Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
File:                     0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json)
Hash identifier:          uRZB/FWRC4zGIjSERbICGPOz4b9ymoHtdcLUDqNbQF0=
Subject key identifier:   19:5E:49:93:37:AB:74:EA:51:BA:6E:60:C9:4A:DE:12:23:FC:39:9A
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Certificate issuer:       /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial:       01977E316284C24FEA13558FD5EDBE784D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
Manifest number:          12E8
Signing time:             Tue 17 Jun 2025 14:00:54 +0000
Manifest this update:     Tue 17 Jun 2025 14:00:54 +0000
Manifest next update:     Wed 18 Jun 2025 14:00:54 +0000
Files and hashes:         1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=)
                          2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: jesRErJ0kWDOAWEKGa7N9DomjbJLSEq5AcZOHqYGQy8=)
                          3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=)
                          4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=)
                          5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=)
                          6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=)
                          7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=)
                          8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=)
                          9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=)
                          10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=)
                          11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=)
                          12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=)
                          13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=)
                          14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=)
                          15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=)
                          16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=)
                          17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=)
                          18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=)
                          19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=)
                          20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=)
                          21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=)
                          22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=)
                          23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=)
                          24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=)
                          25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:31:62:84:c2:4f:ea:13:55:8f:d5:ed:be:78:4d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
        Validity
            Not Before: Jun 17 14:00:54 2025 GMT
            Not After : Jun 18 14:00:54 2025 GMT
        Subject: CN=195e499337ab74ea51ba6e60c94ade1223fc399a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:8a:19:76:e3:1b:91:32:70:24:a9:71:f4:
                    31:d2:88:a6:11:e9:94:c7:cc:9b:ce:e7:6d:9b:06:
                    6e:9a:4d:98:ef:e6:4c:11:f1:ed:1d:e3:97:bb:90:
                    1e:53:2c:d8:46:f8:0d:89:87:24:02:07:32:30:83:
                    01:c7:70:54:db:8e:8d:50:1a:38:21:9e:14:ae:68:
                    27:cd:0e:14:d1:96:1c:1e:96:24:3b:4f:c1:58:c2:
                    87:0e:52:a5:9e:54:1b:31:a1:76:cf:69:c8:6f:f8:
                    da:09:6d:3f:08:42:f0:8a:a9:2b:e1:cf:66:95:d6:
                    cf:a9:33:fc:19:f0:f9:af:41:38:ab:2d:a7:2f:a3:
                    09:f8:5e:19:ff:cc:84:e5:6a:66:d4:cb:7d:df:08:
                    30:34:f2:82:c5:c4:76:b9:87:0b:8f:c9:04:e0:55:
                    ac:55:1d:22:d7:aa:18:78:b4:2b:0f:0c:30:9f:6b:
                    0b:73:00:06:f5:69:7a:22:20:1c:13:f5:64:6b:92:
                    17:3c:ff:c4:af:55:3e:4f:bc:3f:74:c7:24:31:a0:
                    01:25:f6:e5:80:d8:df:9d:b3:db:20:e4:8f:81:59:
                    8e:20:e8:cb:a0:07:fe:a8:ef:a2:39:5b:58:9c:e1:
                    2a:44:31:70:02:9b:e7:2d:85:8c:f7:68:77:0e:08:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5E:49:93:37:AB:74:EA:51:BA:6E:60:C9:4A:DE:12:23:FC:39:9A
            X509v3 Authority Key Identifier:
                keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:42:45:59:8a:35:14:5d:ca:16:ee:a1:e0:3e:00:bb:73:9d:
         c4:9c:34:93:8f:40:d2:57:48:f3:bf:b4:ee:56:4e:a9:6f:51:
         51:40:b5:92:0d:9a:60:91:89:09:f5:49:ac:e1:d8:16:c4:2a:
         1e:2f:39:99:73:cb:82:13:79:1a:4c:d2:08:94:95:0e:1a:8b:
         f9:02:25:35:c1:5b:fc:59:0f:c3:81:66:e0:74:ff:17:f0:bf:
         19:7a:e8:c0:f0:c4:30:62:20:17:57:68:29:62:9e:a9:44:21:
         8d:02:c3:36:84:11:b6:d1:3b:c5:35:67:d3:23:c4:a2:69:41:
         67:19:27:8c:4a:ff:25:65:33:81:f8:42:b8:4b:47:91:33:e3:
         27:22:c1:c7:1e:5f:bb:fe:81:6f:7b:5e:4f:61:ec:b4:14:d7:
         0b:8b:9b:30:32:dc:32:5d:82:28:99:44:b6:af:21:40:3f:51:
         d7:3d:80:2e:02:c3:a6:69:e7:7a:24:cf:c4:df:40:3d:c2:29:
         d5:fd:55:ed:cd:68:40:93:c8:d8:a8:3c:96:7d:d9:f7:be:9e:
         ea:dc:c3:a4:72:62:e7:3a:2c:15:ea:f3:35:a6:94:7b:47:3e:
         1e:ff:d3:ea:ae:a9:22:64:54:8a:31:e6:95:03:a7:84:20:f9:
         cf:d8:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 20:15:41 2025 by rpki-client