Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
File:                     Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft (raw, json)
Hash identifier:          I9O4P9wzbJfTITQ2/6qWyslwL5oBfPUs/o560568bX8=
Subject key identifier:   95:61:FC:CA:DB:D7:08:85:48:49:66:C4:E5:79:D5:BF:BF:8C:39:19
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Certificate issuer:       /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial:       019873E1F1ABA454C57551CF59D51FDE70CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
Manifest number:          0583
Signing time:             Mon 04 Aug 2025 07:00:43 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:43 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:43 +0000
Files and hashes:         1: 4ASzv8VWMQYFKDY_-XGCbimJW5s.roa (hash: 4zLzwFIqB9q7XlogNn2GDLJVXFyYSxghGw7cNNnYtt8=)
                          2: 5HV-tkSn-nvaTCJgq2qZMjXXs3I.roa (hash: V4YAUXA1HwXaJ3mud6IQQG1XhWx4lpV0RuNwmpEC5DM=)
                          3: 64k07xHeVqfVk_gc9ks2CvFktaQ.roa (hash: xmm7dCARGCdAJFIRnR9S4+VZk93CY7wzcj0G0mf/7v0=)
                          4: B4_oxATnGbDyQRnpDFsFel2qJro.roa (hash: Eu+Z19cukHF/X5BwY4vJJ3PD89GFZl84ZrwWgUf0Sdc=)
                          5: B627jyelsOrc-4KEk9rr5UX-6bs.roa (hash: emvror6oG2+K4wO+RDr3+Uj+3eP2vVbV6xrjlFdUiWQ=)
                          6: Ba1NqD6_p9vQrWB-kAyp0er5uHU.roa (hash: fRiDqhfW2rBzfJSvdE7QFaE7Ru5cnrq0/b1xWUv4QEU=)
                          7: FJERd9vUT0Kg_8tCO27uUpQBaGo.roa (hash: 12MUnTHhtFQGoQwHqPv1crFdaIeFV1soA/yVgXeNaTs=)
                          8: Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl (hash: 9ksMaDpfQ98YrWy7KDEXiGZWZvJz6z0RS8COFjZZ61Y=)
                          9: K6GiiZJ71L0lYgovFnICdAk-1Ks.roa (hash: 6qHwOyZ8UfE4rkOQqwwP70JdW41FclRsGgCcII3xOE8=)
                          10: M1aqRzQAx0u0GH1aXLjObYZ4Q7k.roa (hash: mN6UichsOlqnG+M84GTpzNqXCEcMKcyFp6FqDGDV0E4=)
                          11: MSXSTFKnAwZwbqobS5_FZAQrg-M.roa (hash: D45Ar0ZBYy4iC6UD1t5qGymD/cKcsHTZdI0FaRgD4/k=)
                          12: PDIQfwBM2G7ffsnUH2YvcCfE3MM.roa (hash: sG/brPxpBzyg1NKJzaV3PK0r4VawovV+khB+BUBPlqs=)
                          13: Sw2GbKoJ8rfrZjEQTkFwYz2FnOg.roa (hash: vokvJGT+Pa2Ai2Kj9IpjJzrJytLkCCqfTkYZIe2tcyQ=)
                          14: VT6si4kLyd6zpNaqVEXQZbgj2Gk.roa (hash: wBULHsK9N7KoZlhMck164GyLKkfZrvnuLnG6dNTvUtU=)
                          15: VyPRPElyLMa64hjFDMtKRmA01ZE.roa (hash: +7F5UqAf5wUUZwuFkWwjFywpzFhfs0Yb0eBzU06/pPY=)
                          16: fL9K7tZGGZ0rxKtEuSAiWj4Rpjg.roa (hash: m3RbbbRnXoZDyJVx1OpTbKRsiAgJOpn/2JivbbReHo0=)
                          17: fmODc7MENEc14rO10yX01KjqK28.roa (hash: uJCEf4lpY599iRYVqaOAvP8jY7fLqVDXB1BusGXHNpw=)
                          18: kvTlBi_B8QrdRGJqo_C6nAXRdfc.roa (hash: 6MLCaYZkCCpTI+u5625D24+Iiiya7eil7hcGEmC1dUY=)
                          19: lU9bl4hVEw5hzibuRIs13xmbj9M.roa (hash: ZUdsZ2gex8weJr9deejWFGIwiEepSjgNX4ZZr24MPDg=)
                          20: moCjhy9MjqXiFgMnAR9Fy5SDHgo.roa (hash: LUnUKR1Zotqdb56mM7OX5qPTEb698XgNZZiSiK3MEOQ=)
                          21: o41yDBZggn4lr9NsPB_Gp8GKfBM.roa (hash: KRnKN0lrEk1hL6MxXIHkfLYCNSrhlEIODabcvB9s1Rk=)
