Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
File:                     XaQypOw7CsTKTk7OwOn01GtJevA.mft (raw, json)
Hash identifier:          aItmoOZhbjyyvzEgXh0kMCim6hPrywKR73nSF47wCvU=
Subject key identifier:   A7:E4:E0:60:29:09:C4:E0:6C:81:A5:09:6D:72:D3:28:9C:FE:FD:51
Authority key identifier: 5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0
Certificate issuer:       /CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
Certificate serial:       01975CEEF6120C0BD17B6D10DBC71C44343B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
Manifest number:          159D
Signing time:             Wed 11 Jun 2025 03:00:53 +0000
Manifest this update:     Wed 11 Jun 2025 03:00:53 +0000
Manifest next update:     Thu 12 Jun 2025 03:00:53 +0000
Files and hashes:         1: 0Je5Z-nMCx0Zkd418v5HueEhd54.roa (hash: pEX7Z7nPaiJOWyIs9b/nPIQ3gi19xivW2mZ533J3DJo=)
                          2: 14hghSYuKbF7DLMEPWygMHVGP7A.roa (hash: +lIfYCGzEu7fKfBEKYs45/U/OMBrFfQnzzBOsngrbkg=)
                          3: 7wCIILVV_KizMvEXiqEvvxC6Jr4.roa (hash: QBaOmpq6h8G9bZnJd7hH6tV1LQuldiouVWbU53bSAF8=)
                          4: NX-lJMVuq0hFJuXhiTDNigiTMiI.roa (hash: 32i5zz/HrQnOcYVXyjhBgA5WXVmw5qyUgDPkRo/rTuU=)
                          5: PCD0p_UNZon9aCxoq1egSeAnxBA.roa (hash: i0uT3nEejd+UeJVQ6gjyXxFUUCw66ysdAWzGYAGx+Mk=)
                          6: PYemKJWEUk-HkJO5Mj9UiDiPJ_4.roa (hash: QhKEDEG5e1WSPoJeyCcT8wLZHkvtF03JkUepmJw6Zxw=)
                          7: Rr0zbCWANGdldNBvrAd88RpS1U4.roa (hash: 9No9czOGF999cDISmqzMXCL5W1XMeYJzBnZLfRLwac4=)
                          8: Vl_3r99z42NwQ-24ZhXRiYXhqjY.roa (hash: GXmfSPtN6tufP5/kLCHIzO4q0RbIH3Sr/fl4Xj29EAo=)
                          9: WZNFgwpO480t4avTSei-zYnVVOY.roa (hash: 373H0BKFYtzTiKGrZaryv56z6bhznrJd/cnBel6rbT0=)
                          10: XaQypOw7CsTKTk7OwOn01GtJevA.crl (hash: YiIhYiWKN9Us1HUfT1H9Td/bqVLEbH2rknxIQM0Wurk=)
                          11: _uatClMcwC0uM9W8YXO5Qitmm-A.roa (hash: k5ie8fXmVl+ckXH05aUk9WqiZ3RnKPMqOUpy2XuoG7w=)
                          12: aHlGWauXADsFIjPBDWSnc29nHv8.roa (hash: y3CvDF1nTLBg2ldBPSyHCPUtAaI+qzww7+4uWAz8ztY=)
                          13: ea0vEI_fGMyg1jPZV-hKH8IC-2Q.roa (hash: lMsvTL1IJXE7hi4D1D2VQP7nQy14aHmJmR8i7R04mRU=)
                          14: sZ40szF_81b8iZ343Q6aVpk7QZc.roa (hash: ieSiCVj+T4ruST7AZXMVQI1ECh5LKhbuRyks+nO6HIc=)
                          15: xf4c83s9BhHDRES5-deoHo90fx8.roa (hash: Nc+I2Laa6OeGUM7r8e6LlLMHSt+btJK/FMAVLnkCxPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:ee:f6:12:0c:0b:d1:7b:6d:10:db:c7:1c:44:34:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da432a4ec3b0ac4ca4e4ecec0e9f4d46b497af0
        Validity
            Not Before: Jun 11 03:00:53 2025 GMT
            Not After : Jun 12 03:00:53 2025 GMT
        Subject: CN=a7e4e0602909c4e06c81a5096d72d3289cfefd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e0:fc:79:24:12:f3:ae:92:d7:81:45:d9:05:
                    90:72:79:60:35:39:f8:20:df:d3:56:5e:18:6f:1b:
                    fa:91:a2:a3:7c:95:a1:de:5a:e0:c0:97:81:97:c8:
                    ed:16:1e:a1:53:ef:66:21:c6:18:7a:dd:1a:61:7f:
                    8c:49:ec:d3:61:d4:a5:95:17:4f:eb:86:c2:ed:4f:
                    ff:98:69:19:97:cd:5c:69:3a:ce:4d:2b:32:dd:66:
                    40:a1:cd:b6:03:b0:1c:80:81:c7:4c:1b:88:22:e9:
                    76:57:01:29:e5:26:1d:2c:15:2d:ee:7e:b8:ea:0c:
                    fb:7e:ff:c5:6a:af:92:02:f2:de:da:51:97:3f:a1:
                    5a:a9:09:a8:52:31:65:65:f6:22:72:71:4c:dd:76:
                    26:9e:f4:fb:1e:14:16:75:de:62:ad:e2:6a:f8:8b:
                    47:31:3e:e7:d1:c4:cf:4e:e3:86:d1:7c:88:e7:55:
                    bc:f0:10:47:f6:0f:ba:09:f7:d5:f2:90:ac:95:5b:
                    ff:fb:da:74:b3:28:57:b0:e5:93:57:4b:f5:cd:73:
                    89:75:3d:de:f1:50:25:67:7e:dd:29:09:e1:08:07:
                    ee:4a:4c:40:f0:51:87:08:b1:90:94:65:22:94:ed:
                    87:ed:27:13:7b:93:38:c4:45:5d:a7:02:8f:56:c2:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E4:E0:60:29:09:C4:E0:6C:81:A5:09:6D:72:D3:28:9C:FE:FD:51
            X509v3 Authority Key Identifier:
                keyid:5D:A4:32:A4:EC:3B:0A:C4:CA:4E:4E:CE:C0:E9:F4:D4:6B:49:7A:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaQypOw7CsTKTk7OwOn01GtJevA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9e847f-4146-4566-8c3e-1ba543eeaed7/1/XaQypOw7CsTKTk7OwOn01GtJevA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:0a:53:11:2a:d0:4f:27:7c:1c:ba:74:93:0f:09:51:77:91:
         21:03:98:a2:86:69:05:ea:44:c5:58:8e:df:5c:26:bd:46:7a:
         75:f1:7b:b0:7a:cf:ed:d2:d3:da:3e:21:5c:03:49:e4:27:57:
         1a:e6:b1:c7:10:01:b0:83:59:d0:bb:78:51:26:97:59:c2:7d:
         af:20:af:e6:8d:a1:3a:59:b8:c7:59:21:a2:50:16:cf:92:e1:
         a7:cc:fd:1d:94:c3:03:15:6b:16:72:79:e3:b9:e1:71:6a:5c:
         bf:a0:1f:eb:64:9b:d3:69:22:14:cb:f7:23:3d:7e:7f:29:db:
         0a:28:7f:e6:a2:f0:96:fb:c4:66:bc:55:c1:6e:75:4d:48:18:
         a1:39:b8:c3:4a:25:51:70:4b:f6:9a:05:5e:23:59:48:cb:b4:
         7f:6f:dc:18:27:ef:2b:e3:98:85:90:72:4d:fa:bd:17:0f:bf:
         01:a1:5b:33:33:93:a8:0c:79:07:be:85:43:1f:b6:33:dd:5e:
         89:22:e1:1f:f5:1e:87:ad:e5:ac:17:2c:28:7a:a1:71:b6:92:
         a8:b6:07:39:29:2e:ad:fc:91:52:a4:45:81:16:6c:a5:c2:c7:
         01:e0:7c:42:29:f7:0e:37:d7:28:f9:36:a3:21:0e:be:49:6a:
         a4:72:62:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdc7vYSDAvRe20Q28ccRDQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTQzMmE0ZWMzYjBhYzRjYTRlNGVjZWMwZTlmNGQ0NmI0
OTdhZjAwHhcNMjUwNjExMDMwMDUzWhcNMjUwNjEyMDMwMDUzWjAzMTEwLwYDVQQD
EyhhN2U0ZTA2MDI5MDljNGUwNmM4MWE1MDk2ZDcyZDMyODljZmVmZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uD8eSQS866S14FF2QWQcnlgNTn4
IN/TVl4Ybxv6kaKjfJWh3lrgwJeBl8jtFh6hU+9mIcYYet0aYX+MSezTYdSllRdP
64bC7U//mGkZl81caTrOTSsy3WZAoc22A7AcgIHHTBuIIul2VwEp5SYdLBUt7n64
6gz7fv/Faq+SAvLe2lGXP6FaqQmoUjFlZfYicnFM3XYmnvT7HhQWdd5ireJq+ItH
MT7n0cTPTuOG0XyI51W88BBH9g+6CffV8pCslVv/+9p0syhXsOWTV0v1zXOJdT3e
8VAlZ37dKQnhCAfuSkxA8FGHCLGQlGUilO2H7ScTe5M4xEVdpwKPVsIvDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfk4GApCcTgbIGlCW1y0yic/v1RMB8GA1UdIwQY
MBaAFF2kMqTsOwrEyk5OzsDp9NRrSXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2Ut
MWJhNTQzZWVhZWQ3LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85ZTg0N2YtNDE0Ni00NTY2LThjM2UtMWJhNTQzZWVhZWQ3
LzEvWGFReXBPdzdDc1RLVGs3T3dPbjAxR3RKZXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgpTESrQ
Tyd8HLp0kw8JUXeRIQOYooZpBepExViO31wmvUZ6dfF7sHrP7dLT2j4hXANJ5CdX
GuaxxxABsINZ0Lt4USaXWcJ9ryCv5o2hOlm4x1kholAWz5Lhp8z9HZTDAxVrFnJ5
47nhcWpcv6Af62Sb02kiFMv3Iz1+fynbCih/5qLwlvvEZrxVwW51TUgYoTm4w0ol
UXBL9poFXiNZSMu0f2/cGCfvK+OYhZByTfq9Fw+/AaFbMzOTqAx5B76FQx+2M91e
iSLhH/Ueh63lrBcsKHqhcbaSqLYHOSkurfyRUqRFgRZspcLHAeB8Qin3DjfXKPk2
oyEOvklqpHJicw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:05:30 2025 by rpki-client