Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File:                     VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier:          UbqqW6KyCBsrvDgyikWUmwGkNXYqa5PTawEKoHi+zIw=
Subject key identifier:   A2:68:91:BC:02:01:A4:3E:6D:31:69:90:00:93:F7:10:84:0C:06:9D
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       0195797E4CA1C29FE62328F63F04AE89077F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number:          6E
Signing time:             Sun 09 Mar 2025 06:01:15 +0000
Manifest this update:     Sun 09 Mar 2025 06:01:15 +0000
Manifest next update:     Mon 10 Mar 2025 06:01:15 +0000
Files and hashes:         1: 6Kmf8SLIDhtvY0o72b-e_ez1gvA.roa (hash: j3CAl37tBzlpnx387FdZVM64alBCKbR8QlCCeFxtnL8=)
                          2: AhuxnBjbqBUXwIP5b21tGbis2HQ.roa (hash: tJKtPN8U0xHa3FJB8TQyW4B4Oecnb0IEKnN/jQHiCqc=)
                          3: BmRc3vRXaWW56t-nNSSPweNCiMs.roa (hash: 2GH6+StvR4rGLXfNXO4fC1fEOLCOQlhsSaL6sBf6AhI=)
                          4: E_5JhM-xpqv89i8OslGQvDkCWqw.roa (hash: HFIiQD19t++eqD0i+eSTfWrtLIMDnOjLs8bKyGFVyww=)
                          5: FM5BR3fy8jLa_aS_duxaLPD1zS0.roa (hash: E3RNJGjOtbojon2Sppjcze5zlMUeT+F/SdNiHT4AD/A=)
                          6: N1nl601Hr6wJILJL_hgwD9Q0g2I.roa (hash: pIuSTy4n0CatQtYZ3CMUWwjxxWlZD8T/OaYfEUfURDo=)
                          7: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: Qbf+eNPqKVXihkznJGTmbApNxiYRIw9T1kh2yZ9P7i4=)
                          8: VcFnaaIz0iLUQbUIMMO4ZmdUUrA.roa (hash: yOIb9TKmdk118W+nhzNDJHQSZ1ld3cQtUfFXjJdmMes=)
                          9: XIJrTPpnmF2-ViYOBfj76lEa_QU.roa (hash: QtAX0+z5uKZ3qypme9PzaVh3ewzNYn7wiC5WOpTnLoc=)
                          10: doYvufKMi4jm03VH6RLq3eZewAA.roa (hash: EhJBbYf1isS2uAf8HQUnHDQB/+isJncCcXILIMluQQ4=)
                          11: jOMnWCpH8SK3To3f8WWMtYlmw7M.roa (hash: xawHFaJsohPNcEIGxa0SNMZnh1cm/njACj9uSfpUfgg=)
                          12: jrgMSskhT0megkHs6B0DtWXkMyw.roa (hash: KC6QUuGpGxoExz21SCbzEH1LAyNK0e/ekmIFKAWbsMk=)
                          13: kw7v7XIdDlOFFxPCLz9j9GFRHDw.roa (hash: WCuWnyJr7kl7+4uWtyO3wOduL7dWBm9hLwsujYS0e00=)
                          14: l7z9gRq1cnQs_wN6y_k94oBYE1w.roa (hash: cA4fD7YFoUALJX+r2CwONaKqktMmrC06jt+qqYXcbRM=)
                          15: pHZpiMb5Vq0up-6CeO0nMIW4Mwo.roa (hash: ErsQAE7yFJ1utzq5R5esTRBd9mERh0Hyf1eb2KuKw/U=)
                          16: zw-kUDcbEKKAoEKFIvfrhCjyI8I.roa (hash: P5pYbU9sXA2DQAtR7bal+wc0XMJxzotl3qbzVMc73xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Mar 2025 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:79:7e:4c:a1:c2:9f:e6:23:28:f6:3f:04:ae:89:07:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Mar  9 06:01:15 2025 GMT
