Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          KaFd04jXPdlQj0itA/YeqbPkLJkt6KiKzjtszEIZFx0=
Subject key identifier:   50:E1:96:3F:1F:0B:0D:92:0F:BF:C0:A9:81:BA:EF:95:AD:2B:E9:47
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       01974FA1368FACCE10773A3667AF26373ECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          129C
Signing time:             Sun 08 Jun 2025 13:00:54 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:54 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:54 +0000
Files and hashes:         1: 2d8VX1yVh54mGYkeHaHmzVPzhZo.roa (hash: cYGvSwaRPDVvS+Yq5KxRkZ+234/mFxXJD0RJHeKEEjQ=)
                          2: 6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa (hash: BNLbnygG2YLNyjdpzyEOdm3sS9fiwqBzh1UyiyyKi+o=)
                          3: 7YhCJ28wSxD6190KY3LsL2-jFBY.roa (hash: TdMkcxbj/5amzDjgSgCV0/mP+NRcoQOnkj8hBKpX/xs=)
                          4: 7nwFZllPHib0qlQvTuec2CA4CFE.roa (hash: 6iCLCKodfg6yz/qGnLZGO0jH9QdQIo9q7VMD+L1L/38=)
                          5: DqWqWWUy5sm-gqrVg_icW_4BBuU.roa (hash: udwxBi6VLqH0wpPYZM7DDUViOUA0C7+6x2kGIlrfz08=)
                          6: OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa (hash: rkSh/s+q1SivKdqDxSkXS4YbyDK7MKYmwkQaMtbR9jk=)
                          7: VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa (hash: 26f1YQomtY0BiRJWIfpK3wiyYZ05du1tDa7jK3YouIs=)
                          8: WhRk9kZEyJiPe99DKK0ZIY2m2Yw.roa (hash: dZkGuR4JSyQqOAbFZVSVkGM0gVjd0Muk/GHy9vCkvbU=)
                          9: ZpHETbs_mb628Vvkity4w2NrOCU.roa (hash: urkAaKxvlWEgwM0Yu9Kvm1a0uJN5W0lCOvwAiki7CTA=)
                          10: awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa (hash: 4BEd/kp3Xtbyx7WAgm3K/LeKVYfnYxJ84p9PC0RKbvE=)
                          11: e4ZdNT0b2vxOvlJIV_lJM64Zyro.roa (hash: 7puUfcu0W3Urnah55eUUcVEFPOq9IEAVasFR/gSe8IQ=)
                          12: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: xZNwX3xWyniBPM3/Ton5tdB5TLGz7sm/SOoVdcFfuRk=)
                          13: njGgKFMMQYCCOcUQU9FLXyns41E.roa (hash: mOXzfRSGU/yibvLqtvjYzBQ5Qk8Adr7qWGYN92JzeoI=)
                          14: oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa (hash: OT0X0o4GJQ8rzCrOkZIscdAmjhqqaxADA5FmAXxEAv8=)
                          15: rtNgU16vRfGlfgaBLeA-LVfZYfk.roa (hash: 7272BB0beEnCZnBZky8uGVsVo4pWm3st4EyVIbuSPv4=)
                          16: sJY5TLcMj31ewK9GbQlhZPgo3bo.roa (hash: whJtUyjGYNm5NN1NGfkIMGWBSnbpfKeUHyqGZYB1kB8=)
                          17: uxodH0SAIfY7QfL1CFY1zsVKTTU.roa (hash: MFYf6i70IowcUu2vDq3Z87sRlyhGfcm0kqBV+8MGNH8=)
                          18: zM4hFOeWneXhfMX60yWm7dJXOqc.roa (hash: GFt3zcUn//9D4z2GQsOUfTRTmxcTyGZcc8EgQft8j9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a1:36:8f:ac:ce:10:77:3a:36:67:af:26:37:3e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Jun  8 13:00:54 2025 GMT
            Not After : Jun  9 13:00:54 2025 GMT
        Subject: CN=50e1963f1f0b0d920fbfc0a981baef95ad2be947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:22:b2:b2:66:3f:66:18:91:f7:2b:3b:b6:
                    86:bc:27:02:c5:30:b3:07:03:44:3c:73:a9:b6:fa:
                    5f:a6:39:13:df:29:fe:b7:b3:55:41:ba:71:a5:1f:
                    71:49:90:9d:e0:6e:d9:5e:ed:d9:36:56:1e:50:ae:
                    4f:4b:e7:08:d4:c8:48:24:94:6d:83:24:d1:73:ef:
