Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
File:                     6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft (raw, json)
Hash identifier:          xqQ3COeyN2zizJ3/dfDks6uqHbpQdI7dqk5mXcrbVcE=
Subject key identifier:   EB:24:77:91:B5:A2:0E:EB:3E:79:D7:C5:F8:22:DE:92:F9:70:68:EA
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       0197499F1503FA92FB2A2F7C05C12762927F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
Manifest number:          159E
Signing time:             Sat 07 Jun 2025 09:00:51 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:51 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:51 +0000
Files and hashes:         1: 1vircYxh5-jeyCHncAB4LncMdwU.roa (hash: p5BRJtl/BpjLcefHJhkLBY5nuWy4Hh3HAdTW/vwAKSU=)
                          2: 6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl (hash: 0Rha9qkYWFrVvNGCIfA8CIBv24XcAYcPUJLASC4QGOc=)
                          3: 95YGR7GHxoOFHcl2kzYmYoOeSkc.roa (hash: UCf659KnzXrGdW4OTnX0fxXlcLNH7iiMM2EMLxA+qlA=)
                          4: EAh3dWPr289o6WyhzUOp_EpUTdg.roa (hash: S3TcKfhPfL287wmxiB3jCkaKknNXhPzw/nzUaFFvi28=)
                          5: EjAka0Nzr4G9YVcHBXCc9BAnD0U.roa (hash: eLHkqv4PZmiqUU7M/MK8SYk9FgiJ3rm/mR9wo1lZiuw=)
                          6: EpGUqveN8_iwqXtX3loQqZpefjQ.roa (hash: BK7p4b3/2gbXuD0eD7vqsFTJ+r23upun/RghpY97TiM=)
                          7: KHEz-UIy1itbvqjSN-exHkznw7M.roa (hash: mV8K8D3yuT/lnpk/k3Efi2aUQNdC5dfkApy2KMYktWo=)
                          8: NSnb3tUKAteQgCjg27tPwCtQsow.roa (hash: T1WF6yYvKdtCTApOo5YD7M1OyQOqRaWtXv4eJm96bms=)
                          9: OBs7tOHp2Wjn-4vQjiF3T1Tvdqo.roa (hash: fvlWOqKo6QA1tHDJxdBzRG65QuYwKPujIF/1V8LwtVw=)
                          10: PW-XBbZvdPD9m9eDPj0lHnb6ghY.roa (hash: N1LlPU0OyiEGm15myNdRDTryn/I5VsBGbIp8D8OMHY4=)
                          11: Q5uzwVr3JsqqF1VB2l7NbdL9dS8.roa (hash: gbm+jaDyZ+Up1EHj0sRexII0FFC9U6LrEEr0NdJ6pH0=)
                          12: R_eRE9Hzu0-n3Dhr3fxYVMZlZQA.roa (hash: c/3zxG6m5VgITlAWiDb9QKSgSjQqMCcCy/y2n6uMJws=)
                          13: SF8jPiMK97qA0wUKsSxJ6ujLOVw.roa (hash: o3uOJgGR58qSt76schRzqD9o0OrOy1y9nmZyqIHaek0=)
                          14: UMdq-Zir5QLhODQ2SocqfK_DdqI.roa (hash: 9KYFi2M0+hDmsmu4CibF8Ie9dS9iTV4W/JOWD9YR8Zw=)
                          15: XNivPuYpwzsyBWSVK0UP_mTGSTM.roa (hash: b8FsxpaUdfRYc57L8BwR77E37GuFMW2GwS9TNBfbgIo=)
                          16: XatCcqLdyXV4mDDXl-bQhtm4cRc.roa (hash: /XWqpMBXURF/ynpvKs9v1yAxYQyLrEGEwYt1l5eri0Y=)
                          17: YLX2PpJC2jdo1UiXusO_3hzsXug.roa (hash: 8rbASZsr6aOYYISGy+IELA0dmKcsLlWy4ooK50nSGCM=)
                          18: _0Fsi7ExnvxZvUlBuBySlQdmmfg.roa (hash: jXEhTPkNTKh8qr7YJI+rU0aZtl6egvKgkBd6i4d7S/E=)
                          19: aZqrjg1nptDw4BL6wn0FWmNJwvo.roa (hash: 6z4ObLCuZw7zfOx69ROq9FyPUpV9T3VmKmi0WDHpUOc=)
                          20: btDg54MeJbXTPEtxucWKVoxBNaM.roa (hash: H3nemfeenmHgaltlyzaYjSQZrnYMiZ/c/aLfawo+I4k=)
                          21: d4YbeMmWmyXeBM8u68uKWF25nwo.roa (hash: qtZE6RS5BgKCqE6kopMvxaMLNpxuumjautrXypOIQx8=)
