Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
File:                     51TDR9aNFUk95xu5YvClZ-E01gM.mft (raw, json)
Hash identifier:          HLnTMmTxK2l9MnaLfKyaImkHsOuKIIUOSE9SePZ+FWo=
Subject key identifier:   64:71:A6:31:44:36:30:90:D0:40:7D:94:2C:EE:22:D1:97:6D:7A:C7
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Certificate issuer:       /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial:       01973B081C2ABB07C20E4BB1C12B46B46ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
Manifest number:          1644
Signing time:             Wed 04 Jun 2025 13:01:16 +0000
Manifest this update:     Wed 04 Jun 2025 13:01:16 +0000
Manifest next update:     Thu 05 Jun 2025 13:01:16 +0000
Files and hashes:         1: 0L2cXT0P06ikhCVT8kI7dchS4xM.roa (hash: hHkCwUsabCtgoVjM/fwEwUjOas1rOjQ5vQlqYV58+lo=)
                          2: 0WPky6Zd69joeWh7ssfVCeJsg9M.roa (hash: iEDnQGdWpat3aX+GkENZQ3IsUpSu287fkOvqghqZiUg=)
                          3: 2MDQPyhSJp_gSAmLMI-_KxQAzu0.roa (hash: ZHB+0zD2aMWqWR/Yj0ci8/Q7aeBSyqU9p8EjbNB0Hf4=)
                          4: 51TDR9aNFUk95xu5YvClZ-E01gM.crl (hash: +Fgb5YUwohRYZgiwX9hoJkljd1F7jPqi/FoSE6PYwEo=)
                          5: 6h0O1yAbXRMAHx514Z1raIUz2LM.roa (hash: 2hDL8/NxvXJJ31YJ5rfA5m4UKlS3Gz6siiv9oGzyYUU=)
                          6: 96sb6hjyk3NHEjYaqa3e8Fg5yZM.roa (hash: uIlsPlBeNxexLegTdcx0AiQKI1s83jdXj1RJNt4KzWc=)
                          7: AvTLZHVyJowr0-OqqhLRM3DFoIk.roa (hash: P0Sw2cR89Yb1qte+pA97iPAdDCwCs2hdnEQKKM9vsKY=)
                          8: CZXbb5OSwsScDAOuWl8RO1h3T9M.roa (hash: CxxG+eOFfX7VuO2Wwr1rDvpS8THnAYtNkenelxHcWYU=)
                          9: Gy0NaBYy8n5Q_Ogjr8coA3ax8Pk.roa (hash: PbxVqTlgSV7xueQBCCHQ90CbZKS81+5O6vgcvZ503c0=)
                          10: Iahkzw7okoahDDlXTvYDXKPuL8o.roa (hash: TIjo/tdT8xrr99HTt6ZhACYVeXhWInqljeu5sq/AmuM=)
                          11: Nhl6HZFw6I8c4k4TcpZay4wgjDM.roa (hash: CwoVe5wR0diWrJQVceQbCJVJgGJjiHATIuvo8A+gs0U=)
                          12: O4QhAcKMge8fja4p-gQtd2mlUfs.roa (hash: UeqyKrVSUO9ZLmyLCx9e+DuNiKPATkV6fezZWzVqIMs=)
                          13: VE30jKUNv_zrcQD408Ibqfwpm9Y.roa (hash: XMLFUviPAAKGY2JFI48uHLyyQA2AE8EqG/DkZ6vOu9w=)
                          14: VmVTpO0drY2bgDydbkBZGf_RX9Q.roa (hash: yVjUmTgAurhk4s97bTXjGde7pCyjgIcR8Gp6XTq/UwE=)
                          15: ZissewWbHSji-mOFnMwTfTZU9BM.roa (hash: cHP+m2eaQgzr425H/zARxRePa6pkLbgYLNsqqFbr7qU=)
                          16: elz21FRqy5gHuoOdFFHjWL2b9Es.roa (hash: W2WsukI/tFamxoD8uB+FWoFR2rFAU7xa3x4SbmExrEE=)
                          17: kBLhq9Dxp7s8N_q9WFIfxijzvlk.roa (hash: nfSw00TcGWj2ANOBaGLxXRRg2HPdNnkEvG3chiJNw94=)
                          18: wC6V1E1oU0yguZlOvljYpTxiiiY.roa (hash: YVY6TlY8pr8a0x5+ZsRHjEnIdufZ1LLaPhiHLz+KNhE=)
                          19: zR1KG9QDRNox6dSdf5Sdi6Q2q_I.roa (hash: WFq2GOXNf1TCXH0TmLYZ4UY1jza704xfNc6aCDDU2oQ=)
