Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          2lMujijEgfB1PxoN1qzwQNbmwbYrhDLdTkjI1pc367k=
Subject key identifier:   79:21:66:F9:E2:94:17:2B:82:08:3D:B0:19:EF:0D:C2:E5:3C:C2:AB
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       0199228CEA0505BB224D14680AA5D49718A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          0AA9
Signing time:             Sun 07 Sep 2025 05:01:24 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:24 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:24 +0000
Files and hashes:         1: 1wvnbg6Q8117K_nteTTte4S7nxg.roa (hash: ENgyyDmLjUOckKDAZj9H4d3tNAHS1prBGM7EEwWm16I=)
                          2: 9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa (hash: Xv3UwiZDLnCoNcJK6yL4jK5x2OhDSbCPqqehYPRB424=)
                          3: CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa (hash: ISITsHZjmPxvc/MPY47Wu9xllgRRtuPX5xEX6qhzCKw=)
                          4: EEEX0e66KOWTKOERpFoaxtXp3uI.roa (hash: JFPlKxMz0/Nj8vpjBsVBD96v5DpLlvYLrr+f6kqewt8=)
                          5: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: nXJ7WBD6ElR8haHRJhFJkBbyQDra8MYvUov1APvtjZ0=)
                          6: MTmWvr8uibadZE8o6jRrxqRGRzE.roa (hash: 0jqsfFy8FlNhCDstxSZBm5rl+QTt+KMOpAYA4a3i8co=)
                          7: O3desnRLE4eMtaLYXnU5Nh4QOG4.roa (hash: M/pLCjMkuIdvQFjtWmiXKAnVxVqmcU2sbBu8lSfc//o=)
                          8: Ox9GZAka0glhoxQ2kcpTG40p5TY.roa (hash: 9fZOyfSbu8PtJINC4B8NBR5wPhorryRlu5FEj0R87qc=)
                          9: T_tBIVOnk6atlnO-qvOB3SEZFOg.roa (hash: l/bz7iGuLSVMu5+jIvFJJiOT8fpLOG7JuBRb/GRh10A=)
                          10: UDwlK5i6kK3A947K1F2f3Nxg72M.roa (hash: /9gSFN6Jh6IOVjlZNhRpSBitYWPHct6GZTgiTAiwPR8=)
                          11: WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa (hash: 5/nNeU++Tk3tTxk1UDX88TCuqrCoToCpYKSrEibPyls=)
                          12: _-qLuY0dJaZaSWjtWCqfvkINW98.roa (hash: wQKawmTp+JnLi1nfzjxaxc0y+Fv2NQma/wD/xIsptVw=)
                          13: _1lqE5scJ0MBH0b9lTR0YHuGOuU.roa (hash: 4TZYcGOcfHMexmHJPq3AcWYTwMqwPGPD0OgXI/Zx1Ik=)
                          14: f9P9TOtw3B1yLwWd-zzgWOHgFyo.roa (hash: eY72IEUw47OrnHrbzBE3H8Hn9IWCmc+eDQ3PnvNlgzc=)
                          15: h4Wdvms4wuQVg2v8lAhl_FvWiDU.roa (hash: qgpyjP3KxvlInp3FHrdBXgF7d6QXTNIjbw3bJgQTHgw=)
                          16: jR6B6upcDz-k-D33X5cUCpKNQhY.roa (hash: 17bzKKAmw9P5KCIa3O7ZZ3Gz7ehvl9SAXpWrtnaB8HQ=)
                          17: keTJqY7deNugwlmSUKuLVvK51wo.roa (hash: q6jipuf1WpKULW6CAfzHiIY9EHwk4hFmc5paPypsmNQ=)
                          18: leAvVKB-KF9YkNjyBGLznG9z208.roa (hash: sNz5PxJVA3WdR6kA9tPYVEIxVQ3UHzFMpibhNTNaOv4=)
                          19: lsTY6AmWoYOLDn9vJEopaPrCzaE.roa (hash: zdYo35yHHZ9h7IbD1O6eQ0PbAdPIh6AmlbW/iwXvWFw=)
                          20: mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa (hash: N9byFHS2GD4WLMaI+ZrMFbqxvlxUMFZZr0x2guAAd5g=)
