Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
File:                     xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft (raw, json)
Hash identifier:          1znI+QOfPmtVEx3AhzYM9PkDyUXfyS+51sqJMTq/rrA=
Subject key identifier:   74:25:5A:8E:A4:86:25:80:E9:2E:AA:D0:39:1A:8A:31:AB:3A:1A:3B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       0198752BF7BA0DFFCDDEF16C5BD2E4522922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
Manifest number:          16B6
Signing time:             Mon 04 Aug 2025 13:01:12 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:12 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:12 +0000
Files and hashes:         1: 190LxKM5s1ZchW-1QFPWBCXJIzw.roa (hash: i2UBTnCRLZfI59Lc+8ptifYqjvgfC+5cvDv+xCq8UE4=)
                          2: 2hsuL1m1LeKiQyNCkWrEiMOsSQ4.roa (hash: G6zKwZ9ARfBcNvqeMifheKtZPq8hpO3XrWu/vbDqSnc=)
                          3: 2qlsylzgqXhlEayXE9wkcK5qmug.roa (hash: uhfOGYd80G0548JpMljPb9TBOvg2gxGmo4JHGRdJP94=)
                          4: 2ye1nEG00z6xc6qFR23vVFqqhbE.roa (hash: 5i8bdwLHCSUW/WKDF4taP2OB33HmQb50deK5bo+0rqU=)
                          5: 3LguPMqZSd4yhX8NUjzWdmBRih8.roa (hash: Eb00HvIk2TUv6r6+WiaEYLXtmilnavu3rDsG2CRMnkY=)
                          6: 8nzdRByXa6_8dlrWgKf9ECgVADs.roa (hash: VxQagbxVGwG1Dz0dUi7W2+z8A42U9csxDOJUyvPq1/Q=)
                          7: 9GIXqcmPDOQCe6OcRi8fYZeIDJA.roa (hash: LALysLYk2cUV8ywank9MaIcyv6Luq5IysC+FHpnCFCE=)
                          8: Ahr84eZNjYWY2iLRQSZih5fyo8U.roa (hash: Wy69yidMg4yOPUxtA5o5maFsZL4vm+hEqwKZHQwSUzk=)
                          9: ArAhICSanbkeXehKoKQd1V5tguU.roa (hash: 8+a9w0L+HOX6KtVQT5sEhoZJ7WpUWjL5KHUsIh1x6Pg=)
                          10: CBGdvmHeO_3COX6cplZCZhwngZs.roa (hash: O3OMFYB/8GvLwR3QPrNtR+z+RH+vF2NDnwWyjo3F710=)
                          11: DxAtj3XYEDwrU8BaCT6CiYsSNUY.roa (hash: o+UtBmeKh8l5SKFt9b0HSR3AMNSQx+XcOJc2HrXv0/c=)
                          12: FdGsnJ5FLSOd35QGWiCkxWoyevI.roa (hash: f01f4w0Q6I/PDdhyj4RbTWC73/Jl9COa4MGDXGsL49E=)
                          13: JoPVkwQiOa8FMPWXLMwTD8Z5fHM.roa (hash: OK9ChmoGjGac52vxxGBWAKkSK/ouBl0i27ZM3by8gJo=)
                          14: O8pEm_-zc4a3l2oOmaPytNy4TWg.roa (hash: 3g6cRnV9tCnYa+2wT7Y16qVT2YK1kvB1yvGTbTRzptI=)
                          15: OqwJALcrvdGuqMuiUcU6zqsW4N4.roa (hash: WRR6mJj3kerHokaDGtvMoRIWOA703MHG8etcq24MW+g=)
                          16: Q8bzxqfL9riQ0r4sLaG5_WA3KVA.roa (hash: FMoM8vmAiJoQiCyS9ONch1ThZ7gMc02jSpD8vyuSSiM=)
                          17: QBmp01no0zozc61oJgZgkFLuCRM.roa (hash: Qn8BLHhUaOBThtjWeeHJIXBsVvpchtYykKu7xJstcZY=)
                          18: R0HpmWnfk67q4Dq1iqO8vwpWAYI.roa (hash: wziNGqeAwzyFoCjoElw3SGFz2e33vQDW2HjZjdtvkaY=)
                          19: TOwkSF1eSoJ34IlY_sAL_d7dGPQ.roa (hash: qgQJ65sybbMwGBkmkMyc9apxITp5UjZu3/AIRYjPkjQ=)
