Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File:                     crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier:          78LZs6q52UQBH+W+eRTVu5+LgZorJwUQn+AtmY3AOQk=
Subject key identifier:   52:CC:05:51:58:1A:A9:DF:93:33:B7:5B:3A:D1:CE:93:E2:6F:3D:13
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer:       /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial:       01991B77D2E6769FECB934F75757E06F9ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number:          172F
Signing time:             Fri 05 Sep 2025 20:01:01 +0000
Manifest this update:     Fri 05 Sep 2025 20:01:01 +0000
Manifest next update:     Sat 06 Sep 2025 20:01:01 +0000
Files and hashes:         1: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=)
                          2: 678Ssp4Z32Xzh5qaxFQ_L2xmBQQ.roa (hash: 4hZcrSL2hIrc1nZJbFZOEGuN6nZyCxrX2dpnXRqI8sw=)
                          3: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=)
                          4: B0O_LVZOeXeK0TN10n1ApguBGn8.roa (hash: EZZ+TM2jZP4EeNyl/htoPbsmB56YV/lMUbeTJ1gItwI=)
                          5: BxtsjwaylqDgyShxS785H67TnbY.roa (hash: tVOA9jGSji8cVYr6ivVtJAHBG6QSJ270Wt89fBmSzFA=)
                          6: DskJ3QKfzbRX76wY5Y62eU4erR4.roa (hash: Om0rFiAWDXCVX1P62G7M/6mKMjWs5VmA/8EV8q++G+4=)
                          7: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=)
                          8: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=)
                          9: Kp7QS5P4WvZzp6qAgCE-0Ndh8DE.roa (hash: RVta5cu/zmPSf403glh7WoQpDtLpGKMPuUokA8G+dNU=)
                          10: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=)
                          11: MBzPzn_kSNB1-CueHa-Y37jY8lw.roa (hash: oGr3faYPzLlAggU0bJjv0PDro1xtUoojxb6+b0UUemg=)
                          12: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=)
                          13: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=)
                          14: Q7A84Re88TEGuWZsIYTnNdLRtqQ.roa (hash: 62XanU5j/TVPu9hICaR497zqHzXQbEaOUBFnOheHiVs=)
                          15: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=)
                          16: Vb_RpJ-2VDeLhxtyu1EnKEq8cTI.roa (hash: H3HLjc2fYtCp8h81NRRKqe5UGP2PQxcS5tkL3rkueM8=)
                          17: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=)
                          18: Y0DqaSnej6SIicBwXcTSk1lLVmY.roa (hash: vgzo2F+cH6Z/HPxN2T0OWAN432h4SVeT+VKfGOWnjm0=)
                          19: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=)
                          20: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: PPvMhoQzLd6wsyl86gog5DtknzeGu9CY5nAKJn/zuoI=)
                          21: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=)
                          22: fxDc8gX7q8X8Hh-lBGPrs5eXxec.roa (hash: wkWxE134SNM0nnIfcHARo9e5nRHIl1fG/1y5aKiTFBE=)
                          23: g1y2t6ScHgUV5n1ybihT2I7pzSE.roa (hash: LRDFWbnwBzQggL/6hZU/Et8Uxn7dc1LTIGqCHJ8arCA=)
                          24: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=)
                          25: pVdfXUwosJ8KsorkaZco4tqDBa8.roa (hash: Lt1k5lM1qRumIXSyRVec7p+24rwON9jxZ+FAtlLGexw=)
                          26: qZ3eCm0q-dW22qf_cQ2jfAt5GsI.roa (hash: qrbrOjeddjSG3ZBSuGOYqbjNe2f328eWm35liiFnG90=)
