Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
File:                     oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json)
Hash identifier:          jnu22m+dN6H6WWzM5U+bz1iH9Y8e2hcfPjs8tSX9s5w=
Subject key identifier:   E1:E1:67:E5:FD:14:B2:C7:C8:B7:7D:BB:19:1C:4A:15:06:87:AA:D4
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Certificate issuer:       /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial:       019889C504BA74C5028B0437221C821CD56C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
Manifest number:          16F1
Signing time:             Fri 08 Aug 2025 13:00:46 +0000
Manifest this update:     Fri 08 Aug 2025 13:00:46 +0000
Manifest next update:     Sat 09 Aug 2025 13:00:46 +0000
Files and hashes:         1: 0EOjf23f5uNRl8AKwLrSjcuzQ-M.roa (hash: TiKzyeJ1GrbpU3aFoto+cFftuRE3qJmGtPjLqVBjD3g=)
                          2: 2smUB5D8W7tuf_xW5EH9jWoz4DM.roa (hash: rTDJvm0oMNC8IUj5+JS+3prpnZefKwYKD4MK14dTYOE=)
                          3: 3a9lX76bQSJaqMppZTquI9xrjjE.roa (hash: VWrFd9vzYBvgjC7R4dgJGbGdtWDKe+wEQ3MjcA3hJGc=)
                          4: 5srUWfK2Cdi4wHjqlySTWyZ4Low.roa (hash: LNg07RRevBAHX1c+iNg80ZacJiC/7ZrA4U+xATH+Y0g=)
                          5: BkJLBllw1-ZWKgRHqGBiQqbyScY.roa (hash: 0YwDYhFvdzyYfI9IMpPvVCUOj6lVo6a8wPzczBvlz9k=)
                          6: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (hash: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=)
                          7: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (hash: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=)
                          8: FCOv2wASvqJQtZIKiccAO2bxvnc.roa (hash: B9ypN+FqEfvSTJg5rp5zO4aGYGOKJguLQr8AmroSDF8=)
                          9: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (hash: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=)
                          10: IStNe4e6LhEN0WqF0khMmbBnvEQ.roa (hash: SucxZMcCMGO/p9cXrgX+1VRtuUi5NI2PuW6+EwcCJx8=)
                          11: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (hash: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=)
                          12: Khdam5ye6nHBc4YW_yrjL25Chls.roa (hash: zu0nJg15zErx3dxZklgiK5ZzU5CwLzliF0MMLUaHiLs=)
                          13: LIDGUWG6p3GJZZCu1Hpsr5bUXFc.roa (hash: PRox2/jLDeyB3TXExAWa7wQfqJBFS5HwT01/wjYfdq4=)
                          14: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (hash: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=)
                          15: QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa (hash: yheorWCDT9lcE3+NqS0jtyjeSBpJ3B/OD/QoM3nqGc4=)
                          16: R0dlQD847tZZ6Sme0uHqVL1A8SE.roa (hash: aqwVbQ/5C0zR8yt+iaSmmHLJT4dD7bnIMHMb82qWbS4=)
                          17: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (hash: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=)
                          18: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (hash: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=)
                          19: VV3pVQmA3jL8s0bmbKamtZwlCt0.roa (hash: vCwn19zgG2GXQkWTrwcbkBf3n2pPD744DQga4uWIovg=)
                          20: VXguZ1IP4OPQ2wSfFG2Zt-8rRmU.roa (hash: FYCub9tLigFfu6QRGXOsYxtNUaq1jqWty883jSxTd34=)
                          21: YjHZVJXAnKr8xh5R9wmBVaYEgXg.roa (hash: kSLUkCF1fVqfg2Z9iMd8kS34Maa3MeKt4Z6zguLvO/o=)
                          22: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (hash: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=)
                          23: cPYOKrKiYT89IO9upkxHw5ZbR8A.roa (hash: J92jBclwmj0vXUCJUdBwqUYTP+Ud22YvPF211aGRosQ=)
                          24: eLugRLDui958XmylSjkxP3wnTMY.roa (hash: PBCwpuzp3sL6oE89Qyaa4YR3Aa/1ZZavbG6JwYcrhzA=)
                          25: em928uE801tncexTsiwdYgbCyFs.roa (hash: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=)
