Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          IQdFk2+WtuXeLxyFap+cv7GEu8TJd1K9DrBb+uD05qg=
Subject key identifier:   23:28:07:F6:EF:26:AC:D6:26:23:9E:4A:3E:90:38:48:C8:12:0F:01
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       019768BBFB81CD50B65EC8DF493D22CFB447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          09C4
Signing time:             Fri 13 Jun 2025 10:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:39 +0000
Files and hashes:         1: 1wvnbg6Q8117K_nteTTte4S7nxg.roa (hash: ENgyyDmLjUOckKDAZj9H4d3tNAHS1prBGM7EEwWm16I=)
                          2: 9OFfmIiOTHzI8AKL2K6kJ7nb17M.roa (hash: Xv3UwiZDLnCoNcJK6yL4jK5x2OhDSbCPqqehYPRB424=)
                          3: CSlnKyiIvPsOYLgnAe6CSM5ZAfQ.roa (hash: ISITsHZjmPxvc/MPY47Wu9xllgRRtuPX5xEX6qhzCKw=)
                          4: EEEX0e66KOWTKOERpFoaxtXp3uI.roa (hash: JFPlKxMz0/Nj8vpjBsVBD96v5DpLlvYLrr+f6kqewt8=)
                          5: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: e3X6NjIDcrBrpZm1lgLxKybnf/0/pEe9IaP9GJRU+zA=)
                          6: MTmWvr8uibadZE8o6jRrxqRGRzE.roa (hash: 0jqsfFy8FlNhCDstxSZBm5rl+QTt+KMOpAYA4a3i8co=)
                          7: O3desnRLE4eMtaLYXnU5Nh4QOG4.roa (hash: M/pLCjMkuIdvQFjtWmiXKAnVxVqmcU2sbBu8lSfc//o=)
                          8: Ox9GZAka0glhoxQ2kcpTG40p5TY.roa (hash: 9fZOyfSbu8PtJINC4B8NBR5wPhorryRlu5FEj0R87qc=)
                          9: T_tBIVOnk6atlnO-qvOB3SEZFOg.roa (hash: l/bz7iGuLSVMu5+jIvFJJiOT8fpLOG7JuBRb/GRh10A=)
                          10: UDwlK5i6kK3A947K1F2f3Nxg72M.roa (hash: /9gSFN6Jh6IOVjlZNhRpSBitYWPHct6GZTgiTAiwPR8=)
                          11: WEt_FvBA0B7LAE_TwJNr5YbGLWo.roa (hash: 5/nNeU++Tk3tTxk1UDX88TCuqrCoToCpYKSrEibPyls=)
                          12: _-qLuY0dJaZaSWjtWCqfvkINW98.roa (hash: wQKawmTp+JnLi1nfzjxaxc0y+Fv2NQma/wD/xIsptVw=)
                          13: _1lqE5scJ0MBH0b9lTR0YHuGOuU.roa (hash: 4TZYcGOcfHMexmHJPq3AcWYTwMqwPGPD0OgXI/Zx1Ik=)
                          14: f9P9TOtw3B1yLwWd-zzgWOHgFyo.roa (hash: eY72IEUw47OrnHrbzBE3H8Hn9IWCmc+eDQ3PnvNlgzc=)
                          15: h4Wdvms4wuQVg2v8lAhl_FvWiDU.roa (hash: qgpyjP3KxvlInp3FHrdBXgF7d6QXTNIjbw3bJgQTHgw=)
                          16: jR6B6upcDz-k-D33X5cUCpKNQhY.roa (hash: 17bzKKAmw9P5KCIa3O7ZZ3Gz7ehvl9SAXpWrtnaB8HQ=)
                          17: keTJqY7deNugwlmSUKuLVvK51wo.roa (hash: q6jipuf1WpKULW6CAfzHiIY9EHwk4hFmc5paPypsmNQ=)
                          18: leAvVKB-KF9YkNjyBGLznG9z208.roa (hash: sNz5PxJVA3WdR6kA9tPYVEIxVQ3UHzFMpibhNTNaOv4=)
                          19: lsTY6AmWoYOLDn9vJEopaPrCzaE.roa (hash: zdYo35yHHZ9h7IbD1O6eQ0PbAdPIh6AmlbW/iwXvWFw=)
                          20: mJZRRFa3TxbjBcy5TnhaTEM_Wlk.roa (hash: N9byFHS2GD4WLMaI+ZrMFbqxvlxUMFZZr0x2guAAd5g=)
                          21: olxf7ZsuzIbb2ywWmhByxe-xLw8.roa (hash: fH7TNj8hlrTs9pJaEkQ+/5PSjQ7A59ZxCk5/AxaRv18=)
