Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
File:                     OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json)
Hash identifier:          gcQfvdTtMUgEFYwRLP8iwQUWHn946JkUC/DpAwI1UDw=
Subject key identifier:   48:29:91:11:02:8D:B7:CE:32:DF:E7:0C:25:9C:97:2E:F5:52:3E:14
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Certificate issuer:       /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial:       01989110E02400DD5485DC654AED529BD285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
Manifest number:          1650
Signing time:             Sat 09 Aug 2025 23:00:58 +0000
Manifest this update:     Sat 09 Aug 2025 23:00:58 +0000
Manifest next update:     Sun 10 Aug 2025 23:00:58 +0000
Files and hashes:         1: 6BTZ5AaOEQekUYjUxJjubDiWWfg.roa (hash: Eh6waq+vwtUrAUXpLnHirNMkZ/QKST4EehD+sMDaTTU=)
                          2: 71Dq_p3hxgANLwjWXIYIW1kQwvI.roa (hash: EHVmaPv30nypIUsJLb0qilX75ExyVaga+Rdz8msfOTg=)
                          3: 900joE2kII87-kVZQYJE9AVHaUE.roa (hash: 0o1fmx1wkON/yzQU3eDlgv0XvPCaxuqScr/6FHEDSAU=)
                          4: F7JXtoqYAnfTjuecjcOTuo1qCkw.roa (hash: OEFPqG5xW1fNzTGExyHBZVtQ+HvaVdHh6rDRxCBiNXc=)
                          5: FXMeaT7mqLaeoQKo6gjW0hUo-Kg.roa (hash: ai3NnXxTZaMRdq2X8gaZ6slmnlshdaCfmTM1E9B0TBc=)
                          6: IMZsLst-i3zLkfnvqryos4hVmUw.roa (hash: i5YfMzxIGSy0m8WqoPL2plr7dDe0Vlfs7aCvCgRQqk8=)
                          7: JIOTHuHxMtqBMx5mXgc6EZ3pd2k.roa (hash: DCxRs8r4ffmbTDh+ON4DjiCp8BK/u4NKeBfbW9CrT2I=)
                          8: JLwtTQi8VNVHhaVDu0kN5D34KjI.roa (hash: 8veoK+i1W9Fs1rw5NS+3eYVP4YbxUV5xVG3SSE+qpqo=)
                          9: LWbif0B1GjIE18I7vwELt-c9l-w.roa (hash: d8IrvYkKiZyuhb8k6fQb7RXqEUdNoQvoKy7SfXCWzdQ=)
                          10: Ln8QlB3P0RX7C0x_g97ovwG-MN4.roa (hash: 8wye3Q/ZQvQqLzNWOjfsPRuB58YYCzfOe1zTV5GvyPs=)
                          11: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: XlYznvGGnJwzAmNOJFwUE6Gz+KeiE1eEt5B+Rj9q8q8=)
                          12: RT2actreI4xxkte646TUz02XjFQ.roa (hash: Wy64shTeipgQtErWNwSOYTNCSt9UxR/a78WDAuspKQ4=)
                          13: V9Ig1pXUbN50LMFOuKXdZ5mkCig.roa (hash: y87CF5Ma433/41wTDv6chywUFnZfYbGNq95lOWwWnTA=)
                          14: bpV8b7AtbhXdGFm5LUSeu0J87Js.roa (hash: dlLYGpRMWUx9YdT08Q5m5VPvbiMJH/5+liPq9p5+8YQ=)
                          15: dfVrorkgDXq-b3-QlttQA8sgW4w.roa (hash: 5H66iIzqCMGoksSoQLOuKiVcrRxOIQ4J1jOJkX6At50=)
                          16: hs3PS0PRyRLIwptbOrxYgVXbpUk.roa (hash: EMDVPaUHTTvlVBnvbCHPVNncgqYud935PafdYG6UmCo=)
                          17: kW066m9DXa5QVOUSyinFWrQGR_k.roa (hash: qDkdXP2dueHR9dJeUVzMjqaWnTwJkS158Rm7QFLdZvQ=)
                          18: ljrsKkBLXJvYvcdZuX8JWasQFe4.roa (hash: vBmx7C2e8PSmXtfZdupHaynZdSjLgLaFpSb8R62FCP0=)
                          19: mu7b1tGZ3fBLWT4iPiraLyQmVpw.roa (hash: Ly2x9jR74YwOV4U+ROUU4l7SCpCPjv3zvv96qJ1in/E=)
                          20: nPqUpg1aR7hnc6HTlLtA9BuMCTE.roa (hash: KwhXJO05kwAc7WcWDrPEDKsnvptXZGJFAiZEMHkerdU=)
