Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
File:                     Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft (raw, json)
Hash identifier:          58QwK65djjZ5BZkI77E29Q94e8WuGZIM8qMTRsaOS9I=
Subject key identifier:   F3:0A:63:6A:C7:8D:9C:91:86:30:2C:73:C3:30:3E:7A:3E:DB:E3:F7
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Certificate issuer:       /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial:       01976E19540990915F58106A67F2C2792CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
Manifest number:          0402
Signing time:             Sat 14 Jun 2025 11:00:43 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:43 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:43 +0000
Files and hashes:         1: 48LNmY8hFlc6h6XBwv-1lHo_wLI.roa (hash: AjQp32iGlB+1GsI+lJrVk1grrv63+W6EBzEdzr6CEC4=)
                          2: 5y1ushKBRUTrOJNUvJiYmUnqiXI.roa (hash: Ci2ppd440+9qMZk/kpg4OojmAw8zTwyC7q8Nf/pbCIw=)
                          3: 9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa (hash: fYuTOl+DQOrzI8q7otm9pbe4I7lAFHKgzfWFOB4BuJE=)
                          4: A0eQ6cpAYYEfE3-FwbvX2N7Vq24.roa (hash: lggmut1+AIhHUFw/pa+hugHmAOGvNZ/jcOZNrQeZgUk=)
                          5: CLpkAB9SkASnLi0bcVjlvibT8q0.roa (hash: h9ZbpSD1UKLYDhyFqL5vdv53fTWYJR5sayvIQP/wamo=)
                          6: DzCB0qJ88DMDsi3Qaw_sb9T4AbM.roa (hash: p48aM9J6UtUtpZTM/841RmdWu2zT9B6GH0dk1pfPpo4=)
                          7: DzbWdDNCGIO77N-Ogi-q-ujsrrc.roa (hash: JXy3wpgCmIL1KJ6V2fbPe71TEfjeAQIbVCR92SplqIo=)
                          8: EdGVjEh6znEiY0xnI6tnnsDmccQ.roa (hash: y+5pZPNAYlJ/z27zBdh0E8geOyw/SZCW+6NOeA97S5U=)
                          9: KC1VRLfkRjJaTRJkoqJn0hRlI84.roa (hash: tQWG0ggjDXD3kpeWao/i+euRv960YKPeRVxpWQ6SB8g=)
                          10: Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa (hash: FO79Zf3B72qIbj4WPSUFNr5+RJyVJutt77kTaj0j5mo=)
                          11: Ukci9Bg7j4Bn7kCrXEDt1C9dNSA.roa (hash: H+c80Rb+WwbpGiMbg43g9GvHTmvViqW1xacKDSZEpQI=)
                          12: Uz4A4t6Kq8A6iwrTP0NbckGeErM.roa (hash: QTVqmpZONM6esupsMvufy9vRDscEqFkzSQftaVkJdcs=)
                          13: VN-x3if2JfSigyOSHLCs6UizS4M.roa (hash: mr97YYgeFYA7EPEZZwoik/VjswtT3aAYQjI6+eLZYiU=)
                          14: VWObvOSvF1AXNIIRn3xBmcVBaCA.roa (hash: k2TM3+amiq1VQwMqtDCgTlWYgVGq94+g2GBovKDeCf0=)
                          15: WGYEguUavpCm1up5aoWx17M7VF8.roa (hash: 7LrFDAvn49AXPONunh9HIMSmPEiDJLlOh62u/CVqUuI=)
