Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
File:                     V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft (raw, json)
Hash identifier:          CZx9SdyRxkR4d3EQh7ER/MJyiEIqQ1LHc6NithGywgI=
Subject key identifier:   5F:93:83:EC:93:D6:69:22:63:DE:FE:10:06:E3:37:76:C9:37:A3:21
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Certificate issuer:       /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial:       01991F1DBCF9D48A1EFA976A48F681FA1A41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
Manifest number:          0654
Signing time:             Sat 06 Sep 2025 13:01:06 +0000
Manifest this update:     Sat 06 Sep 2025 13:01:06 +0000
Manifest next update:     Sun 07 Sep 2025 13:01:06 +0000
Files and hashes:         1: 1-GvME8QnWFzpw38o631i7dyDBRg.roa (hash: WMF7/w0c4pOL0tZJz0aKHQzZFynDlFvEhg5kfRe454A=)
                          2: 1-HZF_Uc44gjh1TQR1U1OYZDHjCk.roa (hash: NuB8apKKsTUzor9NX4p/x2mqEfbsbGqLyBZkaxZdT4k=)
                          3: 15TOooLLdpjbW_b3cisCOyE_RdY.roa (hash: xVGVYewssiiy8kApCS/TVaXMU8QbkCVUeShunh7NxqA=)
                          4: 1iNqSGLBurdVBRXSj9jkGbrkAYg.roa (hash: I52bbOoIJFwXUk3tZr6SbiTpSM/ybqgeCNsRlccE3vw=)
                          5: 4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa (hash: uj1CpTYiuNEnoBSr8Niym7afjHD/7ENr6+d1VZIXhys=)
                          6: 5og4i6PWufr9z5Wjmy447BF0MnI.roa (hash: YCaN/g4v5C1rq4Auj9dFq70XUsiEkdYIlRGIBpOgVaM=)
                          7: 6rKPPeMLzWMmfxQXHG3miJRR_qY.roa (hash: at3zsZGvewvckmc0l/hP6UiAhbaoajI2j5vQzoVOXGs=)
                          8: 7ZbG0xXWdD8Lswxvpmjc5lREOro.roa (hash: iJ5IHDML3gtXc2e06zwEreMcR6FoWGlQuiZScFBYWYw=)
                          9: A_elPY7zPzPBy98o20Zvw2Pf34s.roa (hash: 7IEfyja20k0JOW6h30shZ5sYEGCCL8982cOL8o5c1oE=)
                          10: D96EcvLqQ8mg6gUpgeSUDuWzoII.roa (hash: 47dUj7Yx8C1/dz36m92H2I2YJQ2HstfZCg46ryE4YRE=)
                          11: DiVaKwGBpTwiJK2wdma2FCUI1dY.roa (hash: AVK0qBECk7mzq61yod8pgLi4kKN20motkma1l/rW18M=)
                          12: FLn7CAF79mOmugGj8k0FVo_sRII.roa (hash: Lrep2bOXpLxm46oWuoQl42fldxhpT0C+CT9tHP1R1Bw=)
                          13: GVP6YRET1GMrlKgZYAjt13RVqgw.roa (hash: LUthf2xa7fthu+iWne8EMO8YrNzfF2//h9ZZZBNsubE=)
                          14: KkcDPt-mqrzjIGcK9CxKo7l2cCw.roa (hash: E08Kwyt2URP4nbJ9ZFQtZH8fcrUoxrxOEFuigCOwmfI=)
                          15: MMhAInQYtdpemgLxLkVb7UapM2Q.roa (hash: RsvGtg1Oh/rT4G0MJhnLc79JCFUU1eA/yV9wUhFZTFo=)
                          16: MxATlJUaw4Gk_IX3JJvf-FvdKtg.roa (hash: QJhW9a+BARvMM3cABQqz6dn3YgNSVvzFXTl6jFrNBqI=)
                          17: UUvNJu6FFXSLqc4fRNFmfzX6do4.roa (hash: ogf1Pk59UDa6YNqV7rBOlEspQEs/ksi9KO4GlYT9vmA=)
                          18: V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl (hash: t6rlxTsrt3pC+kkjfJmNzqbsRJUjfoEBv7cFDpfI+z0=)
                          19: ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa (hash: UXYn8r3aaYF24M8BGs9jgK62IwYmPfR4KIUePwkGsBs=)
                          20: ZlueNo25GUvLqjkuVCFwyElg2rQ.roa (hash: aj/CGKLCRPUdD2tIc7FHrJFT9sJCeOPsSAxO2ThHbg0=)
                          21: aNB_XJHrIC5i0w1C8J0tAQ5wod4.roa (hash: HmJhzb+MSwBGsvb147oYI8ZGMjU0fqGVz7CWkvHxdOE=)
                          22: bVTj9GlhWonuaW4I9cjegUl8Y0k.roa (hash: I+YpInZ6hhq3JvCTpsODfdn3dONvUDWi4McBY8idMDA=)
                          23: dolHUeMcOG3n_XT10nauhYrbidk.roa (hash: LTHdECdWQgInoyQThhGiH/oyDwc4L5pb1fc/+4zfKg4=)
