Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
File:                     oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json)
Hash identifier:          2211WajPM/Iw8GG5a3TsWkGeeiNvWwuFzg9WrrIkVF4=
Subject key identifier:   DF:4B:34:D2:5A:43:0F:91:AA:38:77:AC:C2:7B:6B:01:BB:67:26:42
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Certificate issuer:       /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial:       019835035BAB5FCE4E237E72EE6935EFCCA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
Manifest number:          16B8
Signing time:             Wed 23 Jul 2025 02:01:08 +0000
Manifest this update:     Wed 23 Jul 2025 02:01:08 +0000
Manifest next update:     Thu 24 Jul 2025 02:01:08 +0000
Files and hashes:         1: 0EOjf23f5uNRl8AKwLrSjcuzQ-M.roa (hash: TiKzyeJ1GrbpU3aFoto+cFftuRE3qJmGtPjLqVBjD3g=)
                          2: 1-l8IN9WmFAM_8sHp6ULKXINOpuo.roa (hash: OepTW0KIexB7Ma6Qq1vDY3wE1ZrCvSqnaxM/NAfOK20=)
                          3: 3a9lX76bQSJaqMppZTquI9xrjjE.roa (hash: VWrFd9vzYBvgjC7R4dgJGbGdtWDKe+wEQ3MjcA3hJGc=)
                          4: 5srUWfK2Cdi4wHjqlySTWyZ4Low.roa (hash: LNg07RRevBAHX1c+iNg80ZacJiC/7ZrA4U+xATH+Y0g=)
                          5: BkJLBllw1-ZWKgRHqGBiQqbyScY.roa (hash: 0YwDYhFvdzyYfI9IMpPvVCUOj6lVo6a8wPzczBvlz9k=)
                          6: CbhEbMn4AKVVqgWoX2_ZAyPcZvU.roa (hash: 20BJw7BzxjCOyEcdCPIydH+ZU0GghmGQyM/ZvZpvSVM=)
                          7: EDx9UJr_bR_MLAO7n7AlYPzVgHk.roa (hash: PJhAgFMtqQqa+J5NxHAYtorfHqm6JLgt9UdAzlPMssM=)
                          8: GIY6t8WXECqHBNB2XBzSrMQvdIc.roa (hash: ++2yNzUE5GKDvynAIsGfNfxbtdcmBjle2edzJpUiOrg=)
                          9: GPv7Cu3AAIV17OB2hoOeeln0z0U.roa (hash: n6wsikUe3lM4uYpVDKStgKJqtWUTWWFr66jlTc1qP8w=)
                          10: K_S25NvkOjpU_Bj9DbxQmJazd14.roa (hash: a1rxYtnZvodVSuCoVwHSmnvLNqe2f/aY8+zJP3kLU8Y=)
                          11: LIDGUWG6p3GJZZCu1Hpsr5bUXFc.roa (hash: PRox2/jLDeyB3TXExAWa7wQfqJBFS5HwT01/wjYfdq4=)
                          12: MI2MLphBpmPMjSMPt-CUURdJC0U.roa (hash: SxH7HYoFbVv194fh23JHJCaM+xcxOdCQONsLew0Wilo=)
                          13: OS_CktR-hc4-NmLRLJBYinV6euI.roa (hash: 9QN9UeCEXOiGtg3kQ+agPvu30JRzcGfSpwpa4N4C9hs=)
                          14: QT9Y49Ocn7S1NlWkR85dSIq7Y4E.roa (hash: yheorWCDT9lcE3+NqS0jtyjeSBpJ3B/OD/QoM3nqGc4=)
                          15: R0dlQD847tZZ6Sme0uHqVL1A8SE.roa (hash: aqwVbQ/5C0zR8yt+iaSmmHLJT4dD7bnIMHMb82qWbS4=)
