Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
File:                     bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json)
Hash identifier:          UsSMEJL28QVRWJySYBv5l+1LjkkMvIsY98pNlgTX4uA=
Subject key identifier:   EF:87:7A:1C:89:91:59:36:66:BD:2B:33:10:28:61:6A:D2:42:59:4C
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Certificate issuer:       /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial:       01982FDC8B2098F286672EFC5BC350E142FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
Manifest number:          14ED
Signing time:             Tue 22 Jul 2025 02:00:39 +0000
Manifest this update:     Tue 22 Jul 2025 02:00:39 +0000
Manifest next update:     Wed 23 Jul 2025 02:00:39 +0000
Files and hashes:         1: 1-wNbXwWq_rcd31KdtUHBjHqlOYw.roa (hash: Vna41k3RUzjuu4Rno9oMx5pWO8RDhSOU/oHNJLNrfMg=)
                          2: 1cBjbhQO7ncLuCJPPP3ax-BP1rc.roa (hash: Jy5kekjzCQxDaa0ItIoXnMNYM41DXr2Kna+F8NZUTeI=)
                          3: 8hRBXjeqaNVqsRXwD3teVm2IptQ.roa (hash: 7trj/DN0w0nR+thBLV8DeXduqLYmWtu9yjYZdu4vyJw=)
                          4: Bx__fFiMMTggkGq_nd5kX3xmUcg.roa (hash: mKBt1ZL1NN3yHJQYqC4MudwNnNLAyAG6zsc+LH7T2yM=)
                          5: CLnjMLjaN6TgfiTPKuCp1qWork0.roa (hash: MihJ/9Q2aOSD5kcM3rgBq2rOZB5XjrnOSNAyQ0gi6BU=)
                          6: Ff-r3-0iyLfe2eC4tftKl7r4ksA.roa (hash: XBCuFAzYlK+KS0b0qdNX4BGXCyC4kES1ua5iNmQkljo=)
                          7: Hd6EfoaV6nT3HCN6XaeOjid6KeE.roa (hash: jB+LwnmkqI7LD0NI0i2IOq5xZm+2j2nKXigXc5yngNg=)
                          8: Kdr1IpxFOfOedDgEd0rr_-GJc6w.roa (hash: 4mvPk5YCIebKrrCqmTuHh7apgwePzT2ptGjzqSnMQ2k=)
                          9: MPADllIHWdYho5SL9cNb4fTjF5g.roa (hash: 0EWuYNC8MZ5sfsDzG+GHQhkCofnYevzEpH/1M0Pt09c=)
                          10: XhfMqezXvZ9Gr1SfZAFxxiBLdqw.roa (hash: QCoblTw77lmvmm3xeIb8Fg5RScedsC6Svua+HgD7wlE=)
                          11: _363_dFkTrxVWJRfmKGhVcGEYxw.roa (hash: EFI43I2qKJ1jnWCRyPrzhjddU2bZAD3g2m1Gb9lWY6w=)
                          12: aIC6ROQmIBkJtMQV3BLilIyM4Jc.roa (hash: +ZDiWP7vx5S7AAhHLcn6ylil5bTpyx1nO3rHC5JU56A=)
                          13: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: Wwao5dpXfc0ZrVlrCM1ISn8gfR3dlrc+ElMFRBmnZOc=)
                          14: irOUAsVrlxFg5m013u0wtydduUU.roa (hash: z7Yif2k8ig/75nD80USkf23TbWyOlu3D9+tkTdBp9Ks=)
                          15: o5T0k_44TSkIgUx_Ff4U-HFRZqU.roa (hash: IFaPUBy92F06F1cq2klHPE/ZCTKON9EkjF2KsBLKJXw=)
                          16: q9StAyu8IQxQODGldzud6Hz7gjM.roa (hash: HxF/ydsfM4P76p2qg7HDS8Ct7rDXryB8JaDzIZFolV4=)
                          17: qSlaLn-7EYhvBs__DrzBebluApA.roa (hash: /m9RdlfwCPFmSdntKKJTP1sX7ETuhSL8wJhpD8u8EQU=)
                          18: rgzdAffmWWAVB7HsZPyDscdDfUs.roa (hash: PHFUtB9FTI42HYVNCn11UAKgdzJHvZkAvCdcalSeSVs=)
