Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
File:                     Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json)
Hash identifier:          x4rlJLJ4x1u0csKwLrgOyF0JfW+BypdB/xEHUXdB5F0=
Subject key identifier:   DB:59:53:2C:A6:A3:CC:D7:FC:8A:ED:5C:32:6E:F8:5C:8E:32:98:F7
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Certificate issuer:       /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial:       01983570C3B37D23B4CD168716F03EB2705E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
Manifest number:          0E05
Signing time:             Wed 23 Jul 2025 04:00:39 +0000
Manifest this update:     Wed 23 Jul 2025 04:00:39 +0000
Manifest next update:     Thu 24 Jul 2025 04:00:39 +0000
Files and hashes:         1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=)
                          2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=)
                          3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: 0jkFIRFQk1rQLljg/qffK3NLUGzk5wkiNXQNLSby6Zc=)
                          4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=)
                          5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=)
                          6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=)
                          7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=)
                          8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=)
                          9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=)
                          10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=)
                          11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=)
                          12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=)
                          13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=)
                          14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=)
                          15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:70:c3:b3:7d:23:b4:cd:16:87:16:f0:3e:b2:70:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
        Validity
            Not Before: Jul 23 04:00:39 2025 GMT
            Not After : Jul 24 04:00:39 2025 GMT
        Subject: CN=db59532ca6a3ccd7fc8aed5c326ef85c8e3298f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:08:70:ee:77:59:b8:0a:8b:88:2c:2a:f6:
                    35:b1:d7:37:6a:a5:1d:97:6a:41:82:02:bc:81:57:
                    b2:d9:31:47:db:0b:8d:da:fe:e2:65:33:73:fd:ec:
                    99:16:d5:fc:e6:39:8c:de:47:78:e1:db:ec:4e:a4:
                    96:83:a9:17:86:4d:e5:24:c7:33:a9:b3:49:54:03:
                    aa:ff:b7:d4:06:09:6b:87:62:52:7c:74:9c:cd:f7:
                    e5:e9:89:86:07:d8:9d:e1:b8:15:cc:9f:6c:23:36:
                    2a:52:50:50:65:e7:49:7c:3c:82:c1:94:dc:69:c4:
                    00:44:e5:11:15:b8:a9:ae:17:9a:77:08:92:cb:eb:
                    4a:33:c0:ff:54:3b:d3:96:29:58:d1:d1:eb:b3:a3:
                    7c:03:5a:f3:b7:e5:cb:00:2e:96:07:cc:28:c9:e3:
                    b5:0b:f0:f2:33:21:0b:23:b8:89:54:5a:3c:04:64:
                    f9:d2:b3:1d:1f:90:da:79:c5:04:4b:fe:f8:66:d2:
                    95:b9:ad:ef:c6:dc:63:65:60:cc:44:8c:c5:fe:db:
                    79:03:4f:f8:aa:71:55:26:1c:86:b7:11:16:75:f8:
                    12:e1:55:83:d2:33:cc:52:99:ea:46:32:f6:fb:8a:
                    3d:a8:b4:e4:2b:4a:5c:80:ef:34:83:a5:7d:1c:df:
                    e7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:53:2C:A6:A3:CC:D7:FC:8A:ED:5C:32:6E:F8:5C:8E:32:98:F7
            X509v3 Authority Key Identifier:
                keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9c:e5:18:2e:ad:6f:9a:d8:0e:5e:a6:1a:21:19:ef:67:d9:
         ee:be:67:9c:df:a9:e2:10:58:8a:94:a2:f6:99:1c:25:8e:2f:
         1f:ca:6f:3e:67:17:32:0a:5e:8c:49:de:ff:f8:63:a1:8d:f0:
         19:92:ac:c6:d7:0c:f3:96:88:af:7b:2c:4e:20:d0:ce:99:ce:
         09:55:f9:29:23:2b:cb:60:16:c9:06:fc:a0:9c:8d:50:23:cf:
         a4:ee:bf:62:91:bc:3e:fd:89:e1:fe:53:f0:53:0c:5a:1f:a0:
         c7:7f:70:7b:cb:1f:8f:40:b7:48:93:6a:23:a7:3c:a1:8a:46:
         92:ac:a7:41:03:32:30:82:a0:91:86:5d:cd:28:53:1c:64:16:
         8b:f8:0f:ba:62:22:76:4d:17:28:15:5e:96:a9:d2:ae:aa:86:
         c0:30:46:ee:fc:a8:e1:d7:68:da:a9:e1:49:e3:64:15:04:a9:
         a1:c5:3f:f0:7f:6d:68:ce:f2:b6:e4:a1:5f:d6:a1:f8:07:67:
         47:54:b1:22:9d:d0:00:59:9f:20:4e:aa:c8:a5:6e:0c:69:26:
         14:a7:69:5b:6c:32:6a:bd:7c:8b:d8:89:6d:65:a6:64:ea:e3:
         b2:a1:de:a2:1a:f1:bb:42:a3:75:71:fa:88:04:cd:f1:a0:82:
         1d:0a:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:09:43 2025 by rpki-client