Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          GcBw19QL3Vzm+2nbkSJA88KdpLSqHkyJQDHBgf+sKpY=
Subject key identifier:   B9:B3:45:C6:C0:12:F2:98:74:73:92:E7:78:32:14:27:BA:1C:CE:1E
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       0198887B9943CB298141B8C44EC7778EBA73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          133E
Signing time:             Fri 08 Aug 2025 07:00:58 +0000
Manifest this update:     Fri 08 Aug 2025 07:00:58 +0000
Manifest next update:     Sat 09 Aug 2025 07:00:58 +0000
Files and hashes:         1: 2d8VX1yVh54mGYkeHaHmzVPzhZo.roa (hash: cYGvSwaRPDVvS+Yq5KxRkZ+234/mFxXJD0RJHeKEEjQ=)
                          2: 6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa (hash: BNLbnygG2YLNyjdpzyEOdm3sS9fiwqBzh1UyiyyKi+o=)
                          3: 7YhCJ28wSxD6190KY3LsL2-jFBY.roa (hash: TdMkcxbj/5amzDjgSgCV0/mP+NRcoQOnkj8hBKpX/xs=)
                          4: 7nwFZllPHib0qlQvTuec2CA4CFE.roa (hash: 6iCLCKodfg6yz/qGnLZGO0jH9QdQIo9q7VMD+L1L/38=)
                          5: DqWqWWUy5sm-gqrVg_icW_4BBuU.roa (hash: udwxBi6VLqH0wpPYZM7DDUViOUA0C7+6x2kGIlrfz08=)
                          6: OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa (hash: rkSh/s+q1SivKdqDxSkXS4YbyDK7MKYmwkQaMtbR9jk=)
                          7: VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa (hash: 26f1YQomtY0BiRJWIfpK3wiyYZ05du1tDa7jK3YouIs=)
                          8: WhRk9kZEyJiPe99DKK0ZIY2m2Yw.roa (hash: dZkGuR4JSyQqOAbFZVSVkGM0gVjd0Muk/GHy9vCkvbU=)
                          9: ZpHETbs_mb628Vvkity4w2NrOCU.roa (hash: urkAaKxvlWEgwM0Yu9Kvm1a0uJN5W0lCOvwAiki7CTA=)
                          10: awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa (hash: 4BEd/kp3Xtbyx7WAgm3K/LeKVYfnYxJ84p9PC0RKbvE=)
                          11: e4ZdNT0b2vxOvlJIV_lJM64Zyro.roa (hash: 7puUfcu0W3Urnah55eUUcVEFPOq9IEAVasFR/gSe8IQ=)
                          12: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: PQDOflDRmORMlrhv0RpVXNqO1GLO7NBOFAAknwh9os8=)
                          13: njGgKFMMQYCCOcUQU9FLXyns41E.roa (hash: mOXzfRSGU/yibvLqtvjYzBQ5Qk8Adr7qWGYN92JzeoI=)
                          14: oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa (hash: OT0X0o4GJQ8rzCrOkZIscdAmjhqqaxADA5FmAXxEAv8=)
                          15: rtNgU16vRfGlfgaBLeA-LVfZYfk.roa (hash: 7272BB0beEnCZnBZky8uGVsVo4pWm3st4EyVIbuSPv4=)
                          16: sJY5TLcMj31ewK9GbQlhZPgo3bo.roa (hash: whJtUyjGYNm5NN1NGfkIMGWBSnbpfKeUHyqGZYB1kB8=)
                          17: uxodH0SAIfY7QfL1CFY1zsVKTTU.roa (hash: MFYf6i70IowcUu2vDq3Z87sRlyhGfcm0kqBV+8MGNH8=)
