Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          e+MKc1Ou7EsPfr+47NCl1BWYdanZjkH4CyNewysgFDI=
Subject key identifier:   C6:74:15:C0:18:95:9A:DD:C5:12:4A:B9:F9:36:6B:77:D1:44:8D:52
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       01991C53B6B95CD577865D4C3EA5E68A47BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          1709
Signing time:             Sat 06 Sep 2025 00:01:12 +0000
Manifest this update:     Sat 06 Sep 2025 00:01:12 +0000
Manifest next update:     Sun 07 Sep 2025 00:01:12 +0000
Files and hashes:         1: 1-L9qSgE09LkQG7Ea8EBDdDw4ino.roa (hash: L03XGEs9qhc6ohMjsbyVjgW+T6aNu0Or4uMNslNgGaI=)
                          2: 4iHcBGfl4oJ0jUkqbJpTpkjJRRA.roa (hash: 9gUiJ2PpTaXRBDYpcks5/ZTXgi/FI7Hpa6+iF/UooaM=)
                          3: 5GpN33ElR1lUI3r69WNur5XVlhs.roa (hash: Ag+FWXz8zur3U3WfkactLdqUhbzus2FhO2lgG9Wdyos=)
                          4: ApvhjKPqS54Ym0klIaNKAJ8kwfA.roa (hash: G7CMBZzYEWEowN0oeXl4yB4eRy4GZVwzz9Vsjln2SbY=)
                          5: Bl9_vWIpRsVo1QhxYcFKc0IqD6k.roa (hash: 1LM6MDYaE6Y/jo/PARMtexnN79ZdrRCB7ndwYT67l/g=)
                          6: D4fjlMdzoE531488p0OTA-8Nk-o.roa (hash: ZYvjH+ox9QqmVT8DocHf0I+vPA4vlzbkktR49hxKf8Q=)
                          7: KM_F04W97L4fGV6eB1EFGADXYBA.roa (hash: dZWwjg2hZJwYzS80M1Flty/faDlYaBPiOJ5OQ7mS6kc=)
                          8: LRsE8HjdoDuIOCHhNJWGn8Yh3Z4.roa (hash: x5/q1IzKRQsjqMHjgJuVRy8oArjf6h7TAw1i1N5j5cs=)
                          9: MsFmWJOoSFY3BCE49erYLm5IeF8.roa (hash: +ULhpY8+EhNOI9KNs3g5QfGlO9AZRphDDwBCNw26nt4=)
                          10: Mz8Xzjb4Em-bp16qe94uV9f2KSc.roa (hash: IgI2K3rzQ3JJ+QIwmVbORi3IMlNvAYMKIlRufn/wj8k=)
                          11: QOd_WFMEgwOyxqu-Xk2hZvgMcH8.roa (hash: uXkg5eescOxXc9nW3DCPgg8rcsXy8Kvy8S+sNh4PoXk=)
                          12: QsDL7x5oAgXjMeRoqEotR0YXQIw.roa (hash: z8q4Yda7b/Bhl+Mb3DcVE7Ved5TmFaoFf3dZxwrq/z8=)
                          13: RxbAg4EFxx_FKjDSty8_Ag5B0Wo.roa (hash: fyJVWs7abgQPirZqK6oCiRYQDMcFiF3X6qhzJ7XsPjw=)
                          14: T46eT9zSYH6URoM2Ax_k7Yqlvm0.roa (hash: p7kOptu0n/Z95hIwZVAQ4UU0Tcx07mXU3vGZb5npLhU=)
                          15: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: XmW1um17yvHoSZtkdhG5ErUbthZojNd04uz+u1OOBzQ=)
                          16: TLLe4Fv1ZWKn7cU4s2eOqRGhW2A.roa (hash: LIvDYJiCNzHfZb5Qat96s04TPvC5BTwrmEMarvzgqYw=)
                          17: W1_LeC4T7DrvujyTn3J3YI7-QXI.roa (hash: 0I3vgRjhX0kcMTxTGH5KTcOsn8j2HgujVu/6VCKIjmM=)
                          18: XDf-VYAuh-nDO2CMYXVIF4SuPC8.roa (hash: cl+9twv2D+eBNV8KlvTFCcF9tVblyskg3wu09JdTgSQ=)
                          19: YvEsta7UkUfJxn1JV9JHj6QzL1k.roa (hash: cVuuCBZsVwaCNI4FHR4twQLuwRlOFeF2gBPEHlJV5sI=)
                          20: ZTeJrV44cuelAuZVlfb9KznDqF8.roa (hash: fF8x7hlp4yott2TezNaaq/nLq2M2TgyvOaX91+gXVXU=)
                          21: cDexNbgz65SAnilI4jNQbU6GDQA.roa (hash: fm8UnKsXFZ8Kv7++bvjbjI+U2EMIi8pzLEAUXfPizog=)
                          22: cbLUFQPWDFBGgeTsBo59RiL6NGo.roa (hash: 3TCJxN5y669eIRDifXi9lQDad+lKQ5Y4Rq48mm7g5Zk=)
                          23: clX0YNiQqxrLh5KRIQ1WDmi_sYg.roa (hash: lHdAtOJZ05TKI2DoNumHZCY0VkGmTIkvqW26oGZ3P+8=)
                          24: dF6uuCIifQfhUD0TyBdOV3LZGPk.roa (hash: NBNM4QLzFqDChjC2tNuyVCLY8O/IcP3tokOM4fsmiRs=)
