Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
File:                     1FvfbuwINwrh9n6D-Ztawf4mhyw.mft (raw, json)
Hash identifier:          tAiqtEvMirZE5EXlFOpxGpaFGRBmuH//jxa9gdiBf3U=
Subject key identifier:   0A:2A:BA:CC:31:90:FE:12:AE:45:5A:07:5C:BE:7A:68:06:48:16:3D
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Certificate issuer:       /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial:       01982634871B90193B0F39B00C19FDB0F8FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
Manifest number:          14F3
Signing time:             Sun 20 Jul 2025 05:00:33 +0000
Manifest this update:     Sun 20 Jul 2025 05:00:33 +0000
Manifest next update:     Mon 21 Jul 2025 05:00:33 +0000
Files and hashes:         1: 1FvfbuwINwrh9n6D-Ztawf4mhyw.crl (hash: cMq735p3Yl3SOkNWvXra2PbVF2Tn+2nnHI5c4waX4m4=)
                          2: 1_JtUKQLPWz9u2TpyC3nMGURY20.roa (hash: Wk8ZEHj9AIscMXK8mYfLsgX9jT9ZJe3LFRxYlFlOwI4=)
                          3: 2nNl06L926tpu-eizOuvakD8Je4.roa (hash: +r/Uhc37YqFAQFWjHwUqpgACDgdHteoXbG5h5c0qhpE=)
                          4: 3i6rRzwRAyL8k-_zT-rTVQEK8XY.roa (hash: 4iT89VLbK4uPJ8JymUXHc+66RpPLsbOLFKoAxBgeg0c=)
                          5: 90hJmYT4NFNzXCPpXd9gE9yj3yc.roa (hash: 4nzWqW1vS5cDLDVGrmlpycQ2lErAAx6OQU2Ja7pMxc8=)
                          6: 9yzy9mXpMQ5QD-YDg0Uyb2L5Y-M.roa (hash: DeAtCCdYZGVu5n0NKHrjXKiWtA5FfUQuXNktD8qHN04=)
                          7: Bgie4uletGTt1-f5EKp13oAzi5g.roa (hash: +Zqpn9eBAz8IYSFKeNWt++qJBGRqa3DAHmk8TV4MTeY=)
                          8: BoY6ecLnomqtJE4tcZbTfC43iHk.roa (hash: b0GbBUb3VdKpAY4o2+rPThr/XGWjBAtFIKp5H8A28AU=)
                          9: HWRfwwUHGiCsW4ujivKMbl64CMo.roa (hash: OUqr53FPdKu/lL3SlbD2T0S6JtdXcVU9Yi+hFo6WAmM=)
                          10: KrSdqZJ9g4_TolHAPc4gdVah48o.roa (hash: 7a6nEsL//j3yVCJtE0m7gmgaFNS8edSSaGou69eaNj8=)
                          11: LP3S8yG78mlyy4YptZOknyOysGE.roa (hash: 0+igggl45rj1b8cbeEOw0L/RHpnnLwH/Y+kcCj9TGvc=)
                          12: NLV2XXoCt3Ea_fW1DOx4xTdovVQ.roa (hash: 5U/uHStcgoigbCdytI5QybLLFuHsVatX5XmpoglcCjw=)
                          13: QF4rR4F7HpcaZiknwA4tgKpftVg.roa (hash: XiCBiHTD/9Mvk7CofJ1Duq2MXC4h5SkMeL+15pekdCE=)
                          14: Sb8mURdcC3DoVAmZvFl5Gj58_XY.roa (hash: NGjgFjukEoaeag2V1w/HSmfenywGjZ+2HUhJbf9UJdA=)
                          15: SxZgVrwPLVPP4WGPTdjXBtfYn3Q.roa (hash: 9Bx1C/yxfuIhMgrsaUbOEmokYJ4V0JW++hHPNuP4D3M=)
                          16: TiiDOYmbbq5aprQgzhYqW-_adjA.roa (hash: Wj4aJ+Nw7QdlTjFHmiYIFTSRfin7So6aCEpwmDLL94I=)
                          17: b-m7-fGqmSKwlmeu_jBhubGJQ3I.roa (hash: 8X15bE+eAPzAtZkXDXahldI93jt61sBvabKA5itVSK0=)
                          18: eMxQvlxuXq-QhbM20BkbgN34KqU.roa (hash: 3l8okw4ratySApflXEG/yN48vccU+2E4Qmh6Vm5wB2Y=)
                          19: grbvAfQZBvvmBwD-n5UtQo9gae0.roa (hash: 5RkDuYHpBBI7p9hzsHfKTqAcsRLmPW3AsnDHqW4xccw=)
                          20: h2dNJtWtnh7jF4yiiHb7hgunnC0.roa (hash: QiuEBKr5ki+GdfPR+vewDX1RrlUcG9USLmKMuO6nW0c=)
                          21: iWuL7EAPk1i4562WAAnpIIisfrg.roa (hash: fv7JYcv7fyDkQW+tPgocP+7W+7d2yC1pX80z2ydzaJQ=)
                          22: j_hZBI0fqiAEG2kHXFvWv5K06gc.roa (hash: P1jzIhieFk4vzFU7Y01+n9OGl0IG6FLjVhdiUznDNXw=)
                          23: r4jElKUXDSFmf7k9qfdtLfuCZQc.roa (hash: vjH6W3AUmmd9vA+QJQoNonGjoT4Pr1wH07Nk2vQDNL0=)
                          24: tm6nPkefp_7Sfp5JzXIBvoDYr4k.roa (hash: EXzf0PgTjjqDBwKS1vdWyulgHoaEhgZCr3wXfgWuxT8=)
