Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
File:                     6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json)
Hash identifier:          tHBHoYJLqSCiIy7l6P/oT5VMbUwzUqyLPh9hmAWNkkw=
Subject key identifier:   68:A1:0B:C0:54:A7:A6:EB:3E:D8:6F:7D:51:54:67:C4:9B:BF:E1:A3
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Certificate issuer:       /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial:       0196748BA53FD9D5A2CBDD7EE603A530D92E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
Manifest number:          1525
Signing time:             Sun 27 Apr 2025 00:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 00:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 00:00:30 +0000
Files and hashes:         1: 0zBI85AWMPV8-ZPv3GQ1JdHs6Mg.roa (hash: a8ZOlpawdj+woIZuCvEmwdR4gKs6qg0nNvaIeVFf0+o=)
                          2: 2CQTLj6fuGjOR9JqoMEFFGGMUVs.roa (hash: yLn6kJw+CqbZW1dUkXz+GBQNhC9c3L10tkD4MEgQTUE=)
                          3: 3UXfxzBUjpd2dvq5bafsNogmKlM.roa (hash: bA7f58jlZlzveYNtUmlKVRtEpQ5Dv4hyfzeaC10VHb8=)
                          4: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: F1oSqEckXDT57gNwa6VfPIt9K0WRHJHcWJH84c7werg=)
                          5: 8ibxOb8BwHmuPqKPmrFWhpd2pk4.roa (hash: umQ/9CNn6Js/eenCZk/Xl2NFKYyEEBiHrADkOmEjW94=)
                          6: AQNsOCUz19Ut0W2SGuiyLeTI2FM.roa (hash: Jv1vanIsUJEv2fbabmogBnj/mQ6LDnoYHz1QpK/aP2I=)
                          7: LzX9ElOnhGp_nPRgTmHqftx_RQw.roa (hash: WQnCNTmDNCYbVxX/RpMfdPSYlE7UFVrF2G8SgVlhVgg=)
                          8: NBTd6QujxD8vAm2y0tIory9u3RA.roa (hash: rM5YyydF6/qNks6DTzpTX8oZeL5PVUffE7pPyESdmdc=)
                          9: NKJIp8rLjTzUHtc_q7lIxFwpZOQ.roa (hash: njHyZER619olyoCLyEsYxiQZ9O5R4Bwt0OUnGB7OSF8=)
                          10: XRdx4-cIrvk-JOF2uvY-KKlqKBg.roa (hash: BYuJQzP7XF7y4zE0IMqDWIkw1HAyxFsUKQS4bmdvnys=)
                          11: k45M8B18zZq30kOscm_b2rNT_ps.roa (hash: IhynRM67pfZo8vAgxdL8T+Jmt4rzWlErc8AX7Hnu46c=)
                          12: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (hash: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=)
                          13: mxkIV_Neo21FW6vGUNgK8GUqr0c.roa (hash: xTxbqlyb8zL223PmZKQqMD79EKE/LVN8cFepCSvVq/s=)
                          14: rEwdtSFulCnCTL77TKt0RBsUn6E.roa (hash: VPfndTEDwAp0qhkIRKhD44IChBdT1Sb9UFTa2MCZt1k=)
                          15: riyVfj9WFlBDKl-Qj0DtS9wD2I4.roa (hash: xkrhRcr1V0HCNzi2kFeVes+0hk2/Q9wIVrWF5EQxFxg=)
                          16: rmIDVlAjnT_mAqmz4uAYcRi_oOg.roa (hash: CRdPsY1AifRgb2WD2TVMbcBGWygLvjbfoRTaCemUtQ0=)
                          17: vfTvVQLzVDSt2LoN2TQJu6sHHkY.roa (hash: yF0HorR81LSF/NhH8Gd9GDZfF8ulu3VIOHSR4xRaNIQ=)
