Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
File:                     gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft (raw, json)
Hash identifier:          IWgPIwiBYp5oZnJI1I4tjly2+hPD1X6I06DtfyGGWxE=
Subject key identifier:   69:B5:3B:67:2D:16:73:1F:08:A0:1D:75:58:B5:1F:8C:F7:A6:0D:6B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019921E7593BC08D2431378319D8F98C212A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
Manifest number:          12CE
Signing time:             Sun 07 Sep 2025 02:00:33 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:33 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:33 +0000
Files and hashes:         1: 0QAnnNeRCHbjQIKIbapE3K_mn2A.roa (hash: BGoMp2YKt5XWHP/tLve0xBIrFEUyuT55R0sBaL3EegA=)
                          2: 1-JeU5Ztmd7dI2WAxKqDvuuLFfdc.roa (hash: sJa+U3LLkFzW3SprgwTcuNyrM/WIZcd29wv7V4vGIrY=)
                          3: 1-VlVAFYjBlMZmYGi-qY9ce7bzSQ.roa (hash: SuzkFP0avGuruJiAf02bw2JgvahMoj19YC/7v2xdmUA=)
                          4: 1FmAMzQLb3mLZVGeJTAY2eEJJFk.roa (hash: UUuSBt4OdzrBgISERpqSrnk6ha5b0vTb3pmBgVy4gWE=)
                          5: 3kuD3LLnycMU7BTyf9tYGmONV8Y.roa (hash: DHhMqohJkKx9UxzpEEhLQe6jqZLZmbEF5em+WhcLQm8=)
                          6: 4jmGITMHc1KqwA5kx7fOix7Q-Uw.roa (hash: XuhDvg404lU1wC8fQmwflCFqSbHj7IpbOtg5nUQ9m24=)
                          7: AAlIUhYKZK2vk4l3ia79AwMCR1E.roa (hash: RRWpadbWwBpZZlmUscBUB3C6JRJHuOmMiTDl4TROVbc=)
                          8: DeutFtylTcjzPkjnWUHf1n4_dX4.roa (hash: U8lI84k1LNG7a45tFKpYxwOZ7SAtak5HgWpjnC89PSM=)
                          9: LI5Nt-2K3gsdcICE11EckjmUZWw.roa (hash: U9kr2zE52mxUvFJQ2bTsoVIgmPxCzGqU0iGQCUbr8t0=)
                          10: ODqTHlDbaPBUV0aRCaBuPqaDQSA.roa (hash: QC/9MrgFL4HEKypd8iRiJumrof3HYvCsdsr1JCqaorI=)
                          11: Pv8R2g3YQiREicw9ezYojXP1bI8.roa (hash: Q5Me7mq977MJBtoVkF7BzMCD7W2NdjOfsAnxaPB4EB4=)
                          12: RF_0ZoopT2OYD94ESLS8-RKGn1I.roa (hash: KhCqQ44gDiQf+0xobcUZmx22l7sjaIdtLBPHOJK8Y90=)
                          13: ZeR2y6StnT6e8iiUmqPt6QH7l1g.roa (hash: doAoquHW5ZITfsi9xWFJiGyOadFJ0V1mP2kiA85fdhY=)
                          14: Zj2OZMyP1EvTE9y_kIZLugolVK4.roa (hash: Fz6OXkuDPAQpFAzRyqTOrgEEQVqqBvo5qYV2JmKKtSc=)
                          15: aHlfuIHUUJQcmwzDL21gmtdC8sA.roa (hash: u7mqSTA1TxUCC6edmuBvm0I57irB51HjAMmfjM64bUM=)
                          16: c5vdRG5UZ5xSyih8lqmCqKsD9Fw.roa (hash: vdXhCaB+QUElAatlRVQr5dS8Tdpap0IfNjyLta7QIjs=)
                          17: fnKX5f769Te8QG9am0LCc-_EX6M.roa (hash: XCbr5Ak+yOp2aeHv0hj0Y1kgNB/dIAnyttEDgmH0nvs=)
                          18: gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl (hash: DeRumMJwjN4UODqjgMds5rGy3irqHOAG4X9B7V4pX5w=)
                          19: iFDfolyIwLhIHIZMVOHdEHaSYjE.roa (hash: mAf23/tsBk4ZNAVT4MnMs7xQrrbG2Oy6tHbhJCMNsOA=)
                          20: jtcBnw6BtNJ-Urk61tVxibL_AXc.roa (hash: 7NnspFQn8gvh4Xl5gqU6oevjPqD7DkpGZBtddfctzPg=)
                          21: l3DXMB2VL7c7b6xRjYGPDV7oYGI.roa (hash: o6ahrhG3L8tnPi0I3Y8P8prBnYqNAqV+4VEt68sxUBE=)
                          22: n-r4n43EiSmkd7ibbn8iH_P6lbw.roa (hash: bgLM8ttMnvBXle9GGEpTf60dgVbxEruwGxCx+NLM1Ds=)
