Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
File:                     w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft (raw, json)
Hash identifier:          dazXbuxfyHnt0HOp6f15CtWPDPXBsf5JM1lyZwlH+JM=
Subject key identifier:   F1:BA:72:63:35:51:21:24:75:F5:21:EF:CA:8C:B7:27:04:AE:1C:A9
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       01991CC10B800B45382E23F181161C8D156F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
Manifest number:          17CC
Signing time:             Sat 06 Sep 2025 02:00:37 +0000
Manifest this update:     Sat 06 Sep 2025 02:00:37 +0000
Manifest next update:     Sun 07 Sep 2025 02:00:37 +0000
Files and hashes:         1: 1-E20ktVNe16F6Hofgkcmxt-X6i4.roa (hash: 9zvZSZs/gijVXWu6Efh7Tsajx6AsqwE8rVB55ifWAPo=)
                          2: 2-cHxc1zMtCcD-GzEWoOdBTTabs.roa (hash: 52l6FusBa/jk0I0sBfVHrE4CEvIY/yW7vGg69O8iKSQ=)
                          3: 2QQsJJ6tXNfySMKhFuk0X4eceCs.roa (hash: ThLO2KhLuPTXapRFxGR4popYmJIUwR3wQqbgs/aqfNw=)
                          4: 2oxwDLzRshNK8j5aCwH5UtTCVAA.roa (hash: bkIxt1Nf6MRgesYp+uwTIyApPTt4AK+Q+OtxoV4dx/Q=)
                          5: 6oSuHeeQ_sWorxh6r0_5wvvFQgM.roa (hash: 5gk4fc1M3LnlB31mm0S5J9v36W8hpfovoTd5KvJf5f8=)
                          6: 9R3WnHf9QasgSQQ4KZoNt3TMvN4.roa (hash: m+TN1agUpMXmEF3q0NQth3kx/ePWQy4AZ969yGlc73g=)
                          7: 9yMcvRznuoAbn4JxNxCj1bZNKXQ.roa (hash: GFx7BMc5F417eQeOjL8eTlruWh0XG3Xtwv3pPD5H5cY=)
                          8: AaUr_dffnDoKax9ioQFPs0fyF1E.roa (hash: xUUyNOjfoVVFcyRYunFBOeObFu44dbGyvv9BKr7nA4Y=)
                          9: D9WAwvfVKxCKubi6sKnZ71kTFvs.roa (hash: VFLKJBHJ2bBPhwVut2OdEO29H/5nngK3xfX9LZQqz1Y=)
                          10: Do610frDxofc_GIwlM0_-BIBi58.roa (hash: 2fSLFdraUb7r/St9XyxC3w/gDUXK6jtGxtd4pLLXBT4=)
                          11: DsHpsql9Cw09IWN78UdVVB5XhEQ.roa (hash: nNtfkwQSOiO9ewgAUslep+h/ZTPYdY+go0JuycHz7IY=)
                          12: F5kjWicSlQTwKIqWM86RFtE-p4w.roa (hash: 4vvXqhfGCeQJhiAnWPhlhnUs5slWJw4H4RKbqTyt8VM=)
                          13: GGElDu46D3-NvLVFK7p7vcKCYJs.roa (hash: EK8uUe+D7j77mohS+Q5ec6tEEsLi1URA4svEZYbQr+s=)
                          14: IjN0z6o4Hh1zKgeKfEv903njBYw.roa (hash: /xwNDbRn9zF9j2h4NPclH3V6ydcf7U7D3FiI38kT+Oo=)
                          15: Ks_L22k3-rXcIAO8KxJp-pJRF9M.roa (hash: BfSFJfF2Vv6tesXhEeAO07dLBphIo1oac3Lm8rFhs9w=)
                          16: XH7Z19h-44lfhIbRuX-Fcc0qBHY.roa (hash: 4zCplQuW4tDKEyXVR/7ixTMa1V9PCIeXIrNCU1LJSQw=)
                          17: Xh_nIIhlIVq5rKHv1IjCncovJ4o.roa (hash: mtjAhRm8JR66Itk63UwTKx7Mn6caonQ7wqNPv8b3naM=)
