Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          fkKDGFp+HRGCnEFr/krRNcK5hVyCbr7uNpQeTCnAfhg=
Subject key identifier:   F2:3C:AA:13:D3:26:88:53:76:F5:6A:0A:E8:BC:F1:65:58:65:34:60
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       01983EE1B0BB7AD9351F2E0D76EF3404A4E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          16A4
Signing time:             Fri 25 Jul 2025 00:00:34 +0000
Manifest this update:     Fri 25 Jul 2025 00:00:34 +0000
Manifest next update:     Sat 26 Jul 2025 00:00:34 +0000
Files and hashes:         1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=)
                          2: 0r24pIQSTUD5N5L07GOWGFKPpV8.roa (hash: trXkO9svjCxRC078/qaWkwZVcRw/r/RbNzaK05elAEs=)
                          3: 1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa (hash: jNjeNOA7d8RyKrYy4kXSP0ufCj18S8yCDg4Nofw0dAY=)
                          4: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=)
                          5: KQ1oNR09mKgd5ku7SR1U_e9V9fQ.roa (hash: cs83TD53Tvlf/W2SbQnH3f+S/haNzyXJayHuIXfao20=)
                          6: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=)
                          7: R4JA4ZrzZRT6P7L7s0XA8tBlvow.roa (hash: UZWxFLVEGSwKY6r7vPrE+HW6Om5TTOD3+yQvi0X4C9A=)
                          8: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: 3ZgQ/aIou8/UdPIdZhqh+x7b28ibydH2jggPEojQGXQ=)
                          9: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=)
                          10: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=)
                          11: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=)
                          12: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=)
                          13: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (hash: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=)
                          14: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=)
                          15: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=)
                          16: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=)
                          17: iPxdZuzxvDtlhje1pBxfz_ffoSI.roa (hash: 5nZeFKjMPEJbsRI/uBt0UR440fY87EaeHxRz6CkKzyc=)
                          18: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=)
                          19: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=)
                          20: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:e1:b0:bb:7a:d9:35:1f:2e:0d:76:ef:34:04:a4:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Jul 25 00:00:34 2025 GMT
            Not After : Jul 26 00:00:34 2025 GMT
        Subject: CN=f23caa13d326885376f56a0ae8bcf16558653460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:70:86:85:36:75:0b:7e:46:27:95:45:80:65:
                    51:8a:1c:48:35:ff:84:7a:c0:1e:fa:95:a2:1d:d6:
                    88:87:ae:f0:32:99:34:7b:2f:39:73:af:3d:98:c2:
                    ca:45:43:da:24:e5:4a:1f:a1:f9:00:cb:c3:6f:31:
                    8b:f5:cf:e2:59:7c:05:23:89:e4:1a:65:cb:a5:5b:
