Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
File:                     7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json)
Hash identifier:          +RmTpoMNK9gP/uxvWP4+IBwIgxEAPye30McOVIBvdlE=
Subject key identifier:   C1:1C:FD:45:FF:44:EF:14:E8:17:34:31:26:B5:17:78:8E:C6:2D:14
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Certificate issuer:       /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial:       01987F7A0BF331B2BF8317A32783C07E5659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
Manifest number:          1646
Signing time:             Wed 06 Aug 2025 13:02:41 +0000
Manifest this update:     Wed 06 Aug 2025 13:02:41 +0000
Manifest next update:     Thu 07 Aug 2025 13:02:41 +0000
Files and hashes:         1: 1LHZTYTL7zXSNbURJx33AGGJ_jU.roa (hash: ZCVf+uWinCAj5Wsl4w3DRqhhemyGlUb1mHPRd1We1lA=)
                          2: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: 1kxt6gUtBblKf+RsIHjqgpG/1wnEkd8ol8ecVWLIoRQ=)
                          3: A8PVa9vWSAwziXQoA3-_9FI8Klw.roa (hash: XOf6bTSMS9ukvYg53bvOoLSXUdGWB4/jS9MgEcYi5I0=)
                          4: BN6LRrFEJAG-6Bzoq3Z1PsUMgj4.roa (hash: EhHoS/FD/TPZMfKWMnkYMzvxXKRlrokVae/pr8W31Fk=)
                          5: DTFLEZbU53RUxpbGCJ7xpH1wiT4.roa (hash: ijyiWI9NCfuTWvoi057x4Mhna5X/5xBxTCKG7ZnDJYo=)
                          6: EhBwV4ETdq9F_mf3TtRo4dLCK7Q.roa (hash: mC580gxvB3KBFmXIOJyzC5FKQdMNmnwwmoA8fTGfjv0=)
                          7: FLkrvqHmD6eBeMa1h2bO_ZNKhg4.roa (hash: /mPez/L0Vr+EoPocb/dhaqkaLues0KokkJJZezW2ow8=)
                          8: MI904WmPdL5oiRhP7S6FeaCAFak.roa (hash: scgaazBwq6y+Oc9C9eGo0W4xwalauzkyjxbQ4wwwgLU=)
                          9: PRQLZdsK1DQs1qv6M77wqTY-8gE.roa (hash: kluODCNS9Ohs7cHGK+NxzDBwM4XzNPkjizB01UMfLag=)
                          10: Q3_uNhirqJ7Bk9NtXl3eVrdBCzw.roa (hash: 0/Vyhy1R/OkAOBC9blQ+o7238jYUr5Pu0HfZsEBCqFA=)
                          11: RaS1Do31InjbQCFGnTA-YqKnIe4.roa (hash: 6QaZ0lK6HEZVx8vJm4K3nfnSTx8TNZ47FuFw64/BpII=)
                          12: beAFyhqFvuFjdXVUNjFjACkebr4.roa (hash: c4PQ30y59KAo6fg6oopq6KruOFK1py7waXQnLyMtf+A=)
                          13: dZy1uZbY_Aos8S6Eseo9aRlBjgk.roa (hash: EC7IY47xBAWr3k7hTs+1NK5U2ipaAGq2Sy+LIMFTR20=)
                          14: kl36awhzfsop7GgELsEJo3vTqlM.roa (hash: i1Y1Q4V1qiBLr3d5jT6i7TzoPO+NTihTUU++FBZ5ox8=)
                          15: lao8bHeqDQtESMGOKFSeFdxwj-s.roa (hash: elImsTbe0o9ywVCBRni5u407KloMMvHe03FwOzsl4Y8=)
                          16: pZSrV2l3WhVw5oetxkzKTuFut08.roa (hash: OVPrfbWkq15CVQU+AkW9e1dfy6vyOgMcPm5QJ7yajMY=)
                          17: qRvHhsUzZRo3GIbvVdtrbB33RHM.roa (hash: I0ja9Wkg3NaDCO4/Iu1ewOYHJdhLcuLZy6a2WJD503M=)
                          18: s0Jjixe7gcnzh8oekfL-6zeUy5Q.roa (hash: TIYNz1LcI70+SJrW3UzaV1tb56c2tS4JWFrmk3Zw1oo=)
                          19: t18vpttXogOnxguJ7pGpoYLrk2Y.roa (hash: w64HKCyG1jpJ4LOOvXrj2J1OE37lFLFqT6Q1/gy6SUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:7a:0b:f3:31:b2:bf:83:17:a3:27:83:c0:7e:56:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
        Validity
            Not Before: Aug  6 13:02:41 2025 GMT
            Not After : Aug  7 13:02:41 2025 GMT
        Subject: CN=c11cfd45ff44ef14e817343126b517788ec62d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:99:ed:06:b3:ea:21:39:b0:e7:90:d2:40:
                    ae:92:02:73:61:93:28:6e:2d:62:f7:b4:96:10:81:
                    ce:d4:a7:08:d9:40:0d:8c:06:45:03:02:04:13:ab:
                    42:4e:1a:a5:d8:85:12:9a:d4:8c:45:df:38:c8:eb:
                    c8:aa:af:37:dc:11:31:73:5f:8a:46:b0:3d:9e:de:
                    76:de:a4:ac:8d:5d:81:b8:8e:17:39:29:f3:a2:35:
                    e0:bb:2e:c5:10:f5:9c:7a:55:a3:5b:64:29:04:d8:
                    71:1c:56:e3:ea:40:36:b0:a9:06:00:18:6d:2d:be:
                    8d:36:8a:23:2d:92:71:e4:c3:66:90:3d:e4:dd:7e:
                    bc:71:4e:f4:fd:a4:ed:87:4b:8b:94:c3:97:d7:26:
                    8d:fb:94:cf:5b:69:c9:c9:f0:7a:53:61:58:2d:8f:
                    2f:0c:27:6b:31:d9:5b:e1:b6:49:52:00:d8:1d:e7:
                    9a:ab:05:5c:cd:65:2b:ac:89:05:c4:0d:c7:8f:40:
                    7b:3d:27:68:9e:11:7b:f1:b2:bd:da:ff:13:9e:20:
                    a9:c4:14:fa:69:e1:ac:81:f2:67:a3:37:0f:fc:9b:
                    45:24:51:d3:ba:9b:94:f8:80:1b:c1:cd:fc:7c:f8:
                    e1:93:06:be:96:a4:2b:ec:5f:bb:7a:1a:a1:c8:31:
                    e2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1C:FD:45:FF:44:EF:14:E8:17:34:31:26:B5:17:78:8E:C6:2D:14
            X509v3 Authority Key Identifier:
                keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ab:c8:06:20:22:fa:9c:0d:c8:29:6b:d0:e0:00:75:e5:b1:
         e9:a8:9f:9d:77:2e:fe:41:10:9f:04:da:98:91:66:cb:fb:f6:
         aa:45:cf:93:8a:06:49:13:82:fb:46:eb:27:16:15:af:d5:fa:
         ac:ca:af:a5:ff:3f:2f:c0:4e:bf:17:63:1e:57:07:6d:28:a1:
         e5:22:8a:f6:ce:c6:4e:74:c2:9c:64:94:ca:09:09:7f:12:9e:
         e2:37:4c:bb:70:f4:0b:f3:0b:bb:d0:00:55:86:f6:13:f0:12:
         32:60:6d:8b:a5:06:29:42:b1:a9:13:89:52:37:ca:a0:c1:1d:
         96:ec:c9:a0:7e:51:93:53:8a:c2:27:9e:ef:fa:53:4e:4a:33:
         17:0c:d7:00:ba:75:61:2b:b0:34:9d:bc:b2:e5:2f:b1:be:53:
         0f:22:2d:5c:ff:f3:2c:5e:e0:74:f5:e4:e1:b0:44:89:26:20:
         35:11:49:09:04:6a:a9:17:2f:6d:c0:7e:8f:6a:29:e8:c9:3f:
         99:64:d9:32:f6:fd:9b:1b:04:06:6a:31:10:65:f1:ac:8a:78:
         1d:3d:56:3a:4a:94:11:12:3d:f8:12:a3:68:d6:01:e8:b6:4a:
         20:f1:90:c9:52:46:e2:87:69:bf:4c:21:ab:54:96:fb:87:47:
         12:a6:5c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/egvzMbK/gxejJ4PAflZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj
NTBkMjAwHhcNMjUwODA2MTMwMjQxWhcNMjUwODA3MTMwMjQxWjAzMTEwLwYDVQQD
EyhjMTFjZmQ0NWZmNDRlZjE0ZTgxNzM0MzEyNmI1MTc3ODhlYzYyZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmyZ7Qaz6iE5sOeQ0kCukgJzYZMo
bi1i97SWEIHO1KcI2UANjAZFAwIEE6tCThql2IUSmtSMRd84yOvIqq833BExc1+K
RrA9nt523qSsjV2BuI4XOSnzojXguy7FEPWcelWjW2QpBNhxHFbj6kA2sKkGABht
Lb6NNoojLZJx5MNmkD3k3X68cU70/aTth0uLlMOX1yaN+5TPW2nJyfB6U2FYLY8v
DCdrMdlb4bZJUgDYHeeaqwVczWUrrIkFxA3Hj0B7PSdonhF78bK92v8TniCpxBT6
aeGsgfJnozcP/JtFJFHTupuU+IAbwc38fPjhkwa+lqQr7F+7ehqhyDHicQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEc/UX/RO8U6Bc0MSa1F3iOxi0UMB8GA1UdIwQY
MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt
YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2
LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6vIBiAi
+pwNyClr0OAAdeWx6aifnXcu/kEQnwTamJFmy/v2qkXPk4oGSROC+0brJxYVr9X6
rMqvpf8/L8BOvxdjHlcHbSih5SKK9s7GTnTCnGSUygkJfxKe4jdMu3D0C/MLu9AA
VYb2E/ASMmBti6UGKUKxqROJUjfKoMEdluzJoH5Rk1OKwiee7/pTTkozFwzXALp1
YSuwNJ28suUvsb5TDyItXP/zLF7gdPXk4bBEiSYgNRFJCQRqqRcvbcB+j2op6Mk/
mWTZMvb9mxsEBmoxEGXxrIp4HT1WOkqUERI9+BKjaNYB6LZKIPGQyVJG4odpv0wh
q1SW+4dHEqZcFA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:06:07 2025 by rpki-client