y.roa (hash: 5MBWFEJVGuF7S46IjtmTYb6qp1cvuLGpPvqKkXBXql8=)
                          9: JD10CY-i84YcUMqJlGDowbidmN8.roa (hash: XMDhrcZoGK5i42ls2n+Jvun/2Ta8y4audrWdpm2Fv7o=)
                          10: NDTb5wEV6mi4gNG-Fu6rF-wbgiA.roa (hash: NEy4PeHLS5dO/ZjNCa+Z5peBIXcrVaqt3QmALKubiB0=)
                          11: NfUnQ-O42D51XKIYtUM-enrgq28.roa (hash: QhgxpbRg3wpHFfse32zYgTIu0IaNj22usVCm4EOvDbg=)
                          12: NjLk2e2zqXQskhSwEvgc6VrieSE.roa (hash: /tSrJbpm+cVRf2wVaaTrsH5ognA/ZAO3z9nKKazqJL4=)
                          13: Nv12FFJAhm76vmtQvLtk0-qb9uU.roa (hash: GWYX+UV7jTRToJvscvGnDmcfi+hdjE9fs/PSDIO/qXI=)
                          14: P6DmMh6gJbdEiU32OPNgOyp7mCY.roa (hash: 88yaz4q97O5d7cXTtRqRjBiGFSE36MGooJOUALTPCRA=)
                          15: PVvGYWt24uzVlwnsAFMPqAtNvZQ.roa (hash: jUjkhiHyuibAHI/mM+xTuAPWbIQGwY5NVpAGVowuUvU=)
                          16: REFW6rSHBTfRsUnwOYyR16B8o0I.roa (hash: XB70ye/c1KysdH/4/hccAGTbjaBXhCjgy7hTvmJtugk=)
                          17: TFiXnA69SUIjZxShh655vlYs5os.roa (hash: iue8xNO+FBfmf0WBI+KQBXMK4ZDijvqm8QzG1kL5NP4=)
                          18: UL_XqoqGTTWGEVhImq5X-9zOVrE.roa (hash: g+ulsD4HEDP8q2GNuKa/nIFiaIn0ZbF6fYEGT+Sdri0=)
                          19: VWY8XiWq4Jote7W-6rigfrKoiY4.roa (hash: ON7HuggQtcTWGIVCoLH7d6Q/DUJJsZCop+RTdEiL82o=)
                          20: X_FL5W5PaBcXLOauRMxOwRuyYlc.roa (hash: kCKDT8tcDr1dP8XE79tCmIW9bJ4NTTFNxriENFz7kC0=)
                          21: Xdb2GonGqu9DkyPtW1xL_ewg_Bo.roa (hash: GVGr4S1zTr+dNdiuuONrJJ2q6Nn0ihVO0n5qN0zw/pQ=)
                          22: ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa (hash: Tk3A5shWtfiSwwuDcCc68dVXd7yvds9RfjT7MSIEjKQ=)
                          23: _YFT4hVNYyXh4lnoEwOwHf8FvbM.roa (hash: tlgEY6jYUU+UF0+FT6gUJlgYou8+Ams7PkVw5ofCpx4=)
                          24: b77IgHc-0C0Rr_dfvuGtS4avGl0.roa (hash: pUFCLnY0Uuj86mPeajrETTuvcuysKr2jMpqMVsvwa6w=)
                          25: eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa (hash: qJu+C3kZMtw4Lzr4RPWfIIggz4SLZ1MdPm3V0ZSYkCA=)
                          26: grTxe7kxw6ZzaQqpTIbiKf1m4JM.roa (hash: i5OkfeqChX4b5A5gBGr0b6nOiJOg7XT/mMLOR9RIW50=)
                          27: hNrTf4PE5wrSnR7cUGP-FWLvavA.roa (hash: 419lgUmCiB5WepdJkvKnWC8TY9QzFCGf/bRs/Tt6fMo=)
                          28: jGjgrrZS99S21p-SWUxh4Mu200g.roa (hash: AGfkxFmhS8iSd0fKfrph2Uoa9TOCn+77u+u6jCmaLVM=)
                          29: ki55bfqHhRC77pU-EJ0EZN9IsgY.roa (hash: AccLPwD52wvMA4/Hsn0acDKYYBn7x4JHw/P1GwnYSwA=)
                          30: lAsvBALGAB7ffanhsI2XBbzGjwg.roa (hash: Lfmd3jAWkGrnZmmpvbr3VmK27pHIPidZbcCZnfMNIH8=)
                          31: nmXKG7O5Y4Y-3VQd-oJvUHMEIEY.roa (hash: qsL3cjqC+DzRSqTDxZdudYHZ+K/KlZvY/xyn2uR0PZU=)
                          32: skoFlpQBI8LF51NmTT39lnjZrMk.roa (hash: l+MFPkSAFr/Bu/aMzD3WDDtaslazJr/lXcJRueoJtKQ=)
                          33: u3IeL1WtwZrppYb7gzyGvxoAWq4.roa (hash: u4/0Flhb+g2HVbYnU4CFZNSkHaVHi6ldxHLZ21W79Xw=)