                          18: Y2YILDsbdCLlP8-r1KNzKLAbNYo.roa (hash: i1clgB9jbW2qji3o2GMb+nasxKoNVYdhbKHCWdPQ0Z8=)
                          19: ZwITz76TqIqjDddSzNfU7A6dfxc.roa (hash: BhlYCFjvuf0/l60a3BqjYKqnsGdc41kvyEBNuQyXx8U=)
                          20: _8jdrzBDdjbosGIukZmqWB2nrIw.roa (hash: nizdoztERMK/8M9E7CO7FjtPiixYeVrZj9P+4jsa5nc=)
                          21: a7fsy-8Q0mbgh2GVQepddVw01lY.roa (hash: 3AFQjFOMueXPrJywJH2euTkr7pZ2Ox6nWvG8bTMuBlY=)
                          22: c9v2s32MadGt9Rs9B7wyF-btNpU.roa (hash: 9SRzQ3jf35UTFm4MUwgZY9tBkIZ6WIK99Wc+8gSxPgc=)
                          23: cxz-2E55vUnhXaRtAbhK3OL2nAU.roa (hash: IbELDbTdi+MNIqP5SlIoOe+zI9Hcbbnqhg2nm6KYKeY=)
                          24: e8g3s16GFZnLCv02Upnaj2J6-mQ.roa (hash: wMc2D4jzT9ZRdLYpbuWRXIpAi3jh93kDdvLZpBfBnGQ=)
                          25: h4lmHtZmc-e8tzOKOXHK6w0H9vo.roa (hash: RNI+7dl19mmJ+6ZDRRtmz8YHjJqtvZ2Bexxp/E4LF/Y=)
                          26: i29Dnh2kXGiv2yqK76-7vmxUqHk.roa (hash: vCaTmwFWC8Tk0O4g86hzSYP6Qj1wQnNBboWlzkJop3s=)
                          27: i9AJyMpzX2vyYj4H4Ofn0V4Di3E.roa (hash: awr9oQmxNqlc8X7GU8JQ6v2Bdl2SC+IQueAf856WT3Q=)
                          28: iFmiq63DpNDN4v2AMY1a-Fu_CP8.roa (hash: UdHd1vnfza4zALuCMm6OPNt72FMsCuyAC6PdzT1+mlQ=)
                          29: igifqygwTOksZwnom44nnHV_xfk.roa (hash: lfflJyAIGtSMljbIYSP5Pooz3OcxcZIfnW4cnFqeqpk=)
                          30: qJKw_jSexo5Xo6INlMAHsDyzZX8.roa (hash: tbzwBt4XZg2shK+8u+voUIn5C0bTx0zl07xdDoYjTzU=)
                          31: q_WnCjomGrsSAAJhmJ6LCY-y0yg.roa (hash: B+dx6YDKPwLf1P5VwLqQmWeFrVT16KHjtdJkJq89DA0=)
                          32: qibueMIf0YX7-vwcs7S-wIMkdfg.roa (hash: /1H0Qg/we281+9NuFuePQNwgT4dnDcKq2sBzPBfEoKc=)
                          33: qtA5W5rSHZF4mMRLM6v7irB9BQU.roa (hash: +JdgtkitV13YhzK9ePSyRw7Zx3OQkaiBxnqfTBoa+/Q=)
                          34: sFdyS1bi1kemFkcxeMjXf0LBCAw.roa (hash: cN6Apu7mP0IoUWBpLM0zoLwxlQm/BceMlQYohd1ovJY=)
                          35: v9aN8eUHGc2cFY92JIet8EBdxvQ.roa (hash: ASnHZNq0YfQo/Dbs5rOcZaP8TTutwFdbeAepCV67R0g=)
                          36: vxkaE8HcRmctvzsbnfwU1QZslMg.roa (hash: T9eJSoy6nMWNYhwlXC0AyroCOIMJaYxhMB2BLD6Lg40=)
                          37: w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl (hash: 3AeavkuZ9mlWT2MnHrMB1GUR7XweM7GkkHqXyDrZhho=)
                          38: xB3tLzZcAH5nHqyXJclj-Vxekh4.roa (hash: vRWKn360bNd0jnKWSrgfNY6zDbfJUTKsgibAzr4SQxk=)
