Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
File:                     6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft (raw, json)
Hash identifier:          KjskAYcIlfpyQ23ggPYr2RvD4l53UkWlMphwqxmbsc4=
Subject key identifier:   44:D9:65:D7:36:98:55:16:EC:49:80:4C:14:D2:C7:95:81:1E:8D:05
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Certificate issuer:       /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial:       0196029B6E6FE2C3A1893EB8C4E5ABEDC62D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
Manifest number:          0728
Signing time:             Fri 04 Apr 2025 21:01:02 +0000
Manifest this update:     Fri 04 Apr 2025 21:01:02 +0000
Manifest next update:     Sat 05 Apr 2025 21:01:02 +0000
Files and hashes:         1: 1upwVvOth0ESwzIfWwpLuCD_3Es.roa (hash: 6LIM0TJ502zyJgxqFVPqSxya65Y/9B+s8bx0dBkgTEM=)
                          2: 3uRumfjw_VNGN2REHhoEdbfv8Q4.roa (hash: EtjitrJqAc6g+S42UzHgJmm7oOPTI5kPog/yLqbDlSw=)
                          3: 5CMiZU4pAmiJpfvxBLsG5vubIRA.roa (hash: +oEkF/3njM8s7nBWqWOxZXJl1ZryJZVB3JA4uLNAhxw=)
                          4: 6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl (hash: 4Iafp2NIg8V+C1siEln+GFScc9H3nCZ4+z+BRjAW91g=)
                          5: CkJjv0vYoRHvbkRXlkiWZ0-_O2w.roa (hash: sn3GvdltPLasZQw3sHAj9RA9PaVADblnC7vtnVoU5qc=)
                          6: R3gJl42qrellsM1C3nczgMqQZJw.roa (hash: h03r6RLxEO9GHdL/8pTDTV/p36Amboni6L/vBGQwgbo=)
                          7: SHFgifcOXjY6tuL7zRQslt0-LWg.roa (hash: a5er75LwyX90Ja64eQQAjooSQbCWA9NL5ygqey9w5RE=)
                          8: ZhZRZT8ZPo8M2a9MIYRNwZyhQ8w.roa (hash: HBtX5WX5rNstuEn0JYCNOPxyzZKZRsOHcscK1aN6ogc=)
                          9: aG6vs5La6aMx_hwb3mRdvIpM0TU.roa (hash: vdd93Y05eV451vK3FXQ74I3qVTw+Vjj/OGc+FJmUsrk=)
                          10: aIYlg9Z6r6J1_C5VfiKtlldGRrI.roa (hash: 1xF0uCQBhw+1hm6OeRG2O6mFUnL8nVyDlkoB9bdADr8=)
                          11: dpfO8kmH7XVzleMe_wkUuIRVWy0.roa (hash: uPSIPfsJ117Jgf0DJdfjT4DifVQ0xpGdmtSuae+Hbn4=)
                          12: juN5scO2Se5ibgJWhuefFYhuow8.roa (hash: 7FUVxUG+oCbfQXWhPZm065agLV2zBdGhwYNN6FPH3LM=)
                          13: l0dBWs1YlE17AhstVW2VWnIvp0s.roa (hash: iWBATYIpP0dSJktBmp9NkaeXH+SClXQSdpBWrPAbzlM=)
                          14: ob2zBPNLtLFzxUuttNyvYQ_i-K0.roa (hash: ahdcq6qcFuk7beprX/QZiv/lO1jQP9BjCIRZOB7i01o=)
                          15: ocjyC2jwDA6Rk88oFGWfNBa6O7c.roa (hash: up4NQEqOBhPBKs8ybW1tNgCMgHUS+uI7TPV3nH5jRFI=)
                          16: p52ECLHacG3z-Gg5eipSNQK8sHg.roa (hash: iCIbKxHFKwisNq/0rdSKxF6SJ72XE0XsI1+USxkuvdQ=)
                          17: t5YmhSpQh7hJVJ9rbPKosrK995g.roa (hash: 46VBCXnM3N7gfr2V6b7t3B2sNT8I6Oa9hSbR5q+FAqY=)
                          18: x6x3roZjsXMCSRhGZJrdZLdwqto.roa (hash: zacGNi1adlsX0enXeUmHCz0iycpxLch6pnIkbbgRmis=)
                          19: xkwddNbzJemwb2yTo01W08IMXMw.roa (hash: 6y3kogdMCD6BDF1QeKe6dqP9/brnLL3TgEnQWCik99o=)
                          20: xpX6hcRMPz87CNu8WZKKgI6VmHc.roa (hash: 2GtFRUTOon6G4VNM6WyrbperIlxaZ7rGbYCzZWHktHU=)
                          21: yrw-APdDdrKZbC_GG5pC5x9IuaE.roa (hash: 1L4TnTdUXnzWd1fgMXk6voGBQgtXreTq+fSZW4h+FH8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:02:9b:6e:6f:e2:c3:a1:89:3e:b8:c4:e5:ab:ed:c6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
        Validity
            Not Before: Apr  4 21:01:02 2025 GMT
            Not After : Apr  5 21:01:02 2025 GMT