                          25: vnS2dkqLHJApAGgrfb1yxQg5Jvg.roa (hash: wDj9+aTT61+lEBUErhb+uIeUYdZ236kEqpOIZXINNpg=)
                          26: vtwn2j1lYyBVF_dsIsNce6M08QU.roa (hash: yFQk04afmJ1kMkeswTIKZTL619zxKn6tF1V6IqswFW8=)
                          27: xLjbHEWN70CSSo5YEnWEs0-bdWY.roa (hash: uLbdfrsxdbii6znqxvB37XvHu1V1AwB0eJioY3VsJkY=)
                          28: xiQI9wb5Vmhp2H-a9gzDcGY5BXo.roa (hash: Gj567A+XwwphSIr0QUg/ooKHOAmNMmhZaIbIodkc2Xs=)
                          29: yG_twx-dd9H2XjWAlmDs6-1PhvE.roa (hash: 5jGa/GdPOThFJN5xgl//Wg8pp0KI4oShZg818sdGaco=)
                          30: z7HYTB2hGoW1AShEaQb1U871Z84.roa (hash: ngGTtp/CncvVOQzNoBg3eEBtSOLtzKK9yQlfGVKsf1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 05:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:26:34:87:1b:90:19:3b:0f:39:b0:0c:19:fd:b0:f8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
        Validity
            Not Before: Jul 20 05:00:33 2025 GMT
            Not After : Jul 21 05:00:33 2025 GMT
        Subject: CN=0a2abacc3190fe12ae455a075cbe7a680648163d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8e:35:75:e7:4c:f4:a1:49:1d:d6:f0:0d:34:
                    5e:ac:71:65:da:31:d0:e2:6d:52:da:c1:01:a0:50:
                    d3:48:21:ae:76:d3:94:a2:8c:d5:83:dc:29:29:9d:
                    7c:71:3a:9f:93:87:fa:54:19:8c:b2:a8:92:34:7b:
                    95:ee:91:13:cc:b7:53:0e:e2:86:e7:dd:1b:d7:1e:
                    c1:38:c8:6b:1b:54:28:87:9b:60:50:03:4b:4f:cd:
                    08:8a:dc:36:ce:b1:3c:97:67:06:af:ea:7d:9d:fd:
                    b5:21:f2:ce:84:72:7c:5a:2c:1b:88:e2:52:8c:dc:
                    b6:87:58:5f:7b:6d:20:9b:00:4a:5c:4d:ef:bb:74:
                    3a:3a:13:a8:de:f5:4e:a8:c1:32:9f:cc:a6:b8:93:
                    d0:30:67:5b:7f:44:79:75:4e:64:12:00:d9:49:07:
                    b5:27:af:81:e2:e9:25:e2:e6:ec:2d:76:2d:8d:78:
                    cc:10:c5:f4:5c:0a:1c:66:1f:dc:8c:b8:4a:e1:1d:
                    0b:5b:c0:d3:c7:85:31:f8:f9:79:02:0f:01:36:48:
                    d8:2f:45:db:f1:18:11:fa:db:29:13:a4:fb:58:92:
                    9b:fa:7f:74:5d:6e:dd:ca:d6:cb:8e:84:ce:b4:5c:
                    56:2e:45:6b:9a:47:a5:09:7b:21:d4:1d:a4:ba:2c:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:BA:CC:31:90:FE:12:AE:45:5A:07:5C:BE:7A:68:06:48:16:3D
            X509v3 Authority Key Identifier:
                keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:06:b7:cc:f5:62:c0:d7:1e:17:0e:74:0c:f6:a5:75:11:
         4d:b0:81:a0:a2:88:16:02:4f:b4:f0:73:43:17:55:55:38:9c:
         bd:1f:d6:07:26:96:c2:78:db:9b:34:09:b1:f5:23:b0:b9:f8:
         88:a9:b6:c2:b9:0f:d4:cc:93:6f:eb:0a:ec:5a:8b:57:6f:2c:
         5e:8b:88:bb:c3:ea:b8:58:2b:e1:2e:62:3e:ef:1d:c9:03:88:
         6a:53:46:8d:3b:ea:63:be:ad:8d:b0:64:ac:77:2b:62:d3:df:
         8b:93:17:42:ec:67:ec:ec:45:5c:e0:ed:14:67:e3:af:32:99:
         76:20:c0:b8:f7:68:b5:c4:fb:22:2e:64:2c:79:52:8a:f8:40:
         2d:93:07:86:6e:cc:f7:17:07:ce:85:52:aa:a4:dc:05:17:e7:
         d9:fe:b6:35:c6:d0:d2:a8:4b:36:9a:28:8b:e0:37:48:91:fc:
         72:9e:8d:54:cb:b3:ae:df:44:0b:54:83:11:2d:15:04:2e:77:
         02:b9:25:a2:0e:71:d3:81:c2:e7:b8:0f:28:8e:6f:bc:b1:cb:
         4a:bb:44:bc:e6:44:45:c9:46:3a:4b:d1:db:ae:f6:dd:8f:40:
         5f:66:ff:4b:90:36:05:e8:7e:09:e0:46:85:55:be:5c:74:70:
         fa:e4:39:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:34:35 2025 by rpki-client