                          34: v2MIzwur_YBYLaC93lV_QCNZAkM.roa (hash: i9Txq1PwoSa1dtJUPXYcpynz/2PAkBZiK33z/81vpJw=)
                          35: vVo5jg2GQAZIqK4h2tPzZS3ji70.roa (hash: VyY0O3FHC/dgFA8HrUMfqDla8B1EBlXwEVoR6qUh5T0=)
                          36: xUXBE40oIxonI2rdk7VzQpzz0LE.roa (hash: ntMdjj60VVTzKWDb11pY1Uxeklwz6iMkL+l3QqN6Y/E=)
                          37: xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa (hash: lnF7laQENq7wiyRjfsr7hJCvC1X60Wd/Bj27GtnwCQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:1d:5a:7c:f7:6b:9b:b1:3e:74:5e:ee:4f:40:c8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Aug  6 16:01:03 2025 GMT
            Not After : Aug  7 16:01:03 2025 GMT
        Subject: CN=95a26f774427161b3bc199146ba97677dd14a8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:dc:23:f2:76:12:4c:75:8e:11:cd:4e:e5:
                    63:b2:b7:c4:53:ae:4f:bd:e9:0b:2a:fa:1e:61:b9:
                    e2:97:55:78:aa:09:0a:c1:00:57:71:6d:fe:a5:ea:
                    1a:22:a6:a6:71:9c:01:95:06:a9:31:5d:d2:6a:95:
                    0b:64:7d:99:e1:ab:7e:6b:4e:f8:58:83:e0:1e:f0:
                    87:81:5a:1b:4b:77:82:63:33:65:ce:3b:e6:91:10:
                    7b:d0:b1:81:8c:2b:c4:60:5f:28:c7:61:d3:74:10:
                    a5:05:46:96:77:87:eb:b1:30:6e:01:e3:bd:97:dd:
                    a0:97:d2:74:ab:8d:e5:1a:c6:59:ed:da:e4:28:32:
                    f8:34:fb:b2:25:24:b4:7e:25:c1:b7:9a:88:a6:f2:
                    0d:97:51:98:61:83:fb:d3:8f:f2:35:0d:cf:41:9d:
                    14:69:a9:70:21:7b:59:2b:18:44:16:42:ea:49:fc:
                    8f:62:68:f4:a0:97:61:36:ff:e4:dd:b5:9b:d0:58:
                    87:97:4a:e4:2a:7d:38:93:99:e3:48:83:c9:87:e4:
                    94:34:5d:87:7b:97:cc:0a:36:95:22:9c:47:db:be:
                    dc:60:04:b9:22:89:8b:63:73:c1:b8:6f:be:5e:09:
                    f1:84:b1:f6:f6:64:f9:0d:0a:6c:7b:ae:8a:9c:2c:
                    76:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A2:6F:77:44:27:16:1B:3B:C1:99:14:6B:A9:76:77:DD:14:A8:E4
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:cb:5f:8f:ff:2f:fe:75:5b:cc:f7:3b:c8:eb:90:f5:32:57:
         a4:77:e4:d7:4b:63:8b:5b:8b:4d:ed:44:04:d4:e4:25:c6:25:
         c2:81:20:19:e4:1c:a1:88:29:70:12:e6:d5:6f:47:c6:84:e1:
         c5:93:61:5c:b0:60:c7:bb:16:9a:30:c4:9a:b4:2f:ef:99:86:
         18:fa:bb:69:b0:bb:2b:0f:4f:6c:d4:ce:b6:6f:6f:a2:ea:77:
         55:83:36:74:37:f3:9a:dc:22:0d:7f:44:c8:ac:e6:b0:a8:9c:
         d6:17:18:a9:b3:72:7c:bc:b6:1b:19:d6:b0:fd:01:b6:0e:20:
         a7:76:19:cd:6a:7a:fe:4f:aa:bd:95:f1:a8:98:8b:8a:dd:9a:
         db:08:9c:6f:17:b2:69:ae:16:84:05:49:2d:55:19:3b:48:c8:
         7c:49:59:b8:70:d6:dd:51:e7:8f:7f:a5:36:d0:82:9d:c3:6b:
         ff:0e:d2:b1:41:5b:dc:ff:f7:79:3c:7b:4d:bf:81:50:9a:02:
         1b:e1:83:05:10:f4:ea:2d:01:51:28:31:8f:71:25:1e:ee:87:
         5a:92:45:e8:cd:98:8c:03:a6:c8:0a:69:55:20:3e:29:60:d3:
         68:5e:e0:9d:d9:0c:0c:d8:67:d5:6f:b4:5a:2b:64:17:e6:b4:
         10:c2:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 02:04:17 2025 by rpki-client