Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
File:                     ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft (raw, json)
Hash identifier:          UlvJKX78U2w7F8JcBNeFXY9D9MUxo2nWE3TEVpEZ1a4=
Subject key identifier:   26:35:0C:30:F2:9C:4C:C3:F9:E4:22:79:F9:B9:60:C6:B7:41:C6:22
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Certificate issuer:       /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial:       01982D80952A76BCA69CF1D8F80080601536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
Manifest number:          16F9
Signing time:             Mon 21 Jul 2025 15:00:58 +0000
Manifest this update:     Mon 21 Jul 2025 15:00:58 +0000
Manifest next update:     Tue 22 Jul 2025 15:00:58 +0000
Files and hashes:         1: 0SPY3ehqSJEunmmMtILqWyyAEMs.roa (hash: cgmnKIR+3Qr00X4S8IcJLsQ9ZXGxUN8YiwVkY/6EiLQ=)
                          2: 1-WBvajt9a9vMz3Gf-bxrEIk5KFI.roa (hash: ixOZ900fztMk7OjhYh4vnjfATcXP54nswes8la4aLuA=)
                          3: 4ukJa7HMkT7DBb2bYcfynHYUCtI.roa (hash: 50MwC4CJiyXyLJrN7qbX2kdlux7tIAVe2IdkMEIjYog=)
                          4: 56ynW-tMrHzaNsG7sH1wdFERI2s.roa (hash: IKfB0xjiL+k3DgvsHtHSeQu4uN+X+KGo7/petrFvOV0=)
                          5: 6gbYECNEsSZ7q4JdusnawAW762k.roa (hash: mnrnhi6Fsht+ntxveCOn/XM8T/ttUxP0oCf5rM/Eilo=)
                          6: 8_e44fwq9kNvIUDAMmdWVKedXYc.roa (hash: JPJXoz7dEfpt3vFSPPlkHuJK7aTOFYsiRL4CidoV47o=)
                          7: Asr7ZOWfpkDBSjuEfEx9OsDKyrQ.roa (hash: p+62UDWtfe7dh4HDC1QfZ3od4Dagyf7n7BasHemhJIA=)
                          8: B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa (hash: 0LrUFyOJZXBRyQDcmvsLMHIZlAZinGZnG68VlQ7rxjU=)
                          9: ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl (hash: WNs//cwEcYfg8ujx3BfxWVNnSqTeTwUxIvKOTIO0yLM=)
                          10: Gp66wYREOc1h9eDQ4Jl1zol0dGY.roa (hash: cbxRjqYTk6aDdWomh1V0dsmExBRlWyKb4b8IjMaBUTM=)
                          11: OCPVGl1peHlEh5xCGuK3bL8qTL8.roa (hash: ODjW3HaeaPU7MMPg1i99Po/ddkSUNUhgFTUigxFDscw=)
                          12: OV81AimBr3IOra2_186K2YQ6aZw.roa (hash: eliptKmQAe1v8DZ66jtE1QMS3zzrNLPVvZNounzZHMk=)
                          13: OaJSkzPg47mQ4rIOwkpdoPx8kX4.roa (hash: UyojqcoIyduZyG+Ubu8/4tRZIqXeRa/61802aE+vRWM=)
                          14: OxnH-QCkCEslVNXocuLLKnfnp68.roa (hash: S0ZtIf8Lp12rZKwey2FTUFixuzBQ/9TBGOGoR36+VO0=)
                          15: PDCQ_tcZw8HWtOvB4qdfFfnGv2w.roa (hash: rOsSzp/2Qn7zzipRULSHdV5Ez72cOtvODtaM0ekkqKs=)
