Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
File:                     6i0QK2ESsNmouO66xLl8gZ-XxgY.mft (raw, json)
Hash identifier:          VYFUismUcaDkUeTLecmKWzz236yP4wzhgRCbqb+YsnU=
Subject key identifier:   FD:F9:8C:07:27:D3:75:2D:5E:8B:AE:0A:5F:EE:23:D6:08:57:C9:A5
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       019760CBBDC90E6D6994A9582C4DDB3B012B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
Manifest number:          158F
Signing time:             Wed 11 Jun 2025 21:00:54 +0000
Manifest this update:     Wed 11 Jun 2025 21:00:54 +0000
Manifest next update:     Thu 12 Jun 2025 21:00:54 +0000
Files and hashes:         1: 2Jzb6w4oYzNJE4bGcrmSl7n0CO4.roa (hash: 8etDRQmlSGkqycZzchAQWOixmXQimMYOT2fju9p36fk=)
                          2: 425pG85CvD-WqD7G4q_XQGIKAqg.roa (hash: A277nuuzcfZvxdezgnYr9eoNlhLje+Mf+PFtPMVmfws=)
                          3: 6i0QK2ESsNmouO66xLl8gZ-XxgY.crl (hash: +9hn0FNtBvHxUKU95RenO7zqxTWGKALmsBuns77ey6w=)
                          4: 6xhDMjLWegiTNxnVw5JYv0_kcfM.roa (hash: rSZUF0buOyvvO3wABYCztQlwFfnFNw3uLkpmp4vM9pw=)
                          5: 7918jeDcIeSJXbD16xxGwzri6_4.roa (hash: OQCYlsdbEYMUMcdfr++Yt7VINvKQ1QgUov/whsjb0xQ=)
                          6: 7dXC-hkge0H4SOrjlCk1xFHWw8U.roa (hash: Fv3L9KsADEPnVWxrZ7KT3btIpKM9bZT63ylJbPal16k=)
                          7: B_U0Thd2hek7c5TP5isgn3nFY38.roa (hash: oQ6pviFf5arQiDT+3KFkPtsqKciLEZWlSeEkqGt55/c=)
                          8: IJoxcEd7VggD3on9VNdBwQ2ai4M.roa (hash: l1C0lwy47+vk4Lvd7mWl9lGXam1kddh45sEhzv6D1cA=)
                          9: Li9WS8jXFR2-r4mTOoCwgP_Ts9o.roa (hash: yRVJgK21z7DKohg/kc7sh2OmWee+mkk6rOMmBxFGPjU=)
                          10: YJZNgRJlEy3RdWs3RjwaLO4bvJA.roa (hash: 0UFTkDt8H+rkJYm49DfFVoTWb/FfDGLtDdWOpr/Q0pQ=)
                          11: acU8LPcjjnuwpEGnrC28mxzfjkI.roa (hash: LwbfB5h8UeIfjkLBn8DXzcf/70aOb76OSwOezLnK2PU=)
                          12: cYJ91ITuYXoj33vFG-jF0Fh-ajc.roa (hash: Z/p5QOfcesLJQjsnSA/ia08r7lvPlhHAViiVlSC49cw=)
                          13: i-v6d3wc-sdUkH9r6qlkOFcqDf0.roa (hash: pAwH7XsKC3usAyUBQbyxSsEwXZk/zTFKfD5sKnbUUxQ=)
                          14: kP8WpbmlofJTdUaCmUWW68Yu-Rw.roa (hash: z9cTYSYhBDpdjPlGOiBqYli4fbEBwTaVHKlbVFfEd+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:cb:bd:c9:0e:6d:69:94:a9:58:2c:4d:db:3b:01:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Jun 11 21:00:54 2025 GMT
            Not After : Jun 12 21:00:54 2025 GMT
        Subject: CN=fdf98c0727d3752d5e8bae0a5fee23d60857c9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:b8:60:77:13:71:1f:df:46:ee:d9:32:8d:
                    1f:99:ed:21:a8:47:b4:02:b3:2d:53:bf:59:67:12:
                    50:59:77:2f:fb:b2:c1:7c:42:33:41:35:a4:62:43:
                    3d:69:97:2a:a6:03:86:86:44:27:04:14:0a:23:f4:
                    43:ab:ae:ee:c9:2f:a2:66:92:2e:7b:8d:de:6f:e3:
                    53:69:e8:f9:8b:b7:75:69:59:46:73:2d:4d:ee:34:
                    77:a5:83:05:b0:89:33:ba:4f:79:1d:5a:88:23:63:
                    91:13:54:f2:09:74:fc:a3:fb:fa:3f:a2:16:94:7c:
                    ca:76:e4:e3:f3:c8:fd:15:e7:ca:9a:e4:85:bc:52:
                    e7:be:6e:8d:93:8d:a0:7f:80:ab:9c:fa:26:78:80:
                    17:5e:2c:45:d7:9a:03:ad:69:f7:26:05:9f:b0:7b:
                    24:b0:53:bc:c3:30:8e:a0:89:f0:15:7d:84:db:7f:
                    97:4a:65:c4:39:51:46:10:98:46:58:39:d1:f5:c1:
                    86:d0:32:a9:fa:1c:51:b9:dc:5c:be:ee:84:62:e0:
                    eb:89:4d:88:8a:6b:cd:71:eb:44:35:80:62:e6:4b:
                    23:c3:4d:73:ed:5e:bf:5e:9b:83:35:4d:cb:8c:86:
                    1a:71:b0:d3:0f:d2:a3:20:78:a6:f0:b1:0f:5e:ad:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F9:8C:07:27:D3:75:2D:5E:8B:AE:0A:5F:EE:23:D6:08:57:C9:A5
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:58:b1:f4:cb:c7:5d:e5:cc:fc:c5:c5:8a:32:39:67:3c:ec:
         1b:8c:07:67:86:ee:ec:cf:e6:8f:5e:64:29:f4:fd:a7:29:5c:
         c9:68:32:8e:3f:28:13:fe:7f:d6:68:ce:a7:fe:ed:13:58:d0:
         da:e4:25:20:9e:eb:25:52:31:1c:8e:bd:32:dd:a4:fa:8c:d6:
         fd:9e:2c:e5:2f:dc:e1:b8:1c:2f:62:5f:96:57:af:a7:51:62:
         5d:65:fa:25:ae:55:f7:19:7c:d0:6c:0c:65:8f:92:8c:ba:39:
         72:ab:fe:74:1b:f1:09:7b:ac:72:e4:d0:95:72:a4:c9:86:d8:
         83:11:ff:7c:b4:85:48:67:91:1d:fa:64:36:a6:85:c8:01:26:
         66:04:a8:69:44:2c:15:a4:01:bf:45:c5:f2:92:95:01:81:11:
         50:45:df:7a:af:62:5f:5e:53:5e:a9:a8:76:9b:f8:8b:99:d3:
         2f:d8:08:ff:1a:53:b2:93:ac:5e:23:95:d1:33:f4:85:e3:ab:
         45:db:0d:d4:1b:12:be:54:61:bc:d2:00:12:d9:38:ac:98:a2:
         ca:dc:e4:11:ed:78:0f:35:bd:ca:af:cd:c1:22:0c:97:34:03:
         1a:4c:7c:63:dc:52:e1:7b:72:bd:a6:26:67:aa:88:31:a0:be:
         90:c6:5a:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdgy73JDm1plKlYLE3bOwErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5
N2M2MDYwHhcNMjUwNjExMjEwMDU0WhcNMjUwNjEyMjEwMDU0WjAzMTEwLwYDVQQD
EyhmZGY5OGMwNzI3ZDM3NTJkNWU4YmFlMGE1ZmVlMjNkNjA4NTdjOWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd+4YHcTcR/fRu7ZMo0fme0hqEe0
ArMtU79ZZxJQWXcv+7LBfEIzQTWkYkM9aZcqpgOGhkQnBBQKI/RDq67uyS+iZpIu
e43eb+NTaej5i7d1aVlGcy1N7jR3pYMFsIkzuk95HVqII2ORE1TyCXT8o/v6P6IW
lHzKduTj88j9FefKmuSFvFLnvm6Nk42gf4CrnPomeIAXXixF15oDrWn3JgWfsHsk
sFO8wzCOoInwFX2E23+XSmXEOVFGEJhGWDnR9cGG0DKp+hxRudxcvu6EYuDriU2I
imvNcetENYBi5ksjw01z7V6/XpuDNU3LjIYacbDTD9KjIHim8LEPXq3MJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP35jAcn03UtXouuCl/uI9YIV8mlMB8GA1UdIwQY
MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt
YjgyOWNjNDAxMDMxLzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx
LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1ix9MvH
XeXM/MXFijI5ZzzsG4wHZ4bu7M/mj15kKfT9pylcyWgyjj8oE/5/1mjOp/7tE1jQ
2uQlIJ7rJVIxHI69Mt2k+ozW/Z4s5S/c4bgcL2Jfllevp1FiXWX6Ja5V9xl80GwM
ZY+SjLo5cqv+dBvxCXuscuTQlXKkyYbYgxH/fLSFSGeRHfpkNqaFyAEmZgSoaUQs
FaQBv0XF8pKVAYERUEXfeq9iX15TXqmodpv4i5nTL9gI/xpTspOsXiOV0TP0heOr
RdsN1BsSvlRhvNIAEtk4rJiiytzkEe14DzW9yq/NwSIMlzQDGkx8Y9xS4XtyvaYm
Z6qIMaC+kMZapQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 02:17:12 2025 by rpki-client