Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          4oKarNiLMf1XdIvNilPVKz94S51TZzL6B9ufdWUplXI=
Subject key identifier:   8C:CA:B3:2B:27:E3:67:C5:5F:7F:66:FD:23:B1:7F:79:28:9A:FE:BF
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       01991CF82E445FC4F12FF4FABDB256186A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          0F62
Signing time:             Sat 06 Sep 2025 03:00:50 +0000
Manifest this update:     Sat 06 Sep 2025 03:00:50 +0000
Manifest next update:     Sun 07 Sep 2025 03:00:50 +0000
Files and hashes:         1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=)
                          2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=)
                          3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=)
                          4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=)
                          5: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (hash: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=)
                          6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=)
                          7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=)
                          8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: 6NZMBSamQKzQusewIF37dDVia3eM4eFeDeAKcgDV6O4=)
                          9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=)
                          10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=)
                          11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=)
                          12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=)
                          13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=)
                          14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=)
                          15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=)
                          16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=)
                          17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=)
                          18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=)
                          19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=)
                          20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=)
                          21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=)
                          22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=)
                          23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=)
                          24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=)
                          25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=)
                          26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=)
                          27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:f8:2e:44:5f:c4:f1:2f:f4:fa:bd:b2:56:18:6a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Sep  6 03:00:50 2025 GMT
            Not After : Sep  7 03:00:50 2025 GMT
        Subject: CN=8ccab32b27e367c55f7f66fd23b17f79289afebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:d6:39:d0:c0:e8:52:4a:48:78:4a:13:44:
                    6c:74:5f:34:aa:e4:2f:68:64:aa:64:94:7d:7d:17:
                    ed:dc:40:81:df:ae:f2:48:90:0f:53:78:d3:7b:29:
                    66:f5:0c:da:08:8a:87:d8:2d:68:f7:78:46:f7:8a:
                    fb:02:9d:f9:8f:52:71:11:7e:4a:0f:29:db:11:a3:
                    3e:bd:4f:36:19:b3:79:bd:a1:30:7c:6a:e1:60:95:
                    a8:11:da:37:57:53:b4:f4:70:bf:c6:64:3a:8f:7e:
                    f7:b6:e2:ee:41:b4:04:02:d3:c2:27:50:99:1b:1e:
                    82:d3:fb:57:93:c0:a8:fa:c2:d1:ce:45:ff:83:6a:
                    ba:2b:dc:62:15:e7:91:26:a4:02:2f:f9:a2:09:e9:
                    0f:d0:db:91:61:0f:b0:7e:65:ee:38:97:6d:90:29:
                    71:46:3b:1c:c5:80:e5:c0:8a:d3:70:3a:d8:9a:fb:
                    d0:8f:85:95:c7:ea:4f:fc:5a:9a:68:9c:0c:8a:30:
                    46:1f:8a:90:a6:31:76:86:3f:cc:88:53:36:e8:14:
                    6b:9b:b6:ba:d1:5d:fa:6f:aa:3a:43:c1:7b:18:9a:
                    53:6b:c1:61:73:96:34:a6:cf:81:69:d3:69:2e:fd:
                    6d:a3:70:1d:37:e2:3b:af:26:ee:30:33:aa:a2:2e:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CA:B3:2B:27:E3:67:C5:5F:7F:66:FD:23:B1:7F:79:28:9A:FE:BF
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fd:85:9d:0a:d0:c1:15:9a:32:45:61:c9:54:f0:a0:76:97:
         fd:dc:2e:b4:a7:f1:bf:1e:f0:49:84:18:71:41:7c:6d:bc:c5:
         40:db:4a:95:ba:a2:02:71:42:81:41:ef:30:7d:10:09:2f:5d:
         1b:35:2a:c9:c5:1a:93:b5:96:fe:34:5f:a1:ba:cf:dd:9c:74:
         d7:b4:e7:ec:cb:da:13:b2:18:95:ad:e6:d1:4c:0c:11:6d:1a:
         2e:82:59:43:28:53:ca:db:7c:d1:2d:19:7a:24:47:6e:8a:77:
         20:69:6c:38:6d:7f:df:c3:ce:ac:ea:fa:30:28:aa:69:51:0e:
         2f:b0:91:28:f8:70:1b:47:47:09:4f:85:74:05:9a:5b:f8:40:
         77:54:92:a8:ea:b1:84:bb:3a:06:f5:9d:eb:3b:69:57:e7:1c:
         8f:5c:0a:cd:3c:b5:15:f0:08:e5:dd:a2:60:f1:07:43:98:56:
         0b:3f:58:f3:3e:0c:df:41:65:3f:ca:cc:00:72:26:75:1d:bd:
         3f:0c:2f:e5:2f:6d:35:1c:27:e2:c5:ce:be:ab:d1:d1:c6:b6:
         65:96:5b:68:90:e2:e4:8e:c5:3a:c8:f2:6e:14:4b:d4:51:3b:
         a1:91:44:0a:f6:90:8e:90:30:aa:5e:67:45:a2:eb:2b:86:5e:
         af:29:ab:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 04:58:55 2025 by rpki-client