Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
File:                     tylF9XEDFToHhU504ifyrsHF9DA.mft (raw, json)
Hash identifier:          SPQHcVGPEfRnjM4IwH6LLGHz1dmnFGV0G8MwO2Lf6U8=
Subject key identifier:   6D:47:FB:5B:A5:6D:FB:09:8B:3C:C4:CE:29:F1:78:37:F4:90:55:76
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Certificate issuer:       /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial:       01960A1E98099AF5F0D3B0AA020D0BCAD2B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
Manifest number:          15F0
Signing time:             Sun 06 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 06 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 07 Apr 2025 08:01:39 +0000
Files and hashes:         1: 1UFB7CcCDkvAhSl7BB4fyKXFhlY.roa (hash: YOIx0vdDTm8aI5i6BKD8DQMTRGZfl2c7wVpH1Ojrc4w=)
                          2: 3WPaQaeTdmntK5izSsUGm25Ynd0.roa (hash: GyiWTK+w6u6ne5SVMQYVthIyhJqTA+ukFgOGPV6Rz7w=)
                          3: 7eNZUUtMr7jfA7YgPCDp5Y8grAc.roa (hash: sg/wNuUTNiEpzP8okvn65CcSYq3h0kogPktqzbhWv6o=)
                          4: AAaiTjB1saRdCO-SUj5QC9Vm8PA.roa (hash: TVIOe+KfCUmamQmBNTI3SRl/ZRiS77vHXqt/12Vyqio=)
                          5: Bju3646avDgxeIf046SGM1K3xd4.roa (hash: LHhnn721jkWFnoV82s+i9mEs2Dl0WWOwBUxWCDV3r5I=)
                          6: CWC14ACtz9zZz9QtPKIuoN3EYg8.roa (hash: bqn0Jj7mhZCihu23TpreMhWLqpTKZmV32uklvDTdoGg=)
                          7: ENp2NlgP3EZ_Ctg2IXFE1ltrNdM.roa (hash: TUXqsr3fA3RHj6bojPSkgzXHGiUkJIhVH2PBITpU6w4=)
                          8: FKaeXb4K1EynagGRQjeatWAcqgc.roa (hash: CZiF18LL6QhQag7zI7FYHTRqJr5fp5LvZzS0BtjMKWg=)
                          9: FM6zAm_tOXqKI3DeeieOZ3qpX9Q.roa (hash: 2njwAo6PtnuTn298wxvgGymelszzxQ6zowFauB5H4sQ=)
                          10: GZX-sybhyROXZc5D_lXZY5lYMQs.roa (hash: PTYcxQtc/HbMMRBI9ZWe2WslGwayWK0TLB5lwzbjV90=)
                          11: J65Pn7n5Sh8xR78z7z0tac9NxEI.roa (hash: OZKdaXncMRK8ybMPUGR1+XM+jguqWZYjIXyaJtzf7+4=)
                          12: JByCSmpT_tKaghi6acJ1P7xlxi4.roa (hash: n4th5ESL53N70/dB8aAk9IHNbtqU1MIcFTC5M6qY9SQ=)
                          13: SC9yZhU9PNS8QTNjN_qrNv_eW3Q.roa (hash: U3jGOjd33mOISo0lcKw17gPp1Hb2/jkFzcISZ7nMSSw=)
                          14: SEIGpFaUOT-3BhxD428wdHjXkF4.roa (hash: kYKeuNU0Tzp6sR1Dz16H7anhgJcD3fy7MV9jDArs3Rk=)
                          15: Srd8y1uDTsRNNh5zxuhGC_3_ynA.roa (hash: RJvVVf3BXtar1QBf5Qs0uslArz8hoyrD19vpCenWfYQ=)
                          16: Td_tAB3CrVbfHcSB5AhDEVY957M.roa (hash: ag03Y22i3csGaCqrH3JCe57E7lAMqF8Kv55znGph8AU=)
                          17: Zpw5BQwIodYMXStEoStZw2m1NHQ.roa (hash: 3AF49qMbETv6M8T/thj5SbhbCaFt3ESECgrfcG0gReM=)
                          18: _BrKG4qFUAeG8b8VjxlwGkP_cOo.roa (hash: 6iUyRKK4LL6pEeYz+9QKQh7MzqtDFv6/vdl575D8vKI=)
                          19: d3dmZhqZMBm8nnUwxeRipF31rF4.roa (hash: Wq9QYT7yZowYR4zvxJjwAu28e4Rc6FO3OCTrtL2HZ2k=)
                          20: dclTRK2P6H594KtMTB_oZkto_Lw.roa (hash: QnCTyiKf1w63AXb3PQfX/YBXqZywF6UWEuZsYZ5/ZA0=)
                          21: eb2Tt3itRs8Tk_9_RZSOB7MjFyQ.roa (hash: uHJR6LBIUPmPWT2wzRksFGeaPTNwx6P1xGQDwF9JJz8=)
                          22: kEGnIPaz0jpCMaLK-AxSl_Uj73c.roa (hash: ERYv4aRHlZMCu94mvKtHpC5oPqAIDuluPNPAgq+uHNk=)
                          23: krfTk4Cnlk-xW9hhgPgOA6I3f94.roa (hash: OmQ9jI0YlHVX6eOJN0i3D+1YBrNwoXQDS22GOt1XVWo=)
                          24: qltzl_twRyQduWA_Z9b6CHzg6-E.roa (hash: bklkW5Sgk8x13hv5wfwpemC+HWDB7IwQvx4sqMOAjnU=)
                          25: qpXVn6899wrRbizL-ejjlmHTNGw.roa (hash: WLbvvQt39yLWiJkYBcD0VviPKxLnznjfUtU3LjRDTE4=)