                          22: rC-6_MpLFXNC_yVcHN7bocmTRFo.roa (hash: F2+vYnjsDip5hlFlmE+A+nvZymiYmgHK6+W34puVOf4=)
                          23: rW9xL-Blor3a7KeOFcdz4MZUIZ0.roa (hash: m4NWziBJ7p7f8NFdds1mBjp8BH+ppFVvWoMG+PNQoc4=)
                          24: tWCaBWq3ZgV3-7XX1cWsxbC1zrE.roa (hash: 1GYVtpcVNjgzgm/oYqnREnTQrGZnX2ki31par69caoA=)
                          25: u0kiBRm7lPy40aL5Utg1OzaItA4.roa (hash: dKGxS0Em7PGdI3BmuuAWqogEozKj12mYiRlt25Q1BKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:f1:ab:a4:54:c5:75:51:cf:59:d5:1f:de:70:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
        Validity
            Not Before: Aug  4 07:00:43 2025 GMT
            Not After : Aug  5 07:00:43 2025 GMT
        Subject: CN=9561fccadbd70885484966c4e579d5bfbf8c3919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:9f:5e:29:2a:22:f2:61:84:12:74:2d:27:
                    f7:8a:ed:b3:b8:42:0d:59:ec:62:2a:38:5d:4b:82:
                    9a:67:aa:35:3a:28:0c:0a:48:9f:b5:1f:73:74:ab:
                    d7:00:f5:23:71:fc:53:75:14:5c:8f:88:95:4b:19:
                    10:3b:9a:e8:5c:89:30:f1:d0:b5:da:f7:75:97:3d:
                    f8:e1:e8:30:5b:71:36:e6:9e:10:d1:6d:32:cf:19:
                    17:bb:9c:72:67:7b:fb:51:81:00:b2:63:90:89:16:
                    3c:12:ca:1a:28:9a:1d:76:55:8f:d4:ac:f4:0d:4f:
                    5d:9a:b3:e2:41:e1:ca:7d:da:64:37:ce:c0:8c:28:
                    ce:95:6f:6e:87:30:8b:20:8f:36:c9:3c:f9:b6:9d:
                    3b:ca:2b:95:52:dd:31:d5:2a:ee:1b:41:a5:6f:91:
                    42:e9:aa:59:98:b1:9e:1a:bd:3f:0b:87:0c:b1:c4:
                    76:41:1b:40:7c:5e:99:9c:5d:17:22:e3:ce:3b:e5:
                    97:78:82:95:df:1c:27:24:61:71:0f:2c:be:d0:cd:
                    86:82:c6:51:76:e6:35:38:a2:66:62:3e:23:68:c4:
                    cf:51:de:79:c0:f5:03:38:4f:45:fa:5f:46:e9:73:
                    6a:02:55:b7:7a:1d:94:c0:30:00:3d:c6:b5:be:2f:
                    af:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:61:FC:CA:DB:D7:08:85:48:49:66:C4:E5:79:D5:BF:BF:8C:39:19
            X509v3 Authority Key Identifier:
                keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:97:d4:b1:aa:d4:f5:7e:e9:f9:52:e9:28:62:e0:fc:4b:c4:
         0e:db:3f:83:d2:ea:64:95:2c:4b:30:07:6b:e0:8a:19:76:52:
         c0:72:3f:a2:3a:f0:21:5a:da:26:82:80:9d:a7:e8:4e:e7:6e:
         fe:75:7d:8e:86:c6:9a:7e:94:05:e0:40:1a:d2:39:0d:c5:ce:
         2f:21:c5:be:21:cb:66:06:e3:c5:1e:89:cf:4d:14:ee:c3:7f:
         d6:1b:d4:0f:b4:f9:38:49:d1:0c:86:6e:b8:f9:0f:24:a7:e2:
         2a:91:f4:96:42:fb:d1:62:7a:ee:c7:5b:a0:bb:4c:57:3f:14:
         ee:9c:95:cd:d9:2b:f5:a3:ac:f5:ca:8d:ca:8d:0c:ee:9a:1b:
         3d:66:d5:8e:34:44:5d:e8:5f:4a:52:1d:fb:bf:98:a5:25:3c:
         db:64:65:ca:40:9d:61:67:91:dd:86:db:6f:58:c0:14:11:1b:
         c3:16:30:a4:26:d1:08:4b:30:fb:cd:e6:21:e9:86:c7:8f:80:
         9b:82:0b:15:98:52:ab:13:16:84:99:54:8b:1e:c9:eb:90:87:
         ee:f0:6c:ed:df:38:96:92:6b:5a:19:2d:ab:13:30:a1:06:9d:
         05:79:0b:3f:48:4b:0c:cf:ec:41:f8:52:d6:0a:eb:3c:e6:c7:
         2b:d5:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:23 2025 by rpki-client