                          27: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=)
                          28: tc7szezkYqgXsem-emQpM9XcR9c.roa (hash: O2yXB3yzO1tbqMoeSHRvGfT3YmTyzVXNjGllWoLMqq0=)
                          29: ur6JY6LTt9bSdFyx_2wS6ELsIzA.roa (hash: b219K+gQY2uaL3+siADKQhZv8ifl18rx5LHYKsxXYxA=)
                          30: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=)
                          31: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=)
                          32: zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa (hash: OeT1n7LBHt2BLA6NJKyqqdEda9ZFBBnrzNwADjp7exA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 17:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1b:77:d2:e6:76:9f:ec:b9:34:f7:57:57:e0:6f:9e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
        Validity
            Not Before: Sep  5 20:01:01 2025 GMT
            Not After : Sep  6 20:01:01 2025 GMT
        Subject: CN=52cc0551581aa9df9333b75b3ad1ce93e26f3d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:7c:9e:0c:39:2e:40:c4:01:1e:0e:33:8d:
                    2f:08:1d:22:4b:23:b4:fb:cb:98:04:7a:7c:c6:8a:
                    23:e2:aa:53:90:ad:e1:ca:4d:e3:d1:85:5b:21:3d:
                    16:bb:6f:ee:90:9b:6c:2f:47:bf:b0:26:ab:05:52:
                    76:2e:5b:32:41:d4:d6:ef:4a:ed:eb:34:0d:70:8e:
                    6c:71:10:05:ab:12:e4:eb:b9:03:fd:30:24:3c:8b:
                    66:b0:67:72:4c:33:29:db:77:1a:ea:80:18:0f:f3:
                    3e:48:7f:3a:06:21:be:9b:95:8f:7d:2d:d0:f8:c1:
                    e3:38:cf:b9:37:4c:24:b5:a6:37:01:b1:00:b6:77:
                    6c:20:90:42:60:23:b2:98:3e:9a:62:25:77:91:63:
                    70:8f:f6:c2:86:11:57:1a:f6:6e:e9:d8:a9:c0:f7:
                    2a:e4:4f:87:9c:e0:4b:4a:af:4a:ea:c8:f5:d4:e6:
                    9f:a7:eb:aa:b1:66:68:12:0f:92:66:f2:73:44:8c:
                    14:e2:e5:24:45:3f:d2:bf:d9:7f:a1:7e:df:4e:28:
                    bd:20:08:19:b6:42:56:ef:cf:f6:a3:9d:0e:82:3e:
                    48:c6:7c:84:de:f2:50:46:ae:8d:40:0a:7d:45:7d:
                    3b:f1:80:1d:a9:7e:66:b8:d5:d2:a1:fd:ea:95:b2:
                    65:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CC:05:51:58:1A:A9:DF:93:33:B7:5B:3A:D1:CE:93:E2:6F:3D:13
            X509v3 Authority Key Identifier:
                keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:91:c9:19:5a:47:bf:cb:8a:57:d5:87:80:09:04:58:db:83:
         00:59:c9:c0:79:d1:38:e7:9c:cc:bc:b8:4b:94:ec:45:8a:33:
         8f:4e:97:1b:c5:83:8d:c8:c5:25:89:b6:c9:e9:d8:86:5c:24:
         d2:38:ca:14:eb:37:bb:90:10:94:94:4e:60:ae:aa:e1:c0:48:
         dd:74:ab:f0:68:7d:0a:9f:09:a1:23:1a:e3:52:36:e2:82:df:
         18:f2:11:3b:9e:15:f2:23:7f:ee:54:f9:2a:78:50:59:14:30:
         3a:6e:78:b7:02:72:bc:a2:a7:d0:99:bb:9d:73:fa:aa:20:31:
         b4:10:76:93:79:c6:96:fb:eb:69:fe:64:60:68:22:95:01:3d:
         33:23:d9:2f:25:5d:22:57:1c:5c:ed:45:94:87:92:c5:e1:c9:
         39:d2:38:a7:18:bc:c5:19:94:d7:85:aa:ed:7a:cf:22:a8:6c:
         9d:29:3b:07:8c:68:a9:82:d7:ba:93:8e:f9:4b:44:ad:6f:b5:
         fc:85:c6:91:90:9b:dc:94:18:a6:5a:ea:a5:d2:9a:ec:72:77:
         c5:44:60:ae:41:33:01:d5:76:52:13:b1:3d:52:ac:3b:6b:ae:
         c3:f9:26:e7:c8:dd:9b:26:39:e2:94:fb:5f:94:45:93:5d:d5:
         d5:8f:ff:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:57:15 2025 by rpki-client