            Not After : Mar 10 06:01:15 2025 GMT
        Subject: CN=a26891bc0201a43e6d3169900093f710840c069d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:c6:ee:53:ee:ac:8b:eb:c6:5a:1f:3e:4b:
                    cf:de:10:f8:9c:b8:d6:97:40:0b:e2:29:ab:7e:fb:
                    f0:f8:9f:5b:53:7d:a7:c7:81:38:3c:db:55:5c:dd:
                    2f:59:9c:5d:ee:dc:ee:c3:67:f3:c4:1f:d4:11:2b:
                    f0:bc:d2:91:4a:06:f6:22:db:d8:c5:7f:93:1e:85:
                    29:20:f0:9e:e3:5a:c2:10:33:f9:9e:5e:94:cb:91:
                    bc:b6:a6:ea:f3:c6:d5:ec:bc:2f:d1:32:53:52:2f:
                    fa:87:26:0f:44:77:c3:46:4c:91:dd:cf:e4:ce:0d:
                    ca:58:26:75:17:e8:04:f0:a7:fa:1d:3f:c6:7d:2d:
                    d3:d8:3a:ef:3d:d9:03:4f:24:18:17:9d:26:66:e1:
                    d3:73:29:23:1f:65:ac:66:11:7d:6e:c2:9c:9d:4f:
                    2c:31:ba:44:ce:cf:77:aa:9e:4d:82:d5:52:8b:48:
                    1a:a6:c7:88:7f:f5:d0:7a:65:09:77:72:df:f7:ed:
                    8c:bd:41:64:dd:ad:99:96:ec:f3:b4:cf:f7:06:74:
                    9e:39:d3:ee:bc:73:49:58:3c:9a:1a:e9:c5:f4:fd:
                    58:a0:f6:18:9a:2e:e0:b9:93:fc:e4:ac:9a:dc:ac:
                    4c:8c:68:be:da:67:e5:de:89:9d:ea:aa:94:10:29:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:68:91:BC:02:01:A4:3E:6D:31:69:90:00:93:F7:10:84:0C:06:9D
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:8a:a1:1d:e8:18:c3:39:01:83:11:30:81:21:cb:97:db:56:
         e6:58:0e:d5:4b:8e:93:c3:4b:d2:f2:21:12:e1:8a:bf:07:00:
         f4:f7:89:bc:17:96:91:d6:b8:9b:51:dc:6d:3a:a5:2d:9c:e0:
         36:21:ac:79:c8:68:94:7e:35:51:43:ab:69:3b:c2:74:b2:d2:
         74:bd:fc:21:32:a6:ca:90:2d:f2:3c:7a:01:c4:cd:5f:2f:8a:
         fe:3c:7b:95:de:d0:81:be:1a:81:a6:34:2e:1c:d8:86:2b:73:
         2f:9c:31:c6:ce:09:7d:d0:13:d4:aa:97:ec:d2:2d:b8:3c:4e:
         47:d9:00:c0:1e:a6:88:1c:df:44:3a:6a:3f:56:63:96:ef:dc:
         12:94:de:f2:21:41:62:e6:1a:9a:28:2d:1a:e7:80:d9:2a:cb:
         53:56:7b:b6:8b:1e:45:57:53:5d:df:cc:75:57:d1:64:89:9c:
         57:82:7d:e0:35:82:64:b8:56:06:4d:15:c5:cb:70:da:78:7f:
         0e:51:b6:f5:a6:e1:92:04:02:0e:6d:67:93:bc:40:8f:a4:db:
         fa:7a:38:f6:e5:aa:c5:fe:a6:76:02:3c:c7:c4:8d:84:70:e7:
         fb:94:d7:0e:5c:4c:9a:24:d5:fb:45:4f:93:e4:0c:54:f2:0e:
         7e:d8:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 10:05:09 2025 by rpki-client