                          26: fCUGFfWzW4S1F4DnK4n7a0AgUjI.roa (hash: Aef8TeyLWHEX0HhoAhmS5O45O1FHLWTrY+cesMIs6t4=)
                          27: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (hash: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=)
                          28: knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa (hash: dim/8umOJ6epBF/Pi+TF62ZYesagnxCU/L0WDdWu3/o=)
                          29: mygN9EXv15Mv_R2x5EM_di5X8p4.roa (hash: +hnEnqUqGPQ5/+etnnWXKfILgh8ttS98q0vUC8Q5rns=)
                          30: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: zYhvoqYcq8aOAy9f4WR01jlMbBIZxiJlVQZF0pe/qes=)
                          31: q-kzFzWdHxYVd9BrFrKLJ4d0RIQ.roa (hash: GMAkDMrzsWCnVos+xh1WbimGMP/CqMUvIS+tRaFTcOw=)
                          32: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (hash: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=)
                          33: t4_sItGLetnCYeXERod5-ebrm9I.roa (hash: AiOBn1us05R9pPuObBSz8aWjDmfVrdiLt6SCizxK1Rw=)
                          34: vQvAhs3X9SIrwTiZLcGRbLHAse8.roa (hash: NgpNHRkuHeYtV5T9QGV0qWm2Ew38Qqs1VxG+Tb300CI=)
                          35: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (hash: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:c5:04:ba:74:c5:02:8b:04:37:22:1c:82:1c:d5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
        Validity
            Not Before: Aug  8 13:00:46 2025 GMT
            Not After : Aug  9 13:00:46 2025 GMT
        Subject: CN=e1e167e5fd14b2c7c8b77dbb191c4a150687aad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8f:ef:48:f1:4b:bc:55:66:7d:8b:81:2f:04:
                    7e:7b:f7:61:60:df:c6:e2:04:c4:37:55:bf:16:44:
                    4f:1c:f4:c5:18:6c:f0:b1:ef:e4:0c:f6:43:86:94:
                    28:05:bd:06:81:c8:88:ba:b6:be:33:92:c3:ac:11:
                    3c:ad:4b:e5:b1:c2:23:db:0b:59:88:53:18:23:74:
                    d9:ba:a5:46:0b:4d:68:dd:5e:89:a6:3b:8f:f7:2b:
                    db:9e:14:4c:b3:0d:3d:3f:e1:49:84:24:5e:87:a7:
                    80:e1:1b:fa:36:6c:4a:c0:18:18:5e:dc:42:31:a0:
                    d9:14:e6:20:24:41:28:c2:53:f0:80:45:e1:0f:b3:
                    c0:d2:40:43:30:ae:3e:12:59:a9:d2:fb:71:ee:63:
                    6a:ae:4e:a9:88:dd:2e:59:81:7e:28:de:c1:1b:98:
                    62:2f:6f:ea:4a:be:64:44:51:c2:27:a9:aa:a2:8d:
                    6f:a5:ae:7a:99:3d:1a:de:75:98:85:2e:85:50:46:
                    01:86:d7:ad:c9:81:80:2d:6a:da:71:62:0a:fc:ee:
                    ab:51:77:5c:e8:38:0e:21:9a:fd:58:92:d8:4c:7c:
                    94:6e:b1:89:c2:10:d0:36:31:d1:47:4d:88:ed:eb:
                    9f:ae:ad:c9:b7:10:d2:fa:92:37:e2:f5:32:8e:c7:
                    86:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E1:67:E5:FD:14:B2:C7:C8:B7:7D:BB:19:1C:4A:15:06:87:AA:D4
            X509v3 Authority Key Identifier:
                keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:60:fb:2d:b0:2b:db:bf:f5:8f:83:fa:84:b9:53:54:8e:c8:
         51:6e:0a:89:32:de:d6:62:4c:91:06:96:38:7d:8a:2c:81:9d:
         66:8e:df:88:74:c0:b6:45:29:a9:8b:45:46:1b:58:32:aa:51:
         fb:2c:89:31:ef:6f:70:c0:06:89:c1:51:95:00:80:56:df:70:
         72:81:38:40:a4:2a:f0:3b:ad:27:97:eb:af:31:53:b1:af:b1:
         db:06:34:31:78:8e:23:67:8b:0f:75:95:03:5c:a0:3f:6d:f9:
         37:03:1a:c8:22:9f:cf:c9:84:d3:1d:2d:84:d1:28:b5:a4:d2:
         01:09:f2:a5:9b:2e:20:de:0a:3d:e9:09:b1:03:7d:03:34:83:
         47:69:17:7b:b2:69:1d:c4:a3:a1:b7:3a:85:22:d7:e5:a1:5e:
         00:b8:52:8c:ae:d5:93:4b:55:d9:4a:7d:8a:9a:4e:8f:7c:ee:
         b1:b0:15:04:2f:79:71:70:2b:64:4c:29:9e:b8:23:5d:79:4d:
         a5:d8:bd:79:77:f2:28:95:37:9d:01:8a:f3:42:24:f4:a9:54:
         90:14:02:56:dc:d3:15:aa:35:89:16:80:e7:50:e4:f5:17:b7:
         e7:34:c8:79:67:4d:29:b2:f1:9b:3d:c2:a4:a4:c7:6f:36:40:
         5e:10:ac:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:54:21 2025 by rpki-client