                          22: fIseoNpXyoIbe5wY0lSbaSP_4ic.roa (hash: mEMZgq2Ul7pASwqN+Q04bUDJ1OmP5qgM6LAFHmZqdn4=)
                          23: p9dINsaBxRj5ZfheZSHkUAbJr64.roa (hash: jntmT3waIC3WBZyzqGqLNCzc/4GI7KD2z6eLdZU4TJY=)
                          24: pGvZFqdJfVwAhNj34rEhjtwcqqs.roa (hash: xskFCPdKZw/j4SJCIetQoQZeZl6kQRAE9JdBqHbYOdY=)
                          25: pbTTnCLOLIjCLVBstBODbiFmGmw.roa (hash: 8YkIamAbQU3NMaTjWNl+EcrwO/p3qlC0IxQhIIQUrsg=)
                          26: z6yT1q0T7LBqZpy9PTiWdAbhrhU.roa (hash: n5dOrWVGmQ/SZ7Maa9/Hdiv5+rDt72g8LPCctbA9zS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:15:03:fa:92:fb:2a:2f:7c:05:c1:27:62:92:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jun  7 09:00:51 2025 GMT
            Not After : Jun  8 09:00:51 2025 GMT
        Subject: CN=eb247791b5a20eeb3e79d7c5f822de92f97068ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9f:92:ef:e4:c9:2e:9a:11:d5:16:fa:88:14:
                    04:ce:50:e9:99:95:3b:bc:ad:8f:a1:3c:da:76:fa:
                    37:64:40:f4:f1:f1:72:62:78:5e:21:fb:70:fb:66:
                    16:6c:dd:25:c2:f1:58:86:38:d6:e9:20:d5:67:06:
                    f4:53:ab:c3:3e:58:ac:61:78:7e:74:e8:b0:29:07:
                    f5:62:b9:92:67:a9:25:f5:ad:29:01:ca:eb:e9:eb:
                    79:c3:c0:86:7b:0e:a6:de:e4:35:ae:71:3d:14:2e:
                    7b:44:05:28:ca:d3:92:a0:e8:c2:68:70:af:81:37:
                    ea:f8:34:a8:57:38:40:cd:36:ef:fe:6b:e4:35:8c:
                    4c:ce:f5:fd:56:0f:a8:78:d9:7b:66:9d:7b:b3:ed:
                    f0:de:71:96:8e:ad:67:d7:4f:61:5a:47:5b:50:c7:
                    a2:50:4d:dc:61:49:6b:3d:51:ba:7d:3c:c3:6b:cd:
                    db:83:ed:f2:2c:b4:3e:92:fc:b9:e8:df:48:c2:76:
                    7e:be:ac:c1:ae:a4:d4:c1:7e:6e:b8:08:85:f0:22:
                    fa:17:48:93:2c:9e:c1:2d:e6:99:6a:43:6f:f7:fa:
                    36:b8:54:82:91:08:46:a2:a3:47:d6:44:75:5a:bb:
                    49:f3:0c:ed:a6:13:c9:0f:9a:cf:e1:cf:ff:fa:b2:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:24:77:91:B5:A2:0E:EB:3E:79:D7:C5:F8:22:DE:92:F9:70:68:EA
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:cc:c2:8f:ea:e2:b5:b5:64:4a:68:2a:92:d8:4e:f9:ed:a4:
         d0:22:d3:44:04:9c:96:6c:aa:81:a7:16:58:c3:c7:c8:77:5d:
         86:96:26:42:73:bb:99:b2:d6:b3:2f:bc:84:90:60:41:09:03:
         8e:56:6f:43:5d:c2:6e:81:90:55:0b:f5:87:bd:18:f6:cd:3f:
         19:c7:ff:db:eb:b4:a2:c4:da:bd:15:82:66:f3:31:1f:b8:fd:
         75:c4:cc:f3:e8:e7:9e:fd:dc:58:72:e6:c9:64:61:a3:5f:ce:
         aa:da:d0:15:1f:75:05:b2:fe:52:80:3f:6c:eb:e7:d2:41:e3:
         d7:8f:54:4f:1d:5f:a6:c0:7d:5b:2b:4c:14:2f:b9:24:9a:a2:
         0d:a5:96:a9:54:63:04:b3:9e:83:04:27:5e:3d:e6:36:1c:ea:
         e0:20:9b:d5:d3:27:39:d3:71:13:6f:63:7b:48:ca:f6:c1:81:
         5f:de:82:6a:18:eb:56:f3:8d:c2:37:5c:d1:88:80:bb:79:ad:
         ae:97:09:a2:ab:e7:21:15:0f:6e:af:00:ae:e3:d4:4f:5c:51:
         61:f6:af:09:b3:9c:2b:8a:5c:b6:07:1c:fd:f0:11:10:2c:65:
         61:16:e3:fa:b3:c0:3e:97:d3:02:62:4d:07:0d:13:7e:9f:0f:
         76:f3:0c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:02 2025 by rpki-client