                          19: vyh_XE53itxxZ2DN3zJiSHad7oQ.roa (hash: BwwJTDqClirjAI8z/+dm20U+LpRGL9usTj1KRJXE4gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2f:dc:8b:20:98:f2:86:67:2e:fc:5b:c3:50:e1:42:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
        Validity
            Not Before: Jul 22 02:00:39 2025 GMT
            Not After : Jul 23 02:00:39 2025 GMT
        Subject: CN=ef877a1c8991593666bd2b331028616ad242594c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:ee:f8:ce:aa:f8:a1:0b:56:ca:b0:73:3a:
                    fc:35:60:c2:42:dc:b9:f6:60:ff:8d:cf:b2:e4:a0:
                    e4:d9:35:d2:13:40:31:b1:a3:7d:8d:05:75:34:2e:
                    68:b9:9f:13:ab:79:b3:19:0c:09:fc:0b:46:ad:8a:
                    01:96:25:59:08:3b:a5:d0:04:4b:b0:df:ad:d5:9c:
                    bd:21:ed:45:e8:1d:71:e8:63:29:ee:7d:21:51:c8:
                    68:19:e4:64:cd:8e:2e:64:d4:ce:c4:b2:ff:31:05:
                    4e:df:a3:6f:b6:a6:ca:59:be:dc:cf:b4:c2:b0:ca:
                    cd:6f:0a:e1:2b:5a:10:96:ee:ea:14:2e:03:e3:43:
                    61:07:9e:17:87:8c:e3:3e:5b:e7:34:de:fb:5a:fc:
                    66:09:49:c3:38:f1:81:1b:c1:97:f8:d2:46:c2:26:
                    a9:18:e2:56:6b:99:42:0c:46:58:1a:33:14:0c:12:
                    aa:98:54:9d:e5:a6:d1:32:85:d4:da:67:1d:8c:cd:
                    ed:34:61:5e:13:eb:76:14:8e:4b:c1:07:99:42:62:
                    ee:8e:ac:ff:d5:c3:14:9c:60:0b:f4:a7:0d:96:d7:
                    ed:17:9f:80:70:5d:a6:7d:65:97:86:b5:1f:0d:08:
                    88:1e:5a:ec:28:84:f2:f1:86:d8:16:b8:b0:2c:60:
                    eb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:87:7A:1C:89:91:59:36:66:BD:2B:33:10:28:61:6A:D2:42:59:4C
            X509v3 Authority Key Identifier:
                keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:80:1a:01:b8:73:9a:eb:49:eb:b0:70:6a:3f:d1:bf:47:ae:
         d2:5f:c9:52:59:f7:91:88:0b:2b:2e:07:92:97:d1:84:a2:fc:
         d6:b7:7b:1e:94:e8:93:7a:b2:08:09:d2:76:41:66:2c:8a:ca:
         2b:70:33:68:ca:2d:26:34:b8:02:5c:97:8a:62:29:00:c0:8e:
         f4:6f:1b:ae:2e:68:39:71:f0:9b:9c:aa:04:76:19:07:b2:09:
         93:10:ce:b4:13:cf:05:b0:66:0c:4e:d6:db:e1:b3:02:f4:bb:
         e1:57:d3:79:50:c9:0a:00:33:3c:e9:5b:7e:25:54:50:44:17:
         d5:75:0f:37:7f:0b:9c:00:27:46:a5:9e:73:c9:ec:4c:2a:51:
         9f:18:9b:85:ce:07:57:07:c7:93:a0:c6:dd:03:71:15:9d:9a:
         b9:25:22:6c:16:5f:1f:a6:23:49:e9:81:2c:6d:91:78:a8:ea:
         c0:fe:cf:90:6a:67:94:b6:3c:7f:d8:80:cd:5c:5c:e7:b0:74:
         f1:a0:9d:03:5f:65:c1:6b:3b:63:10:92:88:18:5d:70:85:90:
         e6:04:a8:de:77:2f:5e:3b:dd:0f:05:03:1d:74:d0:9c:80:1e:
         e7:5c:12:b5:89:0b:ec:d9:8f:a1:f5:20:ea:dd:2c:e4:21:3a:
         58:c5:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:45:06 2025 by rpki-client