Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
File:                     XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json)
Hash identifier:          rG1Zwskddg6kwPB8aSSugArm0g/0NCF6e32mP5XPbUk=
Subject key identifier:   8E:02:E0:69:C4:12:FD:99:2D:46:A2:80:A7:3B:89:1E:B1:79:07:8D
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Certificate issuer:       /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial:       0197572411D7A67319463606A40ADA6B0C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
Manifest number:          159A
Signing time:             Tue 10 Jun 2025 00:01:11 +0000
Manifest this update:     Tue 10 Jun 2025 00:01:11 +0000
Manifest next update:     Wed 11 Jun 2025 00:01:11 +0000
Files and hashes:         1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=)
                          2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=)
                          3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=)
                          4: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=)
                          5: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=)
                          6: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=)
                          7: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=)
                          8: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=)
                          9: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=)
                          10: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: PYUZrVI8fBXE9/TRCfanNASgo5h4ljixj1qsYPDgK+s=)
                          11: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=)
                          12: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=)
                          13: ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa (hash: lMsvTL1IJXE7hi4D1D2VQP7nQy14aHmJmR8i7R04mRU=)
                          14: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=)
                          15: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:24:11:d7:a6:73:19:46:36:06:a4:0a:da:6b:0c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
        Validity
            Not Before: Jun 10 00:01:11 2025 GMT
            Not After : Jun 11 00:01:11 2025 GMT
        Subject: CN=8e02e069c412fd992d46a280a73b891eb179078d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3a:e2:46:54:5e:57:ae:de:0f:ea:31:d7:5c:
                    7a:05:66:df:7a:9c:56:a8:a8:ab:f8:cc:d5:3a:97:
                    6b:05:f0:9b:8f:37:e5:22:f5:05:31:ec:5d:76:1d:
                    67:98:f6:fa:99:c1:4a:df:32:0b:ab:62:3c:15:57:
                    12:11:2f:30:63:86:11:89:38:56:a2:fa:29:a2:eb:
                    18:17:37:98:51:1b:97:45:cf:25:98:d9:e6:74:cd:
                    cd:86:1a:80:ab:67:e5:39:14:0d:ca:78:47:c6:97:
                    61:e4:b7:ce:5a:58:a4:8f:47:96:26:f4:7e:fd:68:
                    9e:68:95:74:10:34:8e:8b:a2:a9:b4:a1:99:ec:a1:
                    cd:b6:31:05:97:3f:c2:6e:b3:5a:22:06:2a:49:34:
                    a5:7e:e0:c5:b6:7f:8b:44:9c:95:66:1a:ed:05:c8:
                    1e:7e:95:84:15:7f:56:33:7e:0d:19:1b:70:2a:d8:
                    73:b6:cf:dc:21:e0:92:64:3c:96:32:d6:dc:b8:a5:
                    9a:1b:20:9c:84:33:1e:35:a6:4b:a6:c5:c9:44:3a:
                    5f:93:f5:16:d1:15:37:62:26:92:54:70:67:f2:f7:
                    80:22:51:c0:8c:fd:57:a6:c7:a5:0b:34:f4:8b:c6:
                    f1:82:4c:4a:31:f0:63:50:ea:b9:3a:9e:8d:fc:5c:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:02:E0:69:C4:12:FD:99:2D:46:A2:80:A7:3B:89:1E:B1:79:07:8D
            X509v3 Authority Key Identifier:
                keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:c2:14:66:1f:4e:5a:25:2a:bc:04:ae:82:89:6e:b4:7f:
         02:19:86:40:8a:da:ca:4c:f0:f7:d2:4d:00:4a:be:6a:bf:22:
         db:87:51:7f:02:70:45:c1:87:b3:3a:d5:5f:e2:3f:ab:b1:34:
         9b:1e:76:c6:0e:92:a1:27:c9:d5:b5:22:5b:00:8f:88:13:5f:
         ba:40:98:9e:e7:c0:70:d4:87:85:00:2d:e0:bb:82:1f:17:50:
         80:9b:84:98:96:bd:5f:b9:5d:2c:1e:d1:68:f5:ee:9a:a7:c8:
         52:16:11:49:9f:e7:dc:7a:79:41:c0:00:4a:fe:de:1c:f9:20:
         21:4c:41:0d:b7:33:cb:67:fa:db:2d:92:69:9a:1e:30:af:cf:
         34:0b:dd:7c:e1:a4:45:d5:1a:e6:74:a8:79:8f:b2:a4:f5:0c:
         c9:50:aa:b4:a8:a0:53:48:ba:b8:ff:51:2e:12:d0:07:36:67:
         ea:5e:0c:ad:5b:f9:97:8d:d7:7b:72:b0:81:41:6f:0b:59:d0:
         63:ca:61:c6:99:49:da:ba:f3:6b:60:bd:2c:36:45:d7:da:60:
         98:49:da:db:02:5a:dc:65:28:11:0e:bf:1a:03:35:57:e7:fd:
         c3:61:2d:e0:cc:a7:cc:d0:82:a3:7f:1b:91:2b:35:82:5f:58:
         aa:76:96:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:50:59 2025 by rpki-client