Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
File:                     g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json)
Hash identifier:          URZr4gk90Cpd+PGq4LY4lx74/221nmHfiyMVv/0/cdE=
Subject key identifier:   5E:81:CD:BC:91:1D:2C:64:DF:7E:3C:0A:20:12:D2:8B:37:BF:E1:B1
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       0198CA92FFB8BD724EF6B5CAA6EC93EB15CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
Manifest number:          165D
Signing time:             Thu 21 Aug 2025 03:01:27 +0000
Manifest this update:     Thu 21 Aug 2025 03:01:27 +0000
Manifest next update:     Fri 22 Aug 2025 03:01:27 +0000
Files and hashes:         1: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (hash: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=)
                          2: 4jaGZdOEYrPblfps0YpbkEMcNKM.roa (hash: G6P2F/yQN3KTaexhThEC0j4hTEjLeDNZKdLyv/NC+3M=)
                          3: 4sVuDUHUhuqv4fotP4t5XZJrll4.roa (hash: ObxWj69OtudWkX1fVAGgmn9Z1mlrHpzlXmvK45aoIXM=)
                          4: DXe2QCeg44oSwSjch2B9InQFKjo.roa (hash: K6OnR7hdUcOFhOpAS0quOhv9TOcSZTKYV24C7+i6Ykc=)
                          5: Dtu0FUQBTwq7nMetgTpNdxrJrUc.roa (hash: 2+O0fEd5VicZaDp5QDSOVxRQGaFMgRpvuxLyoCSaMdM=)
                          6: LfLe7YKoxpINUdoXGyuAfXYrniQ.roa (hash: Dgetk7NQsymcClj7R3CjDeNB27bpcwbabN1XuUrEiuk=)
                          7: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (hash: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=)
                          8: TcREFaat3BLntw04ypyL63blPnc.roa (hash: ujFrwypXV/leJfWI8GP1wwYG1eD9LOp8Gpc7lvuU/io=)
                          9: Zg9LMTVlLMAMzOgaRCOZsvbj5YY.roa (hash: 9YC0kyDqEXxaDbjw/WFc8btR+dLVmBtAW2yMy6GIxwY=)
                          10: ZgkKPqbv9uiQkq9_E4cqyYGcFls.roa (hash: m/krRcpOPe54FnCcamtSok5EA+fs9cArfGttZA4+K7A=)
                          11: bL6MKH62F5NiojNDkRLOm7t1V50.roa (hash: VYSTyygBbvuJ4ferc/WHT6RrnYr38adoWbgUflVODE4=)
                          12: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (hash: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=)
                          13: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: ORruZAuFlWiDhc9USnYMfuxRYgpWYankh/6fyycBj34=)
                          14: lmi4kKkD-fm8PiwIfC8JLrzBw14.roa (hash: YX7AOdebhpFQSdPo9Jj8qzaopE6t4H529tPcuJmvtPc=)
                          15: ndVpFTiV-032z1oLz_wixEvXGiw.roa (hash: /HnhEZMMk7Eh52x99XbC/u8H+8NvDyXM8aky5jw29mA=)
                          16: qxvPMaX8OGrCfU_og9o2DVWnb6o.roa (hash: EVV5E8QbGEPDIg0iJeaGWGQ6+38SPbZU14znorEijaI=)
                          17: rvBoaYSrYkbtJTtOKbhTdATaFJM.roa (hash: LE4FJA/j7M053Yg4eAl5SJ9uM0sRd4GVsWhWeNGGUv0=)
                          18: z4wc-XAByuKg9_4TbtczZujvcTM.roa (hash: k/l1khmraEpcZ2ZtOkT01pmuwNGz8qHwS9DZWQhB7Ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Aug 2025 03:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ca:92:ff:b8:bd:72:4e:f6:b5:ca:a6:ec:93:eb:15:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Aug 21 03:01:27 2025 GMT
            Not After : Aug 22 03:01:27 2025 GMT
        Subject: CN=5e81cdbc911d2c64df7e3c0a2012d28b37bfe1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9f:38:2c:9c:69:fa:a3:03:01:06:83:37:b2:
                    9b:77:63:23:a6:0c:c3:b8:b4:88:7a:9b:d6:0d:a0:
                    05:c4:a0:fd:4b:81:52:88:36:83:8b:ef:2b:8b:91:
                    7c:74:8a:1e:70:b7:15:00:b6:c5:63:e6:d8:62:b5:
                    94:df:bb:0c:4f:0e:50:39:6d:04:21:fc:f4:eb:a1:
                    37:d5:7a:6e:d8:e8:a8:4a:21:b6:6b:b9:03:97:70:
                    6d:b5:65:88:4d:cb:cf:06:67:04:b9:0f:3e:f2:af:
                    fa:c3:09:b3:2e:28:60:18:f5:bb:d5:9e:39:0f:5c:
                    99:b8:2c:f3:9e:a8:ab:c6:49:22:02:b6:61:22:02:
                    a6:7b:8d:35:01:3a:2f:7c:44:39:ad:37:60:26:bb:
                    41:55:e4:8b:e4:b8:55:f5:85:b0:4f:dd:fe:eb:c5:
                    9a:0c:ce:30:9b:86:12:9d:1f:17:ee:7e:19:bf:a8:
                    6a:c9:d0:ac:f8:8d:47:eb:26:f5:97:8d:85:ac:5e:
                    53:06:f6:82:17:13:5a:ff:35:40:79:7b:c1:dc:e9:
                    96:13:8b:dc:ae:ce:97:c9:6a:3d:61:69:a2:2a:15:
                    27:be:1a:4f:9f:6f:dd:f3:47:10:cf:74:c9:6d:cb:
                    6b:78:50:44:d9:5f:f8:43:d5:40:72:7e:44:0d:51:
                    98:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:81:CD:BC:91:1D:2C:64:DF:7E:3C:0A:20:12:D2:8B:37:BF:E1:B1
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:46:c4:1b:3b:aa:d0:f2:70:53:19:2d:fc:48:8f:53:81:
         8c:9d:2e:14:75:d6:2f:71:0e:3d:d8:a9:1f:5e:da:62:5a:5b:
         08:9f:17:a6:21:c4:49:8f:e0:fb:5a:07:04:75:ce:8d:d6:9a:
         88:dd:01:d9:22:28:2b:9a:c6:14:37:9a:78:46:e8:a6:e2:19:
         83:4d:bd:47:ef:e8:1b:6e:2c:15:d7:1f:46:ee:64:d5:df:e3:
         88:87:17:43:0d:38:79:e5:fd:27:0c:22:f7:f0:1d:ce:93:56:
         9c:55:7a:49:4c:b3:8f:f7:b5:0a:04:43:15:ff:05:e7:4a:8f:
         b6:25:cf:aa:ee:3a:fd:d4:98:b3:ad:e6:53:bc:8c:60:ec:72:
         be:90:f7:8b:0b:a9:5b:56:c4:7c:d8:8e:13:c6:1f:52:03:47:
         0e:18:d6:f5:c0:bf:db:03:23:bd:d5:da:59:d8:1a:a5:7f:90:
         ed:f2:99:53:e2:4f:7d:28:a6:71:45:ff:6e:8c:61:05:35:eb:
         ac:80:48:c8:c8:8a:d5:21:4e:73:6d:ed:ea:a3:db:46:73:97:
         16:25:17:f8:2f:11:77:0e:eb:a1:1a:32:f7:0a:43:1e:e6:b8:
         36:e5:ba:c3:e8:a7:9b:65:eb:f4:ef:54:fa:ef:ff:5b:dc:43:
         86:c2:de:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:48:41 2025 by rpki-client