Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
File:                     1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json)
Hash identifier:          x3Ot8qorwoLZTzawKigORypR7pd4lp+sbznjuB7OiQo=
Subject key identifier:   08:6B:E4:E1:2B:E8:28:04:16:A2:F0:5A:B7:16:99:51:FB:9A:E9:50
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       0197469EDB56BBFBE1199E9B2819C90AE62D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
Manifest number:          1584
Signing time:             Fri 06 Jun 2025 19:01:45 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:45 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:45 +0000
Files and hashes:         1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=)
                          2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=)
                          3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=)
                          4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: AWlbKaTyvxp2nfT7UqD3e9APV54/GAdB5YrZHMnsgso=)
                          5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=)
                          6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=)
                          7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=)
                          8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=)
                          9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=)
                          10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=)
                          11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=)
                          12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=)
                          13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=)
                          14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=)
                          15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=)
                          16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=)
                          17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=)
                          18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=)
                          19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=)
                          20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=)
                          21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=)
                          22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:db:56:bb:fb:e1:19:9e:9b:28:19:c9:0a:e6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Jun  6 19:01:45 2025 GMT
            Not After : Jun  7 19:01:45 2025 GMT
        Subject: CN=086be4e12be8280416a2f05ab7169951fb9ae950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:47:81:61:d5:67:84:53:bb:63:d6:b3:2d:1e:
                    98:75:03:c3:cf:b3:46:bb:88:57:b8:e4:38:d7:6a:
                    8b:31:4c:9f:04:5d:d0:ea:72:3c:57:a1:41:62:52:
                    bd:ee:17:d0:06:33:14:d7:30:5c:14:2b:04:66:6b:
                    40:2a:56:40:cc:41:3a:56:8c:d0:3a:18:52:29:ae:
                    ff:00:b3:4c:ea:b4:4d:c3:53:02:7a:7d:5f:22:0c:
                    37:7a:5e:84:47:f4:85:a1:a7:1c:96:96:d8:20:c4:
                    df:13:dc:12:67:57:13:1b:31:8e:39:19:9f:c3:09:
                    d0:c7:4c:4e:b4:63:7f:e7:9b:df:e4:1d:45:d3:30:
                    04:41:9b:db:ab:b6:e6:e7:61:88:af:03:a4:c3:c0:
                    75:27:8f:bf:ee:8a:b0:d3:e5:8e:b2:f3:76:83:93:
                    da:44:5a:24:e2:8d:c7:1a:f8:61:fa:88:ee:f1:8f:
                    11:59:25:27:db:ea:f7:cd:35:5f:f7:d3:67:f7:15:
                    c5:bb:a0:78:38:ba:cf:b7:e8:cf:f3:22:14:ea:ab:
                    11:cc:7b:16:9f:61:23:7f:ab:9e:5e:9f:be:e8:29:
                    3b:c1:48:4f:d0:28:67:a3:21:6a:4e:1c:23:0f:e6:
                    06:02:57:f2:35:d1:1c:2f:58:ab:c3:0c:ff:f9:fa:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6B:E4:E1:2B:E8:28:04:16:A2:F0:5A:B7:16:99:51:FB:9A:E9:50
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1c:37:2a:23:1d:ca:92:a6:6c:a4:2b:b4:9f:d2:ce:8d:4e:
         3c:ff:3c:37:50:29:16:bf:54:be:26:bb:d9:65:d7:df:08:76:
         11:3d:a3:3d:d8:45:78:06:10:59:f4:96:89:e2:af:f9:c6:26:
         54:4c:e6:e8:30:0d:b6:89:a5:03:ab:a6:a1:34:2d:48:9a:45:
         31:69:09:f6:7c:7b:98:69:40:34:56:b5:a3:03:9e:aa:46:66:
         96:60:4e:ab:eb:08:48:42:d2:d9:71:65:93:d2:20:b6:cf:78:
         73:6b:6f:36:20:cb:0b:59:bc:12:6f:49:7e:c6:ce:dc:b7:2f:
         98:b5:98:24:31:a4:87:34:13:28:80:6f:84:b0:4c:79:6f:67:
         f3:f2:8e:27:3f:0a:52:b5:24:ac:8e:22:71:48:9f:61:46:3f:
         77:4b:e5:b7:f5:81:8a:25:0f:a5:75:9e:d3:4a:60:06:51:9b:
         8e:64:ab:ef:e5:48:92:fb:83:be:ee:d2:cb:09:6e:a9:df:d7:
         18:84:92:b0:71:3b:ee:e7:d1:05:9d:eb:7e:16:b0:1e:52:fe:
         c3:36:f9:94:b3:a8:ea:d0:c3:06:49:b8:2b:58:07:60:ba:98:
         18:06:dc:d3:eb:01:da:77:32:d7:9c:03:7a:cd:a5:da:fd:f4:
         bc:ad:7c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:53:09 2025 by rpki-client