Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          p8umJCbmKQd9pO6aXBgkwkEW/o272gezxkAxwCHbE4E=
Subject key identifier:   EF:0E:30:56:2F:82:22:7D:2C:C9:4D:B9:87:24:38:6E:EB:BD:3F:AA
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       01991CF8769F780DFBA389ADC92714BB91A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          16C6
Signing time:             Sat 06 Sep 2025 03:01:09 +0000
Manifest this update:     Sat 06 Sep 2025 03:01:09 +0000
Manifest next update:     Sun 07 Sep 2025 03:01:09 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=)
                          15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=)
                          20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: C7TtDcmSJX/BLH8R3WsRuP/beNLmLwSCbiA0zTO7DWI=)
                          21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=)
                          26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:f8:76:9f:78:0d:fb:a3:89:ad:c9:27:14:bb:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Sep  6 03:01:09 2025 GMT
            Not After : Sep  7 03:01:09 2025 GMT
        Subject: CN=ef0e30562f82227d2cc94db98724386eebbd3faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:77:76:b9:01:57:a8:69:2d:d9:61:06:58:
                    44:c6:31:d5:b5:a9:48:ec:a9:f8:58:31:b6:07:80:
                    82:e3:7f:da:72:4b:38:25:c9:55:fa:f2:64:93:e2:
                    48:3c:10:16:ed:c8:1a:83:0a:1a:44:9c:7d:1a:8c:
                    3c:41:ca:c1:19:16:9b:a3:70:88:46:74:42:09:81:
                    89:ae:9f:fb:b6:cd:88:91:f5:9f:b4:5c:e9:13:b0:
                    27:9c:46:77:74:b4:03:bf:46:a0:70:00:5f:6b:0d:
                    f5:9f:7b:ee:e3:fd:57:0e:2d:08:9f:d1:85:0b:89:
                    3c:72:52:bf:9a:e4:36:ab:e5:fb:c6:26:73:e7:d5:
                    da:bb:36:de:02:4e:77:63:e5:49:87:00:e6:da:b5:
                    08:99:90:4f:86:b8:a6:cd:30:e0:9c:2f:16:0a:b0:
                    c0:2b:d4:35:c1:3f:27:17:78:0d:63:3e:2a:2c:0f:
                    43:71:5a:61:cc:be:14:c4:a9:d2:2e:75:65:37:78:
                    80:f5:b5:d7:f7:b0:c6:9d:50:ac:b8:41:05:d7:ae:
                    bb:a1:86:6e:d7:32:c1:92:bb:0e:0f:80:28:d6:2e:
                    90:85:8d:75:3d:1e:7e:2f:8d:16:b9:09:49:b2:2f:
                    47:42:0c:0c:52:b1:98:cd:4a:af:c6:9c:45:c0:b6:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0E:30:56:2F:82:22:7D:2C:C9:4D:B9:87:24:38:6E:EB:BD:3F:AA
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c4:04:a6:85:f3:05:37:ff:90:f5:15:81:32:a4:9a:73:a9:
         b0:6b:12:c3:97:f2:9e:33:6a:13:58:a1:9a:60:0c:94:f3:bf:
         0b:b7:ac:cf:b9:25:75:35:f6:8d:46:e4:28:3a:3f:fc:cc:e6:
         51:78:f9:04:90:9f:b1:80:af:a3:9c:57:e1:75:7a:6c:68:4e:
         c8:58:34:e6:97:be:45:2e:e7:34:c0:86:77:09:80:b2:50:a1:
         08:2a:d7:32:2e:9b:67:a1:60:89:43:ca:6f:33:19:9f:f0:1b:
         29:8f:80:e5:45:71:c8:90:6e:ed:83:93:77:c4:f9:45:d6:b3:
         7e:76:ac:81:6b:ea:70:8c:b7:74:6e:2d:e6:5b:30:78:dc:c2:
         f1:7d:f6:9a:d6:2c:77:e5:ad:e0:4c:53:2a:40:ef:8d:de:97:
         a6:0c:1d:49:7f:08:1e:1d:73:b8:6a:48:ee:92:65:81:3f:2b:
         06:7f:16:c4:41:24:95:0a:8d:86:83:86:8f:68:42:ff:84:f4:
         de:9a:91:08:d8:e3:79:f9:25:aa:9b:b6:b4:5e:ae:0b:cd:44:
         c9:bc:16:e8:86:cd:2d:fe:a6:2b:ed:87:ec:2f:0c:4d:c2:8f:
         ca:ff:0a:4e:98:1d:f1:80:b7:fa:22:bf:29:c7:c7:09:de:c5:
         3c:ff:5d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 04:52:03 2025 by rpki-client