Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          gDZbi3fxNci085Er/vHxqZrd5ZHOobwG1LfXqN1Npos=
Subject key identifier:   61:AC:98:30:E5:DC:10:54:6C:B6:F9:4C:B2:92:D1:38:6D:DF:35:34
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       01983A295648B1BB4A32F633B0C97A119478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          0641
Signing time:             Thu 24 Jul 2025 02:00:44 +0000
Manifest this update:     Thu 24 Jul 2025 02:00:44 +0000
Manifest next update:     Fri 25 Jul 2025 02:00:44 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=)
                          3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=)
                          4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: yCbm9rT+enqXFvNIZkDOm5s6eCPIhalRB3mK0d+PZ6g=)
                          5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=)
                          6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
                          10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=)
                          21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3a:29:56:48:b1:bb:4a:32:f6:33:b0:c9:7a:11:94:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Jul 24 02:00:44 2025 GMT
            Not After : Jul 25 02:00:44 2025 GMT
        Subject: CN=61ac9830e5dc10546cb6f94cb292d1386ddf3534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:ef:05:20:8a:ea:09:39:1e:4d:fc:ab:c1:
                    09:04:3e:96:02:f1:b6:82:6d:58:df:60:d1:4a:d2:
                    50:a5:0f:f6:81:9d:ab:6a:63:de:1d:5e:d0:59:c3:
                    aa:4b:da:9d:06:9c:6f:de:92:fa:17:25:ae:25:2a:
                    86:df:a1:c5:b9:00:77:5e:1d:ce:a2:e2:75:87:8c:
                    57:ad:b3:be:ac:6c:41:74:a9:22:fd:ca:f0:e7:49:
                    88:91:cf:97:bd:27:b3:14:d7:00:cc:df:03:9b:a3:
                    37:50:07:55:09:5c:8d:c0:fb:42:1e:da:0f:9c:77:
                    5e:35:9a:eb:e8:c6:76:1f:ff:a8:bc:9d:7f:06:75:
                    69:b9:d4:cd:38:14:d0:bc:c8:5a:e4:ae:a0:74:70:
                    2b:f0:5b:d9:f8:c7:c6:fb:cf:c8:53:bf:c0:a8:c5:
                    e6:bc:91:a5:b7:87:17:8a:73:3f:1b:ae:d7:1f:53:
                    19:e8:48:d7:85:8c:a1:1d:79:5f:26:7c:7b:80:bd:
                    17:10:11:15:e5:ce:fd:5e:27:31:7a:53:ed:9e:5c:
                    fd:f6:3d:e7:31:9d:fa:26:b4:74:cc:62:6a:0f:12:
                    48:4d:af:0e:8c:7f:42:3c:76:34:44:a7:4f:c0:29:
                    c2:b4:90:48:b0:91:03:d1:10:3e:35:a5:aa:ba:8f:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AC:98:30:E5:DC:10:54:6C:B6:F9:4C:B2:92:D1:38:6D:DF:35:34
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:18:33:f8:15:d3:7e:40:e6:25:cd:70:5b:c6:5f:61:ee:0b:
         c1:e2:aa:b7:e3:59:d3:cd:6e:82:d8:df:99:ac:df:2c:42:3f:
         4f:c2:b4:d7:af:32:4d:2c:51:e0:49:18:56:5f:2d:c5:1d:4b:
         19:e7:36:9c:e5:73:65:10:a1:d1:b7:b3:08:0b:97:3b:e9:38:
         37:0b:a4:22:79:d0:e5:81:d4:f3:51:4e:fc:db:52:10:e1:da:
         94:88:13:da:a9:97:a6:cd:b7:48:c6:35:bd:3e:5b:03:a3:97:
         46:f0:a1:ae:c2:da:6c:f6:32:57:c3:2e:d5:6c:01:c2:ea:bd:
         ab:7a:ac:33:98:17:11:5b:59:2c:5a:1f:26:7b:d7:73:86:90:
         58:95:42:e6:ab:01:62:fb:01:b7:bc:d4:79:2e:65:ca:f2:6e:
         b4:5d:43:98:23:0f:6a:0d:4c:ea:65:ea:38:45:29:76:8d:c8:
         88:38:a1:62:1e:71:b4:a2:b1:3b:07:0a:66:f3:38:ef:6b:ee:
         75:7c:fb:9e:21:4b:bc:4c:27:fa:91:e2:b3:4c:5d:25:2f:c9:
         84:77:dc:86:90:29:dc:7b:68:34:86:a6:cd:1b:7f:f1:4d:cb:
         dd:4e:57:a9:43:5e:d3:8e:99:a7:10:c7:60:e6:1e:33:fd:e8:
         47:a2:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:53:01 2025 by rpki-client