Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
File:                     ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json)
Hash identifier:          VYenlT/gQGNtIqfuqIprEkr14OpgvvnfbskspQystuM=
Subject key identifier:   9A:30:64:28:A9:EB:63:D0:8C:94:8A:9F:BC:D9:87:87:D7:40:65:65
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Certificate issuer:       /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial:       01975347115B70A4C3149F1115C3B9DDAFF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
Manifest number:          15A7
Signing time:             Mon 09 Jun 2025 06:00:55 +0000
Manifest this update:     Mon 09 Jun 2025 06:00:55 +0000
Manifest next update:     Tue 10 Jun 2025 06:00:55 +0000
Files and hashes:         1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=)
                          2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=)
                          3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=)
                          4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=)
                          5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: wWdEtHYfUZvVMeDXVLS6n23B3LP3PATkcnVB2i5xRJE=)
                          6: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=)
                          7: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=)
                          8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=)
                          9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=)
                          10: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=)
                          11: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:47:11:5b:70:a4:c3:14:9f:11:15:c3:b9:dd:af:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
        Validity
            Not Before: Jun  9 06:00:55 2025 GMT
            Not After : Jun 10 06:00:55 2025 GMT
        Subject: CN=9a306428a9eb63d08c948a9fbcd98787d7406565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:81:b9:45:62:49:d9:40:4d:18:23:e6:16:
                    d3:ff:9e:3c:7d:77:ba:3c:b3:24:b4:0f:7e:21:75:
                    cb:ef:dd:a4:e6:a1:5f:be:02:87:e9:f8:dd:1c:a6:
                    51:9d:71:bb:6f:64:84:2a:d5:5e:ab:cf:b5:22:cc:
                    d7:ce:72:74:75:1b:2a:74:7b:f7:e0:b2:10:ad:bc:
                    74:d0:ad:d4:6e:dc:45:1e:75:24:1a:19:67:66:86:
                    69:ff:af:82:82:f4:ca:b0:d4:73:3f:f5:0f:0c:f9:
                    07:80:f9:6b:16:11:0e:22:cf:df:38:bd:f4:2f:06:
                    fc:bc:33:fc:bf:5e:05:4a:ef:1c:b7:08:44:50:7b:
                    c5:c2:b6:b1:e8:ee:99:b5:d4:17:99:fc:03:64:ee:
                    91:12:5f:31:c8:b2:e6:6a:ba:0d:1f:98:da:df:ad:
                    2c:54:f5:6a:94:0c:7a:08:62:4c:e4:3c:ca:0b:ee:
                    04:39:af:72:b9:3f:d1:1d:cd:85:14:40:bd:53:c1:
                    fc:41:c9:dd:a0:57:6f:9b:e0:c2:e1:44:e4:a9:ce:
                    39:22:56:15:4a:a2:a7:86:75:3c:77:95:25:4e:b6:
                    3b:8d:04:70:12:e4:ba:34:63:dd:b5:62:b8:06:69:
                    ac:87:01:c2:ca:8f:e8:cd:99:08:45:a0:d8:c5:30:
                    7b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:30:64:28:A9:EB:63:D0:8C:94:8A:9F:BC:D9:87:87:D7:40:65:65
            X509v3 Authority Key Identifier:
                keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b1:cf:9f:39:e4:9f:0e:2b:31:24:ad:31:97:c5:05:f2:d7:
         72:b7:81:94:10:85:56:db:93:dd:68:68:fd:cd:69:2a:29:76:
         1a:2c:19:d6:24:9b:c3:81:3d:a1:77:50:00:e2:a3:e8:59:26:
         00:75:d2:45:b7:08:27:ce:f4:b9:de:75:9c:c7:88:68:7d:c6:
         64:68:9d:1c:cd:0b:21:b7:12:6f:fd:fc:d3:36:4d:fa:a0:d4:
         f5:6d:3a:c6:75:8e:4d:43:d0:fa:2a:4b:8c:04:e1:3f:69:ec:
         c6:11:01:58:1d:f7:03:69:50:17:72:20:b7:6f:eb:22:1e:9b:
         f8:83:0c:83:51:a2:d0:f1:f4:cd:67:f6:ab:0e:f1:2b:15:e3:
         bd:e7:87:82:4d:af:93:74:73:b0:b5:d0:2c:e0:b9:b5:0d:8a:
         ea:8e:c9:d4:e1:c1:52:a1:e3:85:af:c7:e3:99:22:7e:e9:fe:
         cc:05:c0:b3:32:73:c5:c3:27:b4:d7:66:58:d8:4a:20:33:84:
         4f:da:1b:3e:7d:f2:f8:a9:56:33:51:6a:d2:a7:d8:0d:90:6a:
         98:bb:76:76:7f:b8:43:ba:7e:db:e9:69:b4:44:61:39:35:56:
         2c:1c:c5:d5:82:64:17:f3:17:86:6d:0c:4d:da:98:51:8f:2b:
         50:15:72:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:35:58 2025 by rpki-client