Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          Ur8Y1e99KSw8twnEkxucsPoPGwSDXDn/yOKwC4Y+Sb8=
Subject key identifier:   91:34:CF:DC:A4:D3:65:1F:1D:2E:D9:CF:42:9B:76:F8:F5:CF:46:95
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       01983B04F8F3E243BD29D4AD19F138D31C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          16A2
Signing time:             Thu 24 Jul 2025 06:00:38 +0000
Manifest this update:     Thu 24 Jul 2025 06:00:38 +0000
Manifest next update:     Fri 25 Jul 2025 06:00:38 +0000
Files and hashes:         1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=)
                          2: 0r24pIQSTUD5N5L07GOWGFKPpV8.roa (hash: trXkO9svjCxRC078/qaWkwZVcRw/r/RbNzaK05elAEs=)
                          3: 1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa (hash: jNjeNOA7d8RyKrYy4kXSP0ufCj18S8yCDg4Nofw0dAY=)
                          4: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=)
                          5: KQ1oNR09mKgd5ku7SR1U_e9V9fQ.roa (hash: cs83TD53Tvlf/W2SbQnH3f+S/haNzyXJayHuIXfao20=)
                          6: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=)
                          7: R4JA4ZrzZRT6P7L7s0XA8tBlvow.roa (hash: UZWxFLVEGSwKY6r7vPrE+HW6Om5TTOD3+yQvi0X4C9A=)
                          8: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: /X6ULUoc1RCEhNZDYKEhCqiccRmZl58tHF+70j4rKyQ=)
                          9: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=)
                          10: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=)
                          11: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=)
                          12: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=)
                          13: Zj4JwFMN6H5YeHt4cvNXltyCdE4.roa (hash: CWOsIZG4hIEMhn5XzXUXZbhFt0Yejg6in7qKXYgJegA=)
                          14: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=)
                          15: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=)
                          16: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=)
                          17: iPxdZuzxvDtlhje1pBxfz_ffoSI.roa (hash: 5nZeFKjMPEJbsRI/uBt0UR440fY87EaeHxRz6CkKzyc=)
                          18: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=)
                          19: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=)
                          20: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3b:04:f8:f3:e2:43:bd:29:d4:ad:19:f1:38:d3:1c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Jul 24 06:00:38 2025 GMT
            Not After : Jul 25 06:00:38 2025 GMT
        Subject: CN=9134cfdca4d3651f1d2ed9cf429b76f8f5cf4695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c2:7b:5e:10:3c:b7:ea:aa:b4:f8:a9:15:40:
                    6a:95:98:39:96:60:d0:d1:8a:a8:91:9a:8d:99:d6:
                    51:0c:b0:84:b5:4c:3e:2d:58:26:24:55:77:b2:07:
                    b0:02:8c:cf:a3:47:ab:ff:19:55:f3:f5:65:f2:72:
                    38:73:10:4c:33:1a:af:ac:bd:df:92:48:6b:0a:dc:
                    2c:09:b3:0c:77:6b:e3:ae:12:79:f3:af:4f:50:e1:
                    8b:7d:8a:77:ed:19:a5:d5:d5:f4:b6:7e:57:83:f1:
                    b8:5e:30:a3:bb:63:8f:10:dc:96:d3:46:81:fa:51:
                    4b:bb:7e:2c:04:f7:63:97:e1:1c:d8:19:fa:13:d4:
                    42:9e:ac:f1:65:4d:95:48:72:29:47:74:19:72:0b:
                    0a:de:ba:67:07:5e:5b:4e:01:c3:82:7a:1b:34:19:
                    36:57:2a:6e:c6:d3:33:db:e0:08:7e:a3:45:c9:2f:
                    31:bc:42:0a:91:45:f9:02:c6:53:2f:b3:86:4e:50:
                    3a:f5:55:e0:9e:67:51:8b:a4:ef:85:bb:89:d4:1c:
                    29:f7:77:d4:f5:bb:45:07:c0:8e:fe:0d:18:56:dc:
                    a9:4c:41:1c:7d:b0:d1:42:81:e5:58:ce:5e:1b:ea:
                    42:3c:68:d2:64:c0:22:00:0b:97:22:c0:66:c0:d4:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:34:CF:DC:A4:D3:65:1F:1D:2E:D9:CF:42:9B:76:F8:F5:CF:46:95
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1b:0e:f3:cf:7c:c2:38:e9:c4:65:09:fd:50:c7:35:05:99:
         d4:56:83:93:05:b2:1a:19:c6:db:bb:bb:c9:7a:07:17:fe:5b:
         f7:bf:4d:a8:d1:d6:62:3d:8a:15:f3:b5:91:07:f2:5b:90:de:
         85:bc:e0:bb:c7:65:64:31:7a:ae:78:cf:4c:1d:32:8f:1a:0b:
         49:da:10:88:e1:6c:d8:54:21:24:a5:57:bc:88:fa:e7:73:a5:
         fa:2b:03:26:6d:72:46:22:3e:87:56:7c:0a:6a:01:12:84:a7:
         f7:b4:dd:d8:2c:ce:e7:68:e7:6f:1d:99:13:44:0a:1f:d2:bc:
         40:a1:db:d3:b8:8a:16:16:ce:bb:a9:66:0e:3d:5a:d0:06:98:
         e0:ec:40:4d:06:f1:1b:37:c7:bc:b2:6e:11:98:f1:b7:1e:79:
         84:51:23:c6:53:1f:43:b3:76:ba:f5:0d:76:44:9c:fc:7e:00:
         03:ef:74:f8:af:64:5e:3e:59:18:46:c9:f1:df:ff:a2:1d:4f:
         4d:f2:78:cc:a5:17:e2:c0:21:b0:b3:6b:97:61:44:3c:91:9c:
         90:b0:54:67:ef:4d:67:a7:bd:cd:9c:64:b3:65:82:d6:cd:5f:
         df:74:06:d3:7f:5d:f0:18:4c:99:50:f2:4c:f6:a1:a8:85:5d:
         60:bf:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 11:57:45 2025 by rpki-client