Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
File:                     TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json)
Hash identifier:          yjiv90s4zsdCokwF7jPJoFDKMNatYZd9dalKLPs9jCo=
Subject key identifier:   21:F5:47:E4:95:BC:3A:0F:95:3C:B5:12:24:54:32:C3:CE:52:B3:40
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Certificate issuer:       /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial:       019774896BD2AC76F9DA05B55B93EEDE89EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
Manifest number:          15BA
Signing time:             Sun 15 Jun 2025 17:00:52 +0000
Manifest this update:     Sun 15 Jun 2025 17:00:52 +0000
Manifest next update:     Mon 16 Jun 2025 17:00:52 +0000
Files and hashes:         1: 6_4Zh3O6ZTreuktkHjfNsOfp20c.roa (hash: IHBYXC/iSuYVHMlBmOHgNgl61Qvof4DId2NC68M2Wf4=)
                          2: 7uP2hsNrWUTvLUi0EnlsUMplx8I.roa (hash: AAh5/zqxGEJwKpq1li09A8ITxq8BmEm8Nx1Peaplcw8=)
                          3: 86yMutrW94jAoFqGGLp05wok-EU.roa (hash: n1wMq7WI5xCKfeBBnyW3L0LanP1i1DJdVv+DH8sxYDQ=)
                          4: 8I00PdszB0BEA0F7L15RCYSGXrs.roa (hash: jIMi5XC40219hEu2jWaX/R/11c/v1KgoG9InqbBDCDw=)
                          5: 9d4vehXr1KQWWuNr4btcQyeNAOw.roa (hash: eCac0MYwoiBRqhdE7NB6xf6R3V4kbMphNX58B/5kKw4=)
                          6: CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa (hash: 044BEtCX+z6xTX9a6h7LlWK6XDMZtx+8nHOMokajsWY=)
                          7: N04EfiNPlhcajYlah0Fj2OOKHzU.roa (hash: yfI+goH5HcOi2fBAbSu0epVzVunJlIpi1BFzU7kE07c=)
                          8: OziayBrDeGWUdwbC1v4ioKqEXUE.roa (hash: sdMj7SQqeh6lx/KCs9+nJuEWA4sxx9zFl43XaHKaZJk=)
                          9: ShiiryAcjD3F8ggUPDXzBzE0UB0.roa (hash: DaTZCgy4f8wa4YkJRs70W6ngBWHSz7ZCBqDO4OgIbKc=)
                          10: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: hwYuCTd4iJbsU5jAGNLo0FNS52pfg5ifBIk0sm3TfIM=)
                          11: UkLKM15tmjgBY5QWaoqfz0_8jkI.roa (hash: 8usx/pzxgiN7xwyYIJpHpe9QYcM1xrfYkkGGJbMr7E8=)
                          12: W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa (hash: 1ojxt/gCQbbmS26YV73zKnO5/4dtGXpP+YX1jufGKFE=)
                          13: W8m4GdEAUuyje4ea6tzLvpxGtOg.roa (hash: 2JXP9CUcUNLp3qYldxK3ZT/r0Zo+MqdT+NrTwUE+MCA=)
                          14: XA_JQUwBuB_5Bfu8Z1_Pku4UGIs.roa (hash: oqIiAXdBgyeEaTThnTERPbspWHbAcUhHISkkJ+TPcRM=)
                          15: _lT4fkaMoWdr8qyjDYgJWGLKNqk.roa (hash: cVeyU0qmwSSa/gArA5yocN/Gvczol71ofdn37Qssh2E=)
                          16: gCAZgdSrRRMO_a_bk-rlD9yUdBI.roa (hash: CiDZa7qTV5sD4Pxr/bWaU0/l61ZZMF4KbuusyXElF3s=)
                          17: h8tPDjA1OFAFTFOZDX2QcoPajT8.roa (hash: D2D71dyeEW0POzOSRVEi2ki37gqunzi/KvsZFZxTyj0=)
                          18: hhOCjjctZE2elUUQzzzNpbofAzE.roa (hash: ASnnd7IdpidxDt7bVAWlgtZPqmulJpJGw53xxAdtVc8=)
                          19: jmOmNUc4t1mTnx_PtEJXCVu45y0.roa (hash: n3LhYp07YltOPPJGprQBK9Drn6QgmpJsE3I8Z6cF5gc=)
                          20: lIuOj0AnftPW8n1hGje2-_p95sU.roa (hash: GQvUoJQQ5KD124Ec+QFcU1fE8s5FkdB2MthVeKXOr7Y=)
