Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
File:                     rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json)
Hash identifier:          Y+2BkAIFDsQ5+siguSJiBysyE+VYM5fvGzUd4NnRiMI=
Subject key identifier:   C7:CD:30:86:8E:6A:30:76:A5:0E:36:CA:76:F0:35:6F:A4:90:31:9C
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       01984A7802610DD7A8C4F83B97AF8D1A5144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
Manifest number:          162E
Signing time:             Sun 27 Jul 2025 06:00:35 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:35 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:35 +0000
Files and hashes:         1: 04Xl2v7VZUiTmCr_w4v8QX2gTRY.roa (hash: MycY07gNOE3Ooqi4Uv41zgpH/iEzpn8tkzRPcGSW9aU=)
                          2: 26R907b9JZTa9LMd6c9-dwXbanc.roa (hash: Nr0pZSVAGWFTdm0Q/t/4gBjJB3CHvlfJvfnTY1Rsu6U=)
                          3: 4CkYdPgwuFRB9yfCSUR4mFZ2aRY.roa (hash: uxH7iNCE7ZmZDPzgHrmT88B0442eI2IPmR0JGvSaYus=)
                          4: N8IkUZJzTBOZlu70RR-lhbMLsyk.roa (hash: ibQxnRGTbY2fQW1i2qvy/3e4lxCnd9xPyOoTE1V98yc=)
                          5: Nz5RTdbiVqvTyf1uMtVJTNrUInA.roa (hash: 6DxKi3ibNRNUsq7DVRyyl9egdF22G2yI1jKGFf7eGvI=)
                          6: OrB13yHYot_uIXf_gXlQc8xI_hE.roa (hash: FMQdsecZx+s70UXzEHExqDx9Jcs+3DRJcI4Unl+IGvY=)
                          7: Pl7-hE7wkLNvDQabKfSwU8DkQ6w.roa (hash: 27nFWy7GlxT7WEaqE4vpzeeamTgM2rIB5rRF1VNL9hc=)
                          8: R6LZ_8XH3ExvRg1dUKFNV8Ey0F8.roa (hash: qFpymdyEBp79zE8j0kfuySy0J6zv46CXUcpRwgvhrUg=)
                          9: cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa (hash: DlDoiDsmZqGB/sH+jVsLeAbtXXyd2YUnrqrE/juxJb0=)
                          10: d4OCK2D4mSeWoRqf9p5C2kL05YA.roa (hash: Elq7S05bbGTPAkW786TpCyuI8W7H2meHxaBdt6oA0iQ=)
                          11: eve0R85Bzf8fVYZiz_CwkQbNrfY.roa (hash: C31CurjzM4ZbD0eThfczK/2Jz2E+lMaCmCEqjBcpDzI=)
                          12: lGrajh7a_wa1_LmUlCkskSpHEUA.roa (hash: cqiS1zwnFw4W1rzDIACXMZPc8ZNVkVV3Hme04FAS5Cc=)
                          13: mk-EE-jomB4r81nV5hqnq3SbThA.roa (hash: s/WHq7pvPXbuGboH15G/GxJVOO9+dXTAtYjUAcjZio4=)
                          14: onb3rJiukMEmxTOk_8qYPQ5pFvg.roa (hash: rVertN8iUSrJY5Sj1WLa+FHIXHq3KLU3I9MXMNSNWto=)
                          15: rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa (hash: INMUl7RzFx1P7Rf6UvWbPgwSFgMQsbOXObYuvGU4UyU=)
                          16: r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa (hash: eOXFdxOR7gIGvVyPrVo91AN3j7CdU+E/QIH/+e1t/5w=)
                          17: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: bf/WBi/boVIXGnJ7r3c5wwA/TbrXnhuHVb091xhKjqU=)
                          18: xgJFjaLiTqyrTAWyq4f18Pg7amk.roa (hash: 2iBDAhKAGL78CKGIrACCnUM4WIuzKixnPTq74lNq4V0=)
                          19: zNVGFbRsiePBxz6FwsPTrdVje0c.roa (hash: iOwivHuatZu0dYUoIFiY6LVls3U7FPznyEYVX0N4MfQ=)
                          20: zwam10qTIbqdFHd30kfqv_ZzWgE.roa (hash: FkxbmAbpcrj+MmOQBWMwaW9Kx0P0rYzKKqUDU8tkNdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:78:02:61:0d:d7:a8:c4:f8:3b:97:af:8d:1a:51:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Jul 27 06:00:35 2025 GMT
            Not After : Jul 28 06:00:35 2025 GMT
        Subject: CN=c7cd30868e6a3076a50e36ca76f0356fa490319c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:49:86:5f:2c:e3:24:db:11:8a:65:3f:9d:
                    11:d6:96:5a:a4:73:bb:c8:0a:80:a7:24:2e:65:29:
