Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
File:                     0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft (raw, json)
Hash identifier:          d4aNhnnLlPCkNM646OufjEea+kTLolBA8oYXRfd5Gq0=
Subject key identifier:   10:49:82:F9:2E:93:1E:77:0F:8B:B7:E6:C1:B1:EF:15:88:4B:1C:97
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Certificate issuer:       /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial:       019917D1830384051D5151FB31B00515276E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
Manifest number:          16A8
Signing time:             Fri 05 Sep 2025 03:00:30 +0000
Manifest this update:     Fri 05 Sep 2025 03:00:30 +0000
Manifest next update:     Sat 06 Sep 2025 03:00:30 +0000
Files and hashes:         1: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl (hash: 4tft9PtqM38dbi74IJbo2iMIc9Vod8oVQe3/6FEIRqo=)
                          2: 1U6WyMqsZGid0T3NYQ9DAZ6gJQY.roa (hash: F8XNKrvuc9Q1Nu4SwuceqF3nF6Xwjfiv6CKLGF36N9o=)
                          3: AOzgmFptP-TTohv3IqoDSstHBco.roa (hash: E03eZxbf/EuXdLKDt7qVPONNosnX3JMcim9Rf3ahviw=)
                          4: ARYdkedt9hArm1X7hp83_Cg5tpQ.roa (hash: JuBJSBaOkvov17EXCYN32IfgGgf0k5Tgl6lj874nn5w=)
                          5: GkHiDHIr7HTOUId4AyJatL1OA68.roa (hash: ry2bBxXk4C9dBw82DZVtUnDVRsGRjPykl7o+jmf06RM=)
                          6: I5QYvq4IicclfQWoviXNqVkoJ1Y.roa (hash: 5MBWFEJVGuF7S46IjtmTYb6qp1cvuLGpPvqKkXBXql8=)
                          7: JD10CY-i84YcUMqJlGDowbidmN8.roa (hash: XMDhrcZoGK5i42ls2n+Jvun/2Ta8y4audrWdpm2Fv7o=)
                          8: KeM1ORJvG57zJzj1K2DwpMPSMZU.roa (hash: XHsHlY/bthSxdaTkdBh4Cmp1Xjdn7NaEjSx+3/K5zJQ=)
                          9: Mlo568QxCCOd6PBl-s71c6J79ho.roa (hash: bRhR2jD+GKHVY66qCoW+yZNu4nLkYf0bCaNIyYdcO8w=)
                          10: NDTb5wEV6mi4gNG-Fu6rF-wbgiA.roa (hash: NEy4PeHLS5dO/ZjNCa+Z5peBIXcrVaqt3QmALKubiB0=)
                          11: NjLk2e2zqXQskhSwEvgc6VrieSE.roa (hash: /tSrJbpm+cVRf2wVaaTrsH5ognA/ZAO3z9nKKazqJL4=)
                          12: Nv12FFJAhm76vmtQvLtk0-qb9uU.roa (hash: GWYX+UV7jTRToJvscvGnDmcfi+hdjE9fs/PSDIO/qXI=)
                          13: P6DmMh6gJbdEiU32OPNgOyp7mCY.roa (hash: 88yaz4q97O5d7cXTtRqRjBiGFSE36MGooJOUALTPCRA=)
                          14: PVvGYWt24uzVlwnsAFMPqAtNvZQ.roa (hash: jUjkhiHyuibAHI/mM+xTuAPWbIQGwY5NVpAGVowuUvU=)
                          15: REFW6rSHBTfRsUnwOYyR16B8o0I.roa (hash: XB70ye/c1KysdH/4/hccAGTbjaBXhCjgy7hTvmJtugk=)
                          16: RchhUq--77MGlYxNBSaODwJIwKM.roa (hash: sr2MOGN6k36I/3FkeO3PjW+1iVoi3mf8hYsQtvAbkCg=)
