Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          CpBtp6hPwVaGbxTzlZKF5AR46DZUaTvHkewAOv1izIo=
Subject key identifier:   A5:B6:2A:C6:91:DC:2F:04:94:9B:BE:2F:03:C5:E4:A1:6D:6F:6E:50
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       0197470C1C31B6449570538526570BC3EF77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          15CF
Signing time:             Fri 06 Jun 2025 21:01:05 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:05 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:05 +0000
Files and hashes:         1: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: DA1o9O1nZrF7vbNLHefEA2TSuR0m4AWcjo3oNf39RH8=)
                          2: 3bnDZUsDXnEjZmLC2l6TNlR44q0.roa (hash: wvyAIrwBTPizl931rTr7kAFeltcDxlBFhYT3hCElsC8=)
                          3: 7Cj5773Ww2G0LSY1fnydQfxQCM8.roa (hash: aUx5ljL2u1JfwzPAWHUuxa8lyiqbBKjx2VkYnyoKl00=)
                          4: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (hash: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=)
                          5: 9Du2tHlplI8cqKMhQkDQrma7ABw.roa (hash: tHZwo/QnwGrZt6X37EyHYtZuWfqyTSrPiMBPcRX5QtA=)
                          6: Asu0DH_A5v7HQJH6cJ--acq6gs4.roa (hash: p83oT8k8StFZXPPk4WZFA6xLSJnWFONbnXX8tMyuY+E=)
                          7: B-3vVlBbE_2nNum3VwpvQ-tvGj4.roa (hash: jUAezFqXGcBFjU8lgqdjFgv5sDkENba3l+sV0XsNaxE=)
                          8: BPwP4_eaRC-ExEMmsEHbE_XcDyk.roa (hash: PuWly/aliHEqwaBp5Lw/IykpWGderMcstp3zqAZSzaU=)
                          9: HkpMpgcE2miG9qn79yi3XbK_pOE.roa (hash: 0Rr449PN12HQpu7nIek/UBDMZP0dQl1SRcWWzh64TnM=)
                          10: Loa4kWXHd_gyVar7KKfuCbOTQSI.roa (hash: V+IAftZbMV1uaMDIpq8IX4vqfn+FazLdtHW0Gi6raiE=)
                          11: OiUKYkPvCpqnOXZ9zOVHLonU2AY.roa (hash: Lhbego4QvDRSaxc+Seq5OHB8z3WLSv1waMp2zJgiuoA=)
                          12: PwHMe4i6pz51Ahrp1W-49Rgc_vo.roa (hash: DVJmDnhZvnviJ4n66jT0o+c4DIjAzAehQrpeXl6SGUU=)
                          13: R0cDHc3n2qmMEAUS6woEeV4DrUw.roa (hash: QJ/g2HXWAm89HNayhA1QKb5SEB9BRX6t6S4vbuLEEGQ=)
                          14: WfonxlLMZwy-HhCvndkmDlWeP1U.roa (hash: D2to2wlUfQBqZmE9EvBIj/W3y3+jGxVEf6JIb4l/qG8=)
                          15: dIkGudwt-RR6RWXajZoxz1vlHzU.roa (hash: OKPlohfOihRtk51p5gTQk9DKoBwl84PalakI/wclgFg=)
                          16: fQowbtBwRpKjCzhE3ojDTNtTyaM.roa (hash: 5hmuOcmFlB2Eh4C339cOr4B957mNZCHeN0L/cBjITLk=)
                          17: gL8L6RZ2XqjaOf7a7aVACmgbZKI.roa (hash: kLhGxAypt99j/jO34VpwpOJzvqgyVsGY/56bargYYM8=)
                          18: lGSh8HAGsvLzJWijuCn5mOFbAtA.roa (hash: g6Sdp9SO3zguPzUUGeNhkKmFB7oPgHI90W+QRmIj6bo=)
                          19: q5t8pCbXocy8z93aEyQcoKIUr7k.roa (hash: SLK2Vlk0BOq5d8DR4zM41FXSCnTp47baUcSuvvAqgGA=)
                          20: rcXBNttkCN9ucz-CG4BKu0x_DaA.roa (hash: SJByGTVzrBD24wq+7U6n5Slzx+PsYlVup4M9/akSlBs=)
                          21: vx0LBPGo6U2A4w4ADzD_udSk_bE.roa (hash: 1BQsFPNT0rTtzolZzu4KuR7RQiaLrcqqi5uIXl00aQQ=)
