Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          j5UAyBNxo3PhaMpMO7J7WGitlff8Yc3Ro7KPyZx+8oA=
Subject key identifier:   24:C1:4B:61:DD:C7:E7:86:14:37:F2:A7:1B:AC:CD:A9:5C:C6:EE:D7
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       0198808B400240140565CB419493C94CE307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          0F11
Signing time:             Wed 06 Aug 2025 18:01:06 +0000
Manifest this update:     Wed 06 Aug 2025 18:01:06 +0000
Manifest next update:     Thu 07 Aug 2025 18:01:06 +0000
Files and hashes:         1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=)
                          2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=)
                          3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=)
                          4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=)
                          5: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (hash: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=)
                          6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=)
                          7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=)
                          8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: 370w3EoGUEeWcMAdQ4FxuCSDMmNFdUs8Ta4ag/Qm0cU=)
                          9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=)
                          10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=)
                          11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=)
                          12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=)
                          13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=)
                          14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=)
                          15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=)
                          16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=)
                          17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=)
                          18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=)
                          19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=)
                          20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=)
                          21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=)
                          22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=)
                          23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=)
                          24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=)
                          25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=)
                          26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=)
                          27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:40:02:40:14:05:65:cb:41:94:93:c9:4c:e3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Aug  6 18:01:06 2025 GMT
            Not After : Aug  7 18:01:06 2025 GMT
        Subject: CN=24c14b61ddc7e7861437f2a71baccda95cc6eed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f3:fe:cc:da:ae:22:29:51:23:53:7c:bf:e5:
                    1f:06:22:56:dd:a5:cb:67:c3:46:e9:80:dd:7f:5e:
                    6a:59:a7:9a:33:fd:d5:e7:94:af:d9:70:8d:69:ff:
                    2f:c3:3c:4d:0f:28:c7:71:b6:5a:b5:af:f8:e0:b6:
                    77:a0:72:fc:05:50:80:fa:4b:87:f2:48:d3:08:50:
                    ea:a8:2d:74:3d:77:9e:bf:b2:eb:e2:d3:42:0b:1c:
                    e3:b5:b7:fc:e5:68:77:fa:8d:60:29:a2:89:de:3a:
                    49:1b:3c:c5:cc:72:97:c0:36:78:f4:ee:6e:1e:f9:
                    6f:e9:4d:f9:d3:60:60:f0:f0:9c:e9:c8:48:fd:08:
                    d3:0f:02:59:c2:63:69:26:52:a4:e5:9a:01:3f:92:
                    60:d8:65:29:9f:3d:2e:57:12:c2:69:0b:8e:55:f9:
                    cb:48:8a:f3:e5:d2:47:5f:f4:1c:f7:c0:9f:fe:22:
                    08:32:8f:6e:74:35:1b:6a:ed:22:22:2f:38:21:2a:
                    64:75:5a:1c:fc:61:e8:3c:02:a1:18:2f:78:a2:22:
                    e6:6d:d2:d9:36:50:2e:22:ce:7d:d5:b8:5e:fb:7c:
                    63:10:6a:30:fc:60:41:d9:f4:7c:2b:a5:78:9e:8e:
                    22:bd:c7:b4:12:50:b3:98:2a:7b:14:84:ea:0d:a7:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C1:4B:61:DD:C7:E7:86:14:37:F2:A7:1B:AC:CD:A9:5C:C6:EE:D7
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ce:e4:ba:c2:c9:24:91:40:75:fe:42:c6:f4:6d:ef:05:e1:
         87:36:96:1f:e5:8d:f2:7f:ca:ec:af:53:43:bb:30:88:61:6c:
         ce:be:13:31:cd:15:19:71:f3:48:f4:ff:c0:c8:92:c7:59:e2:
         4e:48:d5:b4:6b:4d:62:f1:77:1e:c5:06:d5:bd:32:1f:3e:34:
         88:92:50:d7:9f:08:85:60:6d:06:54:c2:28:a8:a2:da:76:10:
         31:fa:a4:cd:20:15:84:2c:37:24:82:f2:a9:42:6c:28:0b:82:
         4f:c8:a6:53:29:c2:76:4a:fb:54:7a:cd:d7:fd:98:fb:3b:59:
         c0:fd:2b:ab:65:3b:2d:ab:63:8c:d4:b7:08:7a:80:f4:e6:77:
         7d:fc:af:9c:2b:4d:1f:cf:de:58:15:3b:25:ac:a1:5f:47:14:
         eb:1c:cc:16:e9:6a:b3:c6:28:40:f1:9e:0b:34:fd:2f:9c:ee:
         73:ef:2f:b6:8b:ea:87:59:08:20:5f:31:66:ac:e6:52:b5:f2:
         ec:3d:d0:75:88:40:db:2a:4e:2a:25:a1:55:f0:c6:03:3f:98:
         f3:87:9b:72:bb:af:9e:e5:35:00:9b:01:34:0c:9f:8e:93:f7:
         0b:a4:2c:05:e4:16:d2:8a:60:16:9c:2d:c2:84:fb:73:85:7a:
         7b:ce:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:09:41 2025 by rpki-client