Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
File:                     uRSWH2fyLGHoSmbIrZwajOUdCZs.mft (raw, json)
Hash identifier:          8+89xcgC9uX8ctY7WQrgGuEn5WKy2/c7I231LFwg0hI=
Subject key identifier:   0D:5A:71:58:7E:C3:75:62:2C:A7:21:84:CF:0F:2F:72:CD:06:1C:07
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       0197462FB76B7B65664A694AD02590CA9B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
Manifest number:          02D2
Signing time:             Fri 06 Jun 2025 17:00:21 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:21 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:21 +0000
Files and hashes:         1: 0H7Thc0vxzHE538Kg__IsozOYbE.roa (hash: giCD6rVmFgKHziT2AIqsZO6VuG2Tfm2cxgqOASpwxX8=)
                          2: 1-IYV20_BFsSESebPalSWi945mc4.roa (hash: OsWGdya6Ch/46NWAXvFYRAE2agKYGSeHmSsi9DNzWYU=)
                          3: 1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa (hash: yxvYsCLwo+HHivfhDyL+8Sdo+tKY+1OVoiINgf6EUGk=)
                          4: 1xA0E3JMPDydJ13Prmcc7Dnta0s.roa (hash: ogbhbFSepGfxytpnhFuB67o0q79KylhQPVl2PN0hOHA=)
                          5: 2Rska5d1fz-1LyWeLY5wNEQt-08.roa (hash: U17BQ8jBRMMMfY5zHF1Q7cNP8BTLe/506H0OjkJUWZc=)
                          6: 7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa (hash: wNJTS1s1GS5nqF/G2hmQFOimq7UQMenpdIPW59xhivU=)
                          7: 9zLvzm8otYmFem1Qd75FwmrsSxc.roa (hash: mU0sIkevG3y3WSoCK/P7ZAFf/EzDIDHpCIUVj9uqHhU=)
                          8: B7e_rOOepZWmaiFWJH1w3a37GGg.roa (hash: 2WwB/EPxijem205r42CRpsJjfETG8nT1KWQIZUs7ayI=)
                          9: HSiwKyMoJ6I6zGaHKCL7FsIgGys.roa (hash: i6y69Y+T/O92kLnvSAm3+5UaYRDFfESGJJXvQ0n1I8E=)
                          10: L4NUW0fD1fouom_s0JvPLwOdhKA.roa (hash: 1QOsAiAO9NanX+ESsp6JiEauNz2AtY78OF9Q05/RwMU=)
                          11: UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa (hash: p032VP0xM7qM67uVYdhb1lo+Lr6r8lZKSQd50sPMvZQ=)
                          12: Wt8q81G3lq42cpbQgi--7hMpnzk.roa (hash: 3wzOUsBnY0js90eLihw9wHKZneTkdasUVemnQb+Ppys=)
                          13: ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa (hash: A0HqrcZPbTEXuB3W/5criOXFdJviighEOaAGyhHlYd4=)
                          14: Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa (hash: feCFBc/epRQ4sJNHhJEBA2Ljs4/rpvwE/wZpPd9yp04=)
                          15: aLZQhetZPScjmzF_3TV-b7UX2aQ.roa (hash: TO/CrQqt8l93Rbi2zVKa5elUK43be8sHniPaaeWsqbs=)
                          16: bIJxT9tnkNJQ4c2mEtFdUJKVePk.roa (hash: OvEl/cosJ15Umi/YXioUm+VBzOn/QAmyGskrTXES3y8=)
                          17: cKynaQHnSt381VIcTQApgbYb_ws.roa (hash: 7rx4+e5TenBrpsBT5lxdY3jIzFb2xLdj/6iZmgJIGMo=)
                          18: iyGn9-N4_Y-74wtv84vIggbUgGE.roa (hash: 0+sbmwNGxEETCuI+TbmtpOScQW3Ga70I+RwZkGrwt4I=)
                          19: mM2enVDYdLiXBKAs6x9oVxUDYoc.roa (hash: 8WzLZPt1oUUmxk4YfWhm8jgi6Eau9QV4/cHfIxSx6Rk=)
