Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          QIVHyE1halrkkMzNxVCjg2GfP79sqvF3YBOYFrKLSpU=
Subject key identifier:   52:84:82:20:57:14:14:F9:C7:81:38:9E:64:A5:A1:45:9B:27:75:57
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       019846D257E5571E57C9DE4D9560AFB7E33C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          131C
Signing time:             Sat 26 Jul 2025 13:00:46 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:46 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:46 +0000
Files and hashes:         1: 2d8VX1yVh54mGYkeHaHmzVPzhZo.roa (hash: cYGvSwaRPDVvS+Yq5KxRkZ+234/mFxXJD0RJHeKEEjQ=)
                          2: 6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa (hash: BNLbnygG2YLNyjdpzyEOdm3sS9fiwqBzh1UyiyyKi+o=)
                          3: 7YhCJ28wSxD6190KY3LsL2-jFBY.roa (hash: TdMkcxbj/5amzDjgSgCV0/mP+NRcoQOnkj8hBKpX/xs=)
                          4: 7nwFZllPHib0qlQvTuec2CA4CFE.roa (hash: 6iCLCKodfg6yz/qGnLZGO0jH9QdQIo9q7VMD+L1L/38=)
                          5: DqWqWWUy5sm-gqrVg_icW_4BBuU.roa (hash: udwxBi6VLqH0wpPYZM7DDUViOUA0C7+6x2kGIlrfz08=)
                          6: OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa (hash: rkSh/s+q1SivKdqDxSkXS4YbyDK7MKYmwkQaMtbR9jk=)
                          7: VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa (hash: 26f1YQomtY0BiRJWIfpK3wiyYZ05du1tDa7jK3YouIs=)
                          8: WhRk9kZEyJiPe99DKK0ZIY2m2Yw.roa (hash: dZkGuR4JSyQqOAbFZVSVkGM0gVjd0Muk/GHy9vCkvbU=)
                          9: ZpHETbs_mb628Vvkity4w2NrOCU.roa (hash: urkAaKxvlWEgwM0Yu9Kvm1a0uJN5W0lCOvwAiki7CTA=)
                          10: awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa (hash: 4BEd/kp3Xtbyx7WAgm3K/LeKVYfnYxJ84p9PC0RKbvE=)
                          11: e4ZdNT0b2vxOvlJIV_lJM64Zyro.roa (hash: 7puUfcu0W3Urnah55eUUcVEFPOq9IEAVasFR/gSe8IQ=)
                          12: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: 7Ox6RAb3w4lsoSIMUha7a4Zk6PvfBQtxQOmq+eJI9Hk=)
                          13: njGgKFMMQYCCOcUQU9FLXyns41E.roa (hash: mOXzfRSGU/yibvLqtvjYzBQ5Qk8Adr7qWGYN92JzeoI=)
                          14: oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa (hash: OT0X0o4GJQ8rzCrOkZIscdAmjhqqaxADA5FmAXxEAv8=)
                          15: rtNgU16vRfGlfgaBLeA-LVfZYfk.roa (hash: 7272BB0beEnCZnBZky8uGVsVo4pWm3st4EyVIbuSPv4=)
                          16: sJY5TLcMj31ewK9GbQlhZPgo3bo.roa (hash: whJtUyjGYNm5NN1NGfkIMGWBSnbpfKeUHyqGZYB1kB8=)
                          17: uxodH0SAIfY7QfL1CFY1zsVKTTU.roa (hash: MFYf6i70IowcUu2vDq3Z87sRlyhGfcm0kqBV+8MGNH8=)
                          18: zM4hFOeWneXhfMX60yWm7dJXOqc.roa (hash: GFt3zcUn//9D4z2GQsOUfTRTmxcTyGZcc8EgQft8j9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:57:e5:57:1e:57:c9:de:4d:95:60:af:b7:e3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Jul 26 13:00:46 2025 GMT
            Not After : Jul 27 13:00:46 2025 GMT
        Subject: CN=52848220571414f9c781389e64a5a1459b277557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:57:30:d7:ae:7d:ac:af:34:d3:52:b2:81:
                    2a:28:7b:a3:0a:dd:60:b6:06:02:d4:5f:ce:dc:13:
                    1a:f1:b7:6c:ef:33:11:99:29:58:64:b0:04:d9:7e:
                    aa:cc:e1:44:c8:52:be:7f:c0:92:17:6e:9f:57:2a:
                    64:e1:6c:c6:5c:7b:de:9b:56:21:3e:e6:9e:1b:89:
                    8e:d6:11:7d:d5:1a:95:f4:ed:2f:eb:08:5e:00:1e:
                    f1:40:c6:c3:ad:e8:e1:e4:16:68:63:48:8d:b9:85:
                    0f:d6:b1:10:94:b1:8e:94:15:0b:d1:cf:7f:64:c2:
                    ff:be:05:97:0d:36:ef:35:a1:e8:ce:59:84:a3:6c:
                    e6:fc:b4:be:e7:b5:4f:47:2b:60:c8:71:cc:93:d5:
                    dc:64:f9:5b:49:72:ec:ac:f9:2a:c9:58:e1:ac:46:
                    80:cd:72:88:8f:71:30:40:6b:3f:8e:0e:e5:80:b5:
                    7f:fa:86:87:6b:1b:ce:03:88:2c:6a:cd:09:51:3f:
                    a2:c3:aa:c3:ce:33:fd:0a:3c:bc:02:8f:4e:0d:e3:
                    39:6c:45:88:45:80:1d:e6:21:37:09:bc:7d:6e:c8:
                    fa:72:a8:13:c4:59:a0:00:a6:16:27:48:a4:52:70:
                    28:dc:04:36:7c:02:9c:be:1b:43:6b:82:77:5d:42:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:82:20:57:14:14:F9:C7:81:38:9E:64:A5:A1:45:9B:27:75:57
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:91:7c:ed:6a:19:95:5c:8e:b5:0d:c1:3c:73:d0:69:f9:82:
         08:dc:94:61:4b:73:45:73:da:9a:f0:82:21:99:c5:71:c3:b5:
         2f:bb:ef:d3:52:80:24:8a:cb:0b:1c:b1:b3:4d:c7:ec:1a:84:
         30:b6:c4:a9:5a:d3:57:17:04:7c:75:fd:e3:9f:6a:7c:a3:d4:
         ac:bc:f1:75:77:46:56:48:92:d7:4b:9c:d3:d0:49:34:c4:32:
         2e:b3:12:1f:86:5b:a5:62:34:25:6a:2b:3d:b0:4d:28:09:35:
         01:03:2a:4d:d6:76:22:0c:bf:0c:18:9a:d7:15:70:dc:3c:29:
         96:4b:b0:2d:ca:ce:b3:82:cb:6c:57:9d:57:85:5e:54:5a:4d:
         4d:94:2e:8d:90:84:d5:c9:81:b4:0c:e2:0b:6b:5d:e4:e0:26:
         84:2a:ce:31:3b:2a:62:5c:71:8d:d7:8f:49:5e:67:47:57:80:
         91:d7:69:92:92:57:37:62:fd:8a:18:d3:66:9f:6a:91:31:86:
         bf:d8:54:42:67:fa:8a:2b:61:68:3f:9d:e5:3e:73:9f:59:48:
         c8:6c:db:84:36:80:32:52:30:e3:75:2c:e4:29:07:f2:83:dc:
         1f:7d:2a:ad:28:9e:97:3f:b4:16:0d:92:2e:5d:d2:8c:73:e3:
         82:7c:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:58:26 2025 by rpki-client