                          23: oL2YreV4BlLI3MMQYSRrLkg-icI.roa (hash: n0TIXYhUKwSIhM4PJj4FipZO7bEbLjqNdWXuulpeces=)
                          24: q1_kdn_mHBMsXt_LwiZDCcVemDI.roa (hash: /esq7hLL7yFrxaJDn+vXCMFmGrmrvozyi17wJRNs4Xw=)
                          25: rMiGbs7-FQs8_ORoPv4QNfKryhg.roa (hash: n/VAII6UmUdHSSyio94w7g59PL2HlvN5WYUB1jdsc2s=)
                          26: rjmwrzCXEu-XcGuAIXSGal63JtI.roa (hash: S/yADj+wUms3LGPnEcE9tuD1RjvuWJaXGWgabDMNL1M=)
                          27: rjoLb6xRWSPJtXMLtPqwuFtEkcg.roa (hash: /M6nuA1R9V+fnffp6tJmgxeR7pu/I0EBNNvcUnAVpwg=)
                          28: zxOOVaQxZCsuoovtejMYuScjI8o.roa (hash: LDEZSLVz+t8ZGQvsKj/MSr5CS8tXcy/ENL+KLbTXhvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:59:3b:c0:8d:24:31:37:83:19:d8:f9:8c:21:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Sep  7 02:00:33 2025 GMT
            Not After : Sep  8 02:00:33 2025 GMT
        Subject: CN=69b53b672d16731f08a01d7558b51f8cf7a60d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:14:6d:e5:22:66:de:ee:05:46:7d:44:09:
                    f5:2c:2b:6d:f6:99:2c:eb:f7:bf:ab:d0:e0:f3:77:
                    f3:d6:5f:e3:58:69:4d:8f:e7:1d:46:44:e8:77:97:
                    d4:ef:8c:6c:95:9c:72:75:19:1e:7a:82:ed:80:93:
                    2d:a4:e2:de:ae:28:b4:31:55:00:98:3a:a1:39:fe:
                    ae:80:da:26:0e:80:9d:6f:2c:91:c0:fb:57:0e:23:
                    e9:19:3f:0f:5a:6b:19:1a:b3:80:d7:79:5a:00:a2:
                    e7:27:de:63:e3:b4:e3:db:27:9c:2e:c6:4b:cd:94:
                    8e:c2:e1:3f:39:c5:f7:54:d4:85:79:57:d8:93:b2:
                    b5:6c:a3:0f:68:d0:b5:5a:b7:55:09:ad:c2:c9:4b:
                    cc:7c:a7:fd:8a:dc:06:c5:94:06:81:72:ea:5b:a3:
                    04:f0:47:9a:a4:eb:28:eb:f2:3a:fc:b0:37:14:15:
                    6a:d9:f1:74:d4:5a:00:f2:28:15:c7:80:b5:20:02:
                    4f:f8:09:74:5b:c8:0d:42:36:7c:bf:e4:f6:0b:ea:
                    42:5b:0b:c5:16:18:dd:9f:80:bb:88:a5:2d:f0:cf:
                    09:c4:ad:93:c9:5b:42:fb:2a:dc:40:ba:90:ce:c0:
                    f5:aa:5e:46:fb:8a:17:bb:66:fc:9b:ff:d7:b1:fb:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B5:3B:67:2D:16:73:1F:08:A0:1D:75:58:B5:1F:8C:F7:A6:0D:6B
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:01:57:8a:b5:9c:52:d0:62:dc:a4:fb:c3:ba:de:2b:6f:e4:
         d4:3a:cf:99:1c:e7:8e:9b:f9:e1:62:cd:89:14:b3:ac:99:e3:
         ce:82:bd:bc:c5:89:f3:73:f7:c2:d5:ee:32:93:26:61:73:1e:
         82:11:a5:9f:09:a7:99:95:ce:90:0c:cd:5f:a8:c9:23:a5:f8:
         1f:50:0e:d5:be:69:09:81:f6:dc:2d:b6:6b:20:cf:5a:71:b0:
         3b:2f:08:7a:78:b2:b7:0d:2a:14:94:66:d7:c5:69:10:cc:e4:
         60:14:41:d2:a7:00:56:ea:e6:2d:83:2d:11:dd:1f:48:b5:a6:
         56:e5:44:93:4e:ad:78:8c:2f:e0:f4:43:a1:69:05:65:ef:96:
         64:44:79:68:3a:b3:7a:40:b7:b4:a7:96:ec:69:ad:dd:87:81:
         ff:12:81:a5:3c:0e:6f:be:7c:7a:9d:0c:20:56:9f:8c:d7:e0:
         e2:4d:9e:cc:75:b5:e8:d3:e4:be:20:e3:f1:b5:96:0b:0d:28:
         ed:ab:41:c8:2a:63:87:fe:26:bb:65:8f:44:ef:18:53:43:b9:
         30:cb:b6:c2:6e:8a:dd:f0:55:c3:59:81:cd:00:9b:2c:83:b1:
         98:c0:9f:75:a0:7c:1c:18:1d:76:16:f7:9a:e7:2c:d7:b6:2a:
         54:00:57:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:43 2025 by rpki-client