Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
File:                     v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json)
Hash identifier:          38IMohW1zXThgtlOmppoSdMX2+g1fCfqLE5zyJ6fsPU=
Subject key identifier:   65:29:35:C2:39:FD:5A:1D:42:A3:16:16:83:9A:3E:98:A9:06:B2:65
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Certificate issuer:       /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial:       01991BAE4A89D269F212F94F3DB21247C9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
Manifest number:          1316
Signing time:             Fri 05 Sep 2025 21:00:31 +0000
Manifest this update:     Fri 05 Sep 2025 21:00:31 +0000
Manifest next update:     Sat 06 Sep 2025 21:00:31 +0000
Files and hashes:         1: 1-DCahpulJuiQi8zdfIBNVSBP_a0.roa (hash: nTSeDU5/i/b0oztZzrG2CtOkwm9ZNipV4GkBR8TKl3w=)
                          2: 1-S5qpnBw1ylZG1spddvT9f57eco.roa (hash: maWJwVVWyYP373g2CIlTAWvamrZD0BLeDX8OlPQnHj0=)
                          3: 2e62pyAhQt2DxyPFxqODWQtQycw.roa (hash: 6QUHL09wvOyNqPTs2cgB2RoIpq+Ebpdxb1aI/fz0Ah0=)
                          4: 4HUEzjvO1URr-UPygZ4Bs6_KT9Q.roa (hash: 8gqeOkmM8zl20dUfCC3W3gzkl4K07sQTxtiB6AnAR2Q=)
                          5: 6QviIP7RKjJfXyJHP71i3FDYWL4.roa (hash: QwitosOHcwHPVpSg5VFkyXo/VZmtnyWUke/Nxvg71U0=)
                          6: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=)
                          7: 8rwWZi4spjQVqa4jtS9v8fqNE5I.roa (hash: mh6barGghhF0GUA74ZJ5iP4OJOtYcuU25+Ys7lgbD7E=)
                          8: C-9z8ht5WfkqXe5T02TWElDQHq0.roa (hash: 1QuiVMAynqn64XKAO48JlQaP57PEKALVhYDiuC06tGA=)
                          9: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=)
                          10: ENmvSrLnZ5l3zdl7_SWX-dmV2iw.roa (hash: d78rG1JxemNpbntQxK8HRnUpFVFRNZsmtcWweXwXHFA=)
                          11: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=)
                          12: LHp-Ta0kps7ZGlhRPmsNyhh2hwA.roa (hash: bBoLumt4C2qITlPGkAX4DT2//QAjdutXa5WDertG6UU=)
                          13: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (hash: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=)
                          14: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=)
                          15: PKjMMvZfZGO6d3QofJpMp8mLoEg.roa (hash: PLZzvSg9ShprS72UhVRcTHvYPm2OE+eVMBgJ7lsQMMA=)
                          16: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=)
                          17: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=)
                          18: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=)
                          19: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=)
                          20: W5sU-ZO6WBhRXGkiRRiQQs5_9rk.roa (hash: buoQ3JOzvBjf3H+zLixOxcXYRqSn97Vev1LEOeeiEno=)
                          21: XlhxtDrnef0LIn9STUD5IsH1ycc.roa (hash: 8c7ddXQfFoWwM7tA+K1eFR8xfvHddWeWNMUF9Typ4Ww=)
                          22: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=)
                          23: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (hash: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=)
                          24: gdi_J_c0GtCc5x443kexg-b8wPs.roa (hash: Aw5kYwxs8AG4Z/q8iT+6fyl5oYGYb5LB9ortXvdtI9I=)
                          25: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=)
                          26: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=)