                          16: QtkpYFVkfpGCc6muBgcymFsYmcw.roa (hash: cTasgEqCWORockiyCZ3h8oJtqhnmA7saGpgSFUUMyRw=)
                          17: Rh_lGayRGbOt5ieswPshE5gVHRQ.roa (hash: mC9VCpAqF4feJF5prCrA3SZDDjWRV8WzJ74r+/aLdvg=)
                          18: RvSq0f1_KH3WbOL8Dmljmap3ZVo.roa (hash: 5WZhQboymyKPaLswcG/VmWNce1ChWZNZjnINMA2NbP4=)
                          19: SJHvhaCpGVpEu19gR74F4_s00OM.roa (hash: QYvmEj267N2mBcF32kZnO8aAG/fQkwII3VAx268JC6k=)
                          20: TOO1C7Nfoo8I9jGT7tEPWovt-Dk.roa (hash: yJoNXkc40BQiMjXHd4+xV9gjbcua6Ni6TVwfda9wbCE=)
                          21: VQNQwkBf4DKiAyptu1NuzZNk1DE.roa (hash: KvtJJO5ZGQ49qNKAGMorGsOIb3EaRZS5YhJcNfPGvO4=)
                          22: VoolzUwqWdjT_6ym6OldKRkJu08.roa (hash: P83IslquU55GgGeVulsKAXE7c1EVmhXTqnamoFvTaus=)
                          23: W5sBzYpoHJtI8NA-fUrPIcsYmxw.roa (hash: Zjyo8aebwmo43iU7YPG0Rw8SBj65vOSaN9AeZRmqyVE=)
                          24: WAhJZAlTDUaB6vmjVLZqksIGzmk.roa (hash: Ik7C6qmxni3KBC9zQeT1wej9gtYUxK6ifPjNRKdWczs=)
                          25: XHgKjO38pNfBvguSYH5AzB6NU48.roa (hash: cLraLK0HrBC1+uwEoZJlLzb/oO0jxC4wj9o4Xo8AIII=)
                          26: f8HNGqYZ56HDzKMkA97HvxLpDaY.roa (hash: UaI0iT5qEh6DsVjN4hoPGEtmvVSAkZnS69Ts1ZSzz7Y=)
                          27: g8HopqbG0ETACMkk_zXl3liDZDA.roa (hash: IlJyMCJEwJhYKwqsXmSH9IsBc+u/zpqyYvsIqkn0FEo=)
                          28: lce29TxMLeElQDDpQ8Ij3c0X0Tk.roa (hash: 78Yo5skViqQdWGup+psFTOfViVx1RTBcrcCMhgyvzbM=)
                          29: o5ChnZN8Fh2UfQkol6pllSa8vlg.roa (hash: aGdO4WpQUBPqENnqKDVSzkgV5hoyIVh/xhrIeTDF4cA=)
                          30: rRKhiSrbatFvYmuo6ymeVxGwrXE.roa (hash: FCC1G1laSHKy+MJRui/+QVk4PwxHWgeFN/8JBKnvpeQ=)
                          31: s0Lr7YuNvhvXYPcKrrFVoUy-LO8.roa (hash: a5e7ib7Q/DgMeBDM9u9FOonj1h8M13aRP36qAw7iBFY=)
                          32: ucJ6oZ-NcbAXdgi6HJYOVyk08OA.roa (hash: n6wJOnNyXxPTy5zNsySY3nXhHxZ2SIbrK7swKaWaEp4=)
                          33: v7J0SuAlQFdaHot7td83uoznPPo.roa (hash: Ag0K9C9c2TlJAt8MNSulsrKBKAnHlI2lTalhgszhcOc=)
                          34: v8O-hmYnMSY31ejAOPQBw6PvlZo.roa (hash: n0/Am/fuQ0Bzlhu28NMtBIbpVUfZ8WWaeSJsXMS/dp8=)
                          35: ybt1ga0_vsN4KgTOqCIx6p76TyI.roa (hash: +Au68nUXgRDHemgu2ODT+EBUxbABQU2c90g5EDmI6o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 14:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2d:80:95:2a:76:bc:a6:9c:f1:d8:f8:00:80:60:15:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
        Validity
