Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          QHK1G/RmLneeP/4tPfdS2Pew29JdZNqQuEQDw2LrYJU=
Subject key identifier:   74:6D:33:75:40:5A:F0:8A:C5:27:11:79:58:1C:B1:66:6C:53:4B:2C
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       01976D745B2E12FF384709FBB73E65BE0ACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          135F
Signing time:             Sat 14 Jun 2025 08:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:31 +0000
Files and hashes:         1: 3E9M_L1qni0gOm9o4JNThdl5mKU.roa (hash: 3QEnMAssy1tNKh1FvcPETtJzWZzXiuRM6bkNkokD5XE=)
                          2: 4k_ZuHYqDe_Het9axD5evRht3Lw.roa (hash: psQ9n7MA7JcZWMk3LmtdaKPiVMz8GYjL9qmt7ww6xH8=)
                          3: 7-WiWodRJs8Bs1mQK3Uza98WY7E.roa (hash: 85XLbymQWYall2AaXilmgAPdm2j1Q/Dv2TPBM+pEJdw=)
                          4: AT1NLNUZ8X0xD6RcwZMdLdIz2ZM.roa (hash: fjnVFsPrVhpcbyIspcCLA5dZQu2SV1yINQliobo6yxc=)
                          5: FHCB6DuGL-bnBGM2X1yDzSnX9Zk.roa (hash: r6GDh9X+ylCTDxl9vj4S1UTcrV/ImccaaTi1D8Mi2xk=)
                          6: FqbcQiC4rQi46n3g99F_M1_Ys0A.roa (hash: OyV3G2Aag4lQbsbY7+qaGlD0xVR3rH5K5z5yPW9zjfE=)
                          7: G4i5HzFemLXdLvBS_7Q429NG6_c.roa (hash: PhE5GD2aKWrEPp5p1ohcxf7+DsUWcfKZIUIvlvVO+6k=)
                          8: GUuYC7cVlHvArBzfO7tfpAP5D60.roa (hash: MBqPwcxZe15O5TCcnQP4rabYZ863Bmk75b+fN9uibnE=)
                          9: IqfYIzlv9tSOLjBO29wjSPGgm9k.roa (hash: Ruia2gPByc9AoUath3+WUWMFKonyFU90I/aPuiikJtc=)
                          10: JugFLe6jENz0xFJw2G6fMpeVf-I.roa (hash: LY3Ikb4Kwnv22unGatoglkrWDxveEyc5iDX1fxnI/Kc=)
                          11: KSdWPEt9fB_iBluYNf4K7txBQrE.roa (hash: YJ0c3CPnKgl+QFgMB6tD+ii2GX7vwrvuc49Rrz/E7uI=)
                          12: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: JylZ71sLaXSFuE5OZtvynMgePIaddRf9BSIyhlPITfw=)
                          13: M8bMB2QKSM425kLjRVO2Mv1OLJ0.roa (hash: p7RpCCMMldWNLmjHFuK8nMdCoRWEH97iMYohSON6X1g=)
                          14: Mf9Ftgoq8hNaUlnWSE1OgssDPng.roa (hash: 2OpCIxzpIQdhVjJD4azKWQqbRjrwZgvvuIiGX67bBpw=)
                          15: NcWtmNHRiYuhKShMZ2FiNOKfbAw.roa (hash: 6KR850hMO0L6chqV9/ieA2lf65V6cwC4jHYlXOitS7g=)
                          16: Q8PmaVsu91FafNMJSiUguBXDAy4.roa (hash: v/8qlXzfsrMPaxgUO4OHSG4SXigE1NDzd1YZIaC3Tfs=)
                          17: RPKuIuiwLUOTopNmIn4BOJGs7i0.roa (hash: lIg6TqObzFxbqNZ5fchVzBYqOiLD6H6xqfkDU6vs6XY=)
                          18: bYVRCpfiYfuNTOtItmg2qSgXKww.roa (hash: A5c3DgIJi3QdlQD3NgkB4e1o2u7d4JwrE4GhSjzqcqA=)
                          19: dsuGlLVHMB7I47kgKa74SXE1REc.roa (hash: 7Qj6mOC4uog0qj785J6KkN+zNyCNyHyzGiCvkAMiApI=)
                          20: emo1Q5S85kXcQiS_AOQnJpCv1Ks.roa (hash: nGThIK5KWgFiHgBYn4d6q1DvellcLqYIA1fpLkP2lwY=)
                          21: hGqZ-FRlI55t4voAlR-n3NqPej0.roa (hash: B71Rb7BaHyLXQqMJQJiZSZS0lT82TbCVQONz7Ndp5cM=)
                          22: pniJJNnWhCfy3Bn0AhMHiTWAr6k.roa (hash: uHFIjcBGn6an09Ws8UMUg78JE8uxR/arjS4krwd5r7c=)
