Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          nZ4lqns49A7yQ4qoKxxMWmClRjbyw9c2wj8CxPH8HmE=
Subject key identifier:   62:46:B5:3C:9E:5B:79:BE:E8:A5:AA:49:FD:1E:39:16:14:00:52:44
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019746D486E631298FD2D98656D1B6232EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          044C
Signing time:             Fri 06 Jun 2025 20:00:22 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:22 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:22 +0000
Files and hashes:         1: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=)
                          2: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (hash: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=)
                          3: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (hash: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=)
                          4: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (hash: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=)
                          5: D4aJgyurg5sBV9aRkfmz2Wsl9lU.roa (hash: zPt9r8i/IiMY/kNPrd/XCtTmcwSRz/do1PNZccVMDv8=)
                          6: FNiNdr2A7OQKs4Lh8NIXmrr0CpY.roa (hash: lzfjAZjaBGiVtNnSHHAFnCh/6pNb/eM+js/obHoKL1U=)
                          7: Gw2mbsE_MoMLk8qNwEEX0NgcNl8.roa (hash: 1jUFBnLBvfA4uzicHOhc17W0Ci/2g8HkC2YbueNHc3Q=)
                          8: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=)
                          9: KAJR7Az03SttMk_zWkKXtcY_Zv4.roa (hash: mPYizTtCYKtuALtzDruuWZjX6sFa/cj7Bo/6GSj1GAA=)
                          10: KSgdLldEqa59Zql4-IziLX55TPU.roa (hash: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=)
                          11: RWE60Ns1mQje11llf2ihFVQVFic.roa (hash: DmwyemnAa+wXP/+CS2xNccyTOXtBd2D9MzdHPDGZd3A=)
                          12: Ro3-EUE6MEHO8Brlu5iaFdAlG5Q.roa (hash: u0Ts/8nh0LiCnzteTiJkyma0H6U2qh30HZDM8HXhaHI=)
                          13: X3NTuCf8D13AYgUPH0jE9Gc-Rrg.roa (hash: v8Rr9ZsrHuEDv3syJydpQAvo5+aMcYPzfv0BjI3dYDQ=)
                          14: XNLowwGzAtvR4imeFBhZtA9L2s4.roa (hash: DhuZ0fSKaljU6kKimZ3eZ4pDrwiGgDDhMup2nMrVkOk=)
                          15: _ts8OAlwojVR7RrxU45171xnFEQ.roa (hash: 1o7jXDgX6gwszcNb2hDK4ztSUb/3OElL3cvx3GiOQa4=)
                          16: dmEWgN6h3xFkBWjn9tW8-qNYTVM.roa (hash: xaHtGUiCewEsAabyHcWlMpWAwt2sd21SLnG70Nk49gU=)
                          17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: m53lzyXjNidNLCzGtxjZh2jXIwYFCUcAcYG/hRWJEFE=)
                          18: gke9BdDbXXpTpUVbz61tFK8Ltm8.roa (hash: Y8sMPcYCJQoktPdu1Oun8egw9U/WNPwFUrra8uvbkc0=)
                          19: grdt8mgDzKnb-AIa5iVppNSJziE.roa (hash: YgndpH0ES5lTVzS9HaDo0++Ke9eabHkve02TiNj7Qmg=)
                          20: m3kbgVGInZoxkGlQeAONX97frV4.roa (hash: 8gUwO/0n4gQZPZEJMORDD8t/sRehPTtCRHIzAdAWNug=)
                          21: toMHEB280KETNfSWfwGdAQlBHIo.roa (hash: /78AEGOua5BdiHCzMqoUcFzXGSUc4tOmrRCkCS8IUTo=)
                          22: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:86:e6:31:29:8f:d2:d9:86:56:d1:b6:23:2e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jun  6 20:00:22 2025 GMT
            Not After : Jun  7 20:00:22 2025 GMT
        Subject: CN=6246b53c9e5b79bee8a5aa49fd1e391614005244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:0c:ab:1a:fd:a8:9d:c0:bc:a6:8c:da:d2:
                    7f:8e:5f:c9:2c:e7:db:94:c4:3d:c3:ab:64:c3:03:
                    10:d9:32:e8:8f:ad:7c:42:f3:04:98:9a:1b:11:6b:
                    0c:8d:10:a0:53:40:62:63:c3:fe:fc:7f:53:17:ec:
                    32:34:de:c3:2d:6f:e2:43:75:70:de:d3:63:40:b8:
                    0c:2d:26:34:12:69:6a:0e:21:1f:0d:bc:d1:ec:7d:
                    62:e2:fa:8b:fc:2f:3c:50:3f:c3:6c:fc:64:0b:20:
                    88:c9:a0:94:82:5b:f1:51:a8:f2:6c:a8:83:42:ce:
                    0d:30:76:ee:b1:5e:21:0b:fc:83:23:c6:5e:e8:b9:
                    f2:47:a5:53:b1:62:1d:3b:4c:d8:c1:d9:6e:28:e4:
                    5f:ea:cc:a9:7d:57:33:69:d3:1e:31:b6:ba:fc:c7:
                    25:3a:4c:04:82:a0:44:37:a1:e7:eb:fc:5a:2a:60:
                    fb:76:3f:f3:24:b5:91:02:a1:11:2f:2e:a8:70:d2:
                    17:9d:82:b2:9f:c5:ad:1b:a1:ed:bc:93:e0:04:8d:
                    41:d7:19:a0:17:08:1e:be:df:7a:d0:0a:a1:98:14:
                    91:72:61:4a:50:c2:be:0e:40:3c:8c:a0:e2:0a:12:
                    e3:c0:98:34:bb:42:8d:89:f4:a1:db:bb:9a:d7:6a:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:46:B5:3C:9E:5B:79:BE:E8:A5:AA:49:FD:1E:39:16:14:00:52:44
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0d:f2:c3:d6:43:d8:8f:61:f2:f4:15:92:58:71:f6:57:9e:
         50:f7:6e:2e:c0:52:7d:e4:89:6d:74:84:f4:31:5b:20:8d:bf:
         8b:b7:47:b6:b6:09:3f:dd:31:67:91:9f:9b:eb:f3:65:69:c5:
         33:55:72:c5:2b:d1:f2:b5:a5:c5:b4:84:ab:d1:0f:4e:cd:81:
         90:96:58:9f:eb:1f:02:df:88:5c:d7:69:08:fd:d6:c5:36:4a:
         9a:fb:25:84:33:88:f4:e2:83:b3:a8:3e:60:95:95:c5:c8:dd:
         ec:7e:c0:de:c0:2b:2c:94:b3:e2:01:bd:4c:75:e2:66:bc:07:
         18:fd:fd:4a:7e:1a:56:3a:6e:8b:0e:3f:f2:dc:3a:e4:a2:6b:
         af:e9:5e:bd:96:64:e7:13:90:fa:a8:1f:26:26:ac:33:81:fc:
         f8:ed:1d:d8:d7:6c:5d:d8:7b:b5:39:16:6a:5a:c4:a6:14:4d:
         ab:72:72:21:0d:03:d3:4a:fe:2b:62:56:a0:cd:7e:03:09:5a:
         69:cc:92:a0:9d:6a:c8:e7:8b:c4:2a:b5:88:70:92:66:97:b4:
         0c:66:aa:fa:00:76:a9:35:95:5d:ff:34:bf:c2:92:bc:b1:ec:
         3f:30:89:63:58:f3:4d:40:b2:e3:27:5f:b6:04:93:87:c7:9d:
         18:b5:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:51 2025 by rpki-client