                          22: oq_bdGbnwKTXTnGXJdYy9S7WicU.roa (hash: p8oLPJnZdi4G9SjZfWCHDdPw6B3VXekrGGf+ZY2rnv0=)
                          23: s-ve3F8tXP4595quse_pLEBwHiM.roa (hash: etXcDa5JBalQlJuVD2B5TBUIJ+CVNp1v8p140S4caec=)
                          24: sXpjAF10yFnKIr4QcLJYvBmJdoY.roa (hash: APdgDAmA0VEbqfM6xaUZ783M1XIEd3juXocVjfK3nIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:fb:81:cd:50:b6:5e:c8:df:49:3d:22:cf:b4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Jun 13 10:00:39 2025 GMT
            Not After : Jun 14 10:00:39 2025 GMT
        Subject: CN=232807f6ef26acd626239e4a3e903848c8120f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:df:a6:b2:35:12:1f:58:6c:7c:30:43:19:aa:
                    2b:2c:ce:9a:69:e4:b4:a7:b4:1c:00:14:e2:38:db:
                    a3:0e:6c:81:e8:32:ef:d4:91:ca:87:03:96:cd:30:
                    ae:15:2f:7a:24:13:90:23:af:a7:18:1a:fb:cc:f1:
                    8a:a2:64:0d:4b:90:20:89:54:a4:2e:f3:9e:57:44:
                    a4:a4:1e:ae:93:d7:06:59:b8:43:61:da:9a:da:8b:
                    d7:a5:0a:c5:e0:52:f0:52:05:40:d2:b7:49:c7:90:
                    9a:cd:c0:f6:e4:f3:e2:03:3f:8e:10:93:c6:6e:e5:
                    63:de:df:46:c2:df:d5:f1:ad:00:27:de:aa:98:c3:
                    33:65:ac:16:93:1a:e0:80:95:74:83:02:14:bd:e4:
                    b1:f7:12:1f:dd:31:b6:32:bc:8a:74:e6:e9:b9:e9:
                    db:7b:5c:2b:68:a4:63:0f:eb:98:ed:c7:e3:d5:2b:
                    74:30:e5:07:dc:e6:32:09:95:aa:ab:ac:4e:6a:26:
                    01:52:59:59:34:a3:2a:ff:0d:1b:53:4b:76:69:a2:
                    fd:49:52:4c:cc:da:77:7e:ae:49:40:0f:6f:c3:d6:
                    ac:36:ce:f3:d7:46:0b:19:db:ac:ed:f2:17:56:9f:
                    87:9f:6b:2f:78:c9:fb:3d:e6:ca:86:3b:eb:c6:93:
                    8f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:28:07:F6:EF:26:AC:D6:26:23:9E:4A:3E:90:38:48:C8:12:0F:01
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8d:11:b2:41:60:c6:ec:06:c8:6e:5b:4b:f9:93:b6:18:e4:
         11:bc:d8:0f:b7:7d:f3:ca:88:57:a0:53:af:31:ed:1f:da:65:
         f3:69:38:0d:10:78:06:3f:bb:eb:32:21:f7:df:70:c3:ee:69:
         e8:7d:2f:c9:49:da:5b:57:98:01:70:4e:cb:3c:f4:65:13:e1:
         eb:0d:d2:25:01:f8:bb:0b:a3:e1:5b:6c:51:5a:ed:b8:03:41:
         fe:c7:f5:e2:15:bf:6d:4b:bb:ba:a0:8b:80:47:4f:ff:4a:04:
         55:97:01:06:f8:15:80:87:1e:8c:55:81:11:8c:d3:ba:3f:a7:
         e9:5d:f6:3f:fb:b4:f4:1b:86:6f:95:c0:79:46:21:e0:9f:9e:
         6b:e7:06:8a:f3:ac:12:07:19:9c:11:5e:c5:35:9f:d3:35:e5:
         38:ad:a2:d7:e5:f5:04:b8:b2:83:6e:15:26:83:2c:cb:ba:6a:
         1d:7a:3c:14:93:70:ff:73:45:0e:74:11:14:b1:b4:a2:4b:48:
         6c:ce:a8:73:56:d5:d7:23:57:bb:c5:91:78:2c:5d:b3:c6:15:
         4d:7b:58:ab:b0:a2:aa:3d:26:58:f0:c5:46:02:08:7c:0e:7b:
         e6:4a:ae:85:04:7a:0d:ab:0c:f3:ca:2e:ae:d8:52:be:be:24:
         6d:72:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:31 2025 by rpki-client