Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File:                     mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier:          xq4qGQfXvnTC0OXFWLwrQE1qmruXD6/gLzB35v6SaS4=
Subject key identifier:   04:E9:01:36:ED:5D:49:06:45:1F:81:B0:CE:6A:44:DB:41:13:4C:45
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       019871F36F24BD8635C056B40A0762088E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number:          101A
Signing time:             Sun 03 Aug 2025 22:00:35 +0000
Manifest this update:     Sun 03 Aug 2025 22:00:35 +0000
Manifest next update:     Mon 04 Aug 2025 22:00:35 +0000
Files and hashes:         1: 9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa (hash: Hm59eKak2mRBLnGzAb7+vw2g+CNCplTmTg9aukFT0JE=)
                          2: Cm5DqrbsctqFvXQRRyRwNPG00IY.roa (hash: O06PA3Ks3knW3J57m8lSN/Hv9kQ6nHGAf+goTnk1j04=)
                          3: FPzxN2ymmUH78y5haV0PaZXdLVY.roa (hash: DdUQ7lpUro6lEFuSiN9fKQg9b9UllNMKrwO6ynxkjos=)
                          4: JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa (hash: kV6T9GvL2JmIx9RKefMlHDbvnYr8DiGL3xFPvQ3Jx8U=)
                          5: JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa (hash: ucBbFh4z7Smi+4uRRA6FLN/GqDjNQS+yFNEoMPGwvug=)
                          6: VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa (hash: onaEyOz4ocmnu3HOOu4gakiggdji6MdLGBGGPS11inY=)
                          7: ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa (hash: WTUxj+sidK096ykp4PAhTaXWq6bYZtjXmE5iUhcAutU=)
                          8: a0GKpzKa2l-eFBlKQIWeWorMYWE.roa (hash: ToDMarZPFqTg+Vik2NKe1VnAgzMIR0HHOC5Xh17RUK0=)
                          9: aEXJ-GLDzjyP60FhTQdWJ8Fvt7E.roa (hash: 0YpF7CPYi6PyoAg9TvQlat07FWQyIu8cHA137q7nQSc=)
                          10: bmd97yvzsY5Yo2HfnEE_aGsiLVw.roa (hash: rBbiHBTIds8AVFd6SWdPqBeLyfTxB+l6zirCVR5u1u4=)
                          11: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: YZmwVx7jir36roLxmCzdXv1/c7qN49ttxr6KPKauqKc=)
                          12: pygxQHbvGZKVLzuvUJnRE055Ymk.roa (hash: jTpMpBKEIx8o2FyniDrKdnhuTZAZvNKL8hZwfmfGnMs=)
                          13: qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa (hash: WBI5DwkHHee0G2mSopIcnWotDs7K8/Lvby/GArK324A=)
                          14: vY3Y3etrniGVDWVqa-wGwlb4wOM.roa (hash: 3iBpAllkx0+u9qLlhBtBBscqzISkhr+UuWv9+CbK7ew=)
                          15: yQafrAusZTwTPZBFL3M0qrFQZ04.roa (hash: Bj+Dm5K+2i3MwGi4viuLKNvUn9KDeSK+/ogiA8Pwh18=)
                          16: zsat_Kz6NAhfzEasx4a9lQm7pnc.roa (hash: iKI5HEcwbfP2kx1h4h3ET7Ssp+IpbRLbrY2f8G6eDr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:71:f3:6f:24:bd:86:35:c0:56:b4:0a:07:62:08:8e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Aug  3 22:00:35 2025 GMT
            Not After : Aug  4 22:00:35 2025 GMT
        Subject: CN=04e90136ed5d4906451f81b0ce6a44db41134c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a4:98:1f:e8:6a:c5:56:35:cc:99:51:0f:b1:
                    50:bf:71:38:b6:57:56:37:ee:5f:c3:d7:10:a9:33:
                    f1:5c:85:1c:7d:d0:33:a0:eb:bb:1c:79:7a:6d:09:
                    46:cb:59:c3:b9:4b:49:8a:db:94:b9:9d:23:1d:43:
                    8d:b1:f5:bf:23:1e:8d:c7:5b:eb:a5:c4:e1:04:f5:
                    86:1e:14:ea:6a:ba:e1:50:a0:44:61:f3:57:83:85:
                    f7:19:03:c8:cc:ce:db:41:fb:22:6c:a7:1c:80:2c:
                    6c:66:db:1a:48:52:2a:cd:82:86:7e:e9:0a:07:d8:
                    14:df:e3:54:44:49:19:d4:41:d0:f7:70:60:b7:1e:
                    cb:84:56:58:c7:df:5d:52:05:a1:71:6e:52:0f:ac:
                    57:fc:ce:c8:0d:ad:83:df:52:0a:f6:d8:da:38:be:
                    77:6f:85:dd:4b:88:2f:d8:04:0a:6c:fd:d6:77:8c:
                    f7:4d:eb:1c:e4:3c:bc:9d:73:b7:ff:3a:24:f0:e0:
                    ab:d2:25:e1:5f:9c:38:47:57:f3:34:6c:43:f1:2f:
                    d7:67:a3:f9:30:12:35:db:f8:a0:ce:4c:77:63:d9:
                    77:1e:fb:bd:48:52:64:0f:55:f2:25:1b:c9:96:cb:
                    b3:b1:92:bb:f3:f3:c9:01:7e:41:be:9a:90:bd:60:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E9:01:36:ED:5D:49:06:45:1F:81:B0:CE:6A:44:DB:41:13:4C:45
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:6c:94:58:e3:18:42:54:fa:94:5e:35:d0:7c:5d:f5:7e:
         a0:49:14:d9:4d:56:e8:a5:66:88:b1:0d:9a:ba:dd:c8:0f:32:
         61:0d:a7:9f:6e:ca:80:f6:1d:d2:aa:30:0c:21:ac:a6:d2:d2:
         94:d4:ef:18:20:f2:bc:08:09:63:05:be:fa:be:a8:2a:4d:05:
         7b:c9:c1:ca:d9:68:1d:6d:91:0f:dd:e4:b3:db:46:ce:a6:0b:
         bd:5a:15:38:2e:29:d7:d9:26:0d:48:d6:8f:14:34:10:16:ce:
         96:d1:0a:56:c6:27:63:7a:4a:d1:54:2c:5e:c0:cc:da:49:74:
         22:5f:6c:89:6d:f6:0a:1f:cb:77:dd:e6:66:de:e8:ff:fa:ca:
         d9:b7:40:7c:0f:27:f6:75:99:f0:bf:40:bf:64:1f:22:76:88:
         30:47:3c:f2:09:af:fa:2d:42:c4:aa:4f:61:0e:47:4a:74:7d:
         d2:4f:c9:15:77:c9:31:17:af:39:94:e3:96:13:26:cc:ee:3b:
         26:86:a4:8a:05:d3:4e:4a:b8:02:b0:87:f8:9c:d1:51:57:8f:
         7c:00:d2:14:f3:b7:44:2c:c0:f9:f9:3c:ce:46:48:35:c5:1c:
         02:99:60:f7:e1:81:cf:94:c0:35:46:12:22:07:63:77:77:9a:
         77:ea:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 03:24:01 2025 by rpki-client