                          39: yQGyuB6Q0276_vzY2uCoM0cuiS0.roa (hash: H2WO4wq0Rti9PyniDZHNAl0Jxp1rxhV6eQJHWy7ylhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:c1:0b:80:0b:45:38:2e:23:f1:81:16:1c:8d:15:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Sep  6 02:00:37 2025 GMT
            Not After : Sep  7 02:00:37 2025 GMT
        Subject: CN=f1ba72633551212475f521efca8cb72704ae1ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:b0:4f:98:74:60:d3:83:e3:eb:68:ae:df:
                    82:81:74:61:ad:8d:bc:c0:b4:86:74:dc:a9:34:21:
                    0c:6b:61:74:13:5a:24:a1:54:c3:2d:a8:d3:b0:32:
                    c9:b5:59:e1:eb:a2:6b:1e:85:66:0c:26:e4:9a:55:
                    8f:9c:b0:b9:41:56:36:a3:56:f4:1f:cf:56:eb:02:
                    bd:01:81:fd:c6:45:3a:54:66:96:a4:3b:19:81:39:
                    f9:b1:28:c0:a1:f0:44:71:9f:c5:b2:3f:af:55:d3:
                    99:8f:a9:25:f8:81:b6:87:c6:a4:55:20:f1:c6:b2:
                    ad:eb:d7:f3:2d:5f:eb:cb:ae:88:38:bc:e1:7a:e6:
                    af:4b:ba:9b:ee:50:11:8d:0f:98:b4:6b:22:75:dc:
                    e0:47:8d:52:fd:d4:cc:40:99:80:90:26:44:41:8b:
                    93:f4:a8:2a:5b:d9:a1:0c:85:15:b1:8e:2e:ad:f6:
                    e0:63:77:41:df:0d:28:4a:12:f1:a5:ea:29:69:c6:
                    ab:f4:0a:74:76:a2:24:eb:e1:61:d0:d0:b8:05:05:
                    01:c9:aa:18:80:2f:aa:46:85:a8:53:e3:6b:be:f9:
                    6a:cd:59:22:fb:bb:e9:44:a4:75:fb:b4:17:b0:fb:
                    a4:97:a3:b0:99:dc:d6:86:b1:26:7d:ac:be:03:4c:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BA:72:63:35:51:21:24:75:F5:21:EF:CA:8C:B7:27:04:AE:1C:A9
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1c:77:5f:f0:b3:56:93:cb:31:2a:fb:c4:a3:eb:d9:f1:7b:
         8a:53:3d:70:aa:d5:4e:e0:bf:1d:25:c3:e0:bf:4b:1d:13:80:
         45:7f:7d:d7:65:43:fe:3b:70:00:41:21:e6:29:c8:53:b6:10:
         00:1f:ee:4d:d7:73:b1:4b:13:6e:7e:3f:fd:dd:0e:ae:99:a2:
         a1:04:79:38:fd:e1:1d:8c:5c:c5:e3:45:b7:f5:b2:b1:21:e1:
         45:a8:c4:60:10:5b:16:3a:2a:09:39:a1:b1:b9:03:d5:f8:5c:
         5c:27:c2:4e:d2:23:08:f7:e8:6b:63:92:11:82:cd:55:62:ec:
         c8:35:4a:53:f4:c1:ae:95:fc:17:ea:6a:e2:6f:f4:10:27:8a:
         93:38:e6:8c:77:bd:08:19:b2:9e:be:ad:73:7b:48:2c:46:a5:
         7b:46:99:f2:e5:f0:81:c8:10:da:d6:13:c5:ad:7c:22:86:d3:
         35:47:db:90:bf:32:1b:c6:16:e6:36:da:ed:7a:f5:5b:b4:e5:
         0f:b5:c0:4b:bb:fe:71:57:2f:da:f8:74:48:ff:09:58:67:0f:
         37:ef:69:10:a0:87:af:40:17:cb:d2:35:3a:a0:cd:6b:e1:92:
         99:ca:a3:ac:02:95:7a:77:ef:ba:34:6c:56:82:15:f0:00:b6:
         be:f1:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:26:59 2025 by rpki-client