Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
File:                     um7Q-3syCDKsFYBTTHsmPzBOmBs.mft (raw, json)
Hash identifier:          atyg2+uQEkNmmeM5nJ9gOWTDIFcs3TYdAiy+kdQW8mY=
Subject key identifier:   53:83:0A:D9:58:A0:6A:99:6C:71:13:99:68:1C:71:85:F4:4E:39:65
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Certificate issuer:       /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial:       0197395083F5385C2E08F047A73924409566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
Manifest number:          15BB
Signing time:             Wed 04 Jun 2025 05:01:07 +0000
Manifest this update:     Wed 04 Jun 2025 05:01:07 +0000
Manifest next update:     Thu 05 Jun 2025 05:01:07 +0000
Files and hashes:         1: 06NSghyd-RfQfllOJ5ERAf7RZag.roa (hash: K/9Jk2p9txXgz2W0pBQzSeA+A3NB1VwxmrWVLGhwpqg=)
                          2: 2dPAufbhO8MYI_aYaSiQ223S-P4.roa (hash: h6W+EiR+fmRKkbzlRBzCKubEDQFry0Uk/nrdbeZ7uFY=)
                          3: 3ozxe3eCXT9JC_ZIJyhtuinyln4.roa (hash: gufLQO5o7Tk7ZZaE8OE4ZmY4rKilts70/MIEHSYdQtw=)
                          4: 51mfa4prfZ4aIFenwdh1tef3BD4.roa (hash: zRXMU/tcdvXFqHBSwYnaJo/sT01T39ww5SlzgBzMq4I=)
                          5: 93nPwOhBuqb3vjGhNNRUVCI1-Qc.roa (hash: TjQ2SexMUNXVvlK1JJqjYwIfNBDlETdykKTyssoaJig=)
                          6: 9_2WrSSAKlN1EIPH4IL0OW56MrQ.roa (hash: o1bcqiGaGo6W2QG94hVI//R0YPuvhqmGXfJX8Qgac9w=)
                          7: 9hn6tYB1hGp5VS0kBTSMOtD8ABc.roa (hash: 2fucCKnDWpTEmrPqMmQsnrBxYHtoufXItgIN243OJxs=)
                          8: C5Bd8VWsABcOSIK7iAaVbeAto74.roa (hash: UFtvFbnPksU3f32VZVDCvar4F34zLCv2m0EpLitoWn4=)
                          9: DN3qiMWAkbxTvOYg-j1385pvluU.roa (hash: GuR7uK9EOmGeuRld6O+HBlrD3yhsw8UtG+WB0ocy/eA=)
                          10: ESoOanOemWaXIdUpJ0dGHUrH_eI.roa (hash: pABCCSi7bNCSXQc+TE7ByPE2ezfRsuJY9Lw7DPvUcX4=)
                          11: Eix1bwtpkh3DfRz10HNMwF0QezY.roa (hash: /tPs0X74Nztuoqdzxvgc+Rkd5OVF4g6dXydqRNkNKmU=)
                          12: I58Hs_8f85FK_FT8uW8jm1NBQEA.roa (hash: 1eLQQiRHfXYkm5iwzdRHxMNlhUtofu1CHp+dcbWo0/s=)
                          13: Ik6O3B7FjrBrAwWdNQilmgWzcwg.roa (hash: bOgvurD5h8ijhMvZNu0tCAvTWDZmQWqVikghJRX1T1U=)
                          14: JuHOqqyp6gPUNYRm3uhGk9D1za0.roa (hash: llqlHk2/9ecn2824xu4i9L0Xvy7NI+3x0axhhCRK9kQ=)
                          15: LZJCOwn77DXpbJDvlAzekT5apRA.roa (hash: +t4lT4iOzMOF8krgl8HnKOnttpxuNQB9BJNqFL0yj/0=)
                          16: Ljp4_qBt4t6eNuXNKds82jewAWw.roa (hash: +9JK4pB7Lb8PFPtGK9dylg14ctsKFB1O1sL5YMI0/pk=)
                          17: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (hash: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=)
