Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          KIUMWla1Yp29AF4wW0w5+hmSieoiAoM2+0VHtGK5fBI=
Subject key identifier:   6F:BE:5D:0E:A0:F0:6A:19:84:03:41:F2:25:4F:20:A3:6C:74:C2:9A
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       01976D744955845793B9796437A84FAAE526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          05D7
Signing time:             Sat 14 Jun 2025 08:00:26 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:26 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:26 +0000
Files and hashes:         1: 1-uTBCLOK73rHSJLOlUQ-epuLoy8.roa (hash: Bqcx0fgQqDT5DRqxLv9EmiSVlrc1SMjWRU26HKGHfk0=)
                          2: 5V2g6MJj7dsq53aQs_gefLBp5Z4.roa (hash: GtrQ3gaHPox47NPapYnseB3SBuPrMZKw5czf1Xj3ENg=)
                          3: 8GsKkPCNYtANPJyVZQmZ5T10KvI.roa (hash: zX2E+FfBNNuuVeq4vGDgBKP+nDjvCw1D0NMFDjkyZQQ=)
                          4: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: MInkoRHG04A47snJsFxkcmyeSg6jQWv7f+ztr1kCxfk=)
                          5: BidivErepoioJfqkh8JqhsT6Y0E.roa (hash: gPDhk6nw0RaD24YbC59K5ViOofzgizOeouA5It+O86c=)
                          6: BpM-voHb9K2iJxJY8SxNfPQuLF4.roa (hash: 1PYFIRJEPMW2UgztqnKtVEYDwZbmHSrG3iRca3uOxto=)
                          7: Bv6MBTedcpr_B6_oO8eTccBIQXE.roa (hash: M4DlQKoz0wcJrMEgONkFSivGcd9oRnwKT0iyKzZRR1U=)
                          8: D93WpefA2fEKH5CwkxHRVKVVGDE.roa (hash: sejvSUljcvRNijzUP45J9DLRfVxOV0EFmP0l7r/w6JE=)
                          9: GObcR9hgxYtKxaUXaZ0nwJvCSlI.roa (hash: mJ4r9DD2kUaHJKv7RZ1iwemftAsaMPHMdIq5FZLHqHM=)
                          10: OR-q2mr40h2Mxz1GJNBEkMgDXfk.roa (hash: OZOrHpvHdNdldGGtmy643oboyvE3QirCRL6jGNlpTTE=)
                          11: OzmL8MqAa2-X27J7Du7ob4hEFDo.roa (hash: 67bO8d1cBVGdosTH6AkLFRrzveWa066aLizEU+HXDw8=)
                          12: X6hpALPvB09npx39S49umMA-THA.roa (hash: PoYWJMZDu5dCmNIBFkjyxLfCTBJCBDYsgzUbvy53DiA=)
                          13: _9bFBYB_k6GXZHR1-xZAhQ3eul4.roa (hash: 34A0Q3Dk3Owj3UknY1ubH8nl0XA87N5T5ZjBHePpvlQ=)
                          14: bo4OF6d3WBwVINWIFOBfuv1feWM.roa (hash: WIlEeoS03KZhYkB/WVxtVnsXKvvfA/PVNs3E9rKLLHc=)
                          15: brMk3gl69Me1_usejlq7n_aFcbs.roa (hash: XIBruDiDrzwuJ2km6f10dEO4egVqiOzQXAOAx/azAoI=)
                          16: cEVPwNbLIFpJQaQN99L79YbdZFs.roa (hash: 7yqd4jXtQb5LIzfk6g4nBxk7f59NFM9ePlx7mxIWUTM=)
                          17: f6xCmAT1EvkpF_dM7V8B0WZ2JzY.roa (hash: /Uli5evUzqWgPNfeMCmH6c7Sm84Knk09uKihlQyb6BE=)
                          18: k6kKIVAv-jwyDzCK8KCndkKezm4.roa (hash: 9OfjcrTpYlDZtVI65z19fiMSAQ7JmOuVXABpqc0KiR0=)
                          19: paDHFexShR8IgT1Cfs8ojH6itFs.roa (hash: 0S2IjKwmwpAXhezTE4dwFNaoTX7yEnubobJWMu7C1i4=)