                          23: qwqQv0_kWPrf2uUBMKT2TvBK3mI.roa (hash: ThX6Wi8fnBNMU2VW9z+5scRKlGLAdJdy5Sm4VgDw7kY=)
                          24: t7kFFxrGX7b_8JY79xsh7QWePnI.roa (hash: 3NaS6l21qtRZhafFxfFpDNUW1OP8TUGIeUDERM2ms5M=)
                          25: voV1pHSGjiHjmQ5rvvOxR7Je57c.roa (hash: vGBPYlDzvYjcVIBYHyOvwD8dXv9By2X73KVyoLfQW34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:5b:2e:12:ff:38:47:09:fb:b7:3e:65:be:0a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Jun 14 08:00:31 2025 GMT
            Not After : Jun 15 08:00:31 2025 GMT
        Subject: CN=746d3375405af08ac5271179581cb1666c534b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:0b:68:e7:9c:89:77:70:f9:50:99:c3:82:
                    ac:8b:8a:8d:5e:f9:3e:18:9b:99:e1:ea:ca:7c:27:
                    e2:a2:e2:59:88:65:02:ce:10:17:7b:61:50:0c:ab:
                    8a:3e:56:47:d1:17:58:80:e2:d1:41:f8:00:56:b8:
                    b9:00:d7:30:22:e4:67:6c:aa:67:63:49:d7:67:9c:
                    c7:58:3c:ef:c9:44:91:54:82:56:a2:d3:e1:f6:1c:
                    0a:58:53:53:78:d5:f7:c4:3b:ef:a9:0f:8e:cf:15:
                    d7:8d:f4:a3:80:ac:a5:5d:cf:6c:ae:3c:8e:74:3f:
                    60:c4:36:e7:76:c3:cb:a7:81:cc:b8:2a:36:d5:52:
                    07:07:46:06:c3:cb:1b:f5:fe:81:57:6b:99:60:ca:
                    34:74:d2:01:04:dc:fd:a0:96:91:0d:16:d1:9a:fa:
                    18:af:26:e1:e7:fa:a1:04:ff:57:b6:36:7d:38:63:
                    ae:86:40:a6:c9:45:ae:a0:7d:8b:a9:bc:da:2a:2f:
                    69:50:14:4f:bf:b8:ac:a7:b3:01:0b:a9:d9:d6:1b:
                    4c:73:44:b5:09:d3:aa:87:b4:e3:14:ee:c4:53:d1:
                    35:35:88:42:e8:a3:ec:c7:f7:46:d4:45:d0:13:e7:
                    4a:56:9e:ee:66:ec:aa:cf:5e:1b:68:14:0d:be:24:
                    75:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6D:33:75:40:5A:F0:8A:C5:27:11:79:58:1C:B1:66:6C:53:4B:2C
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:89:4b:5d:51:52:57:d8:5d:d0:ef:34:70:20:e4:39:21:2d:
         19:6d:16:49:e4:69:e9:4a:3c:05:ab:f8:56:da:dc:8b:26:18:
         e5:54:36:f1:21:cc:9b:72:02:e7:d9:38:e4:6f:53:a1:b3:70:
         ff:73:6e:e5:82:e0:f5:61:28:43:08:3f:3c:47:bf:87:86:d9:
         82:13:38:32:51:b7:79:07:9e:41:98:b9:66:84:ea:23:01:af:
         8f:b8:0c:69:79:04:b6:7c:d9:c0:ce:00:ad:e6:4a:cd:a0:e4:
         ec:85:86:15:75:c3:a9:8e:88:d5:98:6e:4e:63:06:07:6d:96:
         6b:4f:dc:03:4a:0f:41:3d:ba:b2:7b:73:df:c8:91:ba:59:47:
         62:09:b0:e8:6c:ec:42:da:81:a9:a9:8f:da:2a:35:fe:16:b2:
         d3:28:99:45:7d:fa:9d:3f:92:aa:2f:8d:78:cb:fe:95:c1:84:
         f5:68:7b:cc:f1:74:cd:bf:c2:ca:cd:41:b6:9b:72:c0:ed:9b:
         a2:27:ba:5f:d1:dc:a7:8e:4d:2b:05:02:88:64:5c:63:66:5f:
         6e:31:78:bd:9e:57:f7:96:96:ff:3d:02:ac:0f:db:ff:97:55:
         c4:ab:9a:62:e5:f9:60:9a:fa:fd:3d:c8:0a:0a:86:e4:2f:0d:
         5f:d1:ee:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:36:30 2025 by rpki-client