                          21: nfdXz1IG7b_z6nn3ZM-dFbFrj0o.roa (hash: 16xUnfqni5W44fEXrAqCEswn3RFCkRKYxijUqdQX43o=)
                          22: nkeXVKF6zzQCYL4BHAHTb24meB8.roa (hash: pcIicCRvZsHCwkYq5WwVoVzOQXOI/E6R317Mea33uac=)
                          23: w5_xzg68siU1xwo2TRNx9ptuZUg.roa (hash: dz0710YGDAoK//WB0wD9yVfkTEtuo0ioNy/ODQjxKRM=)
                          24: zMLH0Z0n_ZfTiWpxjWDNCBm8FP0.roa (hash: 1zSkkqDH7rhfTGP6CblxxApp8yosaiHxrLIiFpb9d40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:10:e0:24:00:dd:54:85:dc:65:4a:ed:52:9b:d2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
        Validity
            Not Before: Aug  9 23:00:58 2025 GMT
            Not After : Aug 10 23:00:58 2025 GMT
        Subject: CN=48299111028db7ce32dfe70c259c972ef5523e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:d7:64:bb:ce:6c:d6:46:bd:12:fa:66:d8:
                    c0:47:86:92:5e:e3:df:f2:6d:42:b2:98:3a:9d:86:
                    29:45:e4:bb:e2:50:ae:6a:ec:f8:a4:d8:5a:ae:15:
                    26:84:87:b5:b9:6e:79:f7:a6:99:4a:4c:4f:03:ba:
                    ef:fc:cc:5c:93:c7:a9:90:7f:a1:11:41:75:de:e3:
                    63:b3:bb:b8:79:2b:23:95:c9:dc:ee:71:1f:78:22:
                    f0:d6:84:70:d4:e9:b8:5a:c8:33:bd:42:d0:19:fc:
                    46:4e:2b:de:d1:63:21:47:19:8c:85:8a:76:ce:7a:
                    4e:15:9b:b8:1d:32:b1:87:9b:7a:12:93:47:eb:1d:
                    8f:96:64:1c:39:09:12:be:f4:51:46:50:60:da:48:
                    aa:3a:51:bf:cd:46:3b:f1:0c:89:c1:54:97:c0:6a:
                    70:ff:d9:64:2c:00:43:9b:56:fc:0b:77:49:50:81:
                    34:d0:f1:28:f7:86:ab:33:f3:d0:6a:aa:0e:2b:68:
                    eb:39:6c:64:40:b4:30:5d:0f:73:c0:45:bd:18:a6:
                    6a:57:42:8d:65:25:c3:f1:f6:52:aa:ec:79:4f:c0:
                    e8:88:1c:31:9c:e9:48:d2:2b:94:d2:02:d0:5c:89:
                    fa:05:07:2d:db:a7:d5:49:05:2f:08:32:cb:9b:21:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:29:91:11:02:8D:B7:CE:32:DF:E7:0C:25:9C:97:2E:F5:52:3E:14
            X509v3 Authority Key Identifier:
                keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:de:b5:d4:8b:60:2d:5c:88:0e:5f:08:91:70:74:79:90:be:
         6a:bd:ff:7a:32:0e:99:e2:f6:7a:f0:d9:73:72:54:8c:a8:27:
         7d:c6:ca:cf:39:35:94:4f:6d:e4:e1:a0:5e:0f:13:b6:3c:32:
         72:cb:54:43:b7:9a:fa:f5:03:68:3e:81:37:33:54:38:98:ae:
         94:20:0c:db:31:c2:40:b4:e1:1a:54:dd:b6:0e:d4:37:2a:ac:
         40:ed:06:81:40:d5:28:32:31:73:ed:f7:0b:04:e3:f0:1d:03:
         83:6a:ed:f3:ee:59:8c:2f:05:6c:62:de:47:8c:0d:70:20:92:
         ef:a7:67:a8:60:6a:fc:d3:d2:ed:78:d5:03:f9:f1:ce:be:45:
         4d:d5:2b:b6:7e:9b:3e:67:f0:53:c3:e5:98:3e:51:8d:4d:e9:
         3c:2a:eb:36:c7:3d:30:83:aa:6f:d3:13:c9:61:26:0e:c5:13:
         e1:f9:da:92:6d:55:30:10:bb:da:9f:26:b6:56:a7:d5:71:9e:
         4e:84:e8:bc:4d:7b:93:3d:aa:73:19:11:8d:c0:d7:39:a7:80:
         de:ef:9c:f3:bb:7c:fb:53:a9:62:cc:46:81:59:60:a7:36:81:
         5b:08:1e:49:ab:49:49:29:34:ed:95:b1:bd:2f:59:d1:c6:7e:
         14:f6:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:27:41 2025 by rpki-client