                          17: STK-O3Jy4bB5rT3tLgySD-E_yc0.roa (hash: vVGAYny2UAqSEDs+b7/ni4Xd2yZBXnYpdV6jirBtDJI=)
                          18: TFiXnA69SUIjZxShh655vlYs5os.roa (hash: iue8xNO+FBfmf0WBI+KQBXMK4ZDijvqm8QzG1kL5NP4=)
                          19: VWY8XiWq4Jote7W-6rigfrKoiY4.roa (hash: ON7HuggQtcTWGIVCoLH7d6Q/DUJJsZCop+RTdEiL82o=)
                          20: X_FL5W5PaBcXLOauRMxOwRuyYlc.roa (hash: kCKDT8tcDr1dP8XE79tCmIW9bJ4NTTFNxriENFz7kC0=)
                          21: Xdb2GonGqu9DkyPtW1xL_ewg_Bo.roa (hash: GVGr4S1zTr+dNdiuuONrJJ2q6Nn0ihVO0n5qN0zw/pQ=)
                          22: ZiVprlwwAp8Ov7zgsZNSwSGIkuc.roa (hash: Tk3A5shWtfiSwwuDcCc68dVXd7yvds9RfjT7MSIEjKQ=)
                          23: _YFT4hVNYyXh4lnoEwOwHf8FvbM.roa (hash: tlgEY6jYUU+UF0+FT6gUJlgYou8+Ams7PkVw5ofCpx4=)
                          24: b77IgHc-0C0Rr_dfvuGtS4avGl0.roa (hash: pUFCLnY0Uuj86mPeajrETTuvcuysKr2jMpqMVsvwa6w=)
                          25: eYF3k2wyfF4T5aDW_Us7bP66Ee4.roa (hash: qJu+C3kZMtw4Lzr4RPWfIIggz4SLZ1MdPm3V0ZSYkCA=)
                          26: grTxe7kxw6ZzaQqpTIbiKf1m4JM.roa (hash: i5OkfeqChX4b5A5gBGr0b6nOiJOg7XT/mMLOR9RIW50=)
                          27: hNrTf4PE5wrSnR7cUGP-FWLvavA.roa (hash: 419lgUmCiB5WepdJkvKnWC8TY9QzFCGf/bRs/Tt6fMo=)
                          28: ki55bfqHhRC77pU-EJ0EZN9IsgY.roa (hash: AccLPwD52wvMA4/Hsn0acDKYYBn7x4JHw/P1GwnYSwA=)
                          29: lAsvBALGAB7ffanhsI2XBbzGjwg.roa (hash: Lfmd3jAWkGrnZmmpvbr3VmK27pHIPidZbcCZnfMNIH8=)
                          30: nmXKG7O5Y4Y-3VQd-oJvUHMEIEY.roa (hash: qsL3cjqC+DzRSqTDxZdudYHZ+K/KlZvY/xyn2uR0PZU=)
                          31: oTJV7UQNW4Frhbnp-iOPDIxOi0c.roa (hash: 7xRtMaqLg3Ad/2cU30eSFfbxnUqbSU5++XxDs5sKABI=)
                          32: skoFlpQBI8LF51NmTT39lnjZrMk.roa (hash: l+MFPkSAFr/Bu/aMzD3WDDtaslazJr/lXcJRueoJtKQ=)
                          33: u3IeL1WtwZrppYb7gzyGvxoAWq4.roa (hash: u4/0Flhb+g2HVbYnU4CFZNSkHaVHi6ldxHLZ21W79Xw=)
                          34: v2MIzwur_YBYLaC93lV_QCNZAkM.roa (hash: i9Txq1PwoSa1dtJUPXYcpynz/2PAkBZiK33z/81vpJw=)
                          35: vVo5jg2GQAZIqK4h2tPzZS3ji70.roa (hash: VyY0O3FHC/dgFA8HrUMfqDla8B1EBlXwEVoR6qUh5T0=)
                          36: xeZzF4kLsUeSGRaVWSM2Yl0MJyw.roa (hash: lnF7laQENq7wiyRjfsr7hJCvC1X60Wd/Bj27GtnwCQI=)
                          37: yxG7yWv__YoAWY_L9hRp3vU2XYs.roa (hash: CSF3TOKK7qqalDdJcfVVvwt3T7McADmGuQ+vP8UJZjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:d1:83:03:84:05:1d:51:51:fb:31:b0:05:15:27:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
