Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          bbZJDauWjeKccJ1CIkjmvgNPoAgE205qdUP0HlySGtw=
Subject key identifier:   CD:69:48:53:19:77:27:40:FD:84:B1:F7:D3:20:94:42:A8:28:2A:32
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       01987CAE49527699660F87079322AF7BED7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          1676
Signing time:             Wed 06 Aug 2025 00:00:53 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:53 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:53 +0000
Files and hashes:         1: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: Y2e2s4h+A+I+JxphTiyAlbJIrHub8SnYXEiobtuHf04=)
                          2: 3bnDZUsDXnEjZmLC2l6TNlR44q0.roa (hash: wvyAIrwBTPizl931rTr7kAFeltcDxlBFhYT3hCElsC8=)
                          3: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (hash: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=)
                          4: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (hash: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=)
                          5: 9Du2tHlplI8cqKMhQkDQrma7ABw.roa (hash: tHZwo/QnwGrZt6X37EyHYtZuWfqyTSrPiMBPcRX5QtA=)
                          6: Asu0DH_A5v7HQJH6cJ--acq6gs4.roa (hash: p83oT8k8StFZXPPk4WZFA6xLSJnWFONbnXX8tMyuY+E=)
                          7: BPwP4_eaRC-ExEMmsEHbE_XcDyk.roa (hash: PuWly/aliHEqwaBp5Lw/IykpWGderMcstp3zqAZSzaU=)
                          8: HkpMpgcE2miG9qn79yi3XbK_pOE.roa (hash: 0Rr449PN12HQpu7nIek/UBDMZP0dQl1SRcWWzh64TnM=)
                          9: JXrXWWEdrlOAxsLEb215YsP36OI.roa (hash: LxUCqn0JmTO3q5jDUwaHYrVbupf5Tpjdv87Nft/gs/M=)
                          10: Loa4kWXHd_gyVar7KKfuCbOTQSI.roa (hash: V+IAftZbMV1uaMDIpq8IX4vqfn+FazLdtHW0Gi6raiE=)
                          11: OiUKYkPvCpqnOXZ9zOVHLonU2AY.roa (hash: Lhbego4QvDRSaxc+Seq5OHB8z3WLSv1waMp2zJgiuoA=)
                          12: PwHMe4i6pz51Ahrp1W-49Rgc_vo.roa (hash: DVJmDnhZvnviJ4n66jT0o+c4DIjAzAehQrpeXl6SGUU=)
                          13: R0cDHc3n2qmMEAUS6woEeV4DrUw.roa (hash: QJ/g2HXWAm89HNayhA1QKb5SEB9BRX6t6S4vbuLEEGQ=)
                          14: RzWktUnWleyuAASpHpH94KSShkY.roa (hash: BoPLXDFgsIgaZzKNJy1XCZ2/akxih7lLoVGkf52tsHE=)
                          15: TKWYs3n3hIoN-hoFqew_mEdXrIo.roa (hash: USDKgLhBpQiNnUXhTAkFdSI2pQG1VTBMCqyXVi79H/o=)
                          16: WfonxlLMZwy-HhCvndkmDlWeP1U.roa (hash: D2to2wlUfQBqZmE9EvBIj/W3y3+jGxVEf6JIb4l/qG8=)
                          17: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (hash: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=)
                          18: fQowbtBwRpKjCzhE3ojDTNtTyaM.roa (hash: 5hmuOcmFlB2Eh4C339cOr4B957mNZCHeN0L/cBjITLk=)
                          19: gL8L6RZ2XqjaOf7a7aVACmgbZKI.roa (hash: kLhGxAypt99j/jO34VpwpOJzvqgyVsGY/56bargYYM8=)
                          20: lGSh8HAGsvLzJWijuCn5mOFbAtA.roa (hash: g6Sdp9SO3zguPzUUGeNhkKmFB7oPgHI90W+QRmIj6bo=)
                          21: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (hash: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=)
