Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          5r4exHc1Sp7N4kiSqhq5F3aiw1uzlOCPG6NfJaojgpc=
Subject key identifier:   16:A7:41:4B:0A:0F:D2:35:71:35:8B:B6:F1:35:17:8F:3E:28:07:98
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       01992D0FBC6273327319EFD486071BB473E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          1722
Signing time:             Tue 09 Sep 2025 06:00:29 +0000
Manifest this update:     Tue 09 Sep 2025 06:00:29 +0000
Manifest next update:     Wed 10 Sep 2025 06:00:29 +0000
Files and hashes:         1: 0Ku6hM-uBGPbIB_elC1-63mAMPQ.roa (hash: COta24brNXG7Hg0yqxT50IIeRD/EU1T0z8f77M/W0Yo=)
                          2: 1-W34Y2-6ZjemXz3iWQp8JT5r4fo.roa (hash: jNjeNOA7d8RyKrYy4kXSP0ufCj18S8yCDg4Nofw0dAY=)
                          3: 5ZGlxXtHkl_D3voGj6rx85jwlZU.roa (hash: JM4dPNTX67vo7LYoTP+WEMvsk0f45bFlZOiulkq76Ww=)
                          4: 6kHy1rSLRBeyRna80tpk8gv-kNY.roa (hash: NxVjX4Rh3JqtadzYXtdF0stpzDaRN9qgRJW/Im9iNcM=)
                          5: EkFoJFaGBhEamXzDueIrcP26LBc.roa (hash: PQO2ZDlIaJ7jCYwx8vtlK6hg74IbDpuCQQjGUuzjVhU=)
                          6: H8z4r6H8LYjpLKJ1cCrKD18uGn0.roa (hash: iuDiaW8fmmSMkkJYvoBKP+/a4jOUnqwnHMc0pBzDG3o=)
                          7: NUttqqXP8pEImO0rZuGzsvGLu5Q.roa (hash: 52JdBvzrAL+Cv3h/jUh1SQWWYKCUR72hiXa1BlbLWYY=)
                          8: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=)
                          9: R4JA4ZrzZRT6P7L7s0XA8tBlvow.roa (hash: UZWxFLVEGSwKY6r7vPrE+HW6Om5TTOD3+yQvi0X4C9A=)
                          10: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: y10AcGXxd8BQ+WqhpKcEidt4Trp2KLs07VRFThUFasU=)
                          11: Sz-b4-QbhIC7xDSO3GZPl02NDx0.roa (hash: K++hh01f53GwzwelKdiUa6NMrdylOFTSKN76htrbTUo=)
                          12: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=)
                          13: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=)
                          14: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=)
                          15: W7RrPeqi7zq3Oi_igLU7XJ82huo.roa (hash: v52aXSRIvbSWCBynNf08BiSp6vA3FvJMLtw5LINQI/I=)
                          16: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (hash: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=)
                          17: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=)
                          18: eimfmg3jBbUserzdoIvcOhSBTOw.roa (hash: ytvv5FD6OzAKLzPji7YHqLJf5LTjx5UpXLhsY+SlnBk=)
                          19: iPxdZuzxvDtlhje1pBxfz_ffoSI.roa (hash: 5nZeFKjMPEJbsRI/uBt0UR440fY87EaeHxRz6CkKzyc=)
                          20: igfswpczVEfMjm7rXy2pimjD7X4.roa (hash: hNuYzqad4FMypVvrep7dgecmR/mSIvVwXcEovIMpz3I=)
                          21: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=)
                          22: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=)
                          23: vqrqFiZ6XbejAb9FwHtSr9yQ4m0.roa (hash: T2iIwoNA7Vg78DvVyOs8Q+hHpGA9zpQtyMB17nDMScY=)
                          24: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:0f:bc:62:73:32:73:19:ef:d4:86:07:1b:b4:73:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Sep  9 06:00:29 2025 GMT
            Not After : Sep 10 06:00:29 2025 GMT
        Subject: CN=16a7414b0a0fd23571358bb6f135178f3e280798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:58:72:c9:ed:5a:77:c1:49:99:d9:b4:af:
                    e6:d1:5c:82:0b:70:b8:c6:b6:03:99:8e:ae:f8:07:
                    23:f1:c7:69:6b:b5:41:13:19:19:03:d0:6f:43:53:
                    b0:48:09:81:08:46:29:8d:b4:76:de:bd:3c:ce:01:
                    d7:ea:79:10:49:e2:eb:03:a5:c8:01:20:34:49:9e:
                    49:24:8f:6f:da:38:b0:67:6d:07:71:15:ae:0a:a6:
                    76:3d:b0:11:8a:55:d6:fe:9c:0b:47:99:a2:d3:e8:
                    78:53:81:10:20:05:a1:f4:3b:15:01:8f:b4:69:95:
                    e3:97:a1:3d:dd:31:80:19:72:25:c7:e4:b1:4c:05:
                    b1:aa:62:3e:c9:50:54:42:e1:83:4e:13:5b:40:61:
                    6f:2c:79:75:91:c7:75:c3:f6:6f:2f:c6:d3:55:b1:
                    06:94:10:89:41:f5:f3:21:c7:88:c0:cf:b2:65:e0:
                    ef:ce:84:37:5b:17:ae:aa:2c:04:5e:55:b0:e6:df:
                    46:71:e1:27:39:6f:7d:77:50:f4:19:74:ec:5a:1b:
                    a5:41:46:52:07:05:0f:43:54:92:d9:8b:ae:16:ee:
                    4f:1a:e8:9b:b5:88:b0:8a:e7:fb:87:ec:f8:f4:f5:
                    c8:47:7c:31:c3:72:ca:49:63:c4:b9:fe:ef:85:d8:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A7:41:4B:0A:0F:D2:35:71:35:8B:B6:F1:35:17:8F:3E:28:07:98
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:af:9e:24:eb:3a:22:12:39:8a:a4:e2:be:9b:5f:0b:0d:
         6c:01:74:aa:78:2c:f7:70:54:38:05:94:a7:59:77:87:05:01:
         ce:4c:92:49:16:0a:40:4a:f3:a5:78:85:2b:85:22:6d:7c:6a:
         4a:9e:2e:70:a8:e3:79:6c:33:fe:c0:28:1f:70:4c:d8:70:4f:
         66:f9:a0:3a:b3:a2:8d:6b:b5:cd:f3:41:59:25:04:ff:01:1c:
         39:28:b3:81:76:e5:f3:ed:4f:e4:b8:fd:38:77:d5:df:8b:61:
         83:29:e6:bf:2f:97:27:6f:e3:db:fd:5c:31:24:f3:67:67:0b:
         a6:ec:86:eb:7c:b6:d1:ae:ba:d8:95:e4:60:d6:56:55:a6:8e:
         1f:20:ed:85:bd:dd:61:a6:ad:c7:40:a4:f8:da:c8:d4:1f:44:
         40:2c:94:0a:7c:1f:43:08:49:59:96:5b:22:04:36:09:d9:15:
         a4:2d:c9:21:da:91:af:07:52:20:29:77:7a:4e:2e:e1:0b:5c:
         31:fa:63:4a:f3:b5:47:1a:16:39:5d:83:0b:e2:8f:6b:5f:1e:
         e1:c3:f5:aa:58:22:e5:d6:56:0c:2a:2b:0c:17:24:2a:c5:64:
         04:8d:f5:87:80:ee:bc:69:f1:e2:b8:67:a8:74:d4:c8:76:00:
         62:62:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:32:15 2025 by rpki-client