                          18: xAuy4WKwAiWwyWz_74f0hDIYmYU.roa (hash: cySMwsU48nXQT4v9lmbqhzw+DBOqWz9D22FydLNc6Sk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8b:a5:3f:d9:d5:a2:cb:dd:7e:e6:03:a5:30:d9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
        Validity
            Not Before: Apr 27 00:00:30 2025 GMT
            Not After : Apr 28 00:00:30 2025 GMT
        Subject: CN=68a10bc054a7a6eb3ed86f7d515467c49bbfe1a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:63:19:b7:9b:73:e7:17:d2:a6:e3:a4:c8:
                    4d:56:ff:b9:f6:b4:c8:26:d0:aa:fb:0f:b7:f5:8e:
                    8a:d6:81:2d:9e:34:e0:51:a9:0f:a2:6d:41:e1:2e:
                    cc:7d:07:60:53:7c:63:a7:ad:f0:7f:24:89:d4:b3:
                    4e:6d:b4:52:9f:7d:ac:36:3c:64:ac:3d:7a:fc:b9:
                    14:0c:ba:45:8a:79:6a:ad:26:f6:1b:ab:c3:89:22:
                    47:27:cd:6d:9f:d4:39:af:4b:16:76:6a:e9:79:59:
                    de:a8:f7:c2:86:47:36:60:d4:cc:2b:9c:a4:0b:9d:
                    d9:9c:7b:b7:75:ab:8d:92:14:c1:d6:74:ad:e5:28:
                    e3:aa:73:e6:f8:1a:a4:a5:cf:6a:8b:2c:82:a5:af:
                    9a:f7:16:d0:df:00:09:07:d0:90:43:fa:7a:fa:ac:
                    80:54:52:50:57:f7:a3:2d:94:1e:07:9e:e4:b0:43:
                    40:bc:a1:b8:0c:3a:79:39:3f:3c:a5:ca:da:58:e7:
                    ab:b1:6d:3b:ba:2c:67:4b:75:6a:1f:07:2f:25:36:
                    28:fb:ec:9f:e5:ab:5a:8e:22:e0:3d:c4:60:40:e4:
                    ee:4d:6f:dc:a7:75:f3:df:c8:f0:24:9e:a9:90:4f:
                    6b:6c:54:79:a2:41:f5:d2:3b:ee:c0:5b:42:ac:4c:
                    92:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A1:0B:C0:54:A7:A6:EB:3E:D8:6F:7D:51:54:67:C4:9B:BF:E1:A3
            X509v3 Authority Key Identifier:
                keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:f4:51:97:61:75:76:4e:67:54:47:30:9a:07:0f:b5:dd:
         eb:c5:d7:72:4e:9e:05:e6:f3:d3:1b:61:c5:ab:00:f5:8c:ea:
         bf:d7:27:47:5d:53:e2:63:0d:4c:ee:b6:a0:ce:9a:35:d4:0c:
         fe:76:23:0a:cc:d0:61:7e:6e:c3:88:71:ed:82:04:00:0b:d6:
         19:29:c4:57:84:13:88:6a:da:6f:a3:c3:b0:14:90:aa:a9:ff:
         20:65:91:7a:55:de:23:89:0a:9e:ff:ad:32:b5:14:ba:41:0e:
         f6:d3:80:d0:b6:bd:f1:86:32:3f:f5:69:6c:32:30:17:4c:ab:
         fc:f2:0b:a7:16:df:4f:1e:0d:2d:d8:95:d9:d4:04:b3:86:02:
         35:2c:03:2d:08:fe:62:8c:ff:26:4b:66:01:c2:c3:cb:86:00:
         73:82:16:77:e5:5f:3b:b2:5c:23:06:b1:b7:17:a5:89:2a:46:
         a2:0a:9e:36:87:ec:25:9e:ab:e1:62:2d:ff:60:43:0d:db:3b:
         18:83:ef:fd:7e:fc:54:d0:e1:8a:f1:0a:7b:b0:ba:09:41:68:
         0d:5a:5a:75:a1:c4:1e:a1:df:b4:b9:8f:5f:15:2d:28:46:fd:
         fa:44:a9:11:7a:0d:e6:be:64:48:af:88:87:5f:5a:6d:32:f2:
         ce:cd:86:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:32 2025 by rpki-client