Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
File:                     xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json)
Hash identifier:          w0g70ROFmCuBrxF4qSgBbEMVdITVKCPhzIBcFAl5CgM=
Subject key identifier:   C7:26:5A:F6:D7:9D:D1:B9:88:72:FA:BC:2E:35:03:A0:71:82:87:E3
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       019873E21970EED4C770E1805766F80271D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
Manifest number:          1627
Signing time:             Mon 04 Aug 2025 07:00:54 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:54 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:54 +0000
Files and hashes:         1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=)
                          2: 1-et3egkL66ACcB8XxsgEBnm6VII.roa (hash: 4ZZwKzLoU0lcA0OohX7bJJeDfSc2RrBHj0/VmzWrgQ8=)
                          3: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=)
                          4: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=)
                          5: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=)
                          6: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=)
                          7: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=)
                          8: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=)
                          9: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=)
                          10: AKM5h6Ix-3LMoRtdGUA19KyVLio.roa (hash: P77lNcJ0zrzNLtgfjbd4pt0XLBw/55/N1ocxrR5mz8k=)
                          11: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=)
                          12: EaNOtJnyoBH2AKMmzVCmNF1nSWU.roa (hash: qd2kYNwXTo0ghzb+q0JH2cF3Und1N0r58z0udba+JGA=)
                          13: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=)
                          14: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=)
                          15: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=)
                          16: L9eXoOzloyfByegWKWMIHSuYWXU.roa (hash: 0VEFznzUQQMlCk6q903xJ+gBbGsXZIaen1RH1RLLoj0=)
                          17: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=)
                          18: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=)
                          19: PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa (hash: yllK3pne9YzRUhTjD6bVU9YW7N3Ndf4gfPLt+eRd9lg=)
                          20: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=)
                          21: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=)
                          22: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=)
                          23: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=)
                          24: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=)
                          25: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=)
                          26: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=)
                          27: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=)
                          28: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=)
                          29: b3HbzyFMAkDn-hz39a-lF2NC8sM.roa (hash: 7Jvn5n7Q6ncqp0VRYLsaglwVJaobFM0uBPvGwFadf6Q=)
                          30: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=)
                          31: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=)
                          32: sjrH2otaIZpDDsn6jT5Qey1qR24.roa (hash: 69DxcLnEQlr2qy3j+2wJu74yOEnRWbGBTA6f8nbWFZc=)
                          33: sxEAKY_aMKRnBM4SpkFRvHo38bo.roa (hash: KqW5nF7IvFVgFNat1NgasvPrULkuuJOyrjf1tgys6gg=)
                          34: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=)
                          35: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: m7HC1hbnIQNd6AVZE+MTRHAjAX5AA5emlLF6/oPbMgY=)
                          36: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:19:70:ee:d4:c7:70:e1:80:57:66:f8:02:71:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Aug  4 07:00:54 2025 GMT
            Not After : Aug  5 07:00:54 2025 GMT
        Subject: CN=c7265af6d79dd1b98872fabc2e3503a0718287e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3e:e6:12:30:6b:ac:d8:40:70:46:ee:86:a0:
                    62:74:27:3e:1c:5e:2d:7b:fc:f8:16:56:1e:bb:ec:
                    be:32:76:21:de:ce:d6:7d:f1:ff:7a:b5:d0:96:26:
                    32:33:6c:37:b8:8d:96:26:a8:40:50:8e:6d:94:e9:
                    28:36:3e:e5:bc:69:b3:4e:f5:5b:75:63:e7:9c:fd:
                    5c:34:14:89:a6:97:84:51:8e:e4:44:fa:da:37:13:
                    28:5f:f0:59:ca:e9:8b:bd:87:c1:c4:72:74:ab:3b:
                    4b:be:cc:c8:b2:2a:81:08:5b:2a:52:a1:e7:60:76:
                    c1:96:02:e1:41:0f:62:91:97:4f:2b:bf:4a:74:d1:
                    81:c0:d7:68:01:ee:71:b3:cb:26:b6:70:84:00:fc:
                    e1:3e:45:ad:32:6c:70:fe:f0:d2:b3:10:30:8d:f3:
                    ab:72:40:50:9e:45:ad:59:e5:fb:8d:3c:28:73:29:
                    a7:41:75:69:92:20:12:8f:12:3e:a9:49:f8:78:a7:
                    f7:ec:ec:43:41:1d:44:c2:54:af:f9:51:ae:8e:0f:
                    e5:f9:f4:49:3f:e4:ec:b2:40:bd:b6:0d:97:bc:ac:
                    15:fb:35:10:b5:e1:ee:7c:67:ff:44:67:84:0f:64:
                    58:28:b8:41:3e:2a:b5:87:d1:5b:5f:78:68:ea:7c:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:26:5A:F6:D7:9D:D1:B9:88:72:FA:BC:2E:35:03:A0:71:82:87:E3
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8b:59:b4:e8:5f:8d:f5:39:14:ce:c8:b2:7e:27:c0:9a:e2:
         a9:c8:24:3e:61:85:1b:f5:5e:27:9d:a8:89:02:c7:4c:f7:9a:
         75:05:bf:ec:b0:a4:16:69:72:35:51:ad:67:99:6b:ac:80:c7:
         aa:fe:b8:ac:99:27:23:62:24:11:af:32:0b:ba:f0:fe:e3:a2:
         a9:07:93:71:f3:61:ca:b9:56:3b:2a:5a:08:1b:dc:69:d1:f9:
         2b:ed:25:08:f9:80:ce:68:2d:d4:c7:16:f1:1e:f9:de:99:6d:
         de:ca:a1:f4:86:fe:1b:9c:4f:f1:b1:b4:9a:42:4e:3d:53:98:
         99:26:07:b2:39:ae:2c:ae:4e:3e:11:65:89:04:e5:42:1f:fb:
         b7:99:33:0b:e6:98:1d:09:1f:36:6e:e1:5a:8c:ff:bd:eb:74:
         f7:20:50:86:1a:89:1d:b7:93:b9:df:ad:d6:91:e2:cb:17:54:
         e4:05:5f:35:85:a3:cb:be:40:e5:9a:82:8d:f6:c7:a8:e6:f3:
         3c:0f:a2:2e:d9:bc:29:bb:d1:6b:29:0d:58:2b:ed:c4:de:eb:
         97:03:d6:84:a3:c1:5c:43:91:53:77:46:44:0f:65:e6:02:40:
         bb:bb:ba:f1:03:fb:f4:e5:6c:39:8b:76:58:6c:cf:ce:f6:92:
         ee:f0:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:23 2025 by rpki-client