Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
File:                     0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json)
Hash identifier:          RIXCWnntB2HfDKdzQRVvqYu3NPhg95/UC4myfgKn0B4=
Subject key identifier:   E0:98:3E:D3:29:4B:CD:70:3E:F4:C8:CC:3E:C3:5D:11:D4:12:3B:EA
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Certificate issuer:       /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial:       01988AA06D4D2542D81D62A65F534B016618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
Manifest number:          1373
Signing time:             Fri 08 Aug 2025 17:00:26 +0000
Manifest this update:     Fri 08 Aug 2025 17:00:26 +0000
Manifest next update:     Sat 09 Aug 2025 17:00:26 +0000
Files and hashes:         1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=)
                          2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: 1D6KVoYhQNFXQRG5MoikL1T8EYVHMM80Foy7n+Oc7Rs=)
                          3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=)
                          4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=)
                          5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=)
                          6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=)
                          7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=)
                          8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=)
                          9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=)
                          10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=)
                          11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=)
                          12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=)
                          13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=)
                          14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=)
                          15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=)
                          16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=)
                          17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=)
                          18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=)
                          19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=)
                          20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=)
                          21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=)
                          22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=)
                          23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=)
                          24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=)
                          25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a0:6d:4d:25:42:d8:1d:62:a6:5f:53:4b:01:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
        Validity
            Not Before: Aug  8 17:00:26 2025 GMT
            Not After : Aug  9 17:00:26 2025 GMT
        Subject: CN=e0983ed3294bcd703ef4c8cc3ec35d11d4123bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:ce:b9:7c:f0:5b:89:49:56:68:47:7b:41:
                    c3:e5:2a:4f:00:4b:63:b1:8e:39:2a:1a:42:86:64:
                    1a:5e:43:b0:3d:b6:8b:90:9c:d7:9d:f7:38:4a:01:
                    a9:af:88:64:c6:b6:8c:5a:a3:ba:72:e2:79:97:ed:
                    89:9a:e3:44:8b:b5:cc:47:63:79:ac:52:c0:3c:f4:
                    57:cd:c9:17:bb:4a:2e:97:96:7e:75:82:88:d8:e7:
                    e8:51:13:ec:a5:68:51:04:4c:48:de:29:a6:31:76:
                    58:8d:cd:fe:1b:2d:8c:7a:63:b8:06:b8:ae:75:4b:
                    57:2b:99:46:25:20:08:dd:84:0b:e9:21:ac:09:92:
                    00:b6:22:04:b0:19:ab:66:16:63:ce:1e:fd:a3:8d:
                    8d:8f:57:84:6e:d5:b7:59:1d:58:f0:f9:b9:3b:5d:
                    f7:49:2b:4a:30:63:81:b5:a4:21:03:b9:c9:6b:b4:
                    55:bd:56:13:a9:42:f2:22:dd:dd:ed:90:71:f2:93:
                    48:62:37:99:3c:f7:09:76:b4:48:4c:25:71:3e:14:
                    ae:0b:b9:b6:c9:4f:53:26:a9:68:82:78:13:66:b7:
                    1e:a5:78:28:09:68:de:04:47:28:f6:b2:4a:cc:10:
                    9a:01:7a:91:94:4c:87:05:aa:0d:8f:5a:24:ca:cd:
                    6b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:98:3E:D3:29:4B:CD:70:3E:F4:C8:CC:3E:C3:5D:11:D4:12:3B:EA
            X509v3 Authority Key Identifier:
                keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:13:59:72:9b:39:37:23:ad:9f:d5:cf:c5:56:b8:df:de:
         7d:84:1f:17:31:fe:0c:40:be:6f:1e:80:0f:71:5b:f1:25:c1:
         2c:95:43:a0:1c:c1:ad:b4:8d:b8:64:ae:72:34:12:f1:db:7c:
         4c:72:17:2f:aa:a1:e1:61:24:05:79:29:bc:aa:ef:47:7d:4f:
         29:f6:c3:81:27:25:81:96:d3:3f:bc:58:cb:47:47:40:c2:61:
         49:c1:79:79:1a:ac:8a:d9:38:35:7e:53:3e:cf:70:e0:df:2c:
         e2:54:bf:db:1f:a5:8a:a9:b8:fb:9e:a4:2e:c6:de:d0:6d:7d:
         8a:fb:1f:5c:49:9d:e5:fe:5a:ab:53:77:fb:25:5a:c2:ed:00:
         e8:04:28:bb:3f:cf:cb:bd:8e:2d:8b:9f:95:ee:64:64:da:3a:
         3f:5c:f1:18:ab:13:f2:5e:36:b1:25:44:1e:da:12:d4:76:57:
         bb:b3:19:ab:8d:08:42:cf:93:48:0d:77:8b:8a:21:90:4a:2a:
         7f:39:c9:a2:41:32:a0:89:75:65:d7:ab:bb:7c:da:3c:6a:52:
         1f:76:fd:a1:30:57:c9:d4:cc:12:be:90:b2:f5:62:fc:2e:6b:
         d3:98:a6:a1:92:80:0f:a5:96:f4:23:f9:45:d9:3c:ae:cb:f8:
         03:c0:f2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:50 2025 by rpki-client