Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
File:                     THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json)
Hash identifier:          322V/XC1RAogtTpopuBFYpHJh73tDJNTGrWfgqgOuh0=
Subject key identifier:   25:8F:B9:FF:29:95:72:81:78:49:C1:E4:0D:B2:87:D8:AB:6C:66:15
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Certificate issuer:       /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial:       01987AF6C69AD2281CC0C821D2FC02FCB94A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
Manifest number:          1624
Signing time:             Tue 05 Aug 2025 16:00:49 +0000
Manifest this update:     Tue 05 Aug 2025 16:00:49 +0000
Manifest next update:     Wed 06 Aug 2025 16:00:49 +0000
Files and hashes:         1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=)
                          2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=)
                          3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=)
                          4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=)
                          5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=)
                          6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=)
                          7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=)
                          8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=)
                          9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=)
                          10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=)
                          11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=)
                          12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=)
                          13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: 5czIVBNuDG8hYT3BpR7yhQlGT5I0AJMl7tvv950uvcA=)
                          14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=)
                          15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=)
                          16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=)
                          17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=)
                          18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=)
                          19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=)
                          20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=)
                          21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=)
                          22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=)
                          23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=)
                          24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=)
                          25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=)
                          26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:f6:c6:9a:d2:28:1c:c0:c8:21:d2:fc:02:fc:b9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
        Validity
            Not Before: Aug  5 16:00:49 2025 GMT
            Not After : Aug  6 16:00:49 2025 GMT
        Subject: CN=258fb9ff299572817849c1e40db287d8ab6c6615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:74:cc:00:3b:ee:36:86:a4:6d:a0:62:4e:
                    d8:a5:ac:99:a5:bf:71:0a:6d:6d:7a:9c:46:06:6d:
                    ce:fe:4e:5c:b7:1a:6b:ec:66:c5:41:10:1d:98:cc:
                    6d:a8:7e:0c:37:77:89:2d:10:9f:c3:b8:fd:47:8d:
                    54:45:04:c3:77:d2:da:b2:d7:8b:62:5d:85:f8:79:
                    b4:9e:60:2f:20:17:6b:96:02:e6:60:1f:89:fb:53:
                    09:0b:eb:39:f6:eb:11:e3:1f:7c:3f:88:fc:13:5f:
                    13:db:92:30:b1:21:a7:3e:d3:7b:7a:9d:ef:f8:47:
                    bf:fb:2d:71:c3:f5:9b:a9:d1:94:2c:07:e1:67:db:
                    d5:b7:02:6f:40:42:66:e6:50:03:82:b7:f8:98:ad:
                    45:26:34:62:61:d8:9c:b4:26:27:1c:9e:04:79:a8:
                    71:5f:9d:bb:97:64:d6:ee:38:a2:ed:3c:a4:3b:c6:
                    fa:22:78:03:b8:93:be:e8:1d:93:95:48:dd:9e:9b:
                    8c:aa:d2:08:da:92:ae:8b:81:4f:51:a2:7d:a4:74:
                    e4:79:b6:b1:e9:b0:7b:01:ad:e0:b0:89:6a:44:8d:
                    5a:14:0e:e7:d9:a7:eb:2e:19:cc:99:7b:eb:b1:d7:
                    4f:8b:68:06:be:07:02:45:c6:03:2f:dc:0a:4a:3e:
                    8c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8F:B9:FF:29:95:72:81:78:49:C1:E4:0D:B2:87:D8:AB:6C:66:15
            X509v3 Authority Key Identifier:
                keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:13:38:33:0e:46:de:72:a9:22:53:01:0a:1c:8c:9f:35:c6:
         3f:c1:5e:ad:ed:7e:f9:03:1a:99:55:65:70:7b:23:c0:cf:41:
         32:dc:df:99:e6:45:42:0a:af:7a:9c:77:b9:ba:e8:9c:65:bb:
         db:0c:6f:c0:ba:e7:22:40:0c:0e:fe:24:9b:78:d8:f3:09:26:
         c7:bd:47:6c:aa:87:53:99:ba:3d:73:ff:1a:6c:ea:17:fb:6a:
         c6:06:d8:e1:3f:50:52:7f:33:12:92:fc:81:7f:e6:d8:f9:4c:
         a8:bf:e0:c2:bb:ac:ea:e3:08:85:d6:09:32:4a:f5:37:76:b7:
         46:fe:26:94:ea:b1:01:6c:d2:ea:b9:30:3c:ba:3f:54:35:ec:
         9e:1c:7b:ee:36:0f:21:b9:91:72:b9:ab:70:94:98:43:9a:84:
         a8:e2:93:00:b8:c2:69:70:b6:1c:8c:43:34:d9:04:09:7c:66:
         64:e5:cc:bf:98:1c:be:2a:0f:fe:75:c3:52:eb:c0:d9:ff:43:
         de:ef:a6:cb:2d:83:a8:13:8f:c9:17:8b:3b:64:bc:f7:9c:66:
         a2:f6:0f:c0:a0:9d:b3:ac:98:23:22:03:90:43:f1:5a:9b:1a:
         c0:b8:ec:8a:23:89:8f:2d:20:ed:11:12:b2:9c:85:62:e0:97:
         e9:e6:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:21:18 2025 by rpki-client