Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          6I4TjZl4ZFGCxx/VjR5LLCeM00Z7d86eDOqJDbTCqAA=
Subject key identifier:   DF:EE:81:D5:82:AA:B2:4F:FE:9E:54:D6:43:29:09:CA:91:E2:B0:D3
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       0198733CFFB874CE78C7815413F8ABD0C90F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          0E99
Signing time:             Mon 04 Aug 2025 04:00:34 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:34 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:34 +0000
Files and hashes:         1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=)
                          2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=)
                          3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=)
                          4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=)
                          5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=)
                          6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=)
                          7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=)
                          8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=)
                          9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=)
                          10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=)
                          11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=)
                          12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=)
                          13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=)
                          14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=)
                          15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=)
                          16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=)
                          17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=)
                          18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=)
                          19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=)
                          20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=)
                          21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=)
                          22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=)
                          23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=)
                          24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=)
                          25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=)
                          26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=)
                          27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=)
                          28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=)
                          29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: wQQ7xCED2rj0e0DE6BhEsMJJDZz9mL7h5q9So0xd/Os=)
                          30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=)
                          31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=)
                          32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=)
                          33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=)
                          34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=)
                          35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=)
                          36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3c:ff:b8:74:ce:78:c7:81:54:13:f8:ab:d0:c9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Aug  4 04:00:34 2025 GMT
            Not After : Aug  5 04:00:34 2025 GMT
        Subject: CN=dfee81d582aab24ffe9e54d6432909ca91e2b0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:16:5e:36:a6:59:b0:72:ae:00:b8:32:48:
                    c7:05:b2:01:43:90:2b:22:2e:50:06:95:2b:2d:bd:
                    2b:40:2a:f1:b5:16:c1:7d:2c:63:a4:fa:4b:25:43:
                    0d:26:b2:d5:32:35:14:78:92:74:a8:6a:3f:d3:ef:
                    0d:d7:1d:93:be:90:91:89:42:ae:aa:ce:5f:bf:c7:
                    a0:a0:dd:bf:e4:63:7b:73:7e:bd:22:01:7c:1c:b8:
                    c0:5f:c0:17:dd:c4:4f:f0:6e:7b:82:41:ce:b2:42:
                    a9:c2:d6:26:08:8e:f5:07:54:74:b5:ad:0b:d5:00:
                    50:9a:81:83:0b:43:16:e3:20:26:96:06:84:2f:75:
                    67:f0:aa:2f:67:1d:a3:6b:81:2f:5b:25:c9:93:7a:
                    5a:68:6b:40:77:5c:8e:1f:01:85:a4:9b:e0:c6:0b:
                    0f:b9:fb:8f:af:bf:99:bd:90:07:17:7f:03:2e:d6:
                    e1:eb:e6:22:01:b8:f6:f2:09:2a:d5:fd:1d:fd:76:
                    85:f7:e3:6d:87:11:1d:71:6d:6a:c0:6a:be:44:3a:
                    8c:d5:0f:e1:3d:8f:76:31:09:89:09:b4:e6:46:c5:
                    fc:77:17:38:8c:c5:b8:8d:06:10:dc:c9:f6:73:f1:
                    b4:4e:68:62:ff:1b:61:c8:51:12:4f:a3:2b:13:c7:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EE:81:D5:82:AA:B2:4F:FE:9E:54:D6:43:29:09:CA:91:E2:B0:D3
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:25:d3:61:14:4b:87:1b:52:cb:70:c9:65:ec:78:b2:84:61:
         ed:52:b2:3d:1a:7c:82:fe:16:1c:64:59:12:ca:5b:d5:94:76:
         e9:5f:19:8b:c2:31:1c:08:e1:5f:c6:cc:7c:f7:ec:30:7a:2f:
         bd:8c:b6:cd:af:a4:70:4e:4b:4d:93:3c:98:bf:28:f7:f6:b0:
         dc:95:47:13:e8:9a:73:5d:20:50:5c:20:3b:49:14:1d:b7:05:
         0d:c5:77:a2:98:75:7f:4b:7a:2c:0f:80:91:ff:aa:f6:13:1e:
         e6:08:d6:aa:28:9a:00:b8:1c:62:0a:3c:df:a9:f0:76:ff:34:
         15:36:eb:8c:48:ca:a7:ea:2a:d5:8d:5a:c2:81:06:9d:2d:25:
         49:e5:96:78:af:02:c6:51:e5:f8:92:0a:48:23:af:d0:d0:a3:
         6b:39:a0:03:5b:dc:c1:ef:ca:59:93:17:6f:7e:69:ee:2c:af:
         7d:b9:9e:67:7f:3c:bd:35:f3:5d:91:1d:29:74:85:de:50:9f:
         da:a6:59:a9:8a:9d:d6:39:07:f8:61:08:67:2b:ea:1a:d5:a2:
         a6:aa:de:78:a8:06:6d:ce:58:46:d3:7d:90:91:ba:4b:bb:d6:
         62:49:9a:e6:5b:9e:2c:95:23:ee:0e:78:01:ab:b5:29:f5:d9:
         95:98:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:38 2025 by rpki-client