                          16: U0UedjwFm98ns_lAKOOXn5f0A5o.roa (hash: UJnZuL0xV2NkJnE82ZqSllhysuKGYoP0ufoIJUA/SkI=)
                          17: UCe95u6GACs5-LEqrQoGtiD4Qyc.roa (hash: fWIhlO/tzw5gQd0aSlrmvFLetMTNXBRD0DWVGpqMdrE=)
                          18: XS6PxuLhSit4pPummN3D9rt_XyI.roa (hash: 947+sGtOkf9LWyXo/fSAaJ6OjjRfkyNgwZLg86SCJxI=)
                          19: YjHZVJXAnKr8xh5R9wmBVaYEgXg.roa (hash: kSLUkCF1fVqfg2Z9iMd8kS34Maa3MeKt4Z6zguLvO/o=)
                          20: YwyROsLXS46Sx4a7dO7BvxlhzcM.roa (hash: 0Aw01zQYIIojYrmRbQn7ALYRxmwBexME2a27WU1nXKc=)
                          21: cPYOKrKiYT89IO9upkxHw5ZbR8A.roa (hash: J92jBclwmj0vXUCJUdBwqUYTP+Ud22YvPF211aGRosQ=)
                          22: eLugRLDui958XmylSjkxP3wnTMY.roa (hash: PBCwpuzp3sL6oE89Qyaa4YR3Aa/1ZZavbG6JwYcrhzA=)
                          23: eVJksg_tZC1gqJ4CxgC15n-SEdQ.roa (hash: btGXQHg2mYfMjcjWbTYHZ2mr0/LxHLYRT3vdfCLuDdg=)
                          24: em928uE801tncexTsiwdYgbCyFs.roa (hash: 1Ae8DHrnQc4neMkHdKNSjlxKrv6jUbvWVefMenI+FSo=)
                          25: iXuidHo1QSBSsFaoOTf1QHBof7o.roa (hash: SwI6517kDyPUXy1d894x4OYleQzHpw1lcJfr2I15BNA=)
                          26: knLIpaWN6wJ3RxuEkxRAHKiWFPY.roa (hash: dim/8umOJ6epBF/Pi+TF62ZYesagnxCU/L0WDdWu3/o=)
                          27: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: 7K2H35PvTdqYOAzli29ZPNEttWrbbqILExYF98c5UC0=)
                          28: q-kzFzWdHxYVd9BrFrKLJ4d0RIQ.roa (hash: GMAkDMrzsWCnVos+xh1WbimGMP/CqMUvIS+tRaFTcOw=)
                          29: rTXg68wsMIftLmpexV7EYbNGuq0.roa (hash: oUuz6Mh1F7BCjTAodcbrClwpt+TS4kM1ywRGR/A1/uk=)
                          30: rYugMFgVZ8X-I2-jsX4dF3aTxvQ.roa (hash: k+GFKByMw5K8SoNqNuEda0gdRBQB4x51TeQEsjZVh6w=)
                          31: rtz3qC9idXx0_hTVcLvfRzUUQ90.roa (hash: 7y0gqO8gR/cVJ2yXfPcNMo6vDwpg4ULFhgIIv/G88ls=)
                          32: t4_sItGLetnCYeXERod5-ebrm9I.roa (hash: AiOBn1us05R9pPuObBSz8aWjDmfVrdiLt6SCizxK1Rw=)
                          33: ubTG6wM5WMjPJjVlRxDKUEK_Sr4.roa (hash: hK1TX6u9txAOjU3mw0jZQz1mYIY2Z4Fk7zlDvmJpl3A=)
                          34: vQvAhs3X9SIrwTiZLcGRbLHAse8.roa (hash: NgpNHRkuHeYtV5T9QGV0qWm2Ew38Qqs1VxG+Tb300CI=)
                          35: wwk7jEvd5L4YZES1E9puWxeNbgI.roa (hash: lBMJB934mzmC5MKmNtcjd0YdBXtrbY3Uex1I8nAQBqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 02:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:03:5b:ab:5f:ce:4e:23:7e:72:ee:69:35:ef:cc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
        Validity
            Not Before: Jul 23 02:01:08 2025 GMT