                          21: olxf7ZsuzIbb2ywWmhByxe-xLw8.roa (hash: fH7TNj8hlrTs9pJaEkQ+/5PSjQ7A59ZxCk5/AxaRv18=)
                          22: oq_bdGbnwKTXTnGXJdYy9S7WicU.roa (hash: p8oLPJnZdi4G9SjZfWCHDdPw6B3VXekrGGf+ZY2rnv0=)
                          23: s-ve3F8tXP4595quse_pLEBwHiM.roa (hash: etXcDa5JBalQlJuVD2B5TBUIJ+CVNp1v8p140S4caec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:ea:05:05:bb:22:4d:14:68:0a:a5:d4:97:18:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Sep  7 05:01:24 2025 GMT
            Not After : Sep  8 05:01:24 2025 GMT
        Subject: CN=792166f9e294172b82083db019ef0dc2e53cc2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c3:d5:c7:3c:5c:b7:6c:97:2e:44:78:55:78:
                    53:ad:fd:89:b7:ce:5a:85:c0:bd:5e:fc:11:ac:bd:
                    2c:ce:6e:f2:2a:bf:ab:71:1d:f5:60:a1:e3:14:ae:
                    a0:14:bc:c3:80:5a:72:c3:d1:80:35:ec:dc:bc:ab:
                    16:f1:6f:12:9e:21:00:ab:9d:1d:3a:18:ae:97:a0:
                    a2:8b:b5:d8:d1:15:ee:1c:32:3f:39:5a:61:b0:04:
                    13:0b:6c:72:f6:cc:4e:0f:69:ac:54:43:f2:78:90:
                    32:e7:a3:8b:13:36:b0:d6:a5:1b:f3:e0:1f:3a:da:
                    87:2a:02:62:20:0a:db:fe:16:bd:b1:30:bd:9d:f8:
                    6b:58:27:73:46:fd:49:2a:63:dd:dc:f1:48:3b:42:
                    60:3b:8c:a9:90:32:85:7f:d9:47:c3:91:ca:65:8e:
                    66:52:c3:e9:e1:73:37:e1:85:68:45:3f:15:2b:b2:
                    31:23:2d:cb:21:0f:47:68:2f:9e:33:08:5b:82:17:
                    8f:5c:a0:3f:6b:cc:22:33:49:52:5f:e2:37:e0:d4:
                    80:5a:8d:fb:62:6c:a2:22:a9:d2:31:1f:07:3e:1c:
                    0d:95:cc:31:35:e3:67:2f:d7:00:92:c0:c7:86:81:
                    d6:52:94:91:eb:65:5b:0a:e5:be:60:33:89:e4:9f:
                    85:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:21:66:F9:E2:94:17:2B:82:08:3D:B0:19:EF:0D:C2:E5:3C:C2:AB
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b1:4d:98:d7:68:a9:c9:55:80:f3:f9:ab:b1:40:93:82:c8:
         6c:62:a5:cc:36:fa:ca:22:85:3a:ac:db:48:1b:ee:6b:7f:67:
         c3:b2:57:56:20:b4:27:56:75:3e:ac:7d:38:6c:6d:15:9e:d5:
         f1:25:0f:13:f9:55:81:87:c2:f8:84:97:bb:d0:5b:51:05:ce:
         b8:e3:37:5b:b8:bb:fa:68:cd:eb:66:96:da:91:81:1f:4b:48:
         e1:1f:70:1d:68:2f:fc:1b:64:68:b1:51:fd:30:70:89:c1:1a:
         c5:7c:4d:96:92:77:99:9e:1d:4c:a8:73:5d:96:c6:89:71:48:
         f4:d5:89:7b:59:c1:c1:cb:f8:38:97:68:92:21:93:d6:cc:97:
         5a:0e:42:1f:bf:bb:90:1f:06:5e:95:f0:7f:83:f9:e0:e0:87:
         f8:55:9b:e6:c4:35:24:5f:ae:80:4a:0e:90:e3:89:c9:b0:98:
         1d:67:a5:79:9b:5a:2c:ac:6d:22:15:fc:ac:10:9d:43:42:45:
         80:16:ec:1a:1b:c1:a0:23:36:23:a3:31:49:9e:2d:0c:a9:1b:
         b5:e1:9f:08:c9:e8:48:08:fc:cc:47:8b:48:a6:1e:a2:4e:8e:
         20:b5:df:38:8f:66:25:30:e6:92:3e:41:e5:ba:3f:11:02:11:
         3b:b7:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:31:05 2025 by rpki-client