Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
File:                     TVopIfvrikSOeuHsWhG4q4mNIv0.mft (raw, json)
Hash identifier:          Mzc2t3f//PFTbZrDMluchFM7dNn63Wj2qbyvTAJIrRU=
Subject key identifier:   41:2F:29:67:70:5D:F2:99:E7:30:92:9D:65:24:E9:F4:76:DE:CF:CB
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       01975DCAFFC6A3231F0C6C0DAFF3FF79737C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
Manifest number:          087B
Signing time:             Wed 11 Jun 2025 07:01:14 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:14 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:14 +0000
Files and hashes:         1: 1-5_3bDm0VDwkAP81ZPTR8bYgxV8.roa (hash: RzW5Sxa8Ig7ortwok8le/uC8SZCAaYDS0oxlRymBz0Y=)
                          2: 1RgkxaT3trlcWJ_d2Id80-hh7mo.roa (hash: u4inV2GcSC1By83cUxCpIznGqV2yO4zF13YuBN76JRg=)
                          3: 22xPnkQrMRVtQAjJFBfwBXt-g80.roa (hash: AXYvz8bFpW9uTpIheiV0QW7dDbpVv2KWmj64d94yYuU=)
                          4: 3sf5oEr3DlOTew2qu4MNcy3qxZU.roa (hash: ouMQZBbsW6mz86Nimkj2chmQSM3lel6uX4kq3MHuBXo=)
                          5: 3uRkplLO7hdNTmsonRByvLPg9us.roa (hash: /Fhlo0mC/kjn6DqlEuYWxKB1RCedCiV3fwGGd/9C9cA=)
                          6: 7x3gWCXocoFo7Hg7TWha5wGvZTk.roa (hash: K180bZTq9p+t4Sz1GKZQlTGmGWQ/kcLvo4HYhpD25+8=)
                          7: 9iqSmqOmwYolvlUQPEw-4yG9OL0.roa (hash: jVGrDYNyV7dR3JA465skWvos0ET7GjG7Xa+KRRTUxe4=)
                          8: ELu3LuUF_RIVec7Qob2dIFhYU0M.roa (hash: wSf0qPOqXT4taNDWLndlbS/Ta5lAjuq2peZYJn7IxJY=)
                          9: FEpyM5gJNFe4ye5X-a6hHlCsXb4.roa (hash: lMssHyOmtMoqB3eYJsMyXFwkDXBST8uWHzVNWSQIBeI=)
                          10: KpE2iahav8cAforHiyJhcZBcDeQ.roa (hash: bm2F2rOtPCGG/UzA4svmEtDgCm0rSPmxuVbVp4tIlNA=)
                          11: REPgw41DPlHQ90DkAt1ioXEfK4U.roa (hash: j+bbc/+poaN/U+vvGmuRa0ynZW9tw3yOwasqAyZLDjI=)
                          12: TVopIfvrikSOeuHsWhG4q4mNIv0.crl (hash: kICzfXXKBtHEO9aYk8UP4ebuuGG5ytTfFDR8D1lURZc=)
                          13: Vg1Fwygnu1-Kr8YZhORogfRj0JA.roa (hash: YRNIzo07CRZag59lc/6XkpQk7Z3ZDMo3JfgoSAb+W7c=)
                          14: VuOgcoXRVgGZnVIdFVVIMNuJkfA.roa (hash: eAmrBVrQfiVr9deEdEnjqxiLaOIBgGtZOc+6CJVvJtU=)
                          15: W-Swl_8KeYSfwOJ2jC-Drp0FJoI.roa (hash: /LAVeVuCQImOpPPb3FVNZO/gfTtSkF44Ck+t3G10yts=)
                          16: We2ZtgzVV-o2FaqtR72itzqRcIc.roa (hash: kO199FyJ7RgUqt9rreCO91K7dqx63YjPzKMufwWpwb8=)
                          17: Z7ynKEZFT49c2h-A3q8vc82-UO4.roa (hash: UIJcB+S37Xy5NXQzOgDBFDzdisqdcIk/+8k/cz1TCXw=)
                          18: _7TYsPKESqg9ZhdLg9H_vT2Bl18.roa (hash: KjzGt9xR6o8j3waREEWwOJ/yJVVkFd0w7Czm3/D5T2s=)
                          19: _VAdRV_VkXsQ_PWfO73sjnRDIgE.roa (hash: ddtoBXvOFiOlKSDPEAPrId8rwkKIvGiiLctDa5TjMf8=)
                          20: gUeaJWZVhJK2kzqKS8HPTZcMU6Y.roa (hash: IOPNa6okOh4KE7VsgGqa6WpCfccJssx+kmLIQ+RGorQ=)
                          21: hfTD3RSdVTwJiDU5IW35Y9GcrR8.roa (hash: 5cNB1VxqtY5x74aWagSm/UmUf1T+t+fFw2+gts0tYOY=)
                          22: lwpTNS4b4qmd5xPcZVQTPn4FMfg.roa (hash: dffK8bAdzimKqM78J5WELOoe3Fs3GVSJCzE2DHH3tkw=)
                          23: n_VaOJr7vRySqZQrlhdcO-3-IeU.roa (hash: GTRXpVgBnyeDGEBaZDZ4AxGx/mBSplpZZWKxLbR7Txc=)
                          24: oZEeWPGfEOsJMw0F9nwHDdVOGRU.roa (hash: HNqkGeGmxCcQK39sTwTcN/DUzfSDSYIs3Ek5YRR36ps=)
