Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
File:                     C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json)
Hash identifier:          2Vh3SwjfNkwAvjX+ne1mM8i7qzvDad2a6QEyGEs2YIM=
Subject key identifier:   A7:48:E6:9F:41:0B:1F:13:84:87:FC:71:55:5B:3B:C2:05:6E:79:E7
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Certificate issuer:       /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial:       01976283589F14D4C65808689358CA951582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
Manifest number:          15A8
Signing time:             Thu 12 Jun 2025 05:01:04 +0000
Manifest this update:     Thu 12 Jun 2025 05:01:04 +0000
Manifest next update:     Fri 13 Jun 2025 05:01:04 +0000
Files and hashes:         1: 1-Ss8y57Ehk6R15I50N_Ja4NuZFg.roa (hash: E3Xe56Uq6qf9xoMjHrb8Tp1z8LD2YFv8nmr/lvS0Ysc=)
                          2: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (hash: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=)
                          3: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: ThGe0yQU4esNDvSlmlPj/9XeJxeMI68KzsmnrUyKt9g=)
                          4: QmJcakWH1CARNak1a46tlM2ytyE.roa (hash: v8cGIzbtBdgrBgCJGkJKF+awirm33gkAmHePtYlNHWc=)
                          5: Ufuhf0_wn9lleED4LQKhcdXKZLY.roa (hash: f4Ng8ktmuEshcdJiOHZjPJAwq7/nitwlptaYvO0/DHU=)
                          6: XFCPjaaIP04nEp4Rlitk1zUJ8nA.roa (hash: 9Hrw22EfwJiPVEvx9iOeq1/U32N9ujjXKgQDN7kPNnY=)
                          7: bzDr7kn2LfhqjYsoZQLZ-uHwvQI.roa (hash: ETCcL6Lmgpdi6iyG4gf+W9Umfg+Mzqif1q2dVBD62g4=)
                          8: e38Kg8iCKqOVcGx8ZyJTu1IrTwc.roa (hash: yWG15kNG/dsh9zB22D/eO5GMJKGaRyWMaUm0mhvs7uI=)
                          9: irmafOolxajIUAAu4T-WCDDYGuE.roa (hash: B2dN9t4bHqneaqFXcxWnKXREXDW4ZcJ7+Z7DVVfobpU=)
                          10: n7XNxY-sa2O-8oAFuyK34I07FxU.roa (hash: 7HgkBdxidw6ZJ5Ks5cBFOnu0xmnIR/zyHKV2JfMTPLM=)
                          11: nikI6XTmNMIUEKKUIOhaKpaRfTY.roa (hash: 3OTWr1t7MNgVLjxLDAQClENVYG0IMxrFr2dhuyh8iLU=)
                          12: pkcx_-V9HNVC8HzviAJSCvzoxJg.roa (hash: V4tEVQoUWw/5eT8C/Z8qztjVCTQ8kgfSRy2bETB0V2w=)
                          13: wq6Oybyru5PjGYeKDTrdRRIxOok.roa (hash: +NxS5vTeW/Lv7n0fJHcbikUT3d8Gb7EPQOKgAIeQnGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:83:58:9f:14:d4:c6:58:08:68:93:58:ca:95:15:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
        Validity
            Not Before: Jun 12 05:01:04 2025 GMT
            Not After : Jun 13 05:01:04 2025 GMT
        Subject: CN=a748e69f410b1f138487fc71555b3bc2056e79e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:51:c5:da:69:fe:63:4f:e0:fe:eb:1e:b8:
                    59:60:ca:e1:d2:11:75:e7:27:61:cd:a9:c7:be:b3:
                    77:d7:5f:9c:85:ac:6d:aa:42:8f:5e:aa:37:6d:ba:
                    6a:17:60:93:51:6e:b5:5c:fb:30:88:05:a1:09:72:
                    3c:4a:65:10:e2:17:af:79:ac:78:8f:6b:74:e7:b3:
                    1b:36:7a:d2:0e:c1:89:a6:09:86:bc:b1:9e:e6:0a:
                    36:34:7f:79:dc:df:ba:0b:67:5a:b9:cf:5f:8b:94:
                    bb:b0:69:44:af:82:3e:b2:aa:76:8c:98:05:0a:36:
                    c1:43:42:25:f8:18:b0:bc:1f:a9:42:9f:62:12:dc:
                    46:87:b7:03:b9:f5:76:e0:09:b3:54:c8:fd:27:cd:
                    bc:8b:de:38:19:65:34:8a:b0:84:79:92:8a:a2:16:
                    bc:c1:7d:31:12:85:c4:86:a5:0c:3d:70:ad:5c:ad:
                    e1:81:37:77:5e:4f:49:d8:5e:54:8d:47:9c:74:1d:
                    5a:61:2f:ab:06:4c:85:13:9c:c3:a5:e8:d4:f0:91:
                    f7:6c:1b:06:c5:6c:56:4f:8b:2d:3c:cf:13:23:55:
                    db:41:58:86:e8:0d:bd:e1:4d:cd:e1:d2:0b:97:23:
                    9f:6f:74:35:9b:d4:79:ed:54:81:23:5e:37:95:ea:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:48:E6:9F:41:0B:1F:13:84:87:FC:71:55:5B:3B:C2:05:6E:79:E7
            X509v3 Authority Key Identifier:
                keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3b:f0:6b:ae:47:6c:b4:63:b7:33:09:3e:48:f9:1b:41:3b:
         5b:f5:2a:08:76:19:fe:c6:cc:1e:36:03:90:e6:7f:8c:65:6c:
         4e:77:86:ba:5a:16:fb:0e:00:a2:3c:2c:e4:85:07:16:84:84:
         18:23:e1:18:08:2a:67:c2:3d:c8:87:9b:ca:30:83:4f:0a:6e:
         73:dd:db:95:dc:2a:2a:61:76:49:92:24:53:4c:61:73:c8:5a:
         06:0e:53:3a:54:b9:37:9e:55:89:de:f3:ad:41:2a:22:6a:38:
         ec:39:a7:f3:fc:03:8f:43:00:36:0d:38:ad:4c:39:38:dd:54:
         48:dd:45:1f:4c:e2:3a:b6:38:04:c4:52:97:93:c8:6c:96:d9:
         41:9d:f4:29:38:a5:04:95:e1:b7:a7:06:f2:12:9e:a0:af:e9:
         aa:98:8c:2f:3b:ce:3c:ca:fc:93:2b:32:07:e2:40:33:87:66:
         3a:20:c9:2e:90:1c:06:ab:36:2e:16:8a:4c:ae:45:71:68:86:
         a4:04:57:fe:d7:67:8c:8c:ec:66:f6:f8:2f:7d:2d:ac:b4:c2:
         a0:f4:81:06:ae:02:26:8c:86:4a:b2:06:e6:be:c2:f4:84:9f:
         2d:1b:0f:c0:4c:6d:10:8e:aa:2c:d3:96:eb:85:6c:dc:d3:14:
         97:56:ae:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:38:28 2025 by rpki-client