                          27: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=)
                          28: m7lMiWju66nWi4ie7Vt74icILpg.roa (hash: x3s/oVaZakSkOMeloqbQaRy3FaKUq2eo4wHClY5zjYc=)
                          29: pWKwCP_lM1lV6k1_8iA6jNpjHqg.roa (hash: RStEnKPVfL8STTUgjI+bGS1TABSbUFHPohIVOs18xGk=)
                          30: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=)
                          31: tZChEyPQo3JtLgHIkLJCjZXT3tU.roa (hash: uNozfSihaZEC6WRHSAC5xI77mGfqKXUUWQanmizBeW8=)
                          32: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: T4EXPZIXfHcy3PQcOFZUxEsumSmAc34tuITZgU0OjJU=)
                          33: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=)
                          34: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1b:ae:4a:89:d2:69:f2:12:f9:4f:3d:b2:12:47:c9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
        Validity
            Not Before: Sep  5 21:00:31 2025 GMT
            Not After : Sep  6 21:00:31 2025 GMT
        Subject: CN=652935c239fd5a1d42a31616839a3e98a906b265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b4:5d:81:3a:4f:42:f5:5c:25:59:f1:5d:2a:
                    60:ea:69:c9:6a:60:6a:27:ec:4f:69:0f:9e:20:3f:
                    93:34:72:c8:e9:4d:26:8f:9d:84:91:6f:11:ae:08:
                    b7:8f:46:49:b2:30:31:93:ae:e8:6a:b5:4c:7d:05:
                    21:45:49:a9:ab:cf:dd:30:d7:2c:e1:34:a9:b1:c8:
                    9f:e5:50:ff:96:eb:3a:e8:e1:6c:49:b7:85:a6:64:
                    e6:51:2c:d0:a5:64:96:9f:2c:13:7d:c5:62:d7:f6:
                    eb:1a:49:32:d0:2f:a9:d9:48:70:00:0a:23:ca:8b:
                    05:79:22:8d:49:3f:c6:6f:34:81:63:e7:c6:0b:d0:
                    ff:5a:99:15:4a:0a:74:86:96:32:e4:61:0f:39:b7:
                    49:c0:f9:2a:eb:03:79:32:b1:71:19:4c:d3:50:1f:
                    07:b1:11:3b:81:1a:2e:4a:9a:5e:0e:d7:c3:90:9b:
                    55:d1:b8:7f:ff:ff:3c:aa:aa:be:ae:11:b5:1b:55:
                    c4:3b:9f:dd:87:a7:15:3d:8c:82:22:dc:bb:fa:c2:
                    b4:ef:0f:cf:eb:38:02:f3:3c:0b:74:a7:75:22:ea:
                    f5:19:ae:a4:2c:cc:8b:cc:51:b7:93:3c:41:f0:aa:
                    fd:7c:1f:13:92:75:3a:0d:df:72:f7:63:1c:25:de:
                    73:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:29:35:C2:39:FD:5A:1D:42:A3:16:16:83:9A:3E:98:A9:06:B2:65
            X509v3 Authority Key Identifier:
                keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:dd:99:3a:16:1e:7d:69:94:73:9f:c2:1c:30:7a:d8:98:
         81:15:66:34:51:28:49:46:f5:0c:5c:1e:87:56:ef:0e:6e:53:
         4f:2f:fa:de:83:27:07:c5:2b:dc:63:fb:17:44:bb:dc:60:d0:
         b2:c9:3f:eb:39:bb:8a:3c:9c:e6:72:d3:a4:01:92:81:c9:71:
         b5:09:dc:25:93:b7:57:68:77:55:65:ca:64:1a:86:19:10:47:
         8a:98:f4:bd:fd:c2:f9:4f:3b:e6:90:f4:8a:c5:e7:4f:47:9f:
         0e:1b:2c:ab:3c:05:d5:1d:02:96:16:cd:90:14:8c:e3:1b:6f:
         e0:7f:d9:45:49:5a:5a:a5:01:43:ff:3f:0a:0f:cc:7e:a5:8a:
         d7:2a:c2:6a:44:05:52:e7:14:d1:39:b5:e8:49:10:d5:24:b5:
         83:fc:6d:4c:4c:ee:53:7f:fe:56:fe:93:9a:47:48:c0:b5:99:
         dd:da:68:fa:8a:e3:54:c9:d8:de:7a:59:76:e1:a7:7e:af:24:
         ed:ae:c9:3b:dc:b5:6d:7a:7d:ef:47:d6:83:36:a1:54:a2:b2:
         8a:2c:6f:bd:d7:11:bd:b3:23:88:78:75:34:72:af:99:ed:24:
         a6:e9:4b:08:35:80:4a:78:47:c2:fe:9a:4f:d9:ec:18:a5:12:
         20:e0:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:58:36 2025 by rpki-client