Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
File:                     _liVLTk5NfDTvOgU_ZF40EaTrrk.mft (raw, json)
Hash identifier:          dTz4pHgCFeYiyvh7yQBsHHEmtBRJyeV/GIGWAZ2XAiY=
Subject key identifier:   73:2A:48:7B:47:F5:0E:51:70:98:71:79:9F:C8:BA:2E:18:E0:63:E0
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       019873AAC96E143F3C3FF2CC95251A3DA361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
Manifest number:          16B1
Signing time:             Mon 04 Aug 2025 06:00:29 +0000
Manifest this update:     Mon 04 Aug 2025 06:00:29 +0000
Manifest next update:     Tue 05 Aug 2025 06:00:29 +0000
Files and hashes:         1: 0KWI-KG0WB4DWCuGh1gn99tn_N4.roa (hash: h8Vr2MAflmUzVAGtVkIeSE/MSkV47xAfz3GIoaJRtC4=)
                          2: 1-Gozw0B9Es8Qh2XZ6-i72p9hfXs.roa (hash: xTLReM400TQ2Y4MTK4NUap/tADa+H9TQIAaol/LpbHs=)
                          3: 1-c2GPlGgYlbEIZJF6cbTGByqiko.roa (hash: Olvi4llScu/0a4L4oL7XrHFcqesIOSSnG3bFQCyxUcQ=)
                          4: 2NzOCD2bM5a530UIGl2ZsDRbmUU.roa (hash: /+WGidIvg/u0vrSl2pcgEtQoS0FUZmi1tEkbrWlSxL4=)
                          5: 36nSo4IIIhWGblHml9ipRZ22_wQ.roa (hash: GNtMzAbDBSLg8JfQ+kSp8JSTe4JbTsAOb7fb1iMmRSU=)
                          6: 3GfV3-LELKfnUeTQu576_MbUd9E.roa (hash: BFBAfHBwGYmTouYuYf2GmULoSMGxaogtjP30rWRQKUI=)
                          7: 4-EsjAVdf144tiP1S6W0cZWLEr0.roa (hash: aAjI6dZi6XfNi5J1N/GfpcAZ6m9XLEd8XE04/FjSVu4=)
                          8: 4Ji8DRavs3meQw5qrkJFZHXPeDw.roa (hash: rtTItDBA55d0Kg0FoHNSV2Z7809Glolr/J3tN0PwSW0=)
                          9: 4a-oSYp3aib3yKMPfla0gmzArXQ.roa (hash: rpjplvXodVM2Oz/zMSiwY0kn/WwkyWdvI5KreKpNjp4=)
                          10: 8l4FtnLwwdEp2oibbUvL_uIxS9E.roa (hash: LQ2IaIcHgt4i0WPp/lDm2yxGoBa1VH4Xl9eLNEo1qbo=)
                          11: E_vNeWHi7no6xEOD4-IFUETrmhw.roa (hash: XXuZ/UPoimaJVHIFLTndlenANUDBTB2Jl0fZ7dp7Ri0=)
                          12: F-cQvzjqojG98iksKOqY89-HxVM.roa (hash: SAzu/ZYd9aynp8O7I3fVFxtOAPAPfbYe3bEEnXU267Y=)
                          13: FNBtDziAIANjYCRYc4CVRy1nJyc.roa (hash: NocSr/8xiJz7zrZGhIxvMcAwGrGm7wl9mzw5JTfj4Y0=)
                          14: Itb9F8_-lcZ_KdRc5siOEO4H89E.roa (hash: XLIfgStgZc44GKy7d8yA6H23MBSze3hjDW/70wwI9b8=)
                          15: M3_GZcVdFB-kUlBz3CbzHEwugOo.roa (hash: RVTdHVmgLYKRoXRwHS2aSD1uxSSdaXu0WilfMzCHLdQ=)
                          16: MTzVQqg1OQOZqtTFlcpZ2_VnPng.roa (hash: mMR8wNV9W/fVKlAylzczxRufMEEM5D1dkFEiXzkFtBw=)
                          17: N_FJ7OIWFvIW9taFHsA2wT2zVwk.roa (hash: bVU4MMFAW33uimGtPgAQzKj41nvECCYfDukXv4e4p0w=)
                          18: PwrQGIiQo2oQLGMofsy9NAulZOw.roa (hash: hq8SRr3d4IpSTQOcetxXA4f2f+wVNAp0cl14XJ4GrEw=)
