Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File:                     crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier:          DvZlrAFmQlhnODNyd3yVrXaq8mrZlx9btNrkYyTBlpw=
Subject key identifier:   00:AC:D2:8B:27:51:C6:A3:B2:68:0E:DB:31:02:17:F4:C1:D4:6C:87
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer:       /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial:       01973AD0EA37254C885BC6079B771AC55BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number:          1615
Signing time:             Wed 04 Jun 2025 12:00:59 +0000
Manifest this update:     Wed 04 Jun 2025 12:00:59 +0000
Manifest next update:     Thu 05 Jun 2025 12:00:59 +0000
Files and hashes:         1: 0OZkbbyiMfqEfV6yyCrB9dZN96k.roa (hash: yh5A+U+9EnV2n5u+gDax0tr2hQqxxV1tomwYV6gGiGM=)
                          2: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=)
                          3: 7J5qgHesr8wWK2TtMcGOHR0g-CM.roa (hash: m+yeQoMNlQS5YjZnJ89DZy7/qcwwyYmIihQriZ/SkzI=)
                          4: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=)
                          5: BL8I68n0S5EatljR0k4XZsKHA24.roa (hash: iOoLcUwIbkzuVCDzFIpNedtLQogspd3V7HdfhJiPZWg=)
                          6: BxtsjwaylqDgyShxS785H67TnbY.roa (hash: tVOA9jGSji8cVYr6ivVtJAHBG6QSJ270Wt89fBmSzFA=)
                          7: DS5gBLYyptdZ9y27hbFJurp9kuI.roa (hash: zoDKZtl19sULYhyiEZp0I4zijHRFp+OWa8jMMxoXiV0=)
                          8: DskJ3QKfzbRX76wY5Y62eU4erR4.roa (hash: Om0rFiAWDXCVX1P62G7M/6mKMjWs5VmA/8EV8q++G+4=)
                          9: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=)
                          10: JgPouA_jmpHV5hDbLij9YLal33o.roa (hash: 7YwHFYuVdRf9mWnshpfvLYgyOJrwWP6qz4/AQwJWL+Y=)
                          11: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=)
                          12: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=)
                          13: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=)
                          14: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=)
                          15: Q7A84Re88TEGuWZsIYTnNdLRtqQ.roa (hash: 62XanU5j/TVPu9hICaR497zqHzXQbEaOUBFnOheHiVs=)
                          16: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=)
                          17: Vb_RpJ-2VDeLhxtyu1EnKEq8cTI.roa (hash: H3HLjc2fYtCp8h81NRRKqe5UGP2PQxcS5tkL3rkueM8=)
                          18: XQSdpYywXniH-4RrFE8ADb_IkFg.roa (hash: p9OQSem/8VfhwT/7ja70OsbXAHFO0qdQ0IRvRySU44M=)
                          19: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=)
                          20: ch0MG1Pf_PwDPyZwFVxvjBk8eXE.roa (hash: v4I5l9w0eZIAMijusASzIenyF5WUP0NZIKYlKivPmyQ=)
                          21: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: eGWSaH8f/mqkRXpkfP3gxlpLmTRntx4DZFtmt3NyAp4=)
                          22: f9zO6CoqO3IdDJ2sCc8aCS7MLYo.roa (hash: 0lS/IGd/1FNWeyp8qTQLTXLYoqsEWJxdvhxxV1xrQj4=)
                          23: fFDNE0jBCsbuSwHbNND790VHIUs.roa (hash: b2he0HY8iZ5ebk1T/0G0aRJSFCMcs4PxhlyzHEE/x2Q=)
                          24: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=)
                          25: mJ-PnuZffkBvMXhplb_lo8QtEyc.roa (hash: cnmwpchuXHms2rojiNGzRDXyf/+oMqIEDUIf1Odq2us=)