                          18: MLUBxwQVAjcnVMTym406LU3F6Nw.roa (hash: jdqsXH8+aAUhg2TMIk8+Y0mscZ6QOEpjRS6W6VBv8p0=)
                          19: MvkXtMliSNZ4t0doOeJCt7yseKU.roa (hash: ywUFrH7OBGZw7qJ85x9kF2rMILkLc6SVWP6XkiZTaAM=)
                          20: Qak--g4cNpU6CoUjtQGbcVvopDE.roa (hash: N+RmhDxULogEXWrVUH8MMjtB+zv1gLSm5Ek5YZneh/g=)
                          21: TkGlpc5Tn70aJVwhv7pNACfX1jA.roa (hash: btdfTVJmMqYsieIn46CF/cLd49A9Xyl8eSZFuUISFt8=)
                          22: URvpBnJm28-kKKJxGjvUhdBqo00.roa (hash: Yitwbx5KcSizf+Z4qj+6d26OYL8gYJkV6Q1eulpXZmo=)
                          23: YWatj6dDYX-fiuw6ePziaU4C0TQ.roa (hash: V8Z8+AX+rzz9xpEvpWsJlL9jJ/P0smo2rICd10IyVqc=)
                          24: _S6k1c_YZyTXV-QbiGNh2eJ9qek.roa (hash: DkdBRSksCprQfNdAaTY6NVmXsg3Z/hZACN3MJ2MSYoc=)
                          25: _kSCb1oGWDNAr1TeB8LVUvZujRc.roa (hash: 6JtDKddYI3SMPx/VXYvBa27ZUvXySRLpGZuUz/pfmmE=)
                          26: aXKFWmr05ujOACE-0dUG_c35U2Q.roa (hash: V2GbIAKcxdCncnWyBDIRBH2ulZIFWnPu4CLpIswEB3c=)
                          27: bJ5_3QBASsgKrYb1fEOP2pTRl-A.roa (hash: BdFbpQWd3ti+vlRHPZPpiX/PWbDrJqd23YLxBl37+F8=)
                          28: cbWneDlN5gG7n_7-ZraDeWccKjI.roa (hash: dTH2rJIureFC7918HXFTQxKGd6oWHWJrHeqmGPWX3Ik=)
                          29: g2DFl2N-WdFrs9z950ghIm6CXgg.roa (hash: g4VcoYAo+P4AnCakQIRF1npt/PFP6SzCAGb+cSIm25Q=)
                          30: j1OR6cLV4AFRQ_Q8AYCC4jsEAYw.roa (hash: YpaIoCZ2JtRmpPYrq47DGeATMu5FRM2qhEbni9PeHgk=)
                          31: jv5AjQiEgUQOR9Bdu3vuXbWrMFM.roa (hash: 2DV2bTMok5nhASbXYW9C3vvtRvCp2zGEhY3zcbpmB4c=)
                          32: k3SD7Mo8S-wkCGjWHqkku78vk4o.roa (hash: nJKeC1C9D5VB3P7HR1VXT79mmOfAP2khl4fAaXBF83M=)
                          33: m9WFxaaoUJopCijrezK6Gq5Y4x0.roa (hash: IYAL/aevINvn/lzHc7XS8T3g/wDLEF6taIL5uE1kWoE=)
                          34: m_4FbtjHWVHft-KPpwBsunRcnfM.roa (hash: FOjLBFoO279KgrQxswrLZVJY7oVfxBkaRwq78/5efpE=)
                          35: nWcIJH5l9XMRqJgaxDMJgNa5Jek.roa (hash: t8RJ8dY4eWkAheFSLFTWN+7ej5lknpniwSuoflZz9xY=)
                          36: oakB4_UeOsv5-34dm-jkTdBi4nQ.roa (hash: f2SvLT4cbrsh8eEXFV0YMJD39CPBzZQmsAXa8PsmcRc=)
                          37: ooemiNKGVRy5RLKGSewCoVXtxhA.roa (hash: 50iBNWI3DGamOGaWNIoN0o4Mrbk721gvtsPT5f1uk78=)
                          38: um7Q-3syCDKsFYBTTHsmPzBOmBs.crl (hash: wiwNRGaDtyBC62zG4cdz+Rbs4tzM8Z6hZuBJ5sqxZ6Y=)
                          39: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (hash: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=)
