Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          Qur/I9T8gc6QqCjQTr2UforoVI4j8JIAzxvSebVQ6O0=
Subject key identifier:   94:E6:F9:B7:76:0A:BA:B5:0E:93:F4:E0:A3:59:AA:E6:8D:06:1B:D6
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       01982BFFB5C642E9DCF93DDDF472AE5324FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          1606
Signing time:             Mon 21 Jul 2025 08:00:35 +0000
Manifest this update:     Mon 21 Jul 2025 08:00:35 +0000
Manifest next update:     Tue 22 Jul 2025 08:00:35 +0000
Files and hashes:         1: 0GRCDt4fJ388QfTkHCpESDtsT30.roa (hash: k9OOgOfGm6/D5FgP/oCwjZmCMN3rSoxJmPb/amgvunU=)
                          2: 1-yKYajfg5LY4mvNwPfafD3WCloA.roa (hash: WHC+36zJ+PfduDAkHrQdjdBbj6qnsfp62GV4AEEhmh8=)
                          3: 16QrQeCpwuqAfGGNMUzWS0WBV8Y.roa (hash: bmMldajlx/sTBR7HO2a2fTU2N475J5MRbFTSSzzaMIE=)
                          4: 4EfNGR4wiWbi_y1y433ICACWCZ0.roa (hash: W3KUBln3jDDd0cmmpR54v75Ll2wQ3RHqXSQ0s5O+eAU=)
                          5: 6yOls-b1_zSEPoNekFa6o4CZVU8.roa (hash: 4upnvyLgri06Nt5KSgO8Uwq/0K4QFNyV2w+ngXB4/18=)
                          6: 8np9ht0G3b67t2N9j69khCA5swc.roa (hash: s5WWOQNVlSSecjPvMShY+13EouocPqyy6TUkRGLT9Sw=)
                          7: DYMRxMEMoWV3Z5tMWRgW1jHqK9s.roa (hash: 6wMdwoy8UyJzHKKarNEHW2Cdeen4yoziiPrTe9YFHSg=)
                          8: Dpy95jXaeVWXPozFztldShHCRU4.roa (hash: /YGR1d8dV4jSlropxf6JRB0rYbUE70tJU0k00P3NxfE=)
                          9: FguRz0zA5etvzxWwMxGIJgd6k9Q.roa (hash: bUHFCLBTCucLtw2+JrZ57cEqNMKllYDmKc3mR95hRPw=)
                          10: L2UCeVHHcg9euQRtLcEzhApV2UE.roa (hash: awT5trUmAy4FPSzNkgCSgldj93M9lPrOlgd5pOswERE=)
                          11: M66I0UzjQBS9vnsa6hJXUcQSBYc.roa (hash: V+buEBexkfH/z8IfHQHVN3d+jviM7gfofPkFusouHl4=)
                          12: Orn9mMECvNnMxcocGzjxOdoRHk0.roa (hash: aAMLejN67KDw/WEq6MTlllANPts4owmBi6ah/2ILaOs=)
                          13: WEP8t9A44--cEjL5pRqrcK4NrA0.roa (hash: elcme8pyEkMhDdeVhgtzdCn+oqpKZYwu+OBHtYqbN08=)
                          14: WH2mqCoP_fWwSJcPuGUkRGobwNc.roa (hash: 7ARLGzAANjQVfOe30KclN1L6S5EbZnzPNgQQS4I4lwo=)
                          15: X8C31I22e7AIAIjXdr_l8xIku6c.roa (hash: 7Qhdi1NeFgvJPaxWBB0us3PX5KoyYrtl9JfPmMsmHRs=)
                          16: aKC4Ve_rwXPA5F4UwLOqVSzUoxQ.roa (hash: C2m1c3bcRtr4/LzoB1kvIKIl5IupGv3jDqJQPFpHE+Y=)
                          17: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: b3/0BvCpbynVPhHruZ3qwljPH7R2RukmaBsGlpwbcww=)
                          18: itJrIiDbZUHX0hMzNvHagOk0kkQ.roa (hash: 93vrSgc7l73uP0vt9qb0d56TAGfuxzEHnQxV4M3Vt/w=)
                          19: nA8ldX9v5Ip91riXYh1Is3JlGWU.roa (hash: LGoPjUjc03K0F3TRSud6cQW/fDxbqmiVQ8elBoGls6M=)
