Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File:                     pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier:          AnhVUir16ZaG+npV64TMOqgl+CAjJVJS32Z4pVc+JGY=
Subject key identifier:   A4:8D:91:81:FE:BE:CD:D1:1A:26:73:68:8A:37:4E:D8:B8:F0:DA:64
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer:       /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial:       019875993920831A0C52FFF9A4F9197DF508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number:          44
Signing time:             Mon 04 Aug 2025 15:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 15:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 15:00:32 +0000
Files and hashes:         1: BLL7KvTCffO6tp4kIOP_sSt6WzU.roa (hash: K2KxT9evveKUcS3Zp6W/L1otqyWrsiDb4Q4jrBUnW7c=)
                          2: Eh7LIuW42CvtdPZwqzRnb0iAEKM.roa (hash: j2OXrFqgsDjaKg5s5TvNOiiSOulderYWQlkF+sXQtfA=)
                          3: GXNfhhCLmXkcBaMcM3Wqb41chEc.roa (hash: rifz7ON+2GOQGOKbBBrmdaYyl9eb/JIR5S1cj3TU4jE=)
                          4: JoDgj6_aYuH2h_z7acYlnllXJD8.roa (hash: s9ZiFfWtjJJRskfMKESh5wPV+ucKeG1v2mAsgKvSMUs=)
                          5: TH3AhVbNZPfpfze9jk4P8EYhJRk.roa (hash: CvDuj4p8KBdrmQoz9VsmO+AYAN5CIQ+jW9RXbyF9x5g=)
                          6: U5q4QiR4WiBSQSOv2vD1W1J3XSk.roa (hash: ZdJ45ZazcA/TtNU+GF97U74ZRNYKvCtVCEwip83Krrs=)
                          7: X1OJBmObFYHg6-TEw8S-Kw2Q7ic.roa (hash: Oyq+zf+xTb/nBsWGWwl35Zcj+K8DjFf57comG4rLZLc=)
                          8: Y8i3rrn4fUUiKvEOTWMIpo8Wdg0.roa (hash: lhJRliSxc8nIrWSQMwOkXfftJXTelhvnTEYCqHEODt0=)
                          9: Z1M_6TrqOd8wD9NKtj0iTyQonVc.roa (hash: aDWP4uHhbYWLYFp3XR/+E+EeJ5Rm4IXEZcu1iYff0qg=)
                          10: ZDayT6lDLS2GCPR-v8fqvcLoQK4.roa (hash: +ziQ7srcO8pPuSJWXnBHZoMe2FpncGGdN6aXUGmO+8s=)
                          11: dv3-UDRo-QCoPMwkT3OMYFFbOg8.roa (hash: pBj1g6kNC1lCzmrnByXYXnQfvQx7VuBxAQQxYeHelao=)
                          12: emjANyISkJRoOdzxCAt2kq4CVQE.roa (hash: 9W1oN3mBYbWV8A6Uo6B7h78llPTnM+uYRLY9fCXhQlY=)
                          13: gchhAVJFDCU8blLfh1bBR6nV7eE.roa (hash: i4UDZqnLoafc9IhMJrDyMFSOYLmIkEVFeY6p5LZlGi4=)
                          14: hLDp0R1tKZ1uQpk7clza_OXTeIc.roa (hash: 2IvvdqWOvjCen06JgJKZvx4rVETFnJduNU5B5/20Srw=)
                          15: hok1h3DBZfbszYTqi9gXzI5jkqU.roa (hash: Rrp79AM7R2rghKYLAtKfPleubz/8AHn7KNcJJOJ8/Y0=)
                          16: oYGGiYdbxpGeCKboMYRmQpGsbJg.roa (hash: 4Tb5SbH+PWEL8ZWRvMbss+TVaZCN9gSpmDVf6SCXqwg=)
                          17: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: PPBT16mzlAgx4IShueVqCUDSGrlTrsskAhKsKmmlsEc=)
                          18: qYUhOlm7rxtE24ifggtJupvHC-U.roa (hash: Eq0prYYqmBCy3NmWTbhlJMhDQOJrr51MgbHFrPYHpts=)
