Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          FdjVaGuTvD0mBkzgN99wQS3/ntqLpkK1JtxxzBupk7U=
Subject key identifier:   B6:44:27:8F:E6:79:E3:CA:6D:D2:0D:53:1B:BE:D9:A4:0D:C0:DF:D1
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       01982D12E479F6AF98C2F562CDF6E8349762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          165E
Signing time:             Mon 21 Jul 2025 13:01:09 +0000
Manifest this update:     Mon 21 Jul 2025 13:01:09 +0000
Manifest next update:     Tue 22 Jul 2025 13:01:09 +0000
Files and hashes:         1: 00WFumzQ3KsIQYPaPK03cpM1kM4.roa (hash: GN1uo4GkRVa1gYEF5uPaaGFTUCUjT8T7qz9MDmrfrD8=)
                          2: 0a-KrfdskF1P1eak9gMq_rpHwLQ.roa (hash: 1r6R/eLHp6yqNJSUm5rRHogfjj+timL04ipzPj2uofE=)
                          3: 1-z0xCJwtZ7oNjVyEZRiUl707L_U.roa (hash: kH96KZu4zVwqWimn8lprbltf+L6jN14xGOOzu5+uka8=)
                          4: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (hash: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=)
                          5: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (hash: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=)
                          6: 8HMlEMu_BSHgTuVZxYXkPOUH-XA.roa (hash: nzR0epdeX2+WJtESwgq5prAKeUM2fNXd9Y9hluvNjBg=)
                          7: EU4QWvJeKnbJ2gVJ_l-zXW58tiI.roa (hash: 2GTsiEN1pVkfT8wxoGUw+kBia4yRrXQI1p3cFmoAfU0=)
                          8: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: QvcxU82pdgkBHZ/VS3oB7KNZxrtf4+g8VF5WKmOdcd8=)
                          9: F2_wmuIlF_Fr4vPu8BktVcIEbJc.roa (hash: C0sIjHqlElpVFUnaeluaj4Gkav9vDU7HqpMYLEQ16Xw=)
                          10: IZW8Cqwr_D-Po8j-rY2wg4gV9R4.roa (hash: faXsZmEmW7RzlcMaOmIqHP7qeNNDTUksCHYYQluTIl0=)
                          11: JY0sVxRmdyc5WAgUY19lxnxmM4I.roa (hash: 86gvkJrlTS8XF8/W3CjtN+tW5tBzNGMNDhj7XFXK96U=)
                          12: MnZ1UPaVCGVHsNlWr6g8E6HAsqk.roa (hash: FH915nFqYYP34soWy98+e7VhhgoPoCqjvzoYA7ew36s=)
                          13: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (hash: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=)
                          14: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (hash: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=)
                          15: PICG-s3Q4YZkop6Z75tQ1uqUjjc.roa (hash: RYwj25TTRgCRFd7rjmY1yuMhB2tlpTJT7SA0DAX0bR8=)
                          16: Pv-j_xb12EoFL0KNBNjL6M9JeGE.roa (hash: M4QfE5BRH6sL/kzaNewIcbpvUYFUCu0wLgQkXw6CEIw=)
                          17: PyyzXUdlmoA9Bk7oa0uF75YdupI.roa (hash: KrKiurvSNPj8UgpNpGVtpzLAre3QiNcGoEwUhT8E1Zw=)
                          18: RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa (hash: fpJ4KH8CMslY9U5qvXp1614yNP772K6f37C+wQxE5Ec=)
                          19: WGVFdHdOhrZ6oEGNKaADeEDXEkc.roa (hash: upyn2YAU1bBK3yksfLZUYvn/2Yyr6nO1tneR3QTm/D0=)
                          20: WNxwGRqjvkzEEIFtJUKhx8EpDnA.roa (hash: NuJcsLFQveWA7JrekR32MafYf69Fr1QL8arEGvczy7k=)
                          21: WdrQA2XxuRSob5fch_vmulfj1p4.roa (hash: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=)
                          22: YshAp7kvzSEqzUAJqYQaXPlimXM.roa (hash: 9wAijCHBf70P9HVKz7vJxcgO3NSgfGywCSLu5rKQFcc=)
                          23: dcujdY7nZpLDRD7umvphEez-qpw.roa (hash: DCDyLYPDKXFLZDtPjhfGEgVVy0YwKX5izGR8g7lqUrY=)