                          25: pKJzHpKYsFNmV-pQARI9PPnQ15U.roa (hash: yxnfHnJ8DZMjj/L2CYE9hx9Vl3UpbA4b5cr24ovpjLw=)
                          26: rnTo30gsWuwO_dLuWbTrVdIJXbI.roa (hash: O1AUE4D5gDEKUTAOAFWoLQ4wie/BT4867JZodngFFPY=)
                          27: wDpbmBRWJ1UCIL7XKUDWLgNLdTI.roa (hash: MHCgrz112ammLc0W+Kdx+/NR7ldtHurOuX/nJhBDXPg=)
                          28: wHcAQi8uIPoSNIZEDrB6lp9A4iU.roa (hash: WTw2CPdpDYr7UwLDEjPSvLdXO5lHAaBKc6BFHrkeRHQ=)
                          29: yERAtlQMUNGN4I-K4fblFCD_VQA.roa (hash: WXwLLTulOV3MesWFUlCzyUDyHWdA7LpMqPRdjdqiAik=)
                          30: yXmBLTIEYAILWdo56f_HGk3cTrw.roa (hash: oNx7rrDa3VbMZqs96FQLdjk0oWiSoo47F2rgHZBnWyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:ca:ff:c6:a3:23:1f:0c:6c:0d:af:f3:ff:79:73:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Jun 11 07:01:14 2025 GMT
            Not After : Jun 12 07:01:14 2025 GMT
        Subject: CN=412f2967705df299e730929d6524e9f476decfcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:2c:e4:98:68:51:f7:81:57:97:83:24:d5:
                    cb:2e:68:9f:df:b8:fb:b7:a2:95:3c:7e:01:a4:e3:
                    53:cd:86:37:36:d7:2d:03:d8:e7:03:3f:ba:92:f0:
                    f4:3c:df:27:ce:1a:68:f0:0a:9a:ee:2d:f2:9d:d2:
                    5a:12:bb:ba:0c:34:e5:3b:5c:91:dc:97:a0:2b:72:
                    44:e0:22:f4:3e:8f:e0:9b:d8:e6:5e:6e:35:e8:e2:
                    bf:0b:7d:6d:0c:fb:17:70:2a:68:b5:ce:0a:c4:2c:
                    49:13:0c:2c:fa:5b:95:89:17:a6:2d:87:68:39:8b:
                    6b:96:ac:21:94:36:6c:81:84:07:b2:c9:a0:7b:be:
                    1c:e6:12:11:b3:80:dd:69:55:fa:b7:4f:a7:10:2a:
                    e3:5d:de:dd:83:52:fc:03:c3:f3:45:0d:f5:9d:88:
                    d8:40:ae:77:f2:0d:ad:19:39:c8:c3:17:44:e4:42:
                    c8:ac:1b:4f:34:fc:6f:fb:4c:b7:23:ec:c0:58:ab:
                    fb:f6:19:aa:e8:3a:05:be:b0:97:72:c5:ad:24:0e:
                    8d:88:07:ae:9b:ed:72:a2:00:c6:81:81:e5:2f:d7:
                    90:8b:52:20:66:d3:73:59:f9:c0:b0:9c:49:de:4b:
                    3f:b7:11:59:0c:43:09:ab:34:d8:c1:63:ac:d5:e5:
                    ea:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:29:67:70:5D:F2:99:E7:30:92:9D:65:24:E9:F4:76:DE:CF:CB
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:26:be:25:9e:a8:84:bc:f9:10:59:7c:f3:f5:aa:32:28:42:
         4d:57:82:4c:59:58:b2:94:30:76:d1:d0:3f:1a:78:21:3d:1e:
         e8:bf:02:7c:78:51:bb:81:dd:67:79:b2:85:aa:12:f0:e2:0d:
         c4:3d:14:33:ba:cd:26:e4:91:79:a9:62:71:64:46:ea:28:15:
         4d:2d:a7:2c:6c:89:82:0c:0d:a4:83:a1:13:97:15:f4:70:6d:
         1b:56:80:dd:86:45:5f:8a:d9:5e:f3:f9:4f:a9:10:56:9e:e6:
         48:08:86:a4:89:39:a3:84:9a:26:d6:37:19:dc:c2:a5:b4:e5:
         92:c0:3e:dc:c0:e5:d4:0f:8d:b5:c6:13:fe:61:e1:38:d2:62:
         df:a3:8b:ca:4a:38:15:36:1a:8e:83:6c:dc:fa:98:2f:e2:3b:
         74:93:86:0f:12:b7:f0:02:35:90:2b:b4:d8:9b:8a:02:29:26:
         ac:47:4b:aa:13:98:fe:ab:c9:ec:7d:1a:21:64:f2:04:6e:0c:
         47:e6:f4:e2:0c:0a:25:cb:89:5b:b4:bc:d8:46:bc:c0:de:4f:
         02:d4:92:e5:02:38:03:be:64:fa:6f:7b:4a:54:2e:36:9c:f7:
         89:c5:37:0b:df:84:43:c7:46:ac:3e:d0:e8:ad:90:a5:68:36:
         e1:50:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:37:07 2025 by rpki-client