        Subject: CN=44d965d736985516ec49804c14d2c795811e8d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:87:98:a8:0f:42:37:e8:3a:46:66:93:2d:
                    b1:ee:66:f9:4d:44:55:6d:fe:bd:f3:55:4b:f2:50:
                    98:dc:14:66:d6:da:ce:d9:bc:a9:6d:f8:8e:63:a9:
                    d4:9b:df:69:6b:1e:fb:24:05:68:17:dd:ff:b7:7f:
                    d6:57:b8:f1:af:b3:bd:cc:f4:32:72:96:fe:1e:58:
                    36:96:4d:14:ec:a6:04:0a:2c:3d:58:16:45:3c:2b:
                    f7:e2:e3:d2:b2:f8:d9:bc:dd:db:c2:b5:0c:d6:78:
                    84:fd:7c:23:a2:c6:ee:45:12:10:4b:9f:f0:cb:ec:
                    6b:58:e3:70:cc:58:bf:3d:cf:8a:6e:32:af:d4:8c:
                    3e:8d:af:41:ac:ac:d2:f7:78:ab:bb:ef:b5:8c:74:
                    8b:5b:d6:23:f3:11:c9:12:c2:22:ac:ce:64:dd:cc:
                    45:05:5f:72:a5:5f:a3:dc:45:2e:5e:a7:93:7b:e4:
                    ae:6c:e2:48:d4:56:d7:d7:0f:2c:d0:38:db:ac:cd:
                    f0:e1:a1:a1:8c:65:39:d2:6d:5e:a9:61:e7:d7:02:
                    7b:bf:11:33:03:5c:a4:84:ce:b3:e3:be:ae:0d:b4:
                    12:a0:10:bc:2b:9f:bb:31:c8:c2:ae:0b:7c:25:30:
                    88:9b:fc:df:68:0c:22:ad:35:86:54:4c:2f:81:e9:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D9:65:D7:36:98:55:16:EC:49:80:4C:14:D2:C7:95:81:1E:8D:05
            X509v3 Authority Key Identifier:
                keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:fa:11:cd:08:a2:d4:33:a4:63:da:83:99:72:c9:83:0e:
         a9:0a:ba:11:c5:1e:25:60:23:82:8f:0a:71:d4:bc:24:a0:7e:
         c0:1f:71:5d:29:6d:b8:bb:ce:07:cc:2a:a9:b6:dc:7c:78:a4:
         8e:18:a3:8e:1e:4d:7a:b0:a9:c6:d4:59:32:40:68:12:9c:9a:
         ac:66:a4:c4:66:b1:a8:84:fb:cb:ba:cc:8e:34:54:c3:76:7f:
         aa:6d:d2:7c:53:5d:da:1f:5c:91:bc:6e:45:e1:17:61:fd:81:
         31:ed:67:4b:0f:72:93:7c:f3:a3:40:f2:1d:d4:64:fe:62:92:
         e5:f0:f5:16:e6:8f:2d:80:49:83:6b:40:92:6e:cc:fc:cc:50:
         55:24:6a:c9:8f:8b:a2:15:88:02:7e:87:8d:e2:4c:28:d6:d2:
         35:c9:76:9f:c0:07:65:a9:6d:0a:f8:bd:d2:5a:5e:d9:8d:67:
         b0:15:0c:98:3d:23:29:60:f6:73:d6:59:d8:8b:94:4c:c5:3b:
         1f:f4:61:ac:63:b9:8d:22:bd:30:cd:7e:a8:5a:5e:49:0f:95:
         38:dc:2f:91:30:eb:42:3a:44:17:50:2a:75:67:24:4f:c1:4d:
         a5:a6:3e:0f:6b:d0:e4:0f:67:82:35:40:c8:56:02:0d:ee:3b:
         d3:3b:7c:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYCm25v4sOhiT64xOWr7cYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjUwNDA0MjEwMTAyWhcNMjUwNDA1MjEwMTAyWjAzMTEwLwYDVQQD
Eyg0NGQ5NjVkNzM2OTg1NTE2ZWM0OTgwNGMxNGQyYzc5NTgxMWU4ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIqHmKgPQjfoOkZmky2x7mb5TURV
bf6981VL8lCY3BRm1trO2bypbfiOY6nUm99pax77JAVoF93/t3/WV7jxr7O9zPQy
cpb+Hlg2lk0U7KYECiw9WBZFPCv34uPSsvjZvN3bwrUM1niE/XwjosbuRRIQS5/w
y+xrWONwzFi/Pc+KbjKv1Iw+ja9BrKzS93iru++1jHSLW9Yj8xHJEsIirM5k3cxF
BV9ypV+j3EUuXqeTe+SubOJI1FbX1w8s0DjbrM3w4aGhjGU50m1eqWHn1wJ7vxEz
A1ykhM6z476uDbQSoBC8K5+7McjCrgt8JTCIm/zfaAwirTWGVEwvgenL6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETZZdc2mFUW7EmATBTSx5WBHo0FMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZz6Ec0I
otQzpGPag5lyyYMOqQq6EcUeJWAjgo8KcdS8JKB+wB9xXSltuLvOB8wqqbbcfHik
jhijjh5NerCpxtRZMkBoEpyarGakxGaxqIT7y7rMjjRUw3Z/qm3SfFNd2h9ckbxu
ReEXYf2BMe1nSw9yk3zzo0DyHdRk/mKS5fD1FuaPLYBJg2tAkm7M/MxQVSRqyY+L
ohWIAn6HjeJMKNbSNcl2n8AHZaltCvi90lpe2Y1nsBUMmD0jKWD2c9ZZ2IuUTMU7
H/RhrGO5jSK9MM1+qFpeSQ+VONwvkTDrQjpEF1AqdWckT8FNpaY+D2vQ5A9ngjVA
yFYCDe470zt8tg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:07:54 2025 by rpki-client