                          20: w_3OHe3oBHAstdFpj23_j9IY5z0.roa (hash: DkSON5pUO9oWMI7L2Ago3db4u/NlpBI0OJjsuIhumIM=)
                          21: yWsq8ztQpda_SybRwY3Ir3EqckU.roa (hash: vKk1jV9P2hHEV9u5O5eqBjFX7vf7BhEUoVBK1pR0NME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:49:55:84:57:93:b9:79:64:37:a8:4f:aa:e5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Jun 14 08:00:26 2025 GMT
            Not After : Jun 15 08:00:26 2025 GMT
        Subject: CN=6fbe5d0ea0f06a19840341f2254f20a36c74c29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:49:e6:6b:75:c1:93:dc:5e:f3:91:39:91:
                    b2:7e:3c:da:47:dd:2a:80:7b:2b:30:11:a5:bd:bc:
                    f2:cd:77:cf:86:d4:a5:44:bd:cb:6d:2e:24:a3:d4:
                    04:1f:9b:0d:4a:34:f7:7f:0c:4e:8b:e7:cd:10:83:
                    08:58:35:de:58:71:37:16:ca:2f:1a:fe:3c:04:75:
                    c0:78:59:3b:09:fb:b3:f4:79:47:5d:99:95:24:f0:
                    be:35:3c:75:f7:7c:d4:80:5e:34:ef:22:49:b6:98:
                    ab:b1:4c:fd:d5:83:05:a2:c1:25:0f:79:83:35:4e:
                    d9:43:63:ea:de:a6:d8:79:73:40:a9:4c:b2:52:ae:
                    42:5f:1e:a6:21:1f:b6:cd:57:e1:c3:b7:51:3c:cf:
                    08:79:1c:5e:34:21:c8:43:8b:67:27:78:3d:ed:ce:
                    44:b8:35:9d:c2:96:5a:21:33:5c:ab:42:91:76:e3:
                    6a:12:54:52:30:c1:78:aa:ef:01:cf:83:62:a4:b9:
                    39:cc:50:52:7b:81:2f:a5:95:4f:1c:e2:b2:5c:25:
                    d5:17:8c:6f:8a:69:13:1c:a0:ab:28:de:4e:20:ef:
                    bb:ff:b4:bf:cc:3e:bf:b0:25:85:27:d2:0a:61:94:
                    43:51:10:02:45:37:a6:d7:f6:64:2f:4e:e6:b1:ad:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BE:5D:0E:A0:F0:6A:19:84:03:41:F2:25:4F:20:A3:6C:74:C2:9A
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:27:7d:7a:bc:c0:d3:99:f0:08:a5:a5:f9:9c:35:1e:97:
         00:f5:f7:20:1c:b2:d0:f6:2b:2a:5e:97:26:e8:f6:e3:d0:47:
         78:79:27:86:92:e7:48:91:ac:71:fa:1d:bc:fa:cb:82:42:0f:
         f8:39:20:e6:06:d1:22:d7:0e:16:9c:6e:89:52:4a:1e:f0:4b:
         71:94:3b:84:ad:e0:e5:ef:e9:ef:be:33:45:4b:b2:32:62:ed:
         d7:c8:23:8f:1e:70:b1:11:3e:5d:34:c3:6c:a4:a2:c6:74:9c:
         71:3c:35:71:a9:76:17:6b:04:eb:43:83:11:09:55:2d:c2:e6:
         9e:a0:74:4c:f3:5e:ec:0e:da:1e:09:a3:94:9a:d8:42:cd:be:
         24:1d:81:98:b5:43:2b:09:a9:5f:6a:ed:20:ad:e5:de:e2:8a:
         cd:c8:91:b5:db:66:54:28:64:6e:59:f3:75:3f:b8:13:6c:1a:
         5b:6d:20:f0:fb:52:9a:cf:1c:51:74:25:f6:73:d3:c3:95:b0:
         40:08:55:87:05:5c:6f:ed:04:a8:c1:13:98:11:56:23:5d:9f:
         24:68:e8:97:a6:bf:cd:ee:13:06:6b:77:25:12:7b:29:5a:43:
         f1:2c:fa:1e:f5:5e:47:86:ec:67:70:a5:0e:54:38:c1:9f:9e:
         c5:03:4a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:22:52 2025 by rpki-client