                    bb:28:91:df:04:65:28:bb:f8:d7:68:50:6f:d6:f6:
                    75:54:17:37:e7:75:ef:f7:9d:3b:ec:14:04:8e:cd:
                    64:cd:41:d7:61:e8:14:af:3b:02:55:c0:1c:43:95:
                    c9:0f:41:81:6b:02:7b:5d:e7:1c:81:62:3a:ac:28:
                    26:6e:0a:dd:08:cf:df:d9:ce:d7:9d:66:2e:68:b4:
                    9a:e0:cc:bf:67:f4:2c:b2:b8:3a:12:ee:d7:bc:3d:
                    56:e2:b2:1c:0c:30:35:73:22:c5:00:51:78:2d:01:
                    d2:56:7c:53:e8:d7:3b:af:fd:6d:ab:df:ea:bd:80:
                    58:7f:d6:f0:f1:a8:57:5e:e1:55:6c:cc:f5:5d:3c:
                    a8:cd:06:0a:67:a0:7c:3f:7c:8f:91:66:40:04:81:
                    46:ac:cf:7c:51:86:5b:42:43:7f:ea:fe:1e:70:5c:
                    79:7c:5d:73:42:d5:68:c1:cd:7d:51:c1:fd:ac:27:
                    65:5f:14:de:72:4b:16:c1:f1:49:d2:d8:d0:dc:82:
                    99:08:12:db:e4:a6:33:81:d7:05:35:20:fb:a9:a4:
                    f7:57:70:1d:7e:12:6a:c8:98:64:55:4a:fe:50:ce:
                    06:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CD:30:86:8E:6A:30:76:A5:0E:36:CA:76:F0:35:6F:A4:90:31:9C
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:d3:1c:77:0a:a5:9f:db:55:b8:0e:e0:43:48:fc:d3:0a:b6:
         ad:9f:d6:9f:1f:5b:18:23:3e:7b:98:bc:f0:ff:36:26:cd:1d:
         c7:be:28:65:14:42:dd:df:51:3b:9f:36:b8:37:02:f6:7b:c5:
         72:12:6b:73:90:b6:8e:c2:f4:6b:1f:68:af:50:3e:b9:df:ff:
         7c:e9:40:1b:48:f1:18:31:11:79:da:2a:41:c8:a5:d4:f7:48:
         e9:f4:38:fd:a5:fa:74:ec:58:db:2e:fc:cd:ef:17:50:55:48:
         50:98:4f:3a:f5:5d:67:5f:1c:69:6f:39:8c:45:23:e6:f7:55:
         fe:66:37:da:12:2b:9a:75:ae:5d:2e:ee:23:fe:cb:bb:61:af:
         df:98:70:49:7f:f0:bb:7e:5b:1c:0b:6f:ad:af:e4:64:86:a9:
         e1:59:8f:8d:0f:43:90:45:3d:c1:00:bc:23:51:df:85:34:44:
         ec:b2:a7:71:93:b3:8a:84:ca:d7:6f:b9:6c:3a:f4:52:47:dc:
         81:6a:65:5e:b5:27:2f:13:d1:ae:ba:96:2a:d3:94:0c:2c:35:
         4e:bf:21:9e:bf:bf:39:04:cc:bb:b7:7d:78:01:bc:3e:03:6c:
         d1:80:60:e8:2e:19:dd:f4:70:f8:e7:39:87:fe:0c:c9:66:55:
         8c:6d:05:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKeAJhDdeoxPg7l6+NGlFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj
NmY4MDgwHhcNMjUwNzI3MDYwMDM1WhcNMjUwNzI4MDYwMDM1WjAzMTEwLwYDVQQD
EyhjN2NkMzA4NjhlNmEzMDc2YTUwZTM2Y2E3NmYwMzU2ZmE0OTAzMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaNJhl8s4yTbEYplP50R1pZapHO7
yAqApyQuZSm7KJHfBGUou/jXaFBv1vZ1VBc353Xv95077BQEjs1kzUHXYegUrzsC
VcAcQ5XJD0GBawJ7XeccgWI6rCgmbgrdCM/f2c7XnWYuaLSa4My/Z/Qssrg6Eu7X
vD1W4rIcDDA1cyLFAFF4LQHSVnxT6Nc7r/1tq9/qvYBYf9bw8ahXXuFVbMz1XTyo
zQYKZ6B8P3yPkWZABIFGrM98UYZbQkN/6v4ecFx5fF1zQtVowc19UcH9rCdlXxTe
cksWwfFJ0tjQ3IKZCBLb5KYzgdcFNSD7qaT3V3AdfhJqyJhkVUr+UM4GZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfNMIaOajB2pQ42ynbwNW+kkDGcMB8GA1UdIwQY
MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt
OTI5ZjdkNjM1ZjRiLzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi
LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA19Mcdwql
n9tVuA7gQ0j80wq2rZ/Wnx9bGCM+e5i88P82Js0dx74oZRRC3d9RO582uDcC9nvF
chJrc5C2jsL0ax9or1A+ud//fOlAG0jxGDERedoqQcil1PdI6fQ4/aX6dOxY2y78
ze8XUFVIUJhPOvVdZ18caW85jEUj5vdV/mY32hIrmnWuXS7uI/7Lu2Gv35hwSX/w
u35bHAtvra/kZIap4VmPjQ9DkEU9wQC8I1HfhTRE7LKncZOzioTK12+5bDr0Ukfc
gWplXrUnLxPRrrqWKtOUDCw1Tr8hnr+/OQTMu7d9eAG8PgNs0YBg6C4Z3fRw+Oc5
h/4MyWZVjG0FIQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:52:03 2025 by rpki-client