                          20: TVg5Jq4DNfr68Im8n8Q8n3u044c.roa (hash: Cm8QPhyPTWsiiho20vUMeRkvKIdkDLrtp0LFxyHTphE=)
                          21: UWSU7B8CTQJ64WL1m3Y6D9m-5-I.roa (hash: ZqrOUq2ygIXaHriNfA42kKbOZNd/4pARULEQqbGvaMU=)
                          22: UtqUPWUlOC9y-HXt36lTb06KtcY.roa (hash: uhM4F6abSAnJyS3h08hW4Lm0fNY+5+iX/polZ3equ5E=)
                          23: WcIw6N44wqFmTSYqs2SA02NfAMg.roa (hash: dr9+lLa9vHheKAcwgnQXvyLdvzdSym8f7D33KNvf/iE=)
                          24: XDlyJBFwdLFezb6RcQm4nzRzf7s.roa (hash: 9MqmiX4xDXaJiAH60iCJjk+VCTx/eFVEhHuHV+pr81c=)
                          25: bp9itvd4xpX6vi30qXgEwi5j_Uo.roa (hash: /dew31w6ckgUH8lXPNZF+UTwUD9TWS47g5E5HbIVbQo=)
                          26: cC9A2bHre93z2HHoiKaD3gbhMp8.roa (hash: upiubXGT+kD9pNkA2Lcjupud/SpGpaMLCWgqSaDAuSI=)
                          27: fDEuib_mZ3qZfkE1az0EDj_NR3E.roa (hash: 73YMuFd+/YUrXpnrlnZ9kLlZaPNZZkHXycwBv8GSkpg=)
                          28: fsOnaX4tr6VeXJENVam_r7FGZAQ.roa (hash: hHwUXFYP1l9gP70QmfIy18+VkKqbCEzGkYH7C8X8l0A=)
                          29: hBq6DPEIeY8Yhu3iLZgYcqX86wc.roa (hash: G+wF6iZXun53udNk6xg5sIb/Bo1cfj+jezlEcYlaiX8=)
                          30: l63y35hRh82nc-qWk3eB9bHn_KM.roa (hash: b11mcWefxXYA/2pWdJ3fnWeAI5cFgL/vQOg3VNqp9sg=)
                          31: ls3R7on7JIepLbiaekfxdJdXd2U.roa (hash: Vn4/dA8gyRgDccPfceYEXiQgzMk0CB1sI1OXw6sj8Tw=)
                          32: mNova3WsqOD86eozlCah8ixo0-U.roa (hash: tawcqw6hUcWGQX2dsRM+1JiLekafnjb7jkwLDon7tHg=)
                          33: maPCADcTD0j72xKETkOFhfCf_VM.roa (hash: 9uY37uZRkjCzq9ikmQn0wEUh2D8+w+AywsiqaUxRG64=)
                          34: md7lCwgk9LJmputWOklSB9z83hg.roa (hash: Jb5j3kqdV51LDdKirCOVD1xlgB1FSCucCnzGZEOy8wA=)
                          35: nI7XY0-a0JXQTQKGe5ntvUAU-ws.roa (hash: e4T081508o/3i9gpQHharO/sMRJPndiZMSpliNkCiZ4=)
                          36: nobXS_EDX1u5OLuM3jnkQJc5t54.roa (hash: 735lQDz4Vu7mXLkQ1OEt71c9RAs4JRSb3jvCDTUy3KY=)
                          37: pYrHRRdGKzp7OIe1SUWLYtXcM9Y.roa (hash: OzOY0OrVWczErs4fuxcA3h4F8Ql7jZ/JPJpASVv2l9A=)
                          38: pllOCFFVIDwlf4QnKrgmSx4Ssmg.roa (hash: URJHpCopeVtbF70/Rhbrt1/lAiesGtyfYnYjTgM042E=)
                          39: qyphdMRg48o4QmPXSk_OaaQIYw8.roa (hash: lkUqQM+hYiYzJgtpLKYB/0YXPUyEtY/oiN8P3e71gro=)
                          40: sQfYUVIYHHtUG0H5XWi1hDEq5Z4.roa (hash: yFiBP614tqQIG+YIYZyTbqGdVwZv4LBDmT23q0+YqFE=)
                          41: vkuL6lPvBwnsGG2zqXJ0dKlsd_E.roa (hash: LAjlqkzhQBZUdmq+rtYjKPdKSPlnRizG/dxEUgNDRm0=)
                          42: wOsf5_YOiqUMROpVbJEf3o7jfA4.roa (hash: QdADhbZNLmHZbqqBBd4uzw23qbhlhRtnteRcHUSgzTQ=)
                          43: weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa (hash: SYYKrJWHItEf708CTIE6RnrGdiSwFYKJxi86yfIO4Oo=)