                          25: dPUv0UiEsSl2wmwWh7WXiVW0oUY.roa (hash: QsY9itLfjJ5WmB+KPuW0ZbZL+FhYgpcBDGOifX3R4vk=)
                          26: l2HpuvC6f9fVbGRIU_YgYBjx4vw.roa (hash: Kdrvt9fByjaGxTJ7co7gZehnEAPmEhpF7v2Q4ea8KVE=)
                          27: lPrZs3D91Gt-m6B9Dr3LWvP3o94.roa (hash: fhopXrhhREaGMI2tIGmpG5P4JKsz7B7bhwx1BvlGmtQ=)
                          28: rtmJ15QCyMu37KZSjTEhWQ0zmek.roa (hash: Lz0OEHkJQ5eiVEeDAp2VWfKoDiv6W8z6xoQRzfJhjuk=)
                          29: xmPrjXwgzAc4bi6Op-k92DP0zYQ.roa (hash: Yg07yPbPmPxhkY2QOReSXpIrXS2cz6DJVyYuiKyL6xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 00:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:53:b6:b9:5c:d5:77:86:5d:4c:3e:a5:e6:8a:47:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Sep  6 00:01:12 2025 GMT
            Not After : Sep  7 00:01:12 2025 GMT
        Subject: CN=c67415c018959addc5124ab9f9366b77d1448d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:09:3e:c0:56:b4:80:80:6b:dc:5b:0e:12:
                    69:3d:0f:1a:4c:b7:9a:dc:77:db:2b:a7:23:65:14:
                    b1:ea:29:c0:04:17:00:25:e9:45:d0:ac:66:b7:79:
                    ff:43:63:0f:7b:77:00:e9:27:92:55:a4:53:30:75:
                    d0:d6:a4:5a:c7:68:f5:59:07:9b:e9:82:2b:24:32:
                    d6:c2:7a:57:67:80:d9:ee:4c:1b:91:ff:01:86:6f:
                    01:e4:b3:70:e0:b4:5e:99:14:b1:77:46:dd:ad:2f:
                    c5:dd:5e:2e:6c:4a:2a:f6:57:df:2d:b2:d3:67:16:
                    8c:9d:45:37:4c:54:6f:28:a5:0e:39:fa:12:43:40:
                    71:4d:a7:c5:ab:4b:4c:10:88:85:5e:6e:fd:29:8a:
                    ac:da:cd:23:2f:42:af:2d:d8:fd:24:06:cb:53:ee:
                    25:f5:e1:d4:e5:70:89:e3:6b:a3:4f:9e:cc:f3:86:
                    6a:33:a4:e7:c2:63:29:a7:4c:4d:58:bc:62:96:f1:
                    cc:ff:d4:35:ae:e8:61:76:f4:f2:b3:68:22:8b:f7:
                    14:90:78:46:1b:d7:c7:25:4d:6e:fe:f7:d1:4e:61:
                    68:da:04:a5:21:ea:9c:52:1f:11:71:76:90:41:6e:
                    d7:91:d4:46:ce:c4:8d:9e:56:02:d4:4a:d5:ca:83:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:15:C0:18:95:9A:DD:C5:12:4A:B9:F9:36:6B:77:D1:44:8D:52
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e1:34:4a:2f:99:1e:df:8b:50:37:11:76:b1:2a:75:02:30:
         44:7a:34:1f:1d:92:8a:0c:95:cf:38:aa:29:c3:d8:d1:7f:84:
         da:64:cb:3b:98:87:d7:e1:0e:5d:33:2b:74:e9:4e:94:11:ee:
         fb:fc:20:33:10:3d:f0:a4:a2:66:02:05:fc:78:7d:9a:a3:e2:
         5d:27:14:d0:2e:1c:7f:25:e5:76:f9:ca:78:78:cb:ca:c7:bf:
         8a:29:2d:e9:b0:70:5c:94:31:77:93:ff:fb:9d:ad:79:ed:00:
         d1:20:63:be:3c:84:90:82:3c:72:28:ca:ac:92:fc:3a:68:9a:
         a8:91:a9:85:93:d2:4b:0a:ce:e7:61:ac:b9:22:93:22:17:12:
         c4:2b:bb:c5:be:9b:ef:47:c2:2b:b2:09:41:74:28:c4:e0:7f:
         e2:be:e1:e8:9b:ee:b2:42:76:a9:5c:19:f0:3d:ba:e3:30:1b:
         74:cc:bc:42:78:06:a0:c1:35:0d:87:ba:c0:f7:d6:7e:66:1e:
         81:6f:41:fc:ee:f9:f6:70:50:fc:86:4f:75:b1:b6:ca:f1:45:
         ee:bd:23:62:7f:f0:ca:3b:34:43:8f:93:ab:52:8a:c2:6f:5e:
         04:90:45:f5:ea:af:3d:8f:a7:13:d3:65:62:13:e1:dc:14:6c:
         5e:a1:26:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 06:58:35 2025 by rpki-client