                    f3:0b:32:7c:ba:21:cb:dd:df:b7:5e:e4:09:79:82:
                    d6:a9:37:d4:ca:27:b1:7c:60:5c:75:1a:14:56:7d:
                    c5:cb:92:58:22:6b:20:92:0e:c9:6c:3f:29:9f:8f:
                    42:9a:fc:cd:8d:e3:8a:a2:e1:87:f1:03:6d:16:80:
                    c3:92:8f:b4:83:ae:24:34:0b:1a:1d:1b:c6:f4:bb:
                    e6:0d:b7:b4:6c:92:e4:eb:25:38:8f:be:84:81:fd:
                    7b:f3:1f:1a:f5:3f:7d:95:59:cb:c3:20:64:10:92:
                    5d:82:23:4c:56:f4:26:18:dc:5d:85:8c:6e:54:6e:
                    a5:8a:f9:68:dc:ca:f9:da:43:bb:1c:dd:3f:99:ea:
                    a3:a7:2b:1d:fe:25:97:7d:26:81:8a:06:f8:2c:eb:
                    b0:d7:86:82:90:3e:ee:94:1d:67:3f:13:85:e2:03:
                    21:09:28:a3:c2:63:82:f5:b3:d8:44:9b:6f:fd:ef:
                    42:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3C:AA:13:D3:26:88:53:76:F5:6A:0A:E8:BC:F1:65:58:65:34:60
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7b:3d:32:fc:bb:e2:77:7c:bd:00:fb:b5:1e:ec:5f:e7:46:
         35:89:20:f5:ca:5e:44:a5:bc:fc:16:4d:7f:6b:78:ce:5c:65:
         76:05:17:5f:dd:48:e6:52:bf:bf:3b:f2:b9:9b:d8:bc:f7:14:
         b0:38:58:68:43:80:d7:a2:f2:29:d0:7f:87:ae:22:de:f9:aa:
         22:da:04:f2:d2:40:b6:63:da:35:ed:04:29:88:69:33:00:73:
         c4:e6:65:9d:81:2f:2b:b7:03:64:b3:44:01:83:27:37:3e:f4:
         48:7e:80:9e:74:be:43:4a:fa:d8:17:b2:ff:f0:b3:6b:26:4d:
         ab:f6:e8:20:33:3f:3f:1e:7e:ee:4e:57:49:04:9f:1b:19:df:
         ba:a2:c4:fa:cc:47:52:b8:ab:3e:68:b3:02:98:a4:07:f5:e9:
         25:d5:fb:b5:c5:1e:0b:b5:f4:2c:41:61:14:07:08:98:72:c9:
         b2:37:d2:27:62:c3:e3:02:9a:ee:75:1f:77:fc:f2:07:66:01:
         52:6e:16:9e:dd:b0:31:17:83:af:fc:aa:13:18:7c:0a:ae:7f:
         83:5c:bc:05:be:85:f9:e0:6f:bc:22:4f:2f:8b:b4:85:82:57:
         de:d7:44:44:fa:88:6b:85:c6:98:4f:4a:0e:8f:b3:13:70:fe:
         47:5a:0a:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+4bC7etk1Hy4Ndu80BKTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUwNzI1MDAwMDM0WhcNMjUwNzI2MDAwMDM0WjAzMTEwLwYDVQQD
EyhmMjNjYWExM2QzMjY4ODUzNzZmNTZhMGFlOGJjZjE2NTU4NjUzNDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHCGhTZ1C35GJ5VFgGVRihxINf+E
esAe+pWiHdaIh67wMpk0ey85c689mMLKRUPaJOVKH6H5AMvDbzGL9c/iWXwFI4nk
GmXLpVvzCzJ8uiHL3d+3XuQJeYLWqTfUyiexfGBcdRoUVn3Fy5JYImsgkg7JbD8p
n49CmvzNjeOKouGH8QNtFoDDko+0g64kNAsaHRvG9LvmDbe0bJLk6yU4j76Egf17
8x8a9T99lVnLwyBkEJJdgiNMVvQmGNxdhYxuVG6livlo3Mr52kO7HN0/meqjpysd
/iWXfSaBigb4LOuw14aCkD7ulB1nPxOF4gMhCSijwmOC9bPYRJtv/e9C2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPI8qhPTJohTdvVqCui88WVYZTRgMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3s9Mvy7
4nd8vQD7tR7sX+dGNYkg9cpeRKW8/BZNf2t4zlxldgUXX91I5lK/vzvyuZvYvPcU
sDhYaEOA16LyKdB/h64i3vmqItoE8tJAtmPaNe0EKYhpMwBzxOZlnYEvK7cDZLNE
AYMnNz70SH6AnnS+Q0r62Bey//CzayZNq/boIDM/Px5+7k5XSQSfGxnfuqLE+sxH
UrirPmizApikB/XpJdX7tcUeC7X0LEFhFAcImHLJsjfSJ2LD4wKa7nUfd/zyB2YB
Um4Wnt2wMReDr/yqExh8Cq5/g1y8Bb6F+eBvvCJPL4u0hYJX3tdERPqIa4XGmE9K
Do+zE3D+R1oKUg==
-----END CERTIFICATE-----
Generated at Fri Jul 25 06:37:31 2025 by rpki-client