                          20: nheDIdc7Ex5DQQ3yUWyXEO40Wag.roa (hash: QW76PsmZ19rGr3AHGvysCP+0ICfRHV3icfaUxRkR4IA=)
                          21: tjgASAOzma6f2Z7RoOryTeTZY9s.roa (hash: DpWY737dSZuYYOG9ZIqDhXCNF5lWUkY9/w4EmAF3fpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2b:ff:b5:c6:42:e9:dc:f9:3d:dd:f4:72:ae:53:24:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: Jul 21 08:00:35 2025 GMT
            Not After : Jul 22 08:00:35 2025 GMT
        Subject: CN=94e6f9b7760abab50e93f4e0a359aae68d061bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:cd:78:b1:c1:0b:fe:87:a8:1d:ce:89:91:c0:
                    09:6f:4e:9f:58:71:a6:1f:7a:5c:4b:c5:b9:8d:e3:
                    44:82:54:e9:b3:c6:3e:6d:3f:87:a6:47:a9:13:0c:
                    57:d1:ff:8b:fb:76:2f:f6:06:1e:e5:8d:64:27:1f:
                    30:2b:d4:e6:94:a6:76:67:8f:99:28:b9:48:84:c2:
                    66:fc:c4:0b:21:f9:38:6a:a3:5e:2b:9b:1c:55:c3:
                    ea:84:72:b1:aa:0b:76:57:4e:5e:e9:50:7a:3d:bc:
                    da:f8:7d:32:8e:e2:67:29:03:d3:ec:4c:71:27:02:
                    60:29:8b:ed:87:ec:94:7e:c1:7b:3e:1e:42:d1:1c:
                    ff:64:47:b1:1d:aa:af:26:e3:0a:92:0e:b2:e7:47:
                    80:d1:3b:fe:fd:ab:f8:b7:22:45:58:59:a6:6d:41:
                    34:0f:89:f4:b9:6e:e5:7d:3b:2d:8d:37:0d:4f:2b:
                    14:7f:1f:73:33:34:9b:b9:e8:55:6e:99:da:7a:60:
                    58:1e:c4:1e:17:fe:00:68:8f:81:53:f7:10:5c:71:
                    3a:22:80:79:b4:8d:41:9c:01:64:34:55:06:11:5a:
                    b7:8f:7a:53:ea:c5:46:dc:24:1e:e6:c0:ea:5f:7d:
                    35:b8:f1:59:0a:f8:a6:5c:83:c9:3c:67:8c:b5:c9:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E6:F9:B7:76:0A:BA:B5:0E:93:F4:E0:A3:59:AA:E6:8D:06:1B:D6
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:76:91:a7:f9:74:8c:f3:05:e0:a8:53:74:d2:cf:3c:ca:58:
         2a:5d:5b:2a:92:f7:88:58:28:eb:4a:87:19:d0:2f:e9:37:6e:
         0c:a7:57:b8:11:9d:ff:06:48:27:bb:90:4e:2f:7a:2b:01:24:
         28:99:5f:7f:ce:10:31:6b:4c:29:af:03:da:e7:51:00:92:5c:
         b8:0f:8c:b4:ec:dc:af:0a:e2:9b:71:70:df:64:7a:57:e8:ed:
         d5:9a:15:93:ba:3c:7b:20:de:de:63:f6:00:11:28:af:84:9c:
         0f:93:c5:dd:5c:6b:94:90:09:01:80:dc:9b:42:e1:0c:5e:15:
         46:36:dd:87:38:54:7f:24:e9:6d:16:ec:60:71:24:89:f7:9e:
         30:9a:b2:01:fd:31:c1:bb:44:10:22:65:6c:03:15:28:52:d0:
         68:27:61:f5:b9:3c:08:74:71:8f:f0:2e:b0:cf:c8:7b:2b:d1:
         7b:5f:0d:f0:d1:4d:ad:91:c6:57:08:a5:db:fc:58:88:d5:0c:
         b5:8a:07:0e:2f:57:1f:22:2f:33:06:97:37:60:cf:5b:9b:e0:
         17:43:c6:74:ca:21:be:1a:4d:9e:03:e0:63:91:da:e8:3c:00:
         2f:38:57:cb:e2:c4:d4:26:c8:16:83:a7:46:f4:d4:4a:0f:dd:
         d3:27:c6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:29:06 2025 by rpki-client