                          24: gg8zzgS55uq5P6kGkuaJFoKcCTA.roa (hash: nEDs7oqRrIVyofxdHlPaduwYU8FU0iwSUVYcN9fZIC8=)
                          25: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (hash: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=)
                          26: pHrarVnk95oQe2hI0xpt7DgCX4I.roa (hash: sJ3eEhOn7jQjhfcoZ42EdbEeYJY/zzcWxgg/rji7kDE=)
                          27: pxErwoucWB8yQbaQqe1v45Sxb10.roa (hash: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=)
                          28: ul3uv5hec5ukIf7FCGeau4nCEHc.roa (hash: pc0UTa1zNFc4D1XbCiXp6Zxm7lOslpwK+C/ygH0+nGg=)
                          29: x9hv5VI53E9lfmCoCZYbXA2hByU.roa (hash: /EpYHmEUvDFytn2JV2b/puVDndIWdyEA5WbCaF8KMCM=)
                          30: ys8EEYV9duz4vQMnV4A63KTELEI.roa (hash: Mzw/QCxXFE0BItwPGjx2i5l7tZTi3Kn7VnGnniz1APM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2d:12:e4:79:f6:af:98:c2:f5:62:cd:f6:e8:34:97:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Jul 21 13:01:09 2025 GMT
            Not After : Jul 22 13:01:09 2025 GMT
        Subject: CN=b644278fe679e3ca6dd20d531bbed9a40dc0dfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:a5:89:54:97:89:bd:81:d5:f2:e8:e7:f1:
                    de:ef:61:22:4c:b9:31:7e:e5:1f:e8:29:3c:51:d8:
                    7c:49:28:a4:2a:64:ba:cd:20:dc:b5:1d:fc:1e:68:
                    d8:a4:b0:b2:0d:f3:69:ce:77:ea:5e:f9:b7:40:36:
                    f6:5a:b3:f3:58:02:a8:8e:a0:82:58:7a:7b:71:8d:
                    e0:74:b1:0a:9f:72:81:0e:06:35:df:12:79:5e:dc:
                    52:88:c9:e2:58:36:37:c3:89:ab:f4:ae:6c:38:c5:
                    e2:ef:ed:db:b9:92:f6:77:52:12:6a:64:7c:b8:b8:
                    e4:e8:70:e6:88:08:b9:2b:55:61:5b:e0:a8:9f:cb:
                    9d:58:84:70:5b:fc:75:8d:2b:8b:6d:94:43:d1:70:
                    27:a8:a9:44:b1:a0:d9:ed:21:b3:4a:1e:9f:3d:4f:
                    29:f6:20:b4:fc:9a:4a:05:61:ce:e6:a3:32:85:81:
                    29:78:18:9a:d2:04:ba:dd:5e:35:aa:ad:4d:ab:8f:
                    6a:3b:d6:80:4b:1d:7f:4e:b4:d3:bb:4c:db:6c:fa:
                    2a:9b:d2:0c:45:b1:d9:ef:a7:f9:be:a0:3c:8c:dd:
                    cd:26:f9:c1:9d:01:6a:06:4a:a3:1d:8c:67:16:33:
                    7e:6e:af:b7:f5:94:35:82:ec:e9:35:0f:65:3d:11:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:44:27:8F:E6:79:E3:CA:6D:D2:0D:53:1B:BE:D9:A4:0D:C0:DF:D1
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:34:02:85:84:b8:81:16:8d:05:4f:b3:3e:2b:65:37:01:dd:
         1d:70:f7:0d:2b:48:fb:5f:9f:1d:98:12:75:8b:c6:3f:81:a2:
         99:e1:b6:02:bd:75:f1:96:67:06:13:45:2b:05:e2:97:fd:36:
         48:31:4e:71:d5:d4:85:40:80:26:af:09:d5:bb:7a:b8:c8:4a:
         db:41:82:06:76:05:c4:47:e7:d1:90:d3:72:d8:ac:94:62:be:
         34:fa:82:cb:3e:7f:f5:48:41:07:ff:1e:70:03:45:02:ea:92:
         92:53:5f:7e:dc:31:38:e6:70:cc:4d:e8:cd:cc:ab:7e:33:48:
         c5:fe:d6:98:ae:c4:2f:49:58:4d:13:45:08:00:c9:13:f1:f9:
         cb:32:cc:b0:f6:cc:8e:53:36:8e:e1:e3:0e:be:ee:a8:70:43:
         d7:cc:56:7e:56:92:c5:68:78:ed:f6:4e:35:b2:41:96:a3:8c:
         2a:a6:e7:0a:22:ea:d4:15:c3:ad:35:ed:73:65:60:88:5e:1f:
         3c:7c:f1:01:d0:fe:1e:be:b6:7e:e5:53:d4:c2:2c:81:ca:b9:
         a1:10:d2:8b:ef:3a:68:13:97:e9:84:dd:44:d8:af:47:17:07:
         95:7d:e3:37:5d:9d:2b:91:1c:ec:07:99:ee:72:c3:b8:42:6d:
         9c:0a:42:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:06:01 2025 by rpki-client