        Validity
            Not Before: Sep  5 03:00:30 2025 GMT
            Not After : Sep  6 03:00:30 2025 GMT
        Subject: CN=104982f92e931e770f8bb7e6c1b1ef15884b1c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:e7:94:06:2a:79:b2:68:13:56:21:29:18:
                    d8:bc:5e:76:4b:df:9d:f0:e7:93:93:13:eb:0a:c2:
                    55:63:35:f0:cd:4a:b1:8a:97:36:a5:31:31:40:b7:
                    79:9d:9c:62:16:c2:a7:8e:c6:3e:6f:ac:4b:fb:91:
                    41:f1:6e:d7:b2:2b:21:78:29:b3:a4:fa:ab:cb:3a:
                    09:ff:60:27:63:25:f0:f2:f0:38:73:fc:30:04:0c:
                    a8:d0:fd:50:25:84:bc:e0:67:c0:32:e8:20:b9:c9:
                    e4:15:2c:13:ac:d2:97:c8:01:12:bb:20:70:eb:25:
                    7e:88:34:ce:03:38:34:71:29:ef:ed:f4:93:52:52:
                    70:2a:9a:3f:7b:0f:08:ba:27:c3:57:48:df:40:5c:
                    da:67:76:8b:4b:7f:f4:1d:17:38:2e:c3:5e:fb:26:
                    ed:11:ce:2d:3b:55:0f:7e:b5:2f:6f:d3:e9:99:21:
                    78:c5:67:5e:d4:63:ba:4c:ec:82:64:0b:7c:24:7c:
                    c1:ac:7b:66:94:28:a4:62:61:9c:c0:b3:73:75:db:
                    03:f3:46:7d:56:22:a8:07:79:9b:36:5d:83:76:72:
                    5d:4f:06:ac:9b:a0:b9:e6:b8:42:f2:97:38:a3:f9:
                    5b:17:e0:63:98:cf:34:44:b9:8e:89:4d:a8:cb:6a:
                    6e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:49:82:F9:2E:93:1E:77:0F:8B:B7:E6:C1:B1:EF:15:88:4B:1C:97
            X509v3 Authority Key Identifier:
                keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:03:03:57:67:fc:73:18:a1:ff:bd:df:d8:f5:5b:06:dd:bb:
         ea:41:79:d5:c2:cd:db:83:93:e9:93:ee:a0:59:96:75:08:8b:
         2b:7a:80:3a:d4:31:32:18:8b:82:48:67:91:2d:37:ad:a5:8e:
         42:5a:c2:89:06:b6:50:e5:f4:e9:f2:f9:41:dc:dd:f2:c8:59:
         6f:23:b8:13:03:b8:a0:3b:a8:1b:34:8b:e6:6b:1e:83:65:b1:
         b4:b6:0c:2a:6d:d3:3b:9b:ad:5c:fd:e1:af:6e:58:51:c3:fa:
         05:a1:8b:3d:1f:e4:af:37:89:c1:f9:40:c3:04:ce:36:2a:37:
         6e:cd:54:ad:54:96:f7:05:48:7b:e6:7d:5e:84:d3:03:12:f1:
         87:ae:a8:c1:48:b4:a2:77:51:17:86:9b:23:d2:9f:81:e4:42:
         2e:1e:73:34:89:df:f4:5c:1b:70:2b:ec:15:be:c8:d9:92:d8:
         b5:b4:54:fd:6d:c0:ea:42:2a:90:a1:57:0c:2c:45:d9:df:5a:
         33:81:3e:24:ab:e1:79:e1:3f:0b:70:1d:db:40:5f:f8:11:d6:
         ba:3a:b4:1e:ad:f8:6e:1c:d7:0a:58:b5:f2:b7:c2:1d:0d:08:
         f9:92:ad:ad:63:bc:64:8c:90:d7:08:c3:91:47:10:d3:88:70:
         85:90:6a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----