                          19: z1lDJAYiSGQWP0hQT2qsq0NQckw.roa (hash: +w84SriAFLfwafgawze6gO/oCWYDdlLPo2xuwocy9KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:99:39:20:83:1a:0c:52:ff:f9:a4:f9:19:7d:f5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
        Validity
            Not Before: Aug  4 15:00:32 2025 GMT
            Not After : Aug  5 15:00:32 2025 GMT
        Subject: CN=a48d9181febecdd11a2673688a374ed8b8f0da64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:bc:94:2b:fb:cc:68:1b:1c:80:c6:e3:eb:
                    7a:90:81:96:74:56:70:dd:df:43:d8:ed:e3:bd:bf:
                    4b:e6:89:71:1f:7e:57:ba:a4:e9:98:c4:ab:32:b1:
                    42:af:7f:a6:9f:98:3f:c5:34:25:74:8e:c3:b4:b6:
                    d8:8b:10:13:69:03:17:4f:ab:24:e9:87:60:e2:9f:
                    cd:3e:c3:b3:04:f3:71:b5:58:ad:64:44:d7:ab:e3:
                    29:6b:d9:b7:31:22:e8:01:11:be:51:76:09:d5:e1:
                    4e:7d:06:2b:26:91:b5:a2:ae:fc:dd:60:c4:9c:b3:
                    96:35:ac:00:e2:d0:8d:31:6c:62:d5:b6:8b:36:ad:
                    02:e5:b7:30:a3:1c:a7:4c:df:74:0e:5d:61:8c:46:
                    72:12:fc:c4:e8:cf:a7:27:0e:10:7c:a3:3c:20:d7:
                    0e:4f:83:ac:7a:b0:8a:40:61:8a:ca:b4:88:74:28:
                    ad:c3:3f:fc:b5:b4:0f:34:d6:6f:03:76:ae:b7:e8:
                    37:c3:2e:d2:69:73:e6:15:30:ad:42:c6:81:cc:73:
                    82:15:f8:27:93:bf:c2:f5:ee:fa:dc:5e:64:2e:0d:
                    81:a3:33:ae:64:c3:db:5e:6b:5f:3c:2a:59:a8:ad:
                    f0:5f:a8:ee:bf:62:57:51:27:03:64:8a:ea:33:2d:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8D:91:81:FE:BE:CD:D1:1A:26:73:68:8A:37:4E:D8:B8:F0:DA:64
            X509v3 Authority Key Identifier:
                keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:62:2e:0a:90:e7:5e:b1:62:18:80:9d:3b:10:7e:bb:c1:
         11:54:3d:63:da:c1:d1:fe:91:5d:03:57:48:61:32:e0:d1:52:
         a8:43:ba:27:7e:06:15:a1:79:d0:ab:ce:ae:af:ce:ee:ce:4b:
         3e:a2:e0:dd:43:36:15:c7:6f:21:30:17:3a:8d:04:69:06:4d:
         9c:13:29:02:da:bf:ac:b6:49:66:11:9a:ea:26:69:b6:6e:7b:
         b3:92:18:57:04:67:35:94:12:49:4a:ff:cd:17:71:03:a2:49:
         51:0b:9d:82:26:a3:73:aa:7c:56:fa:57:d3:77:5d:7e:13:fb:
         7b:fe:2a:54:b7:0d:01:11:e1:0a:5f:64:ea:3c:23:26:41:08:
         22:b8:a7:16:52:d9:76:5d:54:91:64:3a:1c:b7:54:9b:8d:30:
         4c:0f:5e:96:0a:5e:d9:37:30:9f:bc:1b:a1:76:d4:13:ab:d3:
         a5:e8:28:23:8a:8f:b6:f9:5b:52:55:8d:66:81:42:73:9d:c5:
         50:50:e3:8d:77:26:51:5d:34:5c:3b:a4:d5:14:22:8a:1e:37:
         a3:fe:27:05:ff:e0:7a:23:96:7e:8d:77:e7:b2:f4:c9:83:63:
         2f:0c:e3:cc:0c:70:40:fd:6e:6c:36:9c:bf:5f:64:cd:71:82:
         43:5d:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:04 2025 by rpki-client