                          24: gYBVJZmNIdcxDC5WTQDD4mEmor4.roa (hash: NtE7acotOkAcT8a9lvGXKloeD7hCqcrLikIbjjvfM8c=)
                          25: kUILatL9C3JCAevms2KcvqpaePU.roa (hash: T8iCGZZzAAYZpcp3Y20YYRkjioFry09uVkLdcf4AktE=)
                          26: ocuE4fXKrDYrpQocYLXuAkcw4qs.roa (hash: Nydk7rHdYX2vee746eKrRwtJaLs0LWeYf6W299bGydA=)
                          27: tXkbQt37ep9cFP4X0yP6Jr01nt8.roa (hash: uFrSH0AZn8p8NoixHghgYI6yNRcf7/W9G2Rgl77UhAk=)
                          28: tbTmb1wIkJcjOTrxUE98Gt6Tr68.roa (hash: 9h+1BxgCsdJlPqcdrM6DVHk3XBGU8ObSrJfDgfcbyEU=)
                          29: w1iF5CiJeCHkszCW3U2fF3iWHfg.roa (hash: jSF2bgkChfkaiNUq0c9ACAnTtaiP8CKGbBiy1Ib+MAc=)
                          30: wpn2zuIYSbrrxUu9itX663rnTUY.roa (hash: 2EXZnIBOHj+xi2HeAFRXs8lZBsjWZKGbNXjYDR6LDbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1f:1d:bc:f9:d4:8a:1e:fa:97:6a:48:f6:81:fa:1a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
        Validity
            Not Before: Sep  6 13:01:06 2025 GMT
            Not After : Sep  7 13:01:06 2025 GMT
        Subject: CN=5f9383ec93d6692263defe1006e33776c937a321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:f7:15:06:1d:2e:4e:59:c1:d4:6d:04:16:
                    78:52:92:40:c9:ff:9d:eb:28:c1:fb:0f:c0:4c:15:
                    0d:b4:3d:d6:31:c5:a0:84:b6:93:53:3a:02:85:76:
                    3b:49:1b:e0:7c:2d:f1:8d:cc:4b:ff:ef:b3:82:26:
                    6d:b9:fb:f0:1e:99:fd:90:09:58:4a:30:ff:8c:dd:
                    a4:0e:91:e5:d8:e1:25:8f:21:83:7d:f4:97:b8:f1:
                    1b:3c:f9:df:a6:89:6b:05:2f:98:7a:7d:c8:a8:8b:
                    27:04:15:83:5a:98:5c:c1:80:54:15:7a:8b:0e:fd:
                    83:1c:06:4e:d5:c7:8e:a4:70:73:e5:43:97:a1:dd:
                    dd:dd:6a:e3:4d:d1:2f:e7:27:a4:99:ab:89:cb:a9:
                    b9:ff:34:0c:5a:14:5d:ec:e5:71:53:52:62:37:9b:
                    84:b5:73:60:74:f7:c8:1d:97:4a:82:07:91:44:af:
                    e4:67:7e:a6:af:bc:0b:73:00:de:aa:30:9e:f5:e9:
                    e5:e3:cc:97:12:66:a3:4f:ac:0b:dc:0f:17:43:32:
                    c9:cc:95:7a:4d:e7:e6:b4:39:e6:fa:bf:7e:60:39:
                    16:0f:29:81:ce:07:9c:df:63:83:12:34:b5:62:aa:
                    32:9a:72:d9:f1:8c:85:9f:cd:81:37:7b:17:14:11:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:83:EC:93:D6:69:22:63:DE:FE:10:06:E3:37:76:C9:37:A3:21
            X509v3 Authority Key Identifier:
                keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:7e:75:0c:18:7c:13:0f:21:ae:0d:08:2f:ce:c1:66:80:
         2d:df:e1:1f:1f:c3:35:d7:eb:c6:ab:74:2f:37:98:40:74:96:
         d5:0d:9a:23:f6:21:77:ca:a3:49:b1:81:7a:dd:64:7e:86:19:
         10:df:61:e4:9f:f1:75:1b:a5:01:e4:5e:c9:72:7a:d0:29:52:
         28:c3:fc:c0:b6:21:00:8d:30:5e:10:d9:91:03:3c:6b:e7:50:
         c0:17:4d:68:9d:e7:be:85:cf:5e:0f:c0:1d:cd:77:df:f8:f5:
         51:09:20:49:0e:3e:7d:79:51:72:70:0c:b4:4f:9d:98:46:58:
         b7:da:0d:5b:ac:71:d3:74:06:ec:d8:4b:be:ff:45:ec:6a:2d:
         c0:04:a4:4a:a3:c2:03:28:1a:d9:a9:7b:4d:78:59:8c:3d:73:
         96:28:e0:6d:4c:dc:d2:9f:f2:f6:b7:e7:24:ac:19:85:84:ae:
         8a:54:74:d1:44:73:05:ea:38:94:42:89:51:aa:0a:10:52:4b:
         f0:01:47:87:08:b4:5e:a6:ad:3d:02:b5:45:58:72:95:ce:91:
         83:7d:3d:e3:ab:f2:29:fb:50:2a:8e:9f:e3:18:b6:88:57:76:
         41:6c:af:97:58:63:87:47:9a:63:6d:55:64:6c:3a:00:5a:61:
         cd:20:66:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:40:33 2025 by rpki-client