Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
File:                     wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft (raw, json)
Hash identifier:          Q2FMmJfnbIbuX94u755fVpqZ7Et5YxHUthqtKfXwhE8=
Subject key identifier:   D4:D6:64:2D:9C:2E:F6:53:7A:A1:16:54:4F:3E:31:48:0F:51:58:C3
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Certificate issuer:       /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial:       019874191B5FBA773BBF35016C18028BC9D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
Manifest number:          0820
Signing time:             Mon 04 Aug 2025 08:00:59 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:59 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:59 +0000
Files and hashes:         1: 1-OHLRD334FWm6Zrjcgppie9BswM.roa (hash: urCbs2jOMpV/xBqYvz6vgOCjI2x8EVTTMcQlzcrKQKU=)
                          2: 1TzUGOISzDA60EIuoaOCEldIKdA.roa (hash: BLBlbTPtdydLXzYGnqSxQMivDmgQhsVxzd+uAEw/tSs=)
                          3: 8NHyyXImfpTMW71nUWch0BiF5Xg.roa (hash: eGClbyh1h6xo26ZfLRahAomcB8GyqPbNSmUc+I5rBP8=)
                          4: AN-J-6GFY5zJ2UYJ_lJbkwClajQ.roa (hash: MbFXR62w8piSQzBIPTa5Z9TkgtnwQMMr5t3hau8DPHA=)
                          5: AuIUSKV86C7BXB3cKTMOXDDJDxg.roa (hash: zV0DboRCqeI5iUfqxHmafkMKaUmCDd/7aboDtWeZ6H0=)
                          6: B6bhuDNpDuevEHZ19SeWCNW99rQ.roa (hash: pOV3p5Ey4fmwroAFxyoZLB4XCjD3dz2oZcOtKKQJEOs=)
                          7: BGHFUqVejSgU54raf_BEGdliceQ.roa (hash: /WvBr8+8azpgI7EuGeRsoFRQN1mrpglq6k/jLoAWaPg=)
                          8: G3JRkLJnkrgSFCna87WCEmSVGH0.roa (hash: 3g5pUOebBrRpT5C2HLKJIrZHlstejRcKgZ896+pk+iw=)
                          9: IMmNfpSRVyc9d84nynEHmEk_lj8.roa (hash: CpQGlsJ12iJFqosZ5+2LrNvjHZgiGDKRRsy+udORmkU=)
                          10: IQkntFvhRsdycQaCoTh6uWBlM0w.roa (hash: ObXi/Gh86sV5Yu8bR/iyvVTSXYpSj+cAT5PW6Kmrdqo=)
                          11: Jc4UjjXDIHer7xI93ScihguvNyI.roa (hash: IRfvvMt08HvaaPswtbTpbce96zw5k4oSSFo123wdXVg=)
                          12: P2DSCIMV0HHkBQvcusVrkVUHJ-k.roa (hash: UOdNaKMoFJYMlUedUl0GUGdpyC2yCCaGtSt3gBG0pwM=)
                          13: RM5CrBqi7H_tUgnV79_PQ7g1mls.roa (hash: 8NTSeqb0JLGKK8Az0mjy60k7uBMLt5UGSP9hJaxBsYE=)
                          14: T8W8UbSz23XVxeKxMswBkcjusqs.roa (hash: ImuqG5olgUeDSUHNcdZ+GPVdlcDLo+6DrqeQW6Sj8ng=)
                          15: _vVj7Yf7SEDc0U-oT24hLr9AmWo.roa (hash: j+iJlPVCSfJjs834awahPlI3pwAuXtW3vZid82gyL2c=)
                          16: eNZXxCCzC2aIFELjq6RpMQzGjSs.roa (hash: CXPmpeLWckeBx9Uclq/du3j6HeMssd7O/L4FVYvmJ6k=)
                          17: iKcwhnEN10fRYRRzzUNUhLbzgII.roa (hash: 8XbU5xfN398bTFEwcsbwpEuYyx6/DG2cMnShSgvLAsw=)
                          18: lx-I99Rz7UE_i9h7mI7tDYnV2-Y.roa (hash: F42LmZoHNcE33lqnHRPsH2ID11JlTB7ve7cZ1cVQPlU=)
                          19: myS70wSaXraGlV45HLBBmwXwrwc.roa (hash: FZsWjRMS6HiCSjpm2cjqK9xWh87tWd8uC6DrqvB4t9Q=)
                          20: oK0JQquC8jyrOxmEpSlud6wYln0.roa (hash: t4faWT5Ya2COfLJjFhhmnJ3LXyx76ITY8NFNVNUc2d8=)
                          21: ownf_EA4QLCePC3UUTTwGnLoTLw.roa (hash: 93BCrxGb3Lysj+TYISTy8jTAsJzMKioWglq3RX6G7Ok=)