            Not Before: Jul 21 15:00:58 2025 GMT
            Not After : Jul 22 15:00:58 2025 GMT
        Subject: CN=26350c30f29c4cc3f9e42279f9b960c6b741c622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b8:9e:dc:a7:a9:21:d9:c7:c5:9a:60:fc:9a:
                    0a:d6:f0:be:39:6a:b4:6a:fc:3d:45:d0:20:c5:a9:
                    49:92:b1:85:b3:72:65:c0:df:1b:c2:3d:bf:e9:0a:
                    ab:d0:4f:cf:c7:22:68:e3:42:e6:21:ca:83:84:8b:
                    ef:6e:44:de:9d:73:07:38:a9:ca:f6:59:9e:59:d3:
                    26:e1:13:6a:54:7f:9b:b1:79:a1:7d:d7:b8:49:33:
                    90:c0:25:36:09:f8:c2:9a:14:a0:41:df:77:32:bf:
                    56:c4:67:d0:a9:46:4c:d1:9a:ad:86:bc:f7:99:e8:
                    9e:58:29:a3:35:51:e2:81:6a:67:18:7a:57:3b:fd:
                    7f:37:c6:85:a5:4a:02:00:40:f5:fa:72:47:0e:41:
                    89:ee:e3:ab:41:dc:28:7e:e4:1a:7f:57:b0:c1:6e:
                    5a:51:c5:c9:e3:97:c8:fd:81:ee:0b:fa:f7:1f:b6:
                    27:39:da:20:b1:a9:6c:04:7e:7d:4f:c8:9c:2f:82:
                    15:b0:18:c5:f3:35:31:87:52:7b:ae:df:e3:97:20:
                    4e:a9:81:48:69:1b:b6:c3:f5:65:c0:a9:bd:59:d7:
                    7c:75:c5:63:99:39:e6:eb:3d:9c:b1:63:24:92:8e:
                    6a:ba:0f:b4:60:02:aa:bd:40:c2:94:53:02:23:66:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:35:0C:30:F2:9C:4C:C3:F9:E4:22:79:F9:B9:60:C6:B7:41:C6:22
            X509v3 Authority Key Identifier:
                keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ff:5c:1b:02:26:9f:3c:84:d7:ea:cd:37:68:af:94:8a:f6:
         f3:f8:80:24:49:4b:b3:e0:84:93:8f:34:62:c3:e5:6a:f3:92:
         10:12:f3:cb:f9:9e:45:dc:d6:bb:b2:08:c3:ad:bd:07:67:a9:
         34:e2:bf:90:a6:94:f7:c6:42:37:a9:6d:60:fc:f1:cf:61:02:
         51:ed:7f:84:9e:41:71:e6:25:83:81:16:97:dd:bb:15:1d:79:
         10:19:c1:bc:04:97:fc:43:23:6e:2b:2d:96:d9:63:1d:49:1f:
         24:0e:1b:e6:e1:0d:f8:3d:b1:80:7f:21:a7:b2:e8:55:cf:50:
         73:08:2c:82:98:3b:e6:63:c6:a7:04:85:d6:8b:23:f0:33:d1:
         45:cd:ac:2d:8f:11:fb:aa:ad:ae:f4:29:ad:37:73:3a:52:bf:
         de:37:bc:fa:1b:70:f2:32:62:a5:59:1d:ea:5f:92:04:6f:f3:
         91:87:c1:8d:aa:bb:2d:fd:06:c2:52:0b:0f:a2:65:46:e6:2e:
         7a:05:e3:85:2f:b0:4f:db:26:72:c0:8f:17:37:c5:5d:1c:d5:
         af:23:90:96:f1:ce:61:3d:fa:1e:01:b4:51:fa:78:36:62:75:
         67:33:68:5b:87:f8:be:26:3d:e9:9a:8d:ea:98:39:66:ea:b9:
         35:fb:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:19:28 2025 by rpki-client