                          26: r363Q1qsYQxBbhvSqPJLPh5DahU.roa (hash: JjtZM7LfR0UP5uN1iSohb3UO/TmdB39LPJkQd8VgySw=)
                          27: spdGIzhTrbhuAEJDJbRt1N-7qFE.roa (hash: 9xqu8xfZf7rOvuoB/ZxtphnY4kiRl04ujljXMwl/JDU=)
                          28: tylF9XEDFToHhU504ifyrsHF9DA.crl (hash: YQN8oT7rSp/9ksGJ2pK22siBsbMqULADCGayaDE3i/0=)
                          29: vALZjp3Y_8vzqJPszimC3tG6CYA.roa (hash: 3a6oqJrQjy+G/zx4bhAzAt1DS1UwmeP3dtTyF2RbQKI=)
                          30: vATMWnOROvqwj7Arlr6Fn1rGVzA.roa (hash: g+SOXxMEXOuyhniiidgY516t6TKGEEtZYtbh4vxG6wY=)
                          31: vSdatVQs0601qTINAZOSvBKTvqI.roa (hash: J4sc3fJ3ayPM9GpaLds0smNkt4N6lvQ+RxikjlgB/Sc=)
                          32: zlw4k3fz3hvPbvONN6narEdJwuk.roa (hash: whzFcKoxbF16kVv3V3GLTBI55imHzoHABjw7ZRaAHxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 08:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0a:1e:98:09:9a:f5:f0:d3:b0:aa:02:0d:0b:ca:d2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
        Validity
            Not Before: Apr  6 08:01:39 2025 GMT
            Not After : Apr  7 08:01:39 2025 GMT
        Subject: CN=6d47fb5ba56dfb098b3cc4ce29f17837f4905576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:2c:67:9c:30:4b:c1:17:24:b7:42:40:77:
                    22:fd:0d:47:09:fd:33:9b:b0:67:8d:5f:cc:b0:2a:
                    40:3f:15:00:d4:dc:46:fc:d0:c4:30:15:39:12:7c:
                    22:7a:85:78:12:13:29:8a:dc:5c:f1:ab:e8:c4:21:
                    23:14:20:da:00:72:a9:32:25:92:eb:ed:0c:2e:96:
                    ee:31:5a:d4:91:ab:08:f8:03:84:b1:b6:0a:9b:f2:
                    95:78:79:51:f7:3e:f5:93:b4:f8:d7:ce:ba:95:03:
                    8a:29:5b:51:23:14:4a:9c:91:d3:df:e1:08:0c:96:
                    b7:49:66:78:3d:f2:07:78:f1:32:ff:d8:f6:9e:e2:
                    fe:63:5e:f7:d1:00:7e:42:a6:5f:28:b6:0e:43:5c:
                    40:53:06:4b:af:aa:da:ef:c4:46:ac:06:cb:b3:e6:
                    df:55:83:e3:e8:3b:d9:d3:b6:b2:84:6d:3f:01:a8:
                    4d:03:44:3e:5b:a6:db:b8:e2:32:64:c4:7d:44:e3:
                    18:fd:71:a6:b2:aa:e6:79:ae:13:e1:fc:fa:66:de:
                    bb:17:23:81:30:7e:5b:18:a0:57:76:f1:b7:f4:c4:
                    79:3e:6f:df:8b:22:f2:9a:dd:c5:62:b5:3a:05:69:
                    39:10:5b:a5:fa:26:6a:c9:21:2b:45:eb:a7:b9:85:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:47:FB:5B:A5:6D:FB:09:8B:3C:C4:CE:29:F1:78:37:F4:90:55:76
            X509v3 Authority Key Identifier:
                keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:29:9c:3c:56:f8:be:fb:5f:1e:11:45:64:b9:d8:fc:39:31:
         0d:98:49:84:57:94:31:55:dc:02:64:25:5a:3f:20:dd:ad:12:
         82:86:6f:b7:57:a1:a3:fe:a5:a1:39:68:3a:0f:d2:f9:6b:20:
         1d:62:c6:12:a7:62:65:89:d7:c4:c5:10:12:7c:0e:f0:4c:73:
         fe:87:b6:7b:05:34:f1:2d:b5:8d:76:13:a7:4b:cd:91:92:97:
         49:91:14:95:e0:76:82:71:24:ab:52:47:a0:ed:54:78:22:e2:
         e6:7d:fc:f3:24:d0:c3:73:3c:99:af:32:f5:56:9a:6d:53:2a:
         07:17:68:2e:25:98:da:cf:20:cf:45:00:21:7f:01:06:84:30:
         21:f4:f7:0c:bd:ed:44:32:4c:b7:d5:63:71:63:17:7e:c9:1b:
         73:fb:46:16:26:9b:81:ba:cb:8a:a1:80:5f:1f:a7:11:2d:07:
         2b:b2:00:d0:0f:f9:3b:1d:b0:fc:b6:b5:6e:6f:0e:c9:8d:41:
         dc:03:a6:1b:0e:24:56:b2:4a:29:25:3f:aa:14:b5:74:0a:f7:
         a3:66:7e:39:b4:d7:31:e9:d1:0b:95:92:22:3b:3b:1a:d8:5a:
         fe:8b:09:e8:38:31:55:27:f2:2e:2e:3c:2e:c8:d8:24:cd:5e:
         62:fb:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:43:10 2025 by rpki-client