                          22: rPfrcA5mjZuF_3h6CvRoM6CKaHY.roa (hash: NtmAMHp+MSVAwh/AmTYU0C1XIPDHm/LFrjAn7E9M8BA=)
                          23: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl (hash: 6HbSYqix4iQ0thyl6jrLdzpNFZJU7KJiagL/Gxr4RoY=)
                          24: z3kWu-yUrhb7i7RJ_9n8Pz6MTKw.roa (hash: G3LXLnUV2U2i7TF7ag92NBNGeKqfOc8dN9b41KiF4QU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:1b:5f:ba:77:3b:bf:35:01:6c:18:02:8b:c9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
        Validity
            Not Before: Aug  4 08:00:59 2025 GMT
            Not After : Aug  5 08:00:59 2025 GMT
        Subject: CN=d4d6642d9c2ef6537aa116544f3e31480f5158c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:29:ed:ed:c9:6c:de:da:c7:f9:4a:ec:bc:bd:
                    0c:2b:1f:8c:70:f9:d3:56:2f:fa:26:76:5b:ca:8b:
                    63:25:98:06:2b:69:eb:59:72:3d:86:ec:1c:71:32:
                    1c:7a:d9:af:c4:32:05:1b:ae:1a:a3:65:e8:3b:1c:
                    10:61:99:d2:f9:42:de:c5:1d:08:f0:d7:31:80:ef:
                    84:e3:e4:62:8b:9e:87:68:2e:c6:64:21:61:3e:c1:
                    4c:8c:c6:7e:3c:76:82:07:e7:3e:6c:d0:8b:0f:f0:
                    a2:2b:fb:67:fc:1e:d1:33:37:6b:d3:a9:85:63:54:
                    f7:36:a7:b7:77:63:9a:a6:d5:28:9b:51:8b:d4:62:
                    30:c5:fa:fa:d4:c0:7c:70:33:02:64:bf:02:06:e4:
                    cb:2d:17:b5:58:8c:69:b0:c7:6b:c3:55:cd:1b:84:
                    68:86:a1:27:5a:46:05:79:9f:48:bd:8c:e5:92:fc:
                    5b:50:40:11:89:f1:42:7c:e4:fc:55:6a:36:df:94:
                    e8:59:00:cf:c2:f5:e8:e2:67:19:fc:17:8b:f0:07:
                    d3:c4:6b:13:18:fd:f7:65:a9:d1:a0:40:70:42:a5:
                    33:66:6c:ef:34:0d:fb:ef:7e:88:7a:c8:35:ad:6f:
                    db:32:79:31:f7:0e:6a:3c:a1:ce:09:3b:61:d8:e1:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D6:64:2D:9C:2E:F6:53:7A:A1:16:54:4F:3E:31:48:0F:51:58:C3
            X509v3 Authority Key Identifier:
                keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a9:7f:04:5e:fb:e5:39:8c:45:f3:43:a9:7b:cc:18:75:da:
         12:aa:ba:17:d8:f9:e6:db:3c:0c:5e:1c:84:0f:ee:2f:2e:d9:
         31:95:10:43:2e:b6:c6:84:0a:b8:4a:ce:9b:d1:90:b6:92:83:
         5a:9a:e8:a6:56:c3:5e:82:42:44:ab:6c:d1:9c:e7:4b:ae:5b:
         ee:32:5d:74:ea:e0:3a:ed:ea:38:92:b3:5c:50:2f:75:ee:70:
         bb:af:e2:05:d7:93:23:3f:9b:ce:a3:a0:29:d8:26:eb:41:34:
         65:ad:91:7c:66:72:39:57:1f:e7:54:52:41:61:0a:0e:83:a0:
         32:0f:88:67:e3:e1:fc:58:00:64:23:21:c1:1e:21:f1:73:05:
         cc:4f:04:a5:ed:bf:03:d9:36:05:b0:5b:6e:30:e6:03:18:0a:
         4c:27:b0:a5:9c:78:2d:4e:b1:8a:13:6b:22:da:88:dc:07:fb:
         dc:12:f5:1c:71:ef:4a:93:62:4d:52:e1:4c:cd:5d:e3:2d:75:
         23:6a:17:8f:f9:82:99:67:6b:df:97:63:0f:50:d6:5b:65:62:
         f9:97:4e:ed:a6:29:45:a3:d8:aa:48:ea:72:ca:b4:28:11:aa:
         11:85:56:ca:c6:62:da:6a:c8:fc:8d:c0:1b:65:d4:97:ab:84:
         26:4d:e5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:00 2025 by rpki-client