Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File:                     _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier:          vhpQHYlBDaYs0pKnVluURAp6xd7K2byN7NqquAJpzjM=
Subject key identifier:   CE:65:F3:3E:10:5F:D6:7C:8B:B1:FD:31:0B:6E:83:25:96:37:8B:CC
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer:       /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial:       01974C31CC7BC112BD809231283703B2CDA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number:          15C2
Signing time:             Sat 07 Jun 2025 21:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:21 +0000
Files and hashes:         1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=)
                          2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=)
                          3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=)
                          4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=)
                          5: 8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa (hash: v8PEoTepb8SY5IPZDmMyByiGGEsM8VZnFBHuEpMHhf8=)
                          6: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=)
                          7: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=)
                          8: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=)
                          9: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=)
                          10: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=)
                          11: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=)
                          12: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=)
                          13: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=)
                          14: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=)
                          15: W0gNgYoCeAM0Ni7qpJAj1L463QQ.roa (hash: wScHN6zoxEUq0bDpBObSAweoykHAk6cbjieXwziC6O0=)
                          16: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=)
                          17: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=)
                          18: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: 6aaCTZ5CfqHuVtvUMESkZWcyNjnHw/qcQFMI0WCLFNg=)
                          19: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=)
                          20: bloAk3yeA7RnUogV_JT9EWIP-hM.roa (hash: 2fE3VucaSZiB1/IjzEIuOiCkE2iec+1KGKY3worRZJI=)
                          21: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=)
                          22: iUM8bJHwQ48CpEg1dQgbuZoF2F8.roa (hash: FAU/hqJaw9dZlVsB9TPc90NTrKoL6yNGJeYIXg92yTQ=)
                          23: j6-qDXAeAc1h16OGqpAwCo3rr5g.roa (hash: iazcRp7YD1vNWLtyqBU0DjHCkZMl7ouWgzgptjACUWE=)
                          24: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=)
                          25: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=)
                          26: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=)
                          27: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=)
                          28: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:cc:7b:c1:12:bd:80:92:31:28:37:03:b2:cd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
        Validity
            Not Before: Jun  7 21:00:21 2025 GMT
            Not After : Jun  8 21:00:21 2025 GMT
        Subject: CN=ce65f33e105fd67c8bb1fd310b6e832596378bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:fa:d8:39:ad:53:39:9b:af:ff:88:ed:6b:
                    b7:53:02:83:84:eb:52:ea:04:07:06:1b:c5:f5:21:
                    5c:44:91:9b:a4:52:60:fa:a0:71:75:f9:6b:9b:8a:
                    36:91:14:48:a6:4a:a8:db:70:27:55:e1:9a:58:30:
                    69:48:42:7a:19:c7:88:83:9f:db:e0:72:81:24:33:
                    ef:b4:90:d6:c9:42:47:96:d4:38:24:e4:a3:98:01:
                    31:f9:e5:4c:5e:26:03:23:96:41:01:76:73:af:13:
                    5b:e8:8e:ec:7c:ab:60:b9:79:f7:ea:32:9c:1c:a0:
                    c9:c5:21:1f:50:30:11:67:50:df:80:78:f7:16:cd:
                    0f:dc:ed:5a:46:f0:3c:3e:28:cc:0b:a3:3d:90:8f:
                    30:9a:cc:cf:95:e4:8e:43:84:35:e9:02:a8:06:b8:
                    7e:c4:6c:6f:8c:5e:f3:84:d8:2a:8c:32:34:2a:f5:
                    43:1c:53:0f:10:14:26:6a:f3:d6:68:c1:56:8c:17:
                    77:e4:15:a0:c4:a1:63:3f:e6:3b:bd:0e:0b:36:e2:
                    f2:91:9d:77:f8:d1:6a:34:5b:e3:49:53:ea:97:6d:
                    a8:c3:33:40:e1:79:b7:34:49:90:18:1c:1b:62:17:
                    70:8a:d6:fb:c9:67:91:05:61:67:39:2d:d8:a0:9b:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:65:F3:3E:10:5F:D6:7C:8B:B1:FD:31:0B:6E:83:25:96:37:8B:CC
            X509v3 Authority Key Identifier:
                keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:0d:fb:75:d3:23:e7:98:eb:e3:15:d6:f4:14:37:f5:84:
         3a:b3:d1:eb:cf:60:6f:f8:3d:04:10:40:6f:c9:f2:92:14:14:
         30:b4:e3:33:3b:3f:4f:d5:30:90:bb:4d:68:a6:15:fc:6f:30:
         dc:be:48:e4:1f:dc:8d:6a:0e:77:1b:be:ed:a6:95:b1:53:1c:
         d9:c9:bf:e1:81:26:bf:96:fc:3f:41:69:9e:cb:46:84:5c:ea:
         80:14:ba:b5:13:54:10:02:76:b4:09:a5:99:0f:87:8e:62:aa:
         25:8a:d4:50:0b:93:63:b5:67:30:8b:1a:a6:0e:2e:8f:71:84:
         fc:07:51:0f:07:a6:9f:0a:92:35:64:58:dc:16:fc:0c:27:ef:
         fd:ce:ee:07:61:ba:0f:cd:69:62:f9:7d:a0:43:16:9a:6e:76:
         ea:cf:d0:f4:a2:b7:bf:e9:8a:ab:22:08:50:be:dd:47:6c:ff:
         dc:8a:f5:e7:a8:7d:54:7e:f2:67:dd:0d:40:0d:0a:bd:3e:fa:
         2b:36:03:c6:4c:88:17:e0:4f:cc:f9:b9:f6:b6:e8:d5:71:a4:
         7a:49:ed:d7:27:d7:9c:22:b8:09:1e:13:c5:ed:aa:1d:d1:c5:
         99:74:52:f1:d2:34:d8:34:a6:26:04:b9:5e:03:28:4e:b0:f9:
         6a:3e:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:25:50 2025 by rpki-client