                          20: zeoKquxn6ECNGBjKLkdWOlLE3Yg.roa (hash: TFnEaR5RWkY8Enb/44IuBggP1SRL3+mtF28VjYddbfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3b:08:1c:2a:bb:07:c2:0e:4b:b1:c1:2b:46:b4:6a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
        Validity
            Not Before: Jun  4 13:01:16 2025 GMT
            Not After : Jun  5 13:01:16 2025 GMT
        Subject: CN=6471a63144363090d0407d942cee22d1976d7ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:10:8a:ea:67:53:2c:02:95:22:26:2a:c7:19:
                    2d:d8:1b:c2:9d:6f:e8:28:5d:39:83:c2:a0:18:8d:
                    36:4b:61:3a:33:b0:9f:c4:14:a3:28:bb:5e:46:5f:
                    01:09:8e:ec:1e:32:1a:c9:7f:78:15:fb:f7:75:1d:
                    03:95:a5:b5:74:ee:d4:69:87:92:ac:1f:1e:fe:77:
                    8b:a6:08:26:9f:b7:a2:0a:a2:2f:5b:26:90:e6:64:
                    c6:5c:60:79:08:14:46:0f:88:b4:bd:1c:16:38:6a:
                    cd:cf:60:69:ce:76:b9:47:b9:26:2b:e0:35:8d:fa:
                    ee:2f:14:6d:95:02:6a:7f:ed:14:fa:51:7d:98:86:
                    19:05:bf:ac:52:f3:b4:1d:04:45:6a:9f:a6:7d:9e:
                    2c:bf:f0:90:59:a5:81:4c:b2:c1:d5:aa:c9:b5:0b:
                    b3:f2:c8:6d:9c:c9:ed:de:bf:02:95:fe:e3:40:98:
                    80:82:d9:05:88:cb:30:66:68:27:fe:66:83:6c:b2:
                    0c:fa:af:00:ab:57:0e:a4:6a:64:43:18:f9:e4:44:
                    e0:fe:07:3b:2b:ab:ac:de:d0:98:84:d4:13:7d:22:
                    97:48:f5:a9:e2:6f:f5:8c:25:8c:3e:a9:9d:22:7c:
                    bc:81:c3:32:cb:09:5b:0d:b7:1c:5c:0d:62:e3:95:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:71:A6:31:44:36:30:90:D0:40:7D:94:2C:EE:22:D1:97:6D:7A:C7
            X509v3 Authority Key Identifier:
                keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ad:d0:5a:37:da:6c:39:e3:7e:9e:8e:fa:7d:a4:dd:12:10:
         36:be:5a:76:88:86:ce:f1:2b:8a:89:44:63:73:13:62:cf:76:
         29:f4:d0:32:cb:b0:56:97:11:79:8c:68:0d:9d:f1:9e:af:3d:
         b3:6a:52:6f:74:bd:33:a5:dc:b5:0c:7d:ef:71:07:f6:22:2f:
         61:ce:a7:ec:0d:b2:18:cc:a5:b4:c4:71:95:9d:8b:21:40:76:
         bc:25:66:8c:0d:de:ad:96:b8:f9:fc:1f:3d:bd:6e:23:7d:d1:
         10:27:85:90:48:a2:da:22:0f:04:e9:63:e5:53:22:b0:25:2b:
         f7:d4:e8:16:1e:79:a6:85:5d:e1:62:54:05:ea:05:7e:1b:ea:
         df:7c:0b:3c:1a:84:23:b1:05:b1:7a:80:88:cc:13:e8:18:81:
         91:08:bb:0f:28:54:1b:75:0e:89:67:a5:0c:68:26:a2:94:a2:
         ea:97:6d:63:a4:99:7b:de:3a:c7:d1:44:c3:fb:ce:ef:6d:9b:
         ac:fe:84:8d:58:d6:87:f6:2a:23:a9:6e:d0:4b:45:9a:95:53:
         63:a0:7c:48:4e:8f:0d:2b:a1:44:51:66:c4:47:20:46:fc:4e:
         0e:86:6f:e6:95:7b:56:5c:53:ae:89:fe:27:dc:d5:52:80:09:
         25:3b:fe:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:16:04 2025 by rpki-client