Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          Omfq8cID5j1eTmjPl3hC79rpE7CmGN/r1y75abY/Nns=
Subject key identifier:   F9:46:B4:29:B8:D8:A1:14:9A:28:8D:8B:24:48:B5:7E:87:9C:32:AE
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       019827B52BC03F2019397B593AAAF82B07C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          1647
Signing time:             Sun 20 Jul 2025 12:00:41 +0000
Manifest this update:     Sun 20 Jul 2025 12:00:41 +0000
Manifest next update:     Mon 21 Jul 2025 12:00:41 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=)
                          15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=)
                          20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: HqH4EwWmT5152o0xhWyZmTBFYFb/Z3imklHM/9lVhjQ=)
                          21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=)
                          26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 06:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:b5:2b:c0:3f:20:19:39:7b:59:3a:aa:f8:2b:07:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jul 20 12:00:41 2025 GMT
            Not After : Jul 21 12:00:41 2025 GMT
        Subject: CN=f946b429b8d8a1149a288d8b2448b57e879c32ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:c9:8c:49:9d:01:55:23:e3:5a:37:5b:82:
                    1e:90:0c:df:d4:55:6e:64:65:da:7f:b8:b6:ed:2a:
                    d6:6b:58:f0:e9:bb:7b:f0:0a:7d:3b:c7:97:bc:6c:
                    51:6c:cb:4d:7f:4d:09:e1:81:2f:86:8f:d9:78:b0:
                    f2:c7:9f:64:f2:59:19:ea:31:31:81:8f:ab:59:12:
                    fe:e5:96:08:13:24:87:82:4c:d7:42:86:fa:35:56:
                    64:7f:74:a7:9e:28:9d:72:e4:f4:09:c0:a3:a5:16:
                    1a:4c:89:5d:43:3e:65:75:77:05:6e:2c:7f:f0:76:
                    08:2d:91:97:72:dc:6c:31:a5:aa:e7:30:a3:c7:20:
                    45:9d:9e:2b:d4:86:89:e9:4f:26:40:ac:96:54:b8:
                    3f:1e:20:1a:85:93:f3:89:90:8d:65:f1:dd:7e:40:
                    26:55:cc:78:79:c3:e4:8f:e2:fb:4e:37:7c:f6:cb:
                    c4:5a:08:ec:a5:ec:25:e4:d7:58:a4:57:fb:3f:5c:
                    8f:83:37:4c:ab:a2:1c:a5:de:fb:0a:a8:da:b2:d2:
                    99:28:15:82:12:c2:a2:1d:f6:3e:68:d3:ee:45:93:
                    4b:5d:a4:c6:9c:f5:fd:17:61:45:84:80:db:2b:9a:
                    0d:29:9b:49:39:ce:13:e1:3f:7f:1f:24:ec:f4:73:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:46:B4:29:B8:D8:A1:14:9A:28:8D:8B:24:48:B5:7E:87:9C:32:AE
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:d2:ef:ec:e6:2f:22:ae:92:3c:6b:ff:1f:09:d3:c1:f5:
         59:40:06:1d:56:db:c5:20:97:d4:ab:e3:88:79:4d:d7:1b:a7:
         62:f5:29:9d:e4:b1:7b:ca:07:87:a4:d5:9c:2e:58:94:c5:42:
         8f:0b:49:1c:84:42:f5:43:76:06:0c:01:8a:6b:30:4d:b1:d2:
         6c:cb:03:ca:c9:2b:0a:77:ac:5b:c5:5f:87:0c:2e:7a:5f:e7:
         55:a7:0d:d3:40:17:6c:44:f7:82:6c:d7:65:b6:25:a7:71:e3:
         07:96:e5:b9:d1:ea:a3:1f:5f:66:4a:05:82:1b:4d:17:d1:9c:
         a9:bd:e2:eb:bb:5e:df:72:2d:20:85:74:03:3b:94:c1:22:4d:
         85:da:98:fc:be:4f:c8:54:7f:36:d9:1c:10:8e:fb:32:f9:7b:
         75:a7:f2:66:d4:3e:c2:fa:50:cf:f0:e9:c1:44:f8:d2:56:f6:
         46:cb:ec:d9:c9:c3:f7:50:6a:16:f7:08:07:6f:4b:12:2b:6e:
         1b:05:b5:9b:29:87:49:09:b5:96:47:58:cd:ac:ea:6d:42:2e:
         ee:14:d3:1c:f8:27:c8:8b:3e:c6:d0:04:2e:30:f4:ee:f3:a0:
         be:62:d7:76:09:88:df:0a:83:25:80:75:07:36:e0:b0:52:8c:
         9c:81:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:14:07 2025 by rpki-client