Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
File:                     1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft (raw, json)
Hash identifier:          oXaDu+jnpeZpyM6GI+yfCagWusDJrQFCPl4YiuU9nUU=
Subject key identifier:   92:1B:AD:85:F2:2F:53:82:05:24:72:7C:A1:64:DC:CD:78:F2:C0:D7
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       019748C36B099AD4558D7828ED2D791C1B70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
Manifest number:          15A0
Signing time:             Sat 07 Jun 2025 05:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:55 +0000
Files and hashes:         1: 1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl (hash: 3rpeMgl4Dck2NcTzdDH1UvG8IiRALXqM72O9R1fOzcM=)
                          2: 3hqHxrvg3mzouwJIaLoLL_1aNOk.roa (hash: drAUMdvTeG+q3QoTZVXvlX6+e/XeTGI2FRMHejM5978=)
                          3: IvUzmjfbrcAfjWuG5bEXnsKARX0.roa (hash: n6VtpGGacFVSIXviiCkhoox8/pF8W1r+IL34+q5ydvQ=)
                          4: ULPXRm8In0iucltCiTjO30AS1C0.roa (hash: 97n1pECWSKGJxeSXP3tl/iwpgFcjm2jvqPMD3YywHEo=)
                          5: UYDoB3x60CZ0QlNGESbwAlWd428.roa (hash: TFnakiXJIH+PyATRJlNHqXCNQvSIEl+DgNHmhyYXVOo=)
                          6: UdGuE2Gyay0X3Zt4q22vWPkwoSY.roa (hash: nlcyfBPqkJaOzfcIWqCIaFS2zyTBpHfF2/864QcqW28=)
                          7: VQZVlZqkH9S0x1DXirk8cG7IBS0.roa (hash: h1xoMHU3zfRgAJSFC+W5JQaCDJcd5C2MzoJ2iAIlLk0=)
                          8: Wt480qXVmMwEOAd2PwO3BIY-yQ8.roa (hash: ZoHaxK2Mo9GKYjgUd0e4MjoyY0dURGfiyktgIwjh6+8=)
                          9: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (hash: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=)
                          10: hkpjjAx2DE4nxJX8muiagvMf5-U.roa (hash: mjZ4UF9NabA85FX7we/nz5hALtUkEeudaC8FfNN02Rw=)
                          11: lBvlVkTLUdbTB--D9tdhXGbi2bI.roa (hash: yLtU/5UxdJwAqM7PUrwCVL1dYWdwpVOQ0bapPgJ9jQE=)
                          12: meb9WVVNYbUZtDoy7aw2n1DbXn0.roa (hash: A50uxX8uLtTa/WN+Skz9Umq+gxTofH2FJfLXImSmNB8=)
                          13: pud7auFn2E42HIACPO7Sg_eiPjQ.roa (hash: C7IhEUDIpfgB1yixTpiwplwxga4k3Layuwm2wJUFeAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:6b:09:9a:d4:55:8d:78:28:ed:2d:79:1c:1b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Jun  7 05:00:55 2025 GMT
            Not After : Jun  8 05:00:55 2025 GMT
        Subject: CN=921bad85f22f53820524727ca164dccd78f2c0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4e:e8:47:b5:6f:34:a9:27:9b:e4:24:7a:c0:
                    e4:26:93:a2:28:5e:90:b5:e1:d5:ed:1c:1b:34:b9:
                    2d:56:88:77:84:93:e6:1a:94:42:e4:22:fb:98:56:
                    1c:d2:92:5e:ab:8f:24:18:4f:9c:e0:d1:db:4a:b9:
                    0b:6c:b1:95:1d:5c:cd:0d:21:ce:c1:98:8b:ff:30:
                    21:d5:38:a5:43:06:be:40:58:8b:00:71:ad:fe:20:
                    bb:cf:77:84:e8:13:ef:e6:3e:d3:71:e4:f9:c1:04:
                    e9:5f:0a:59:ce:c0:5f:4d:d0:e2:f3:b1:4e:ea:e9:
                    c6:42:2d:57:42:ae:89:7c:1a:50:02:93:c3:e6:8d:
                    8c:6b:54:a3:4b:2b:2d:d2:61:19:55:63:2e:ee:2e:
                    d9:d4:d2:11:28:89:98:d5:c3:61:77:92:42:53:9e:
                    fa:c9:67:be:a9:13:62:66:de:c3:5a:b1:a5:6e:6c:
                    d1:7c:24:b3:37:10:e9:20:88:29:44:25:a8:8e:84:
                    1b:95:3a:ed:ec:f6:90:a4:ca:46:b7:82:1c:91:40:
                    1e:3b:7e:1c:db:07:8b:0c:5a:9d:46:c6:7a:c9:24:
                    0a:00:62:a2:a3:ad:7f:fa:8e:34:4a:ce:ca:74:95:
                    df:cc:ec:5d:0c:64:81:b3:33:d3:72:50:f5:3a:cc:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1B:AD:85:F2:2F:53:82:05:24:72:7C:A1:64:DC:CD:78:F2:C0:D7
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:57:df:cf:7b:58:8e:e2:ed:12:7c:fa:6b:e5:11:3a:e0:cd:
         3d:93:74:91:81:b8:7e:c8:73:76:bc:05:2d:ef:ad:87:18:cc:
         0e:8f:03:2f:1d:51:55:89:6e:78:85:b1:37:9b:01:b2:01:01:
         ac:fe:ee:df:ec:d7:19:17:ec:47:59:81:49:2b:d5:b5:b7:e3:
         92:1c:94:d1:0c:1e:e3:15:50:a2:08:50:1b:d1:83:b0:00:81:
         b1:a7:db:16:92:44:fd:17:ff:ad:71:df:75:b8:2e:cc:98:55:
         96:ee:3e:2f:0b:ff:05:1c:50:99:c8:9b:77:38:6c:0b:be:5b:
         ce:a6:7a:67:fe:85:f0:a2:7c:d8:0a:82:42:f5:5d:64:21:45:
         55:60:87:e6:b2:89:06:99:6b:d1:62:72:64:15:09:ab:6d:a1:
         3d:6e:53:d9:9c:30:54:d7:99:d6:c2:57:ed:88:13:87:af:74:
         ea:a7:c7:f7:fc:41:22:cf:27:f1:2e:d1:cb:e9:8f:d9:41:46:
         2a:7b:38:8c:24:b0:d8:6b:be:15:7b:ea:a1:9b:fa:d1:69:b9:
         47:3d:4d:3a:1e:49:c8:73:2e:de:03:01:8b:92:b1:0a:27:5c:
         d6:88:28:6f:59:84:ff:51:8c:38:ba:fb:0d:19:81:d1:48:fa:
         d8:4b:27:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:32 2025 by rpki-client