Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
File:                     EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json)
Hash identifier:          /YR48YKx4GcyHcgTt04cdAr9VjxLOH6JBI870c5Rsd0=
Subject key identifier:   65:38:E3:63:70:68:6E:8F:EC:11:FD:50:02:26:47:C7:C8:70:42:8D
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Certificate issuer:       /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial:       019836F298F469E8298CC09ADBAE63A849B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
Manifest number:          08AB
Signing time:             Wed 23 Jul 2025 11:02:05 +0000
Manifest this update:     Wed 23 Jul 2025 11:02:05 +0000
Manifest next update:     Thu 24 Jul 2025 11:02:05 +0000
Files and hashes:         1: 3lIHjKuigd-8wnJOYmIpykPGwEE.roa (hash: RbhnGqyFBszn7eUWI0qn8+G1e8ScDlyeFe7EddnRngY=)
                          2: 7RN5SRH01vnVuwmId81dIIGGm8U.roa (hash: 1/C/E5eYkrY6D/S5+koDYApbhvcMTNf0kx5arKlMVwM=)
                          3: CwxwigW-yHA-vYKKZaAl1IxpzAA.roa (hash: rW7hw/nZ3SfsJ2xESW9df5rJCWkAlL57M/KGPQGcJMI=)
                          4: Cyn89nSP-A380xB9jFU-SvGwOLk.roa (hash: 55NLzajp924cjij1HdQXLRUI6O4Sv4/7fK+uH+Ovruw=)
                          5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: eKBCDudZkMwABM3I6x/LMTiFudaBQo7uoQtyGl6Dw34=)
                          6: GYViSX4l2vjHhmFNhomqHFqkpSc.roa (hash: 3CgVrq2niOAF6athi7j5otFEVOSff0VY2syy7+cJym4=)
                          7: JXgg0_l5GaO7jP1zJeiTZnzRqjE.roa (hash: 4YX6bHKXPEIoYDxsMxDe1UOLGJ38lDkQmJub7lQqJ88=)
                          8: QhKGhq9RVjLUPSCejjoRE221C7U.roa (hash: 0khB5n2A42sHpAsF0tPwxAXTpxJUh3W1WQBMyyOav6Y=)
                          9: RXOWuzIO3GP1EkbIwvuqPcEpiDs.roa (hash: vXTbGxFCLWqp0CNvIIccpXNG33skDlTQkxc0RSBrijk=)
                          10: WOeiegJydkxVE1vjiwGx6ATuFEY.roa (hash: QQ0/7N7W7DkOMFKnzycHP6yPRCFiGEALp7b0CpA3RZ0=)
                          11: XaybEw_MkTY28IquFGQbHrSpM7k.roa (hash: TwRW1DKYPixpCJP4Q5rOfw8R+B/zkE9LC0Lipg8NmYQ=)
                          12: bRbW8P3bIsKJRNWaiMr-Kb4NIoQ.roa (hash: v77US+PxQpF7B60vIVmGcjZu9Cj7y5UanTIDHgPIp4M=)
                          13: fQ7bPgK9ouvS7fbPuIpfuslK-RU.roa (hash: 3FK6PbiJEFCVQCpQogIU0uOqOIRz4gHsO2agb5Bk1QM=)
                          14: vLlnIbM4IzjjaW5_ksMl5w3Mdyo.roa (hash: qNTbjySkAkE6BruFWTSoo36zWMNK/1N9V7FWTBB9+Gc=)
                          15: zB69TVx0sEbC1RySFuzqMAIu3a0.roa (hash: usN4D5QBcD6XXA42H1Ot8IvkjdBuShhuURXZHjJ1m3k=)
                          16: zhgXsJzHOSwZ2vW5K0nW1lO6VOU.roa (hash: Yt6DAu9pUe7VspoY5/vTE3HMguhU3RqgQubcaVH+tIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 11:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:f2:98:f4:69:e8:29:8c:c0:9a:db:ae:63:a8:49:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