                          22: vx0LBPGo6U2A4w4ADzD_udSk_bE.roa (hash: 1BQsFPNT0rTtzolZzu4KuR7RQiaLrcqqi5uIXl00aQQ=)
                          23: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (hash: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=)
                          24: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (hash: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=)
                          25: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (hash: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:49:52:76:99:66:0f:87:07:93:22:af:7b:ed:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Aug  6 00:00:53 2025 GMT
            Not After : Aug  7 00:00:53 2025 GMT
        Subject: CN=cd69485319772740fd84b1f7d3209442a8282a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:50:b5:59:06:f9:35:11:ce:ac:02:e3:af:67:
                    83:35:c6:20:a6:47:55:5d:7f:8a:53:e7:c7:1f:53:
                    88:cb:c8:ec:d4:47:65:fc:31:51:11:d8:36:40:9b:
                    a0:ba:e9:1b:43:92:44:48:ba:65:36:f5:47:89:fb:
                    e4:3d:cd:ea:7e:21:63:89:6e:ee:6f:4a:1f:c5:f6:
                    cd:d9:e8:29:af:e3:f7:55:6d:dc:d1:92:02:a8:6e:
                    90:0e:bb:00:4a:4c:47:ca:7e:ae:dd:82:5e:08:bf:
                    00:f2:8c:90:b2:cf:2d:76:0c:fc:89:47:43:97:7f:
                    21:2f:a6:9f:b4:62:7f:0f:8e:30:14:1c:e2:ae:86:
                    5d:47:3d:1e:a4:91:9e:51:95:07:66:a7:9c:15:c9:
                    dc:8b:c6:17:5e:b8:3b:4d:9a:bb:e2:34:56:55:4a:
                    1e:3e:af:f4:95:b9:84:9e:f9:a2:34:96:7b:29:71:
                    7c:34:79:50:6d:19:d9:42:c7:5d:65:88:80:f1:fb:
                    2f:62:1c:6c:26:85:4b:2a:58:94:36:57:0c:c4:98:
                    64:ff:aa:a3:04:dd:f0:a9:db:2f:9f:6b:38:59:bd:
                    a0:1a:72:eb:3d:99:56:e1:fd:cd:58:e5:96:73:74:
                    bd:d2:72:1b:2a:a9:05:72:0c:89:70:69:6a:6d:07:
                    76:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:69:48:53:19:77:27:40:FD:84:B1:F7:D3:20:94:42:A8:28:2A:32
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1b:9b:52:d0:aa:6f:0d:dc:03:3c:74:22:b7:43:7b:f1:3b:
         93:65:35:7e:ac:e0:b0:3d:38:f2:07:0e:14:eb:f1:be:37:a4:
         74:8b:5b:0f:1a:6b:03:27:c2:c4:35:a9:54:e7:56:bf:bf:e4:
         a9:bc:71:73:af:70:2f:e6:1c:56:1b:4a:43:42:21:55:4b:74:
         b3:5a:f7:ee:af:8c:31:b8:f6:5b:d0:1b:ca:f7:6b:05:7a:25:
         12:39:20:b0:5c:0c:10:79:56:c2:20:84:cf:7f:11:3a:7c:d2:
         bc:45:c1:82:24:b6:13:21:b3:3d:4f:73:f4:d0:f4:78:57:40:
         33:f5:f1:fd:07:fe:15:ad:74:24:3c:67:57:d2:dd:ef:c3:83:
         4b:11:49:e4:e3:b2:6a:09:f8:d0:22:e0:38:c4:d0:87:a3:15:
         da:b7:51:87:8b:8a:15:c0:95:a5:a2:f0:c3:8c:74:a3:65:af:
         12:0d:7f:f9:a0:cf:b3:aa:1a:b5:61:a3:62:cc:8b:d0:05:3f:
         dd:9c:cc:1f:6b:82:30:69:01:ec:3d:1e:dd:b9:ff:f5:65:1b:
         06:54:51:47:06:06:5a:80:73:24:4c:a1:15:50:e7:4e:ee:5e:
         44:ae:4c:2c:7b:2f:81:88:02:dd:e7:80:05:b8:e4:67:30:7d:
         59:05:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:40:03 2025 by rpki-client