Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
File:                     0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json)
Hash identifier:          tHh9EmDpPQaivNteXSo8g0VT9mISKpv/0qWCfodF9EE=
Subject key identifier:   84:E3:A1:3A:CB:94:88:61:64:A8:FA:56:AE:1C:6B:F6:38:B6:63:7A
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Certificate issuer:       /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial:       0197481E33DB56F894EA97A3659182CEA91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
Manifest number:          12CC
Signing time:             Sat 07 Jun 2025 02:00:28 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:28 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:28 +0000
Files and hashes:         1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=)
                          2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: GW8e8nCk2jutHHnmtgwv4X2xytOktt0ABN2PeF6iC0Q=)
                          3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=)
                          4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=)
                          5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=)
                          6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=)
                          7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=)
                          8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=)
                          9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=)
                          10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=)
                          11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=)
                          12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=)
                          13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=)
                          14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=)
                          15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=)
                          16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=)
                          17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=)
                          18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=)
                          19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=)
                          20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=)
                          21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=)
                          22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=)
                          23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=)
                          24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=)
                          25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:33:db:56:f8:94:ea:97:a3:65:91:82:ce:a9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
        Validity
            Not Before: Jun  7 02:00:28 2025 GMT
            Not After : Jun  8 02:00:28 2025 GMT
        Subject: CN=84e3a13acb94886164a8fa56ae1c6bf638b6637a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:78:90:c1:b0:de:34:af:f2:af:f3:63:91:
                    26:38:82:6f:4a:4b:66:81:e0:ae:be:cc:69:a9:95:
                    67:0f:f3:13:17:43:41:28:7f:a1:dc:97:fe:8e:05:
                    96:81:ab:89:64:27:3d:62:23:a3:f1:cd:9f:d3:7d:
                    27:c4:f7:23:94:a2:20:21:74:c0:80:99:8a:25:0f:
                    25:15:d2:57:85:50:ee:5f:0a:32:4d:00:2d:a2:8d:
                    3c:3e:b5:c3:86:b7:ed:f1:d9:ae:4a:60:b1:df:b5:
                    a9:88:b8:b5:8f:26:3f:81:04:e4:a1:91:fa:2c:32:
                    74:eb:7a:5f:39:d9:94:f2:b3:4a:fa:b7:5d:dd:91:
                    16:87:70:92:b9:f2:35:f6:6e:1f:1e:09:0a:8e:a0:
                    af:21:96:8c:49:ac:72:db:db:19:50:bf:78:9d:e0:
                    9f:4c:87:c3:c8:f9:48:c8:20:d1:25:a0:95:c5:4c:
                    38:ad:0a:9c:47:3e:90:ad:ef:ba:dd:00:ea:9d:55:
                    98:e3:67:fc:9f:88:21:1d:c2:ec:88:f5:ff:4f:9c:
                    d1:56:33:d9:cb:89:94:11:1e:da:ca:9b:a2:0c:03:
                    ba:45:5f:53:b6:de:95:a5:39:7e:ea:27:a7:6c:c6:
                    83:25:54:7f:c0:f2:d0:6f:ba:e0:a6:81:eb:f6:b2:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:A1:3A:CB:94:88:61:64:A8:FA:56:AE:1C:6B:F6:38:B6:63:7A
            X509v3 Authority Key Identifier:
                keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:42:b7:2a:16:9d:fc:74:44:c9:8a:c5:be:93:3e:51:e8:
         e2:d6:79:43:68:1c:6a:3b:e1:f2:71:db:de:78:35:b5:9c:b4:
         12:ea:67:ea:2e:2f:a5:9b:d6:07:12:e6:b9:2d:ce:08:a7:97:
         23:bf:0d:fd:e6:08:c8:ee:4c:79:d9:00:d5:c2:68:76:84:9b:
         e9:1b:82:83:23:0e:ac:f2:50:35:9e:50:1b:32:f4:9d:44:7b:
         2f:68:8a:90:ca:8a:fc:24:2c:d9:a7:7d:a7:b4:fe:25:f5:2d:
         51:26:36:1f:04:76:c0:90:75:f4:2e:96:2d:d2:91:91:ec:4b:
         ac:27:8e:73:11:56:f3:6c:7d:ba:7e:5a:dd:f8:c8:a0:0d:36:
         e6:32:47:80:e6:42:2b:db:d4:69:a1:37:99:5e:07:ed:82:a8:
         bb:9c:2a:96:91:6a:2f:3a:49:d8:30:d9:fd:0c:bd:58:b4:66:
         c4:91:fd:68:66:7a:f8:fd:a3:a1:c4:cc:cb:0b:b0:69:b7:8d:
         c0:7a:ae:b0:b4:24:ca:89:64:17:34:cb:d4:ab:c9:d8:56:78:
         0b:c4:6f:64:17:bc:2a:3b:c5:db:58:ba:b9:d4:d5:70:e1:27:
         6c:dd:56:c8:2b:c9:d3:b2:ca:29:7e:82:7c:44:7f:2f:ba:7a:
         3e:04:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:46:31 2025 by rpki-client