        Validity
            Not Before: Jul 23 11:02:05 2025 GMT
            Not After : Jul 24 11:02:05 2025 GMT
        Subject: CN=6538e36370686e8fec11fd50022647c7c870428d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:46:39:2a:d5:c5:6a:82:a9:2f:e2:7b:e8:74:
                    47:df:59:6d:cd:c5:32:6c:4f:cb:3e:2b:5b:c7:3c:
                    a5:ba:57:42:20:23:76:cd:69:e6:39:57:a6:a8:28:
                    f1:82:e1:59:31:e4:83:fe:6d:6f:90:82:c1:4e:9c:
                    fa:ac:c6:ef:9c:7e:38:78:69:b0:1d:b2:25:fa:43:
                    9c:5e:ff:7c:38:29:14:b7:5d:7e:61:00:3e:d3:82:
                    15:4a:75:2c:c8:bf:98:b0:ac:fc:e9:02:bb:3a:93:
                    03:f1:26:d6:5a:17:89:0f:9f:4c:3c:21:ba:65:ab:
                    a8:85:de:47:c0:9a:24:dd:2e:e1:72:66:9a:dd:5c:
                    6a:f7:32:59:8b:09:23:9e:ab:79:b2:09:e3:47:30:
                    74:4e:94:50:d6:e7:7e:e8:81:dc:e2:51:75:94:98:
                    c1:8f:09:b6:e4:1b:c5:c3:45:fc:f7:f3:11:6f:e4:
                    32:b4:7e:bd:8c:e2:55:a6:ef:84:0e:1d:33:73:e2:
                    d4:c0:5e:d1:26:31:57:78:14:7f:23:5d:4f:eb:bd:
                    a2:76:97:37:98:2d:ef:52:16:8f:21:d7:46:06:95:
                    80:cc:cd:fa:5d:b9:12:b0:8d:83:cb:b3:83:ef:5d:
                    48:29:cd:fd:44:49:b8:86:62:34:56:31:9c:59:57:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:38:E3:63:70:68:6E:8F:EC:11:FD:50:02:26:47:C7:C8:70:42:8D
            X509v3 Authority Key Identifier:
                keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bb:00:12:59:9d:77:f2:90:d5:df:2a:29:90:da:05:90:a8:
         50:2f:4b:e0:11:18:77:61:ae:50:9d:c3:5c:73:a3:81:de:00:
         c7:5a:ce:5d:b6:56:7a:4d:7c:35:17:57:ef:2b:a3:df:01:32:
         4a:27:28:8d:49:e5:cd:86:aa:c2:af:02:1c:b6:8e:9a:56:02:
         95:1e:32:f2:ad:09:76:ae:48:fb:52:bd:ab:82:3d:d7:9e:db:
         7b:3c:50:aa:4b:76:8d:6b:75:1a:90:90:89:de:e6:32:cc:99:
         0e:13:a0:fd:76:30:d5:97:97:56:3b:d5:15:ea:09:92:1a:b1:
         90:8f:16:29:e6:02:7c:bf:f8:21:bf:4a:9f:63:51:61:15:7f:
         5b:12:e5:e4:7c:7b:e8:de:3d:2e:5f:5c:f3:fd:97:02:89:77:
         e5:a2:36:43:59:5d:65:b9:ff:8f:f7:1b:5d:57:2f:fa:20:4a:
         77:7f:a2:d7:45:f6:c1:81:d8:28:64:fd:86:27:34:30:ea:09:
         7f:72:1e:54:4c:ba:3f:19:2f:3e:e0:08:1b:d2:36:e4:56:5f:
         a8:01:b8:d2:c8:0a:27:44:97:60:61:9e:a7:42:91:d8:c5:de:
         d7:ba:4f:1a:3f:c9:38:89:1f:d2:60:21:0f:9d:99:51:c9:b5:
         da:f5:f2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:24:55 2025 by rpki-client