Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          ipsbrPTKIiN1ENC8nuJFSUgD14+abQxANaiUEB/jz+Y=
Subject key identifier:   55:2C:36:50:D3:CA:46:D9:9D:14:4A:1E:A3:C8:E3:11:B2:BF:D9:24
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       019846D267E27AF0AAE4C80BA2B3DB57C48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          0E82
Signing time:             Sat 26 Jul 2025 13:00:50 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:50 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:50 +0000
Files and hashes:         1: 0dU4nqEloVTcpEFXy475oUdUoRM.roa (hash: +4pYEKPa/Azd7C288MxT6V8nhRo2gQ9C9f/LKpJ2E7E=)
                          2: 1-b1uUe7cDgUrt3O4cESXQzwLGQ.roa (hash: 9R4woCA7+AwuSB5OUnv/Zt0yVaohvWvZyAFjNEcFpfE=)
                          3: 3xG70OjpGDqTBtiV7J7ymcYWBFA.roa (hash: NM1Xt/iOH+RmW3xgH3e/zgM6erx/P3+UNPyWgezEG04=)
                          4: 52gqmyCs4CgJ8hxO4adVAhEf4YY.roa (hash: XpLF/BJt6KR+R9bnvQWMbSq818F5Y+BHu0O++mZbSiE=)
                          5: 6X2qxBTvsCu1KGgFjFHR9uizprw.roa (hash: THkA0uqanR753o/JOdPq3eCkVb6ZWxt+PiJvED7/Lgs=)
                          6: 8HW0T0gkjxuqP-_rFWA6XvZFszI.roa (hash: yvdGjJhxvncAn0kSWkYpvMzmOc86v5+R2cMLIZsxEfo=)
                          7: AqFQoZ5tMcenZVTjwiA7wb5NyGQ.roa (hash: mIDD2KzFcnMgCK/1kzPsCL33au7Vs9+ruXIfYWsMf4I=)
                          8: CuWsHbgT_C2B1MpCzl3Tcnh7qDA.roa (hash: FydU5iTLeGKnPVKpFCTWxei80LuqHywDP80pxMyuq9w=)
                          9: EV8C5U1nh3UWRVZyZWy4C7aXG3s.roa (hash: Q9qCtjkY6ZONgmktoZ06EQ20f3d6KCx1NRtILOVyIkI=)
                          10: IDk9MhfQceeWf9Aau-Lq0fZ-_CA.roa (hash: xOkvkF2fhOLphDe62JH2DeSLHq9CCUD041TbmVLDc04=)
                          11: I_zTEANA5HgNFK3xcWmr5JQSd4w.roa (hash: 8kt6pXomqbmYP20u6DRlj+fZL0R8g/8XjkQCzdnUfBs=)
                          12: K5PwPytOI_jcP9He1nt3G317eYI.roa (hash: cTDvsg09oLpiFvnjwcs0kSKetfHr8fv3r7qeLPsUP5A=)
                          13: LCvaB4WSKzttpqTMBERAKzTPkc0.roa (hash: efuSbUVkMb1LRDxLfq3t1vkJUtMph/K3Ly/MOMCQIYc=)
                          14: LvCg6ODOvz7fOcsn6wU3ngQnNXI.roa (hash: 2DJ8XZWQOJtfhwxPU+bThNRmPW5rZXIuxQU0nHhPZHo=)
                          15: M0UFmj8utuihy8ywzKYVtKAlOpA.roa (hash: GB4oTrIEAnIhwubWgjQhf6VSBwPU6R7tbEiE074YX9M=)
                          16: PtspP9NAMUf1vNrA5veAQs8D3JA.roa (hash: ulePbYZBa8BBx8Rf9110z7Z7LwUX7PcrfS6/GMQQI50=)
                          17: QnKLXYadCEK7EFhDz6MF7GYNjvI.roa (hash: rOJkJ3eVk06xoaQ0gvNi9t1WIsPI6NQJ4lEou7caFDk=)
                          18: T48pBsuhvbZxzuQikn6LHKfOwhk.roa (hash: riJSrEr8eklbL0fdBY3f1J6u/fO/qv2OeNqqUNUL/bI=)
                          19: XOx0VQXemWnE1_T_CbW1BF1yKGs.roa (hash: AVLDrE5Y2ydpWZbzqq6OGq4i3RC3l/nkGJBMXJVQobo=)
                          20: Yl2M3tHD9BpxXAF-8RCTakseDqA.roa (hash: SffwXpK1Th2HbQCicN1UUfkjL/i1kZCt1vfJ2FKzFtA=)
                          21: gaylLdxDyQb8sels7s5ku7UtfkU.roa (hash: U1UfdjYQAukjcg29y8zD3MFVpeQLO0fB9T/k1AE2BIc=)
                          22: hPYLx_9mBj_Ye24Y1_2lQPvsrq4.roa (hash: vQ4lqUvsFgblBgv4IH3pH1VZWDEVfeUus2uMPqiXEdM=)
                          23: i-XH3WsMULykHW1y-BG3UdFVuxk.roa (hash: VJILQeKFY+tCpv/VALS6QQ/A8bjqBJ9CpKPAXcs36qg=)
                          24: lxacDbK0eMnuXnpxPVHxYt8h8A4.roa (hash: rsXevB7T0iAAuzzWpzZrb3jX78EQxi4+Xjb6q3I67TY=)
                          25: o0unYtOvK0ypo95RgHxsLRbSEI0.roa (hash: /Kszii2RBvuT+vSDoTo/zRmMb8Q32yFP1SEkPKjGPyg=)
                          26: oBhyptF6QE4JF_exwsXWUGhFPFA.roa (hash: 3hvM7M438cadgQ4g9HhgILZgXMpg0ZtzDaSbf/K5RFE=)
                          27: oxqqJb6s3Y9_xl6qI2Z76gczjAE.roa (hash: 3Mi3svCpiZUvbXpx9Bao9teVj53BNUZ6cGIpnDn9NXg=)