                          26: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=)
                          27: tVVPJt8BYRtl2dfGI34tW-1ncpU.roa (hash: eJCGFadx+OvG3OgK6PxfcX9iXCcThEI+1VCJ4h+/DrY=)
                          28: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=)
                          29: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=)
                          30: zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa (hash: OeT1n7LBHt2BLA6NJKyqqdEda9ZFBBnrzNwADjp7exA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 12:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3a:d0:ea:37:25:4c:88:5b:c6:07:9b:77:1a:c5:5b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
        Validity
            Not Before: Jun  4 12:00:59 2025 GMT
            Not After : Jun  5 12:00:59 2025 GMT
        Subject: CN=00acd28b2751c6a3b2680edb310217f4c1d46c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:06:91:5d:2a:1c:0a:95:e4:9b:6c:7c:dd:
                    95:4a:c7:b4:a7:34:76:f0:a5:97:30:71:f0:ae:9f:
                    a6:90:ed:e0:b4:e6:9c:0a:fd:2f:10:b3:78:f1:d1:
                    30:1b:af:0d:01:26:2d:82:df:6b:07:6d:89:f5:41:
                    6e:7b:3c:e9:65:e1:ae:d3:a1:5e:f3:d1:3e:4f:7c:
                    e6:74:c8:ac:64:04:b4:c5:b2:7f:91:a1:8c:c5:0a:
                    ed:25:04:b2:58:d7:2e:5a:80:b8:fa:f1:e6:a4:dd:
                    29:0f:de:21:4f:d1:6a:3b:a3:d5:ed:94:11:f2:1b:
                    65:98:98:4b:91:e6:40:34:b0:3a:f9:6e:9d:b9:af:
                    6f:46:3d:fd:cd:90:38:b9:34:87:d7:59:6a:51:3b:
                    e6:3e:be:ab:df:2f:c6:c5:c7:4d:db:06:36:f0:06:
                    fe:df:b5:61:d4:b4:a0:fa:94:e3:26:c9:0a:17:35:
                    0c:7e:f8:73:92:fe:f4:cc:9f:54:97:09:c1:a0:4c:
                    c6:ee:df:64:a9:22:f1:8b:20:c1:43:16:b2:02:dd:
                    a2:d4:f1:6f:e2:38:9b:07:d3:b3:77:22:fa:ff:0b:
                    b6:dc:26:1c:09:c1:45:88:6f:27:27:fc:34:07:80:
                    df:6f:e4:b0:0f:d4:b7:ea:86:3e:c0:e3:10:bd:38:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AC:D2:8B:27:51:C6:A3:B2:68:0E:DB:31:02:17:F4:C1:D4:6C:87
            X509v3 Authority Key Identifier:
                keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:2a:49:43:c6:cd:84:5d:5e:92:8d:17:5e:3b:a3:c2:13:
         44:74:13:05:fb:0b:ce:83:63:48:ef:0a:cb:f0:71:17:6a:a1:
         1f:5c:e3:37:4d:10:b3:d7:f6:bc:b9:7f:a9:ea:6b:e8:67:93:
         fb:d8:9f:00:28:cd:2c:38:96:01:e4:81:8a:89:0c:22:30:54:
         b3:07:6a:cb:7b:88:0f:38:b0:0a:86:f0:c9:90:a8:14:22:ab:
         9f:1d:d0:4f:5d:58:98:95:6c:34:66:7b:12:22:6b:ca:f2:7c:
         3e:bb:da:39:dd:5b:1b:40:61:11:2e:be:60:c5:44:96:54:c2:
         20:88:fb:07:4c:1b:25:58:9a:80:23:e1:62:30:a9:40:95:ca:
         5b:c3:6e:1a:cb:0e:b4:cc:ff:93:be:73:db:bc:c4:2f:b1:b8:
         b6:52:91:b0:22:f9:ec:4f:44:54:2b:a9:f1:14:3d:98:8d:d5:
         51:68:93:d1:9b:5b:2c:de:4a:49:ba:94:f1:d5:30:38:33:c9:
         81:e7:22:5b:8d:81:19:a0:b2:ef:d3:25:39:17:0b:2a:2e:09:
         8f:bf:2f:36:70:e3:e4:57:27:f8:dc:62:4f:e9:0b:53:1f:6c:
         8e:11:15:b8:b5:3f:44:1e:c4:e6:91:a0:d6:2a:50:02:0d:25:
         9a:ea:af:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 22:48:11 2025 by rpki-client