                          22: w1-75ZX9HBx8AUrVwUOKynI5k3I.roa (hash: hPTOiyA3+YJ83FFkcYpaKb35ER44DCXiwk4q5wNRhf8=)
                          23: wapfnXLlA7DvDqRs4g9z4YLu3L0.roa (hash: Hxhpn18vB/H4YZziS5GXimeo8mFzlErLcl0bPjfu1Vc=)
                          24: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (hash: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:1c:31:b6:44:95:70:53:85:26:57:0b:c3:ef:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Jun  6 21:01:05 2025 GMT
            Not After : Jun  7 21:01:05 2025 GMT
        Subject: CN=a5b62ac691dc2f04949bbe2f03c5e4a16d6f6e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:a1:c1:16:7f:70:52:14:0a:e3:93:f6:4b:
                    51:d0:f8:03:dc:a3:fe:2f:46:1b:1f:ae:01:13:62:
                    b0:a8:49:b4:1c:9e:bc:fa:0e:79:13:c3:85:f9:21:
                    f4:2c:29:83:50:93:75:7c:6c:35:d0:a0:41:9c:ae:
                    15:ab:71:63:23:77:ce:3d:72:53:e4:51:1f:11:96:
                    aa:e5:bb:e5:b4:c9:d7:ba:d2:35:eb:fb:2b:9a:be:
                    4b:e3:58:61:79:60:b0:67:0d:10:9a:55:2d:81:f7:
                    10:a1:47:5e:95:60:1f:6b:a7:a5:98:0f:60:31:f6:
                    cf:d7:9d:6d:82:52:15:44:dd:e5:72:b1:ef:10:cd:
                    cc:e2:69:cb:b1:78:22:b5:67:44:b0:1e:33:d4:8d:
                    7e:38:7f:d6:98:58:31:77:71:b7:83:d8:4d:34:59:
                    96:3d:6e:c4:7b:74:46:6a:b1:83:2e:9a:27:48:4a:
                    73:41:40:99:59:15:ea:76:7f:c7:cb:5b:f2:12:f0:
                    2f:5e:9d:de:be:17:11:06:6b:31:84:7b:2a:9e:69:
                    e2:9d:ff:74:4d:de:6b:c2:ff:81:50:75:b6:0b:4e:
                    73:93:0c:49:77:db:f1:71:ee:52:ac:b1:a0:54:f7:
                    fe:ab:16:cb:e1:c5:c0:41:fe:b9:f6:28:79:27:94:
                    cd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B6:2A:C6:91:DC:2F:04:94:9B:BE:2F:03:C5:E4:A1:6D:6F:6E:50
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:de:1d:9c:14:8a:1c:1e:c6:4b:f0:dd:a4:58:3c:d7:cc:01:
         25:da:d5:18:e7:35:4c:50:93:9c:d3:dc:5d:25:f6:cc:0c:cf:
         db:ac:e3:eb:f4:cc:e6:c4:8d:ff:97:42:19:63:96:28:a5:42:
         82:fc:03:c3:bf:63:15:1e:35:e4:f0:7a:78:de:0e:33:5a:48:
         3f:c8:eb:76:d3:ed:f6:1c:fc:40:8b:a7:e7:67:0e:b3:b7:ec:
         24:1a:1f:23:89:63:36:de:ce:17:d4:e6:43:b0:50:5a:66:6a:
         37:98:e7:d8:34:d1:7b:fa:67:7d:69:03:75:ab:4d:8d:8c:67:
         20:ad:46:34:52:7e:bd:58:db:7b:94:53:cb:f5:ac:f7:1b:2a:
         da:f8:69:b0:80:dc:84:d7:6c:47:d9:2b:4b:72:b3:bb:a1:3a:
         99:7e:1d:c3:4c:7a:3f:00:11:52:fc:43:b0:21:0c:5b:76:4b:
         0e:d3:ff:6d:80:ce:9f:7d:4f:f1:75:39:57:28:1c:77:1c:91:
         14:00:21:02:e0:e6:92:23:bc:19:ba:0d:13:0e:89:2b:e7:78:
         98:26:51:62:bb:02:6a:b9:09:22:e2:87:ac:e8:be:e8:18:e7:
         83:9c:4c:b0:88:60:20:b0:2e:ee:70:da:94:2d:8d:d1:30:13:
         88:7e:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:49 2025 by rpki-client