                          21: mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa (hash: 4o5/uQYVaiCLx5hp640nZnYAh3ZNcq2J4p5PzINcxjY=)
                          22: nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa (hash: OO+ivo9odQV4h2/ZIswWA1KIA2RuonmMWgLO5WJNfks=)
                          23: vPs-BjoRFrtMzT81xNA12pTdrhk.roa (hash: zq1ZtiMPWWfT0qVyKbdcFXzXLMMx3LqD6xTMODLy5ro=)
                          24: y3uok7EZQrGXpn3Ez_3aS9Y6NLI.roa (hash: hrdKFgJqexlTl1buWV8DIV1mCnkxg43ZkPO8Ouc4I54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:89:6b:d2:ac:76:f9:da:05:b5:5b:93:ee:de:89:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
        Validity
            Not Before: Jun 15 17:00:52 2025 GMT
            Not After : Jun 16 17:00:52 2025 GMT
        Subject: CN=21f547e495bc3a0f953cb512245432c3ce52b340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:38:53:1a:1c:45:3c:01:71:b0:3c:38:02:
                    41:1b:0a:9a:7f:21:50:76:f4:b5:0a:d3:ca:18:37:
                    93:28:31:8d:f6:a3:f8:7e:27:fc:9a:8d:97:8f:c6:
                    65:94:36:ec:92:ae:be:ec:8a:e2:9f:8a:c8:3a:38:
                    82:2c:19:67:32:0e:bb:d1:fe:ab:93:5c:0e:d6:13:
                    1f:cd:63:7f:23:c9:fb:08:6a:ed:5b:2a:4e:eb:c8:
                    33:3d:b4:e2:de:48:0e:e5:e7:ac:65:74:35:52:78:
                    e2:d3:29:1a:fe:3e:05:cc:57:06:7c:38:6b:eb:27:
                    fe:dd:26:15:e1:6c:d0:88:f7:c3:86:e5:3a:3a:ef:
                    65:8b:4c:bb:b0:b7:e9:19:fa:3b:7f:66:6a:e1:a8:
                    a9:d3:64:9c:4e:37:01:52:ea:4a:3d:ad:03:61:b4:
                    b0:3d:9f:2e:4e:ca:8c:15:f6:45:c8:c6:95:f8:dc:
                    20:d9:51:c6:c2:94:8b:f5:b9:bb:ef:64:d5:a2:26:
                    83:35:42:3b:90:08:d7:62:dd:28:b7:64:a6:54:66:
                    22:d3:ef:c9:b0:b9:72:f2:cf:7d:bb:cf:76:0f:b3:
                    bb:84:eb:86:6a:1d:d2:62:36:95:84:e5:fb:53:e6:
                    9d:5c:69:cf:11:fb:13:43:12:d7:de:fc:f8:1b:40:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F5:47:E4:95:BC:3A:0F:95:3C:B5:12:24:54:32:C3:CE:52:B3:40
            X509v3 Authority Key Identifier:
                keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:94:8b:be:2c:69:66:26:48:f5:4c:fa:36:a9:89:ed:f7:
         0a:7e:44:9d:25:24:73:a2:82:60:da:ce:07:96:02:9d:20:d4:
         ce:9c:49:e0:49:a6:f1:1f:90:05:4d:44:f3:f3:5b:ef:66:bc:
         42:c7:ed:65:34:d7:95:03:5e:8d:c3:0b:62:c4:ff:5e:19:0a:
         e3:12:1a:79:c4:c8:34:57:74:d8:94:04:0b:2b:ab:1b:3b:ba:
         6b:a5:cb:62:3c:56:83:ae:99:27:de:ae:92:b2:b9:4e:1b:b5:
         3e:b6:c7:05:df:2b:fd:72:c0:1c:22:fd:89:91:e8:45:a2:79:
         f2:a0:a2:b0:76:33:49:c3:22:5b:c3:3f:5f:c7:69:94:5b:a9:
         fe:b0:a6:90:ed:a1:7e:d8:ca:2a:39:74:d1:c7:99:5d:28:e5:
         44:3f:03:c7:3a:e9:ea:aa:c1:51:7e:8b:17:d9:19:15:d0:56:
         6d:52:cb:24:5e:30:95:a1:8c:32:21:9c:19:23:4f:cf:ea:47:
         49:cc:63:f3:14:22:fa:be:a6:78:47:6c:5f:c0:99:1d:49:71:
         bb:b6:61:73:0c:64:37:80:74:e6:a9:6c:43:fa:c4:79:18:75:
         02:c3:82:10:5b:56:b4:bd:72:69:59:dc:4e:bb:de:1f:10:09:
         55:21:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:06:00 2025 by rpki-client