Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          GB57WEm+t9QHa3reHjK/iK+TyBC+aUeaOTfLMIGN26k=
Subject key identifier:   34:37:EA:19:AC:26:BE:7D:50:35:04:78:28:E9:68:31:42:A2:17:73
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       01987BD2BBBF60E70006985C234E68B940F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          0663
Signing time:             Tue 05 Aug 2025 20:01:04 +0000
Manifest this update:     Tue 05 Aug 2025 20:01:04 +0000
Manifest next update:     Wed 06 Aug 2025 20:01:04 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=)
                          3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=)
                          4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: CAOuyd5Qnr8e5U7KRDSM6GHjH1FY4E3VxbxqgdqyBbE=)
                          5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=)
                          6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
                          10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=)
                          21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:bb:bf:60:e7:00:06:98:5c:23:4e:68:b9:40:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Aug  5 20:01:04 2025 GMT
            Not After : Aug  6 20:01:04 2025 GMT
        Subject: CN=3437ea19ac26be7d5035047828e9683142a21773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:56:81:09:04:59:8f:a9:ca:ad:00:d0:cc:
                    4d:1d:24:20:ed:eb:e0:df:be:9a:16:75:f8:1b:8a:
                    3e:b1:93:43:f6:ff:30:31:25:55:f1:4e:b4:31:51:
                    b6:ed:ae:b8:7d:90:58:42:81:97:3c:b5:c5:c8:99:
                    1d:5b:0d:0c:ca:c0:85:27:fe:ea:ee:bb:d6:e7:94:
                    b1:ed:96:fd:c6:15:36:14:96:d3:a0:af:ce:a8:d6:
                    47:50:fd:f2:9e:8e:7b:9f:f4:6a:10:d3:c9:a2:9e:
                    43:7d:0d:6c:4b:d9:f5:3a:b3:32:69:57:d0:ff:f7:
                    36:5b:69:7b:b8:7e:88:23:54:d0:f2:0e:5a:d9:8f:
                    4f:32:ca:15:39:a5:42:0e:6d:f3:5a:f1:12:98:a9:
                    9b:7c:82:6c:7a:89:6f:c8:73:2d:a1:e9:15:0f:9e:
                    73:3f:dc:a8:be:7e:5d:a3:a4:02:99:fb:69:34:69:
                    c0:3d:22:69:26:c7:91:96:b9:96:89:06:c8:a8:35:
                    de:0f:7c:9e:4c:e9:f5:5d:a7:d5:1c:8b:8c:4c:98:
                    cb:a1:15:3f:43:24:52:e8:86:fa:35:8d:57:6c:22:
                    6f:cd:5c:6e:09:71:7d:be:18:56:5a:4d:78:ce:4d:
                    1d:b0:43:f8:16:ff:97:4d:16:41:c5:91:74:dc:53:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:37:EA:19:AC:26:BE:7D:50:35:04:78:28:E9:68:31:42:A2:17:73
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a1:02:67:2e:2e:76:61:f8:18:96:23:c2:a3:21:b5:fb:e5:
         03:84:55:bb:d4:4b:f7:fd:d7:88:ef:ad:6f:ee:9c:3f:e4:76:
         57:72:b2:cc:90:84:d7:3d:d4:7b:e0:ac:15:8b:dc:48:ff:63:
         7b:49:16:77:ce:f5:8d:61:16:33:d5:ae:16:5a:39:8d:aa:b2:
         e5:99:eb:cc:5f:cd:b2:b5:f1:9a:b0:ce:9c:67:f0:93:ff:97:
         8b:09:88:4a:53:de:99:61:7f:0d:bf:ea:10:60:25:44:c0:61:
         94:64:c5:d0:ec:95:e7:d7:51:7c:0d:1d:36:14:41:76:c2:5d:
         7b:f9:8a:9a:c7:4b:84:57:af:02:c4:d7:9d:cf:e9:d7:06:45:
         1f:86:db:e8:d1:3e:06:aa:87:7e:c0:31:93:e9:03:4e:42:06:
         c5:6a:61:8a:56:69:e0:1c:7d:62:89:30:75:94:be:7e:57:5a:
         a6:31:ec:d1:dc:9e:09:bc:b7:23:37:9e:8c:ee:90:14:27:ca:
         ad:ba:d2:31:4e:96:8b:db:c3:5a:fc:e5:31:aa:d1:48:bd:2a:
         f8:43:fe:b4:d0:d1:58:a0:7f:6b:1c:f1:d0:3d:6d:7e:be:99:
         52:55:32:f1:aa:50:73:a4:95:5a:ab:76:79:5e:89:80:27:97:
         9b:72:e5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:42:39 2025 by rpki-client