                          28: oyokzIn026-PrXoWkL2twkIzg5c.roa (hash: vnYvn1vfv3V6OKUsd9n/C+ZJyouWqYiCJWFXAmzYfwA=)
                          29: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: yb6+D7VqOBQ3JAut85IhSNOSgEwVskGChibn5BxvYRE=)
                          30: pakgoJm1JHH02EFn_cluKwwBgfw.roa (hash: 9psJh/g+q6UomADY1AKlNBezhzkIM0njclurAr2L1G8=)
                          31: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (hash: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=)
                          32: rMButntV5GnO7W7_TuF_ZPA6g1Q.roa (hash: QKYvOeC5NwDMQzqYncxkm8rqO0746QVz/H7okZ5iBmI=)
                          33: ti0W6fjaL6Z8NJz1MH9rdtxIt7Q.roa (hash: eexhvPXToWxtG+Ffy16JfuC8/yelu2NCnq6+i2y5ma4=)
                          34: uV6pu-rvAp4G68o2AgVK7vbBPX8.roa (hash: ykD9UesXzEoyDyDfGqtntVW1hYElb551gS1dPJQBUlo=)
                          35: wifLocMxfpz5rpj13UULY6xFWiA.roa (hash: zSAQgyK21VbhaQRoZfBOovQi13W5eH/UHapg2UUnRmI=)
                          36: wv61e77oscUDJBn9VYlTu_3AbRM.roa (hash: WF74l5Tv59hxzHDkv3UDIsUfaTD5KoMxhkr5geA0BW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:67:e2:7a:f0:aa:e4:c8:0b:a2:b3:db:57:c4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Jul 26 13:00:50 2025 GMT
            Not After : Jul 27 13:00:50 2025 GMT
        Subject: CN=552c3650d3ca46d99d144a1ea3c8e311b2bfd924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:f9:5f:94:49:e5:bc:c4:3e:ea:de:7b:0a:
                    66:83:37:7c:3a:db:d2:0c:97:d3:d1:ba:d3:34:ec:
                    53:af:73:d6:27:0e:01:a0:96:8a:7a:dd:30:99:dd:
                    5c:45:2d:d5:8e:74:c7:13:b5:e5:a7:b1:72:57:28:
                    f5:3e:43:39:69:7b:44:dc:ab:c3:9d:b1:0a:83:7e:
                    bf:1d:ed:f5:fe:7c:7f:b5:26:b2:b3:20:f0:e9:1f:
                    21:d9:c8:30:49:66:b8:0a:99:7f:e8:b7:1d:4d:83:
                    58:1c:ee:3d:e2:36:9a:72:ab:6a:4a:0d:fb:cf:cb:
                    86:b2:36:e5:ae:3a:fb:8a:63:a8:63:cf:a8:c2:38:
                    f5:50:63:ad:2a:fd:02:f5:76:7d:59:71:7e:14:1f:
                    14:ef:f5:c5:f8:40:3e:22:7c:bc:bf:d5:1b:fe:d5:
                    f5:67:f0:72:95:34:2d:cd:86:86:09:d0:20:2c:07:
                    35:9c:a6:b0:22:6f:be:c6:74:bd:a6:d7:f5:6c:06:
                    20:43:5c:bc:47:c9:9f:cd:13:ad:d7:76:80:8e:7a:
                    a0:69:15:ea:f1:66:c9:8b:3c:c1:92:fb:32:42:07:
                    60:b1:13:a2:a4:3e:f4:1e:53:47:15:86:91:33:9d:
                    ec:1d:f0:8f:ed:e6:be:33:50:ed:7d:6c:7a:26:fd:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2C:36:50:D3:CA:46:D9:9D:14:4A:1E:A3:C8:E3:11:B2:BF:D9:24
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:bf:9a:e5:dd:b4:86:ff:be:90:99:4c:18:d7:92:da:f2:
         e4:78:59:ce:d1:06:d1:3f:13:4d:e1:fb:e7:bd:31:62:b2:f6:
         dd:db:23:1a:28:63:83:3c:13:c7:27:cd:36:7a:d5:35:e7:b0:
         15:4b:d5:bd:6c:eb:69:c7:da:39:fa:2d:45:29:90:7c:5c:21:
         48:68:1a:dc:b5:80:d2:2f:aa:8f:9e:d4:81:aa:f2:53:08:d2:
         70:00:ac:f9:27:2d:24:a5:82:af:30:0d:5d:b1:5a:63:c9:fc:
         c6:7d:ce:1d:68:2a:3d:8c:d2:3c:c6:80:06:0a:4a:ca:3c:c1:
         f9:fc:25:33:15:ab:2f:4b:9a:0f:b1:f2:69:26:25:8a:96:34:
         72:92:ab:4f:54:ee:2c:46:ec:a5:7b:88:14:e9:02:fa:57:42:
         e9:e3:0d:c6:33:7b:3d:e6:c4:1a:2c:33:a5:2b:f3:12:33:96:
         97:d1:67:79:e5:28:b5:d4:44:d9:33:f4:d3:13:b4:3c:c3:58:
         0b:43:92:d8:22:68:2c:0f:bc:7f:92:d9:2c:67:14:ab:84:cf:
         05:95:93:14:c8:49:0b:1e:03:54:65:83:4e:24:1d:ed:db:cd:
         a7:e4:5d:ae:12:9b:e6:38:62:1c:ca:45:3a:62:d8:a9:bf:0e:
         ce:ec:3b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----