Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          R1rM0SWUZvtk/8G/nZTV0aViAfOJiV2egVz7Ef/tA2c=
Subject key identifier:   55:2B:28:29:C9:D5:A0:E7:39:10:88:75:4A:DD:44:A7:D9:A2:FC:24
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       019673793C763FC804FCC2E8D2B8DB03783E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          122A
Signing time:             Sat 26 Apr 2025 19:00:47 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:47 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:47 +0000
Files and hashes:         1: 2d8VX1yVh54mGYkeHaHmzVPzhZo.roa (hash: cYGvSwaRPDVvS+Yq5KxRkZ+234/mFxXJD0RJHeKEEjQ=)
                          2: 6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa (hash: BNLbnygG2YLNyjdpzyEOdm3sS9fiwqBzh1UyiyyKi+o=)
                          3: 7YhCJ28wSxD6190KY3LsL2-jFBY.roa (hash: TdMkcxbj/5amzDjgSgCV0/mP+NRcoQOnkj8hBKpX/xs=)
                          4: 7nwFZllPHib0qlQvTuec2CA4CFE.roa (hash: 6iCLCKodfg6yz/qGnLZGO0jH9QdQIo9q7VMD+L1L/38=)
                          5: DqWqWWUy5sm-gqrVg_icW_4BBuU.roa (hash: udwxBi6VLqH0wpPYZM7DDUViOUA0C7+6x2kGIlrfz08=)
                          6: OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa (hash: rkSh/s+q1SivKdqDxSkXS4YbyDK7MKYmwkQaMtbR9jk=)
                          7: VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa (hash: 26f1YQomtY0BiRJWIfpK3wiyYZ05du1tDa7jK3YouIs=)
                          8: WhRk9kZEyJiPe99DKK0ZIY2m2Yw.roa (hash: dZkGuR4JSyQqOAbFZVSVkGM0gVjd0Muk/GHy9vCkvbU=)
                          9: ZpHETbs_mb628Vvkity4w2NrOCU.roa (hash: urkAaKxvlWEgwM0Yu9Kvm1a0uJN5W0lCOvwAiki7CTA=)
                          10: awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa (hash: 4BEd/kp3Xtbyx7WAgm3K/LeKVYfnYxJ84p9PC0RKbvE=)
                          11: e4ZdNT0b2vxOvlJIV_lJM64Zyro.roa (hash: 7puUfcu0W3Urnah55eUUcVEFPOq9IEAVasFR/gSe8IQ=)
                          12: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: vOMXKknzmNaGQ81T4YOd67wFKDuD6zfSMhNPe8CUYUw=)
                          13: njGgKFMMQYCCOcUQU9FLXyns41E.roa (hash: mOXzfRSGU/yibvLqtvjYzBQ5Qk8Adr7qWGYN92JzeoI=)
                          14: oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa (hash: OT0X0o4GJQ8rzCrOkZIscdAmjhqqaxADA5FmAXxEAv8=)
                          15: rtNgU16vRfGlfgaBLeA-LVfZYfk.roa (hash: 7272BB0beEnCZnBZky8uGVsVo4pWm3st4EyVIbuSPv4=)
                          16: sJY5TLcMj31ewK9GbQlhZPgo3bo.roa (hash: whJtUyjGYNm5NN1NGfkIMGWBSnbpfKeUHyqGZYB1kB8=)
                          17: uxodH0SAIfY7QfL1CFY1zsVKTTU.roa (hash: MFYf6i70IowcUu2vDq3Z87sRlyhGfcm0kqBV+8MGNH8=)
                          18: zM4hFOeWneXhfMX60yWm7dJXOqc.roa (hash: GFt3zcUn//9D4z2GQsOUfTRTmxcTyGZcc8EgQft8j9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:79:3c:76:3f:c8:04:fc:c2:e8:d2:b8:db:03:78:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Apr 26 19:00:47 2025 GMT
            Not After : Apr 27 19:00:47 2025 GMT
        Subject: CN=552b2829c9d5a0e7391088754add44a7d9a2fc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:9e:4a:fe:d0:16:28:90:ee:a9:26:85:f3:
                    e8:49:8f:c0:31:95:62:e3:a1:10:f5:0c:db:0b:97:
                    69:e9:f2:b7:1a:cb:0a:ae:33:36:15:a2:ee:9a:c9:
                    6a:48:df:f8:78:65:d3:96:c6:b7:8a:0e:8f:bc:4d:
                    c2:17:9e:f5:a3:54:2b:bb:f6:11:27:8d:3f:84:85:
                    00:81:22:8f:6f:05:be:42:af:e7:49:96:b5:39:27:
                    ff:56:2a:ea:12:a9:2a:82:17:36:59:dd:3f:87:3c:
                    48:48:9d:67:b8:49:b7:93:bd:b5:70:d4:4e:ff:f4:
                    c1:82:31:de:23:e5:19:fa:49:a8:1c:6a:ac:05:f9:
                    48:4a:0f:aa:a1:e2:59:d8:7d:ee:93:60:5a:22:65:
                    2d:7a:c2:3a:d6:d0:28:53:3c:db:c8:b6:15:c0:f4:
                    fc:e4:41:3f:b2:80:74:67:0e:e4:ea:18:47:53:21:
                    cb:a3:ab:3a:4f:8e:0a:a2:12:31:30:ce:d1:b2:a5:
                    b4:68:84:96:c9:3e:55:8a:a9:52:28:d0:fd:9e:20:
                    cb:f2:77:c0:37:f2:fc:be:c5:58:6c:dd:b1:85:fb:
                    a2:cd:37:fc:6b:12:13:46:1d:50:70:12:5d:4f:52:
                    13:b3:65:85:46:a4:31:45:76:34:f2:e4:fd:8b:8c:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2B:28:29:C9:D5:A0:E7:39:10:88:75:4A:DD:44:A7:D9:A2:FC:24
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f4:f0:30:d4:07:de:65:92:ed:2c:41:c1:f2:ef:59:84:5c:
         58:49:76:cd:53:db:d8:e9:13:a8:b7:9b:93:98:20:69:e5:59:
         17:df:75:de:82:48:f7:d9:77:5a:c3:8b:55:a8:0d:3a:a8:dc:
         1b:8e:cc:a3:b1:58:72:fc:fc:dd:15:51:f3:41:09:5d:79:16:
         8f:90:be:ea:88:e3:66:b9:c5:ad:49:24:5c:95:6f:69:1c:2d:
         ae:62:7c:65:4f:12:d0:81:b7:fb:42:fe:20:12:20:0e:ca:da:
         28:09:dd:c9:51:64:73:90:ae:e6:f4:9d:c5:69:c2:f2:91:91:
         4b:23:e3:ed:77:80:39:ad:5c:bd:88:79:99:4d:5f:ab:b1:e1:
         79:98:cc:f2:3a:32:60:6c:bb:ab:63:d3:a8:f7:8d:97:16:4e:
         75:33:49:6f:d4:eb:cf:f3:4a:72:b8:c7:f8:5f:78:57:1d:84:
         ba:fd:ea:1c:0f:35:3b:36:88:e4:33:85:ca:5a:dd:09:67:3f:
         ed:ce:b3:cd:ba:df:56:99:1d:d6:21:33:24:74:dc:73:2a:b0:
         58:60:d0:85:e8:ff:a7:77:5e:5d:60:56:03:f6:35:42:6b:16:
         93:cd:fa:5f:03:b9:8e:f7:40:6c:0a:63:8f:05:79:33:ca:c7:
         0e:cb:ba:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:03:00 2025 by rpki-client