Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          mVsL63AC7dTh9Tzl8zjf/JBBfFvdNO51bbqZ1VOWAJI=
Subject key identifier:   8C:C3:33:F1:45:3C:0B:98:E1:06:DE:A1:06:58:03:B6:A1:B1:3B:71
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       01983081B477FF2C45EA9EC586D80A913423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          063C
Signing time:             Tue 22 Jul 2025 05:01:03 +0000
Manifest this update:     Tue 22 Jul 2025 05:01:03 +0000
Manifest next update:     Wed 23 Jul 2025 05:01:03 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=)
                          3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=)
                          4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: SvXEygRVoF+QjlDeJRAniNlNkEvZLc9IhT5ijBgWy5U=)
                          5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=)
                          6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
                          10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=)
                          21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:30:81:b4:77:ff:2c:45:ea:9e:c5:86:d8:0a:91:34:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Jul 22 05:01:03 2025 GMT
            Not After : Jul 23 05:01:03 2025 GMT
        Subject: CN=8cc333f1453c0b98e106dea1065803b6a1b13b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:25:05:4a:79:40:2f:81:7f:8c:29:e4:82:
                    9e:db:ee:b1:9a:92:e9:06:f5:6f:15:6e:65:45:9b:
                    a8:e6:0d:c4:52:0f:e2:1d:d9:c1:54:1f:33:cc:c2:
                    85:4b:a7:88:44:32:86:72:a6:89:f2:ce:0b:c7:04:
                    87:16:37:d0:92:a3:e0:8c:14:d4:27:47:ea:ca:cd:
                    1b:1b:34:33:d3:e0:5a:76:4f:95:d1:56:b5:d2:f9:
                    de:10:ad:05:d5:14:21:f6:d9:c3:14:ef:ac:52:4f:
                    81:75:b8:df:f3:29:07:25:8e:41:2a:a8:7e:fe:1c:
                    63:81:66:8e:41:c9:3c:f4:98:05:57:6f:76:bf:fc:
                    de:c7:d0:04:61:dd:01:ef:b7:aa:ec:a3:ef:c0:73:
                    58:d9:20:5b:34:50:f0:f3:77:17:fc:26:96:14:b9:
                    ff:85:b8:0f:36:0a:60:b4:b6:70:9c:15:bb:34:c1:
                    c9:84:02:8a:7e:7a:71:45:16:08:b1:cf:a2:53:35:
                    c9:71:ad:3f:ce:29:44:ef:4c:d9:59:8b:c9:2b:94:
                    2c:35:9e:23:41:db:31:41:b5:3a:78:7f:f2:35:55:
                    23:e6:6a:41:e4:23:ce:03:61:a6:73:dd:f1:5d:f1:
                    4a:44:9b:e5:92:01:d4:39:5f:6a:e1:54:a8:7d:b6:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:33:F1:45:3C:0B:98:E1:06:DE:A1:06:58:03:B6:A1:B1:3B:71
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:33:0b:28:80:cc:1e:b4:57:58:12:3f:c9:93:4f:73:51:c4:
         b0:31:3b:c3:ec:c8:de:df:5a:49:02:8c:f0:52:72:ff:ef:8d:
         08:64:16:1e:73:37:09:39:e1:d7:91:90:ae:ef:c1:54:4b:ce:
         79:6d:6f:9b:be:46:6b:07:ee:aa:b8:c5:8d:01:1e:5b:fd:f9:
         c7:32:a3:58:7a:8b:66:0b:7e:8f:7f:00:3f:be:7d:c1:66:75:
         72:98:44:23:56:1d:7e:23:fa:ba:83:d9:40:59:c8:98:f0:83:
         53:31:41:8f:3a:b0:3d:47:1d:ec:31:cd:e1:ab:17:88:10:32:
         18:3a:d2:43:35:28:6d:2e:20:3b:57:2d:ce:0a:c6:2c:55:61:
         20:34:bf:56:eb:3b:29:c4:67:ea:32:f4:88:80:61:44:24:03:
         fa:35:59:d2:17:ca:5d:5a:6e:f0:a8:59:08:64:89:02:ee:ab:
         4f:5f:d9:ea:f0:19:28:7a:3d:41:cb:4f:83:30:9c:82:91:db:
         bb:41:99:ba:44:ec:b8:96:ed:57:e0:7f:ff:eb:1c:33:4b:32:
         4e:5e:a9:cd:5f:d8:4c:0a:02:6a:d3:ec:ca:0a:db:d3:db:5a:
         e2:5f:a5:e9:f2:aa:4d:82:6d:5d:7a:95:26:41:5d:01:dc:2c:
         bf:03:6e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:07 2025 by rpki-client