                          20: nvGMbscQr-nCRZKJCx_sXVAuXnM.roa (hash: FEjJqoH/uFbjUlp+UiOuar/ZgJYrfKdP4uZu1K+Z/R4=)
                          21: uRSWH2fyLGHoSmbIrZwajOUdCZs.crl (hash: UQC34sHNIWP928dBPX5ABpSrVxV/oawBbRbTeU+ghnI=)
                          22: vM4pwSi8sw4lUOIAjvajCx7ETsM.roa (hash: fyFTTUciTRmBPzGF2SYSyVt7KyF04gllHZfanVt+Ptc=)
                          23: wD8nYbbqM1KLj38YM5LFeps6dvg.roa (hash: XKfem7e78QtcKfKCo2GBRZOY9h90lNcWcBElf0PBnV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:b7:6b:7b:65:66:4a:69:4a:d0:25:90:ca:9b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Jun  6 17:00:21 2025 GMT
            Not After : Jun  7 17:00:21 2025 GMT
        Subject: CN=0d5a71587ec375622ca72184cf0f2f72cd061c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:c4:1e:f5:a5:5a:ce:e6:7d:23:27:cd:37:
                    4c:b7:c6:66:4b:62:48:93:cc:e4:3b:2e:77:64:d3:
                    a9:57:7f:10:43:11:ad:b7:90:93:d2:03:44:53:72:
                    67:1b:82:f2:26:f3:3c:d6:da:8c:73:2c:38:1d:3a:
                    85:45:b8:83:79:b5:ef:ae:ac:f9:84:b5:14:1b:52:
                    b3:75:d8:bb:79:29:15:06:62:fc:8f:de:07:d3:a5:
                    e8:ce:55:6d:ec:7d:58:2d:d7:81:bf:78:5c:f4:0f:
                    65:ec:c7:90:4c:f5:1b:43:e2:cf:71:94:d3:34:ef:
                    07:a5:d6:f4:5b:6b:87:b1:51:3e:67:0a:ce:21:53:
                    cd:c0:60:91:cb:38:83:0a:1d:fc:87:f5:6f:88:20:
                    06:a1:99:5d:36:81:70:e0:32:ed:5e:e5:a1:9d:d7:
                    5e:b9:17:d9:31:47:8c:bc:c7:74:f1:bb:5c:0b:d6:
                    1e:07:f2:d1:fe:b9:4c:37:c7:9b:58:34:c4:c4:a3:
                    01:dd:a3:66:26:05:f8:8c:2a:f8:17:f6:a0:b2:d0:
                    42:20:93:4c:e1:19:16:d4:26:15:36:ff:2a:ad:c8:
                    ca:72:07:14:d8:ab:de:08:e0:f2:72:0a:1a:0f:c6:
                    cf:99:97:b4:9c:8e:8f:a5:ce:32:24:07:5f:19:6a:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5A:71:58:7E:C3:75:62:2C:A7:21:84:CF:0F:2F:72:CD:06:1C:07
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6d:1f:f7:6c:a3:fe:c7:ea:5b:ec:6a:4d:a5:41:86:34:2b:
         16:91:b9:08:3d:a9:60:4b:f1:20:f4:42:f9:db:a8:b1:2f:37:
         0b:6e:44:71:72:ac:8f:0f:5d:d4:76:6f:58:ee:95:17:61:da:
         cb:69:1d:ea:90:20:d2:bb:4f:1f:79:6c:48:7a:0c:e9:d5:97:
         0e:3e:78:7d:51:1d:b2:11:66:59:69:31:5f:0b:3a:b1:2a:ae:
         8a:3f:32:fa:2e:d1:5c:c0:26:60:bc:3e:d7:90:2d:3a:e4:31:
         3b:dc:cb:13:fc:eb:d5:06:4f:58:77:bc:4c:8d:ad:c1:98:6f:
         3a:1a:b8:be:27:62:9e:9f:c2:c6:be:80:c6:af:e3:ff:f2:ef:
         21:f3:8e:08:b7:a0:3e:14:a5:fe:e0:0b:83:e7:ea:80:18:a9:
         1f:23:23:d3:15:0e:b7:dd:68:41:b2:99:69:e5:67:45:04:d7:
         a3:30:c2:8b:f1:a7:35:3f:51:4f:38:36:6a:f8:65:7d:bf:bf:
         c2:c2:11:79:1f:57:e9:cf:56:4e:6b:cc:f2:12:f2:55:5f:84:
         59:4d:83:d4:c2:c3:cb:3d:bf:18:db:a8:f0:af:9b:8b:c3:c0:
         73:4f:ce:29:9b:47:0a:64:2d:ca:20:8a:fa:43:c8:0f:af:85:
         2c:92:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:39 2025 by rpki-client