                          19: RAQgzMiCS065NlU1iBXwPiswe10.roa (hash: aXxah/bsFSxVRDhTMQldv6sv0nChjGHbx3sNdnqgxzI=)
                          20: RvXRvVyvlekCab9ullONcGuemgo.roa (hash: kILuzxt9RHYWDgEffsiWLl3jeXDJ/TZBIJWTp1FRvsM=)
                          21: TZlH8xzCt20zCEyeG6MLCYd2IPQ.roa (hash: EdbpzRHzj/EHNn1J0iAQt2Be6cT/lRMvLGGcvMYB4Rk=)
                          22: XpvAs6Tt45TMxISWhloT9Wt5rFA.roa (hash: 3RG2rD9Iheegzvp1N+vn8OKiQ4faJt1Nqt7c2kVsNCo=)
                          23: _liVLTk5NfDTvOgU_ZF40EaTrrk.crl (hash: mVm/04wtMDqedoiDHz1BbXE2WhKQYVHvf1LRfJcTnMs=)
                          24: b1p3AKdwPLqrkJYci2kZqlTlQrg.roa (hash: ddzqjQY74zacp/tvyaEpj0INLXIxWWFY2MJGSJry+3Y=)
                          25: bLrjaWwS2p6_EPJ-ceU3YUeuMh0.roa (hash: wUCr5SVxtijlBqQ6/DHn9qElBWNYQMT3sOzhcWqgXSY=)
                          26: db3HfgukjmmWQWomG5hjPb2RuPo.roa (hash: HuerYo1+VOoP0CsA2iW7ovnuNivvJL249xI7Vse7fcY=)
                          27: dsp7kqVP0MzNdwTliVhJeAMNQ1g.roa (hash: OcOQ2uKsSo0YuxZEB31opI6ZblHX6qOV3I408glZcv0=)
                          28: fpZVpVos_kxzIDGYSqNyyRQDttQ.roa (hash: uV1KfcwolyVJ1mOs8l65+H0qhjLwiOsobMQn9rorxTU=)
                          29: gpgP_YmTtsmxlSANAlEYmQOs-r4.roa (hash: MsN3w01I4GAkWG1L2v4xb1q5dQkczXCJIOeH3N8wUHE=)
                          30: hBiwlhhFE44QPsrcqkKUVksncA4.roa (hash: FZdbsMJbgwt6b8G6npHC7QxSGH9CGwXi3IsmuLcEigQ=)
                          31: jPYMTQLhOkUyChhuk3LT0pzGuKw.roa (hash: WZkVzoTHH8bTxovKv17GI4cgaifA5bg30GZLk+9UE6A=)
                          32: jjhX0aIZcT544KCIQyZSn1ZrMgI.roa (hash: KgbdxCj+Lc31A78ghx4EPIuyhJon/0ov16MKkHX+ajU=)
                          33: jmvJtOcai0xSRp6W7XIZ5xVngd8.roa (hash: JgYzfW89S+dSxGLKt+KgW2lDyT5++3g1wGoGMtyKroc=)
                          34: oZM32iF_dXj13arj49Wk-8MpltE.roa (hash: 5tf4bR4lHe0bW1GmHBLlcRANn/eBaErboF4s852Z1mo=)
                          35: qDlh24RbeDVjcAyrQ_STBRImmxI.roa (hash: rXKS63u3mI4gIR/Pn3sZ2MevhW2+Svuk4c2ta1D48BU=)
                          36: qPCt9PHHA0GarUl-Yh1zGcgSUmI.roa (hash: lEoaWY7+8lB8BQWRyHVB/to+pSqQXA3i+f8TwfiT22c=)
                          37: t3Q23vyUdsRo6zct_9jhJ_Jzlak.roa (hash: ak0F1/bwerUUr/wy5VcyV9l0Exrsc+fsCFd6F1NVmME=)
                          38: unY0Pu97DEbw_gaGseuduchpyf8.roa (hash: e/KptEgbgebcoV3ZlHJMNabC0RiZYgba0JXcQXlmWNc=)
                          39: wYj2XX93l48Ok6W1DgazAx4cOqs.roa (hash: h91MsK6joT6C6e1hB/GdrWn534afG+LSY8h0F/FyZ+4=)
                          40: x6qBPAYYkfaf7DSPbFH-pGxnFp0.roa (hash: E2BXuJB6M/883mL2LF+woF4zVIsSXvo4L6HofVg5TPk=)
                          41: yEIzEDNlVYG2U9PRbVP1FLxEQxk.roa (hash: Fv9hIbJ4brwrbURruEtIMtsEQKbTJMPhQX18jUCwWZ4=)
