Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
File:                     ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json)
Hash identifier:          NDkvr9dQ/aM8NNN1OBwjS2Zo0EzOA/5fh3oqEjeB7eI=
Subject key identifier:   00:06:5B:E9:DC:FB:DC:2A:C8:60:2D:8F:79:83:15:E9:28:15:17:24
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Certificate issuer:       /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial:       01975CEE9A8A2CC9D9677561554399CF49F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
Manifest number:          15AC
Signing time:             Wed 11 Jun 2025 03:00:30 +0000
Manifest this update:     Wed 11 Jun 2025 03:00:30 +0000
Manifest next update:     Thu 12 Jun 2025 03:00:30 +0000
Files and hashes:         1: 3Xkfgsy5F0IowNcy1PedAB3Q6w0.roa (hash: iyJL5cuUJjZvE75tBtKfcWvyK2dmPiVKM7BX3wZGQos=)
                          2: 4EDvDSCIPe0YYvYx7Str0IpAPeM.roa (hash: A9xeZgyOfSqqIMRvaPEIhp5b1RhtdrlitB+v147UkT4=)
                          3: 5pue0s9j8lhdVuO6m6E92d4GwDU.roa (hash: CSkd5pFYexGISl0uc2qVJpocMMmmGw3Zguf0ypv5Owk=)
                          4: M5hYRJhvdGCKvhvMAGC4jWTJSXA.roa (hash: VGkxa4pTyEqZCbbcRS6HnlUuOo2QmctHYBT+vvYYBDg=)
                          5: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: lUrT21okIBr4boPMMLmGkrXH7Qba2ErvPzG+cnpU2cc=)
                          6: UfCPGY0KJE6274iAqACixLj9Gmw.roa (hash: DEe7CtPUt0XEDknWoFEE8OaasnbG+ag0I4mAzR/inaE=)
                          7: WBerlCoyvzWnSx7AM9uVxy9XUro.roa (hash: FyOYZU8Lcu6m3tCIEh8spxjddiJiAmITHkAJjSq/GW0=)
                          8: hWosbOoApl7V_Bhpe5UlA20sERA.roa (hash: PkJmNJ/LtXuQwtW6f6gFggLl9YMZJgAspupTTJw2DD0=)
                          9: m-oD5AGGiKc-qI8F9BHOsqfUhwQ.roa (hash: ZivLa2r1rkIhgA7nnzvSrie3rkSLQvNS6UhWQpi2o50=)
                          10: r4CnQQx_zbdBDGpIsGGdqEuowRg.roa (hash: Cf3KdUglzAXq3AND0kUcTnVm0D52NG4w3f87gIFdSQg=)
                          11: uot90FkBP8Y3Y-x6-7brjjoB-rU.roa (hash: 0JXXSAl/uFfrD7KxeCsCoDWgeiNKlIuga4IDFWQXH2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:ee:9a:8a:2c:c9:d9:67:75:61:55:43:99:cf:49:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
        Validity
            Not Before: Jun 11 03:00:30 2025 GMT
            Not After : Jun 12 03:00:30 2025 GMT
        Subject: CN=00065be9dcfbdc2ac8602d8f798315e928151724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:bd:fa:1c:ef:b5:14:a1:93:3c:51:69:15:
                    57:96:e2:c8:ce:39:21:41:ef:0b:73:6f:b4:58:10:
                    12:4a:02:19:70:f6:a8:23:e6:6d:8c:ab:af:12:b6:
                    16:c9:ab:70:b4:c9:54:ea:1b:07:b6:ed:12:28:0a:
                    bf:31:eb:aa:80:46:37:15:d1:98:4d:ce:1c:b6:d2:
                    e5:d1:de:f7:14:06:bb:9f:6a:03:f7:77:7e:e1:a1:
                    e6:c3:c0:76:cd:07:e6:17:44:15:83:fa:3c:17:29:
                    e9:f9:85:aa:ff:ff:bc:b2:82:00:7b:dc:b1:d8:8a:
                    8e:ea:33:d9:c3:b9:5e:2c:62:f9:62:4a:55:ab:1b:
                    2f:b2:18:5c:df:a3:f0:eb:a1:cb:3a:fb:a4:20:aa:
                    a8:8c:56:63:04:fc:da:3e:be:90:cb:ba:c1:35:0b:
                    36:86:8a:18:fe:8c:cb:e6:14:13:38:b0:13:7a:a2:
                    94:d8:20:8a:f9:10:51:13:44:d7:1f:82:4f:7a:1a:
                    8d:a0:79:b3:86:96:16:57:9c:98:23:b4:50:64:90:
                    42:64:e5:0a:67:71:70:57:ff:56:a6:08:46:7b:ae:
                    73:6d:b3:30:85:fc:af:dd:a7:37:a6:3c:f2:10:86:
                    64:76:61:0e:7e:c5:83:6a:fc:b4:74:7f:77:ae:87:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:06:5B:E9:DC:FB:DC:2A:C8:60:2D:8F:79:83:15:E9:28:15:17:24
            X509v3 Authority Key Identifier:
                keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c6:90:72:92:49:59:c6:94:e5:28:54:9d:32:b3:81:cc:67:
         70:a8:54:35:3e:cd:f1:c9:de:51:17:a8:89:78:b0:13:70:47:
         ed:a3:2c:49:26:bd:bf:fc:89:46:90:49:c0:c4:15:29:81:1c:
         a2:82:31:87:3f:f8:ba:6f:eb:31:3d:ad:0c:ff:14:e3:33:5d:
         15:e4:8e:1c:c8:8c:6a:a7:a5:05:25:90:54:6a:0d:6e:ef:01:
         0e:1a:33:8a:29:94:6f:86:23:b6:d0:b3:55:40:c2:ad:e9:e6:
         19:d5:c0:a5:32:27:85:e8:5f:88:44:7f:7f:83:a4:76:90:f8:
         5d:c6:0c:aa:df:df:a4:8f:a7:7c:b3:92:85:62:8f:73:2a:34:
         7a:10:03:c4:1b:7a:96:51:84:9e:8e:08:80:8c:7c:05:e8:9d:
         e6:e4:85:f0:87:3e:b6:e0:fe:a0:09:12:f5:5a:d9:a9:e7:f5:
         f1:cc:6e:e0:3b:9f:d9:de:bd:19:bd:7d:46:83:25:60:2c:48:
         af:c3:08:54:00:5c:5a:45:a8:5f:b8:4f:a2:d9:03:e3:17:59:
         3d:99:f1:2b:52:f1:cc:4e:db:5c:6e:15:dc:40:0d:f1:a5:ac:
         e9:39:df:50:a5:e9:a2:28:91:c4:64:fe:98:ed:5e:e8:a0:2e:
         23:82:89:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:05:34 2025 by rpki-client