Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
File:                     BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json)
Hash identifier:          IDVwDwZ/ghLlwp5QYfLAnMrEOT59l3hpdtZnUanEXGQ=
Subject key identifier:   DC:09:38:1F:F6:26:30:3E:76:0B:6F:E4:93:A0:1B:54:C9:E3:FD:91
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Certificate issuer:       /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial:       019826A29C85C744754E3A4D5EE857CE0F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
Manifest number:          16F0
Signing time:             Sun 20 Jul 2025 07:00:47 +0000
Manifest this update:     Sun 20 Jul 2025 07:00:47 +0000
Manifest next update:     Mon 21 Jul 2025 07:00:47 +0000
Files and hashes:         1: 05Tg0UTrs2bglsb4atVMOsvRYS0.roa (hash: VhJZRocRnbLToarK8Wb3G47273juDPcLT4qOnhmDcBI=)
                          2: 1UUsByoEofzjEeiAmIAz-WfMDBU.roa (hash: /7lgakegoy05PQfBI5+T4clOyf4KsMTGCdFLL/29XDY=)
                          3: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (hash: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=)
                          4: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (hash: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=)
                          5: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (hash: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=)
                          6: 7qByDki_pKXz-mNnSCgIXHS1XaM.roa (hash: LGUK2l5AC67T1BEV+gQvM8QIjOAp9/K6aMTWDWsKeLc=)
                          7: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: qLJi0e4XVprdorzLIE+ubwg7gw6Tq1IR8OBRNUFUH8Q=)
                          8: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (hash: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=)
                          9: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (hash: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=)
                          10: PsG0AtBemY9a4yDfPpt9i4Kr2GY.roa (hash: sBzY2h3ELjAXI6xknFWXGyJRwY7PSfLmEfEaa7NAk3M=)
                          11: SwcgVnhGmzMWqIm_KFB-KKc0RJo.roa (hash: zsctMXkFR2wIfF/ZZB2QR24YMG6LeLpv/U7aSRBkmeo=)
                          12: TGoRKnPJi8w2mb-huIb9J65xjBo.roa (hash: ePazxEN5ghQaWUW2X4iM0oyeSePfu0C9ZykGzy3wrTA=)
                          13: TWE2GQbK5ZzsTrZP_-cvHhqi5o4.roa (hash: Ukt/h+lTDs0ybwVVqLmtBTv2gykUegHHPF+gzdqT32U=)
                          14: UUpwIiVcqDAAnpr6ilJo-OXFSZk.roa (hash: pd9P0IlgabDMIpT9nXZW5tJdWZ7mt1qbF+E2T8hCSg0=)
                          15: hj8L9GkvIvtNkKP3RDq4IS6qH84.roa (hash: Bkn5aqxtoPsMfsZ5PI8rL7/trWBK1cuaEqeQuBeWvM0=)
                          16: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (hash: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=)
                          17: ptXbX8Zqa-anm64RYPO3MNfDgCc.roa (hash: X1KaAT7AfL8kdySxiP0OJr7eJjZG/di68v2W2Al5EUw=)
                          18: te211TKQz2Pk8IALmy95oPDOlAo.roa (hash: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:26:a2:9c:85:c7:44:75:4e:3a:4d:5e:e8:57:ce:0f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
        Validity
            Not Before: Jul 20 07:00:47 2025 GMT
            Not After : Jul 21 07:00:47 2025 GMT
        Subject: CN=dc09381ff626303e760b6fe493a01b54c9e3fd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b2:e9:12:8e:04:74:67:f9:3a:ab:0f:43:89:
                    e3:2e:f8:26:13:bc:1a:be:be:4c:43:2a:f7:de:88:
                    42:c6:04:4b:46:95:6a:1f:12:34:ec:56:46:43:46:
                    c9:27:32:31:8d:35:ce:ab:6b:8f:de:3b:27:99:1f:
                    68:a4:35:32:05:10:b7:b1:66:ed:53:f8:10:ec:2a:
                    74:6e:d3:12:e1:16:67:8f:a6:0a:e8:fc:13:43:c9:
                    f1:9e:b9:3d:db:42:8f:22:b5:a7:21:06:d2:05:2d:
                    85:d4:b0:7a:49:c6:94:45:89:09:0c:b1:68:99:19:
                    e3:8f:5e:df:19:c8:a9:7a:18:56:00:c5:6c:49:d1:
                    88:da:78:ec:d8:3e:aa:6f:a6:58:8e:b6:aa:19:19:
                    c9:5f:45:50:67:8f:d5:0b:aa:fd:99:c1:8a:50:a8:
                    4a:15:11:6e:0a:5a:e8:b4:53:84:7e:a1:5b:fb:8a:
                    b2:86:b4:0c:32:2f:83:e4:7d:76:0a:ab:04:8d:ab:
                    fb:e8:12:4a:78:ca:a7:26:28:7a:c9:c1:f8:69:18:
                    fc:cd:d5:49:8e:c9:a7:e4:f6:79:ae:fe:86:13:96:
                    6a:de:43:c3:33:04:ad:15:44:6a:51:a7:61:6c:6d:
                    c6:55:df:7f:20:ec:71:66:80:88:ed:92:2a:f9:f9:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:38:1F:F6:26:30:3E:76:0B:6F:E4:93:A0:1B:54:C9:E3:FD:91
            X509v3 Authority Key Identifier:
                keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:aa:01:b1:d6:08:5a:28:32:41:9a:10:d8:1e:9a:c0:2f:75:
         a8:18:de:d4:31:06:96:5d:39:40:5d:8b:d8:38:c4:9e:c6:22:
         be:6e:d8:e4:e3:62:9f:8e:d8:00:0a:b9:f8:86:38:b8:7f:64:
         32:2b:65:30:03:d9:96:2c:e1:c3:cb:b8:3c:87:ae:e9:d8:5e:
         f9:c0:1a:c7:e6:5d:f0:e0:af:22:45:28:70:eb:9d:6e:e0:bc:
         84:6c:61:74:7b:72:ea:cc:13:89:f6:6f:c2:cb:e1:b0:49:f3:
         e5:f2:8b:3d:0f:eb:e1:90:45:6b:6d:98:fd:4f:6f:49:89:56:
         82:65:09:91:be:d6:d3:19:a5:6f:a4:8a:85:ce:6b:e9:b5:61:
         b0:46:ac:c0:72:fa:70:de:52:20:46:c2:1b:08:f3:f7:6f:b4:
         79:a0:7d:fc:06:26:8d:26:d1:99:24:f0:9a:c5:c7:7f:b0:d6:
         a8:1c:cb:7f:9c:63:4c:22:dd:85:7a:2c:ca:cb:08:5d:e5:fa:
         79:74:c8:ad:cf:d8:a7:89:cc:9c:48:00:13:0d:1a:e9:85:3b:
         2d:72:50:a1:46:da:11:2b:86:5a:e1:ff:44:e9:a1:e5:22:f1:
         78:51:ef:a1:f2:b1:cb:2a:d9:7d:d6:dc:d3:5f:34:01:d5:f4:
         6c:0b:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:52 2025 by rpki-client