            Not After : Jul 24 02:01:08 2025 GMT
        Subject: CN=df4b34d25a430f91aa3877acc27b6b01bb672642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cb:7f:40:3c:9a:67:23:ec:5c:af:16:06:d3:
                    b6:42:59:ce:f4:b3:2d:fb:b6:6f:4f:e6:7a:90:6b:
                    66:ad:5f:7e:04:39:76:6f:dd:dd:09:89:43:6c:6b:
                    08:6d:92:ed:03:83:c1:cb:95:ec:59:a5:ac:bd:f8:
                    67:15:9d:65:75:a6:6b:34:ff:d5:68:1d:59:28:e0:
                    66:b5:13:d4:c9:29:dc:61:d6:71:70:d9:0f:1d:8a:
                    08:ef:c1:ed:0c:54:79:36:19:0f:5c:c1:de:81:9d:
                    3e:e6:da:ff:db:6a:9b:c7:48:a8:2f:77:8a:1c:0a:
                    5b:ab:c6:50:67:12:a2:a5:a4:c6:7e:d6:62:d8:bf:
                    19:e1:c9:1a:23:30:02:88:6c:ea:04:32:6e:66:5f:
                    46:4a:1e:f4:34:e4:c9:cf:f3:b2:6f:15:d2:c2:51:
                    bf:4e:7a:4b:0f:00:da:31:26:20:7a:4a:4c:c5:c7:
                    17:eb:d5:4b:aa:c6:dd:f3:d7:16:5b:3a:28:3c:98:
                    2b:76:9a:16:75:50:67:ab:6c:67:55:b7:46:14:3c:
                    af:ec:5d:33:89:71:73:5f:e3:a0:69:be:73:d9:f7:
                    be:76:9b:f5:5a:e4:da:52:78:74:bd:02:12:66:f7:
                    93:80:87:12:42:be:08:42:f7:38:b1:c3:d0:f1:1e:
                    71:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:34:D2:5A:43:0F:91:AA:38:77:AC:C2:7B:6B:01:BB:67:26:42
            X509v3 Authority Key Identifier:
                keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:d1:4c:93:f6:9a:5f:11:3b:58:5f:53:65:55:e7:cb:27:
         be:dd:9b:73:47:ea:ca:43:1d:7d:85:a9:ae:14:7f:9a:73:4b:
         5a:5d:27:e3:69:88:66:b5:c6:31:f4:16:92:e6:56:c3:9c:af:
         a9:ee:9e:d1:35:38:ed:d4:49:6e:8d:91:00:50:46:05:26:93:
         38:19:b8:eb:a7:41:8d:5b:76:86:da:fd:c7:15:76:7a:35:46:
         4b:1f:1c:b5:fc:f6:d5:d3:2a:01:89:e0:54:b0:fc:63:68:4c:
         ab:f4:d1:db:d4:c8:2a:03:00:08:d5:64:4e:ef:39:4a:d2:7d:
         98:e0:9b:13:42:26:05:37:5d:f8:4b:84:6d:85:35:d1:0f:9b:
         62:c6:91:32:fc:5b:f7:1c:95:5c:02:17:b7:65:b1:f4:b6:d8:
         b6:6f:3d:b0:73:2e:5f:5a:b1:dd:d8:4f:83:ad:68:40:33:c7:
         fe:39:d7:f3:43:2a:d5:76:41:c7:51:90:cc:b5:95:0e:d5:58:
         ab:de:b4:17:b5:6d:80:dc:57:0a:d3:2c:c0:f2:37:b3:e7:fa:
         8e:83:e4:c2:91:4a:2e:41:dc:d4:41:49:32:dd:22:3d:3d:35:
         a5:91:43:3c:4f:4f:e4:fb:f2:02:a3:f6:57:34:b7:5d:57:cf:
         17:0b:d7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:16:42 2025 by rpki-client