                    bd:13:3f:4a:1c:26:2e:a6:5b:71:a3:06:b1:38:87:
                    6d:f0:f7:ab:40:e9:f0:3d:d3:29:c9:56:00:3a:41:
                    a7:80:99:65:9c:82:67:c9:61:b3:7e:8d:0b:0f:33:
                    e8:66:c6:ba:ed:34:3a:ec:3c:d7:e2:87:0f:22:b4:
                    0e:d3:08:19:5b:41:5a:e7:bf:2c:52:ba:6b:7d:c4:
                    56:5c:c7:d5:66:7b:7d:fa:cb:68:a2:c5:f9:83:50:
                    26:6c:4e:16:cc:d0:bf:b0:1b:34:fb:3f:c3:08:45:
                    01:58:8a:4f:09:cf:50:ad:04:20:c9:70:a6:ca:8a:
                    4d:e3:a2:f9:2d:c7:2f:5b:cf:36:0c:2a:15:02:16:
                    a2:62:f4:33:8e:3e:4c:88:12:38:87:fe:cf:2e:05:
                    6c:90:6a:bd:a3:66:5c:1d:fe:2f:10:61:3c:17:af:
                    8a:d5:3a:07:a2:3d:75:fb:0a:a0:6c:eb:86:d0:ca:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:96:3F:1F:0B:0D:92:0F:BF:C0:A9:81:BA:EF:95:AD:2B:E9:47
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cc:98:c9:0c:3a:4d:d8:b9:91:76:d0:3d:20:fc:05:e7:58:
         5e:ea:c2:63:da:76:f0:6e:84:bc:b6:73:55:75:d3:fb:63:29:
         78:01:4e:b8:45:0f:df:6e:3d:9c:81:22:70:5e:51:71:3a:c1:
         cd:55:02:83:27:d5:39:fb:e0:99:05:9e:12:e9:b7:35:00:cd:
         04:f6:12:0c:de:b8:08:c6:ef:ae:8a:30:7b:72:5c:0c:4b:15:
         8c:64:f5:38:13:e8:74:87:8c:71:36:50:96:75:57:88:0c:f6:
         a1:c1:ea:3d:7c:f1:6b:79:e4:16:d7:d7:16:6b:42:58:92:87:
         c9:32:ea:84:63:b1:57:de:10:a7:f3:fa:5c:19:bb:fd:12:a3:
         ab:02:37:5a:e9:cc:2e:e2:db:61:35:41:99:87:08:fc:a4:7d:
         44:06:d9:92:e8:3d:90:d2:ee:63:86:33:3a:6b:76:9d:c4:1c:
         0d:97:b6:b9:8b:8d:d8:27:cf:92:ff:08:f3:42:21:36:06:1c:
         57:d9:95:ed:aa:e7:0d:a0:80:99:41:c5:d5:2f:0c:a9:51:62:
         bc:e4:7a:c6:0d:be:44:12:f4:3a:23:7a:c7:e3:f5:9f:b2:a1:
         46:cf:01:f9:37:71:fe:03:8d:5c:be:cb:c2:aa:9b:26:67:04:
         22:b7:7a:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoTaPrM4Qdzo2Z68mNz7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYWI2YzExZDQxMTYyZGIwMzA2ODU4ZjgzZTVlNjUxMjEx
MzJhNmIwHhcNMjUwNjA4MTMwMDU0WhcNMjUwNjA5MTMwMDU0WjAzMTEwLwYDVQQD
Eyg1MGUxOTYzZjFmMGIwZDkyMGZiZmMwYTk4MWJhZWY5NWFkMmJlOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvEisrJmP2YYkfcrO7aGvCcCxTCz
BwNEPHOptvpfpjkT3yn+t7NVQbpxpR9xSZCd4G7ZXu3ZNlYeUK5PS+cI1MhIJJRt
gyTRc++9Ez9KHCYupltxowaxOIdt8PerQOnwPdMpyVYAOkGngJllnIJnyWGzfo0L
DzPoZsa67TQ67DzX4ocPIrQO0wgZW0Fa578sUrprfcRWXMfVZnt9+stoosX5g1Am
bE4WzNC/sBs0+z/DCEUBWIpPCc9QrQQgyXCmyopN46L5LccvW882DCoVAhaiYvQz
jj5MiBI4h/7PLgVskGq9o2ZcHf4vEGE8F6+K1ToHoj11+wqgbOuG0MpxVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDhlj8fCw2SD7/AqYG675WtK+lHMB8GA1UdIwQY
MBaAFHurbBHUEWLbAwaFj4Pl5lEhEyprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAt
OWY1YmY3MzY3MjBlLzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9kMzM0YWQtNTI0MC00ZGFhLWEwNTAtOWY1YmY3MzY3MjBl
LzEvZTZ0c0VkUVJZdHNEQm9XUGctWG1VU0VUS21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8yYyQw6
Tdi5kXbQPSD8BedYXurCY9p28G6EvLZzVXXT+2MpeAFOuEUP3249nIEicF5RcTrB
zVUCgyfVOfvgmQWeEum3NQDNBPYSDN64CMbvroowe3JcDEsVjGT1OBPodIeMcTZQ
lnVXiAz2ocHqPXzxa3nkFtfXFmtCWJKHyTLqhGOxV94Qp/P6XBm7/RKjqwI3WunM
LuLbYTVBmYcI/KR9RAbZkug9kNLuY4YzOmt2ncQcDZe2uYuN2CfPkv8I80IhNgYc
V9mV7arnDaCAmUHF1S8MqVFivOR6xg2+RBL0OiN6x+P1n7KhRs8B+Tdx/gONXL7L
wqqbJmcEIrd6Pw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:29:50 2025 by rpki-client