Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          7qkSfI+gAcweh5bFfMI6gO0ZsTMB9YSaPCbrHIw1Cwk=
Subject key identifier:   80:A4:5B:BB:20:0A:7B:BA:59:5F:09:4D:16:F8:8F:A0:12:84:EC:C6
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       01987ABFE406E13DB4D3CB4560EEDAD0599E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          1672
Signing time:             Tue 05 Aug 2025 15:00:52 +0000
Manifest this update:     Tue 05 Aug 2025 15:00:52 +0000
Manifest next update:     Wed 06 Aug 2025 15:00:52 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=)
                          15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=)
                          20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: z/kYk0bE/3DpVOyYreoMRxnKmZW2+b+DhxaTZqmyPsE=)
                          21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=)
                          26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:bf:e4:06:e1:3d:b4:d3:cb:45:60:ee:da:d0:59:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Aug  5 15:00:52 2025 GMT
            Not After : Aug  6 15:00:52 2025 GMT
        Subject: CN=80a45bbb200a7bba595f094d16f88fa01284ecc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:4c:70:f2:c7:58:c9:80:c8:bd:7f:16:8b:
                    f4:a4:e3:fd:c5:18:47:06:de:8c:8f:81:05:90:33:
                    ae:4c:af:0f:03:e1:e5:25:74:85:cc:45:d3:11:67:
                    52:e8:a6:0b:63:49:3c:61:92:43:43:6c:a9:96:29:
                    94:9e:e9:af:f3:fb:a7:18:fd:00:f5:23:bc:03:94:
                    93:5b:7c:f8:b8:64:61:ee:9e:34:04:39:94:ad:e0:
                    12:48:e6:89:9c:5d:b6:b9:74:4c:e0:ba:d9:e1:0c:
                    56:87:b9:cc:da:72:09:74:dc:91:19:97:c3:71:62:
                    84:66:9f:36:82:9a:26:4b:36:3f:90:cc:d4:39:ec:
                    ef:a6:8f:07:95:75:f9:90:d2:a4:28:f2:0a:4e:12:
                    8b:62:a5:ad:51:b9:77:f3:9e:95:11:91:60:01:63:
                    27:81:e1:1d:6c:e4:1e:c4:91:05:c6:91:ca:df:20:
                    5f:b8:d5:e9:33:4c:22:8a:dc:45:15:01:5e:d5:2e:
                    02:0b:e2:96:d2:af:06:82:f6:65:91:32:58:16:6b:
                    9b:12:e3:94:0a:37:08:60:a4:e7:30:72:c2:02:6c:
                    f9:4e:df:bc:78:a6:58:05:8a:35:e6:b2:e3:55:a1:
                    93:b4:12:ee:2a:0b:84:2b:12:05:5b:ed:46:43:03:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A4:5B:BB:20:0A:7B:BA:59:5F:09:4D:16:F8:8F:A0:12:84:EC:C6
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:7c:fa:38:54:d3:6e:07:a8:ea:79:08:b5:88:b2:18:6a:30:
         95:87:7d:03:f0:8f:09:d2:ab:52:5d:57:d8:91:1d:2d:f3:b2:
         f7:88:36:0f:88:cb:5e:de:70:7e:01:45:e6:08:13:05:a6:07:
         8a:60:b2:5c:ad:d8:0f:66:cd:cc:75:45:e5:ea:92:71:e0:3b:
         95:50:06:1b:2c:49:25:32:77:66:6a:d7:fb:7f:cc:c3:08:3f:
         73:af:8c:29:40:f3:24:34:02:3e:4e:8c:22:a0:f6:d6:b6:8c:
         f2:50:ec:45:df:6e:fa:5f:1f:7f:3e:c5:9a:b9:e5:76:b0:1e:
         ce:4a:16:80:ed:76:e6:a0:22:14:a6:82:2f:08:9a:6f:d6:9d:
         60:79:2d:0c:cd:72:b0:19:64:f8:e6:b9:38:f4:68:fa:bf:90:
         b7:1b:f5:8d:de:f7:08:15:47:51:cb:cf:e2:ad:dc:c2:10:d0:
         ad:38:4f:38:e5:08:27:c5:75:42:e3:d0:d0:ef:e0:51:f1:c2:
         d7:1b:fa:34:96:ba:72:aa:10:08:7f:ac:ce:97:1f:dc:4a:8f:
         b2:1f:f5:c6:ab:27:f5:eb:06:a5:5a:ab:d9:18:cb:1e:03:12:
         7c:4f:fc:f9:8f:f7:43:d2:8d:dc:74:e0:39:e9:f3:76:3b:34:
         df:b0:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:40:06 2025 by rpki-client