                          44: xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl (hash: ZQFAaekhZqiZNK1gKKwM+nnS5TnQ3Pxi9gnrt282sTc=)
                          45: xrpOvCGfC12GMAtnnGHJXhkwR7Y.roa (hash: aEEfiRXz4HGa7UJO9eyM2i0rPqbuYD7dAcy2y2OVnYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:f7:ba:0d:ff:cd:de:f1:6c:5b:d2:e4:52:29:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Aug  4 13:01:12 2025 GMT
            Not After : Aug  5 13:01:12 2025 GMT
        Subject: CN=74255a8ea4862580e92eaad0391a8a31ab3a1a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:1b:0c:cd:c2:4e:60:8d:3a:50:04:9a:b9:
                    ab:e4:a8:44:73:8e:bb:e0:24:43:e6:55:3a:bf:c1:
                    be:bd:84:1c:56:8a:82:2e:3b:18:fd:14:f2:46:79:
                    d5:aa:41:43:bc:ee:39:d4:a4:ad:76:da:8e:1d:d9:
                    cc:e0:8d:da:3b:f5:e7:63:5b:92:e5:c0:d5:f3:e4:
                    c9:be:e1:2c:72:52:7a:74:47:e1:8f:82:54:8e:a0:
                    fa:b2:6d:a3:f8:69:cf:5b:69:f0:bf:5f:56:c8:a1:
                    8b:8b:37:ee:3a:d4:f4:11:f5:8b:b6:22:e1:f3:3b:
                    9f:aa:f6:59:67:7e:b7:4a:fe:d8:f7:53:85:94:68:
                    4b:ac:87:e8:b6:65:9d:c9:a1:1d:82:6a:14:48:15:
                    a8:08:3e:41:13:08:c1:b4:ea:a0:54:20:50:7a:21:
                    8a:ee:11:46:2c:9c:2d:18:d4:d4:35:37:8d:3e:40:
                    fe:18:b8:b1:8f:54:b1:50:72:94:63:19:14:98:30:
                    ab:62:6c:ac:2f:de:5d:52:18:4d:1d:1f:81:ae:31:
                    8b:bf:e4:eb:ad:ce:ab:46:2f:41:20:8e:5b:3a:74:
                    07:7b:0d:18:8b:60:32:de:9e:ac:8c:0e:9b:98:48:
                    7c:32:f5:29:f4:38:72:37:8b:b6:5d:b1:07:63:99:
                    51:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:25:5A:8E:A4:86:25:80:E9:2E:AA:D0:39:1A:8A:31:AB:3A:1A:3B
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:99:c8:8b:96:63:b3:f2:6b:46:2e:a0:dd:68:11:ca:04:30:
         5b:d7:f1:14:ad:89:eb:ce:5f:19:b2:e6:88:fe:e7:47:1d:da:
         83:ec:4c:57:78:10:f1:a7:ee:17:cd:03:67:e6:ce:5c:66:97:
         11:74:60:28:d7:ef:7c:0d:31:00:24:bc:00:9d:be:d8:02:8d:
         b5:13:75:bc:d2:c5:4b:20:c3:a6:26:27:69:6d:bd:c8:f8:9e:
         0f:af:00:5a:82:d3:40:1b:66:91:98:59:ec:d3:88:d6:0f:be:
         b1:e7:9c:33:78:c8:03:d4:42:a3:61:63:7f:9d:c1:df:e9:4c:
         06:c6:c6:a4:a3:f8:92:ae:ff:cb:90:54:ee:4f:ca:50:dc:67:
         aa:c4:a5:1e:e3:26:90:ea:29:2c:95:f5:75:06:97:ca:04:13:
         bd:c8:96:f7:85:0e:2f:08:6e:bd:81:2d:c5:a8:31:e6:95:43:
         2c:1a:e3:41:39:50:dc:65:53:aa:3e:5a:3b:f1:69:14:cb:80:
         90:42:46:53:ca:aa:cb:c4:e2:b8:40:37:64:f6:04:8b:88:3e:
         1e:35:81:61:47:66:1c:17:7c:54:c6:2b:cd:36:1e:70:ed:0f:
         37:60:f6:01:57:9a:52:27:7e:b0:a6:c5:de:c9:77:9e:6f:09:
         2c:57:cf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:49 2025 by rpki-client