                          16: ZFOXIg0OEPtnBjfbywrEG5iZOIo.roa (hash: Ryy+wPPRhz6QBXpj3jwSi5cqGdl/f+SrE3JOHaH2kp0=)
                          17: Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl (hash: UkDJ61s5Pj+3NQh4YIHbIfCYC/n3L2tPOLkoazaxOz4=)
                          18: Zh-8f0tKdwJJmTErbAZbBlAu2-k.roa (hash: Krjl31rGf1mkJQ9LvksqzyPEEMfTl0Ol/mUhHx32Z6c=)
                          19: aBAcpt-NbSIhhNI8k3la6pjGmxY.roa (hash: 0ilv4mAJqQfbxZ/Y/Pq8eng8iKkBka04TcFPP4OoCjs=)
                          20: ajJXa8aIvHOlVBnzgPL8HsXSKPc.roa (hash: 2OyoDakgfS4OIoQoPgsoG8SlZKCjA3/3esWcjB+/eQ0=)
                          21: bSQ2KJkghyGNH1xM4L0qwKLgqKc.roa (hash: ferYAqATun5kAev+OYfREU8H5PWvsH+O2JxdN9vsL3s=)
                          22: d6jjIfZpoU5dviCc8eI-CowvAk0.roa (hash: +Apm0894AkkpHXh4slVvz3Yax14eHhFmKvTjWItkY6I=)
                          23: g7tURuUH3V3-cIb4_m5S3L6NgF0.roa (hash: BdP19LBcCTIkuafGLyFvqTdagspaIFMT4g3LWhFA5BM=)
                          24: gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa (hash: z6+iBWzj4bvqP41UlSpacoaDGuJaxTNbgxZSqBGtsI4=)
                          25: ga0KLDUpKphpd5uhD-u7xvCdgo8.roa (hash: iNvTkN67twKCRuI+xwjBz8piFCF9xnDfvAKVgLU20KI=)
                          26: hIsb24dWsZ8VsBWOEEjl3fdkCsE.roa (hash: A4XAyp6Fewl0t4Uxa5BTFhXjIGGvivyuEJQWo21WUn8=)
                          27: jJAMNmAh3_heXLx-3lZjlbb0rT4.roa (hash: +kN7wYZliIZDgA9ImlLry1J0Pp3xcHDSqBUjZROOAlE=)
                          28: jrev2CCg204y6thtVMgx8NoOHvc.roa (hash: XInUBJm/rNM3kh1KQHkzlYycOkqI3p4/VV8cWm6nGSY=)
                          29: lN-t97gLRpuQiIuZBao3sqyhivU.roa (hash: +mDT0U1tA2WAtk/Z2ZEI8eZRiQJYovhUI82zz7zEdzc=)
                          30: mKJqEI739B0iTvnzxCUb3biwris.roa (hash: sVTE7upEY8n0C5ZmEcrRs0tBB0vSxTNtRhmRlRax7Jo=)
                          31: o9UTDerj5SkBNPSC_40DCs_7wyc.roa (hash: 7gqSvQN7VD6wF2cIvKTOi/nKnwSyMGxTZqKG6dEtTe0=)
                          32: pCE1baMGsmwCYXSEoEEcUwBkH8o.roa (hash: GsYlVdD3sX0x5By8y8crNFzjEYXJ2ZK0i/TeckVJ2AY=)
                          33: tQlk1mJ3Q57dUylH0cWwEXNsNO4.roa (hash: 88L8h3QT3LZj5nAWKf1psRrxbrTm+VcpE0c7xWTV8YA=)
                          34: uwJjJYOZ_7DUuDF8wU2KZg0dlOo.roa (hash: cA4rHQb9J7DcEiVd1KVksPey2LgBKIyPGl4x9ht8hg0=)
                          35: wjjnppJ7-HKX51cklBGQrtzsilQ.roa (hash: 8AAaNfNvMGxOsnnO/hlvM1Sj4iPPxzZv5pf/HzW9AIM=)
                          36: xtacYUrWT0gTPxdT4fe0TiG1Tsc.roa (hash: yMQPsqMg7sD3m/fFaAS+z0fJHNjAt10OD8IjX7c29Jo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:54:09:90:91:5f:58:10:6a:67:f2:c2:79:2c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