                          40: xby6qjt0unPBaXjG7WI-Peg-jiE.roa (hash: KRd9ht/CIRbyrT8PG2G+CvkZ2u+/FF8umJVk4dxNy9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:39:50:83:f5:38:5c:2e:08:f0:47:a7:39:24:40:95:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
        Validity
            Not Before: Jun  4 05:01:07 2025 GMT
            Not After : Jun  5 05:01:07 2025 GMT
        Subject: CN=53830ad958a06a996c711399681c7185f44e3965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:58:04:46:38:8b:a9:72:dc:02:17:c2:cd:
                    db:51:2d:fd:51:ce:7d:d7:7d:f3:00:94:f5:a8:5d:
                    f9:92:ef:74:5e:d2:bc:9a:ce:71:4e:82:0f:b0:41:
                    8e:00:69:ec:89:d3:7a:de:66:bd:38:d4:f1:ad:b1:
                    af:63:11:8e:ae:2b:9a:b3:ba:8d:7d:33:5d:fa:a8:
                    87:cb:7b:7a:d4:9a:05:ec:21:d3:7e:78:4e:ce:5d:
                    e0:51:c8:11:4c:af:75:49:c7:75:c0:df:a4:5c:06:
                    bf:dc:5d:41:d6:e9:5f:e6:82:d5:5f:3d:23:69:77:
                    56:28:75:0f:fb:d0:16:e4:ed:95:76:dc:45:b2:1f:
                    08:f0:5d:9f:62:f4:bb:9f:8b:b0:dd:cb:01:f5:fc:
                    eb:7c:05:12:84:ce:79:cd:52:cd:6c:cf:84:0d:ff:
                    78:80:7e:d3:f6:c4:91:7b:19:cc:bb:f2:fd:c7:88:
                    f2:2d:88:9b:31:a0:7c:5f:07:30:94:2c:4b:f1:fe:
                    68:31:eb:2c:88:61:05:38:ef:de:68:eb:43:51:6f:
                    9c:bc:e4:40:9d:10:e4:a9:c0:8a:ef:52:09:19:29:
                    14:f7:3b:90:85:d4:23:b3:9a:bb:0f:f0:ae:9d:22:
                    a1:81:61:f2:48:89:71:ec:24:65:a8:3f:1c:ae:6f:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:83:0A:D9:58:A0:6A:99:6C:71:13:99:68:1C:71:85:F4:4E:39:65
            X509v3 Authority Key Identifier:
                keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:fd:a9:4d:e7:e5:d0:89:26:92:eb:e7:66:4f:b1:f9:08:6c:
         1b:ff:a7:38:38:31:20:c2:b9:dc:26:ce:be:00:53:b0:01:5a:
         6a:ed:49:77:ab:78:a1:4d:2f:e6:4d:ff:7e:8c:6b:9b:07:4c:
         7c:93:a8:72:13:c5:ac:a1:fc:d1:a3:74:14:71:05:a3:7d:a0:
         24:b7:06:e3:17:19:28:df:f6:82:27:df:43:0a:c3:ca:9b:c6:
         8f:75:8e:a7:a3:4a:c8:a6:c2:46:85:48:87:30:ae:da:79:9b:
         05:2b:e3:54:a8:3e:0b:72:aa:65:96:1e:04:47:cc:07:24:c7:
         fa:7b:63:ec:9c:b4:33:26:ef:1d:97:f2:42:13:8e:88:cf:9b:
         cf:54:e2:8e:d0:31:c5:10:b4:da:87:76:fa:81:12:e1:f3:c0:
         d8:82:f8:3f:03:a3:dd:80:98:39:f1:f6:12:b4:d8:83:e3:15:
         cc:ef:23:24:67:b3:1e:14:23:8a:69:18:21:8a:bd:fb:e3:bd:
         e8:73:b6:87:fd:fc:36:32:80:5f:45:78:2d:23:44:40:ce:28:
         13:cc:45:06:7a:56:8f:f5:91:f2:4d:08:e5:8e:f6:8e:52:b1:
         83:ae:28:4e:1b:66:0a:8e:85:df:d3:2d:69:1c:f3:63:61:62:
         58:51:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:07:23 2025 by rpki-client