                          18: zM4hFOeWneXhfMX60yWm7dJXOqc.roa (hash: GFt3zcUn//9D4z2GQsOUfTRTmxcTyGZcc8EgQft8j9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:7b:99:43:cb:29:81:41:b8:c4:4e:c7:77:8e:ba:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Aug  8 07:00:58 2025 GMT
            Not After : Aug  9 07:00:58 2025 GMT
        Subject: CN=b9b345c6c012f298747392e778321427ba1cce1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:2d:37:f8:a5:9b:e0:3d:f3:2a:f1:eb:62:
                    83:e2:8f:91:5a:ca:8b:a7:9d:95:1e:00:3d:80:81:
                    8d:1e:73:71:31:41:e3:a5:a1:e7:42:f0:67:db:d8:
                    81:15:46:9d:3c:84:18:61:43:f8:8f:73:49:75:c3:
                    90:2a:4b:c3:e0:b9:95:52:1d:e6:44:71:78:34:d1:
                    0b:12:1d:43:56:73:89:f8:f6:f0:31:52:d3:10:c1:
                    4b:60:bf:e3:41:4d:1a:84:ae:57:a4:a9:18:b9:8c:
                    83:9b:e5:e6:79:38:e0:08:0c:b3:03:89:d6:c8:5a:
                    94:a9:33:2c:64:bd:7c:46:cc:99:82:36:71:59:97:
                    ac:a5:f5:0d:81:cc:2f:c5:63:d2:d1:52:71:ba:12:
                    be:37:fd:b2:77:db:ee:29:e7:ef:89:49:fb:80:e6:
                    c2:89:1a:32:85:8c:5e:28:e8:40:9c:fc:cd:31:38:
                    e0:8b:86:40:68:c8:9a:fa:36:8c:f3:4a:03:66:13:
                    58:cf:1d:93:bd:9a:a9:fe:65:18:26:cc:b7:4e:8c:
                    35:b3:70:22:4a:2c:f8:05:a8:fe:aa:40:f0:22:fe:
                    50:aa:0c:bc:c4:b6:22:6e:7b:1d:14:d9:52:3c:60:
                    6e:41:6e:38:b6:98:1a:51:da:af:52:05:55:6f:c2:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B3:45:C6:C0:12:F2:98:74:73:92:E7:78:32:14:27:BA:1C:CE:1E
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:31:f7:67:7a:4d:84:e3:7b:b6:97:46:ce:11:4b:b4:f1:5c:
         25:c2:6e:5e:ce:39:5b:34:81:79:97:29:3f:f5:82:b1:9a:a0:
         0b:f5:70:d6:0f:a0:3d:cd:9f:e0:51:1b:00:29:60:69:34:08:
         ef:a0:09:68:e5:6d:07:44:e0:17:74:14:1e:39:64:c0:e3:e5:
         2f:1b:27:f7:c8:3d:37:4f:59:49:69:40:41:5b:f4:0f:22:79:
         af:7d:ca:f0:c6:9b:c0:2a:45:5e:68:39:11:4e:b3:34:f3:b5:
         7e:3c:4a:89:4f:0a:6b:eb:02:5c:35:d2:d3:07:06:a6:cb:31:
         b7:3f:4f:c9:21:88:0b:88:09:b8:c0:be:2b:04:c7:f7:19:8d:
         86:51:39:0d:9c:01:df:fd:ea:b2:d4:55:68:4f:68:e0:a3:cf:
         16:7e:49:af:b7:d6:a5:19:fb:40:3c:44:92:47:6d:a7:3b:6a:
         a0:7d:f2:44:a8:80:8d:08:4a:d6:81:62:7c:5f:80:64:64:77:
         71:a0:4e:6e:12:f9:73:c2:63:fb:dc:c1:aa:f1:b6:ef:05:8d:
         0b:fc:ce:a8:da:09:22:37:79:94:4b:2c:24:28:87:c6:5e:20:
         29:a8:85:10:0d:10:b9:0e:ef:56:97:3d:ad:11:eb:35:4c:6b:
         8c:df:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:43 2025 by rpki-client