        Validity
            Not Before: Jun 14 11:00:43 2025 GMT
            Not After : Jun 15 11:00:43 2025 GMT
        Subject: CN=f30a636ac78d9c9186302c73c3303e7a3edbe3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:c3:c5:73:25:12:a2:d3:71:09:f0:1f:cd:
                    ad:da:db:98:91:38:41:70:56:f1:5d:36:f2:36:6a:
                    13:39:51:08:37:2e:d0:0f:a9:64:86:3a:70:b9:83:
                    11:3b:f6:3b:5c:99:f7:0e:9e:56:08:50:aa:04:8a:
                    5f:ac:58:00:c7:6f:8c:12:93:f1:13:5c:a5:3b:e3:
                    9d:bf:88:ce:cc:65:d5:2d:b0:e9:72:03:b8:ba:d4:
                    07:b3:69:a8:76:86:9c:72:70:b5:5f:0c:6d:e6:df:
                    ab:0a:11:e9:49:4a:8d:6e:d7:d2:ae:34:2a:e5:7c:
                    28:36:f6:23:e3:2b:2d:a4:cd:87:20:3f:39:16:60:
                    13:17:ce:87:e2:1f:38:36:30:e5:f8:67:f8:ca:e6:
                    a8:b8:bb:8b:77:b8:38:ac:a6:d0:20:df:52:58:26:
                    c0:11:63:ff:90:8a:18:ff:3e:c0:7a:cf:1e:7f:3f:
                    c2:92:20:3f:29:80:c1:df:7f:84:5b:b3:b6:07:82:
                    2f:a3:8c:c4:f0:e0:0e:7b:74:57:6b:67:f1:0d:d9:
                    07:eb:a1:35:6b:f7:22:ec:45:70:3e:60:29:f8:b4:
                    44:8f:d1:51:18:0b:2c:19:a6:c4:e2:b8:d7:6a:97:
                    07:97:19:be:4a:a9:29:80:23:95:95:c7:7d:94:f7:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0A:63:6A:C7:8D:9C:91:86:30:2C:73:C3:30:3E:7A:3E:DB:E3:F7
            X509v3 Authority Key Identifier:
                keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:94:35:94:c6:87:2f:92:15:c1:c5:53:22:b3:3c:7f:24:
         4b:bc:18:de:5b:30:f1:db:9b:4f:5d:44:47:72:01:31:f4:26:
         a2:db:26:00:45:05:59:aa:73:09:25:99:f6:b2:70:db:e8:b0:
         70:88:60:db:4d:66:61:a9:64:61:46:cc:da:4b:bc:dd:14:ce:
         14:6b:b9:24:df:67:43:d8:d4:4b:a9:03:13:46:7e:a5:91:2e:
         0a:ad:d7:1e:f2:8d:81:f2:70:0a:fc:39:5f:e7:02:f1:17:a1:
         65:99:e8:61:d5:b2:3a:42:06:a9:32:29:66:18:27:f2:da:da:
         1a:db:4d:b3:5d:5e:4a:25:03:95:d6:50:d2:59:9c:81:29:98:
         3b:4f:ed:8a:81:88:99:eb:d3:35:3a:b0:f9:7b:28:b3:b7:f8:
         6b:6a:ef:52:1c:a3:d8:f4:c1:25:9e:bb:e2:ee:52:6d:4a:25:
         ae:4e:49:b2:af:8a:bb:9f:eb:4b:43:b3:8c:e7:12:34:06:66:
         ea:37:6a:be:58:c9:2a:44:d3:db:c1:94:26:a6:d2:b8:e1:da:
         02:6f:3b:23:db:d9:9d:2b:1f:2e:74:79:b5:4a:22:f1:4a:4d:
         e3:9e:37:83:5d:ce:ab:92:a9:87:b7:02:ed:9c:99:be:94:94:
         7e:c5:b2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:37:26 2025 by rpki-client