                          42: y_yX2r4gvHvuIbUi0DowIYSNfBg.roa (hash: x14xDtrLZ17AWPiddZKwyfSzNk6zOk9dOft74ZuaztU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:aa:c9:6e:14:3f:3c:3f:f2:cc:95:25:1a:3d:a3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Aug  4 06:00:29 2025 GMT
            Not After : Aug  5 06:00:29 2025 GMT
        Subject: CN=732a487b47f50e51709871799fc8ba2e18e063e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:d1:e8:9d:12:85:e5:3e:e7:83:56:18:ab:
                    cb:03:95:c9:25:87:51:f6:ac:29:e2:d2:a3:9a:ae:
                    3d:71:b3:5c:83:0b:cc:c4:b4:97:19:3b:a3:56:92:
                    95:da:b6:f7:a2:72:43:de:aa:f7:4f:30:e1:d1:4f:
                    a2:c1:e8:53:a0:76:78:2f:31:87:7b:b5:4d:c8:76:
                    bc:3f:ee:9e:8f:76:e6:c9:b1:0d:23:bf:f8:9b:2a:
                    40:cb:8d:9c:25:5c:eb:ed:81:0e:17:43:47:1d:24:
                    3d:cb:52:48:ff:34:bc:95:d4:1b:c1:1b:50:ff:ae:
                    6c:88:39:f6:31:ac:83:95:84:06:23:8a:05:00:46:
                    2c:04:89:51:aa:a7:4a:d0:13:b6:ee:c5:52:b5:c4:
                    3d:67:5b:d2:39:5a:60:fb:28:51:28:eb:49:8a:45:
                    35:19:5b:7d:f6:08:94:8a:5a:1c:9a:b2:4a:d4:a5:
                    98:3e:9d:d9:73:89:f6:09:57:73:97:26:2b:54:e4:
                    ca:f8:44:2b:ac:2d:30:d0:c0:d5:98:cb:bb:e8:c3:
                    6d:07:81:28:17:17:37:f0:ad:eb:92:b8:d4:8c:b2:
                    59:24:12:e9:7f:9f:fd:57:77:82:cb:8a:8e:0c:93:
                    bb:e0:de:4d:ce:e9:fe:d3:cf:e3:b8:a2:c5:8a:d0:
                    bc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:48:7B:47:F5:0E:51:70:98:71:79:9F:C8:BA:2E:18:E0:63:E0
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b8:27:0a:75:29:34:4b:58:c0:18:be:36:a1:46:1e:18:77:
         40:54:73:5e:c9:e0:c2:39:18:4e:16:8a:dc:cb:9f:ac:bd:55:
         46:a4:da:7a:90:cb:15:2b:2b:ae:aa:3b:7f:68:30:d8:51:93:
         03:c1:e9:2b:34:43:9d:b6:95:f5:f3:0b:5f:8d:e9:ed:95:10:
         0b:84:b0:62:0c:66:14:b3:a7:c8:30:6d:53:c5:cb:62:02:13:
         43:f2:eb:5d:f8:0a:cf:99:5e:9f:97:52:5b:1b:e8:18:35:66:
         dd:28:a7:1b:1b:55:9c:e7:a9:1f:88:6b:ce:df:cf:42:c2:6f:
         6a:03:e1:2b:91:6a:64:9c:2e:8e:d2:af:cd:00:b3:5f:ca:c1:
         66:c6:a5:37:34:9b:77:43:2c:76:3f:86:33:32:f0:12:52:01:
         dc:bc:3b:25:a5:ee:d0:ec:65:d1:4e:41:01:dc:d4:ce:17:4c:
         1f:bc:91:50:d3:03:94:82:f5:1a:96:52:e3:65:11:cd:a6:60:
         62:53:07:dd:a6:10:06:d6:4f:c9:87:c4:4b:db:b1:2d:41:e2:
         c2:2b:94:b0:f0:34:ae:e0:ea:58:81:b1:5c:26:06:0c:40:cb:
         6f:58:fb:39:4d:b3:4d:fa:d5:64:f4:ac:8c:82:fc:33:6e:1b:
         f1:42:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:45 2025 by rpki-client