Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
File:                     uRSWH2fyLGHoSmbIrZwajOUdCZs.mft (raw, json)
Hash identifier:          yPkVdXcxeJwU+WBFD+vpYC0x8K1igVOUvp0HZb1ca9o=
Subject key identifier:   DA:EC:D3:04:F4:93:DF:9C:01:12:5B:F6:11:F0:11:66:63:84:D2:35
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Certificate issuer:       /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial:       019774894EEF8725CA30379D09D6E56AF412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
Manifest number:          02EA
Signing time:             Sun 15 Jun 2025 17:00:44 +0000
Manifest this update:     Sun 15 Jun 2025 17:00:44 +0000
Manifest next update:     Mon 16 Jun 2025 17:00:44 +0000
Files and hashes:         1: 0H7Thc0vxzHE538Kg__IsozOYbE.roa (hash: giCD6rVmFgKHziT2AIqsZO6VuG2Tfm2cxgqOASpwxX8=)
                          2: 1-IYV20_BFsSESebPalSWi945mc4.roa (hash: OsWGdya6Ch/46NWAXvFYRAE2agKYGSeHmSsi9DNzWYU=)
                          3: 1ZiCgvnRBknJUXt1Uz6nNo7_pO4.roa (hash: yxvYsCLwo+HHivfhDyL+8Sdo+tKY+1OVoiINgf6EUGk=)
                          4: 1xA0E3JMPDydJ13Prmcc7Dnta0s.roa (hash: ogbhbFSepGfxytpnhFuB67o0q79KylhQPVl2PN0hOHA=)
                          5: 2Rska5d1fz-1LyWeLY5wNEQt-08.roa (hash: U17BQ8jBRMMMfY5zHF1Q7cNP8BTLe/506H0OjkJUWZc=)
                          6: 7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa (hash: wNJTS1s1GS5nqF/G2hmQFOimq7UQMenpdIPW59xhivU=)
                          7: 9zLvzm8otYmFem1Qd75FwmrsSxc.roa (hash: mU0sIkevG3y3WSoCK/P7ZAFf/EzDIDHpCIUVj9uqHhU=)
                          8: B7e_rOOepZWmaiFWJH1w3a37GGg.roa (hash: 2WwB/EPxijem205r42CRpsJjfETG8nT1KWQIZUs7ayI=)
                          9: HSiwKyMoJ6I6zGaHKCL7FsIgGys.roa (hash: i6y69Y+T/O92kLnvSAm3+5UaYRDFfESGJJXvQ0n1I8E=)
                          10: L4NUW0fD1fouom_s0JvPLwOdhKA.roa (hash: 1QOsAiAO9NanX+ESsp6JiEauNz2AtY78OF9Q05/RwMU=)
                          11: UyMTJ8vfaZMZ3K5xcIfKiRk_5oI.roa (hash: p032VP0xM7qM67uVYdhb1lo+Lr6r8lZKSQd50sPMvZQ=)
                          12: Wt8q81G3lq42cpbQgi--7hMpnzk.roa (hash: 3wzOUsBnY0js90eLihw9wHKZneTkdasUVemnQb+Ppys=)
                          13: ZOWSdTU-WTWFbQ4ucTrzxUSSz90.roa (hash: A0HqrcZPbTEXuB3W/5criOXFdJviighEOaAGyhHlYd4=)
                          14: Z_hTrtsbQSpKrMGMOW6_0J8ZpdA.roa (hash: feCFBc/epRQ4sJNHhJEBA2Ljs4/rpvwE/wZpPd9yp04=)
                          15: aLZQhetZPScjmzF_3TV-b7UX2aQ.roa (hash: TO/CrQqt8l93Rbi2zVKa5elUK43be8sHniPaaeWsqbs=)
                          16: bIJxT9tnkNJQ4c2mEtFdUJKVePk.roa (hash: OvEl/cosJ15Umi/YXioUm+VBzOn/QAmyGskrTXES3y8=)
                          17: cKynaQHnSt381VIcTQApgbYb_ws.roa (hash: 7rx4+e5TenBrpsBT5lxdY3jIzFb2xLdj/6iZmgJIGMo=)
                          18: iyGn9-N4_Y-74wtv84vIggbUgGE.roa (hash: 0+sbmwNGxEETCuI+TbmtpOScQW3Ga70I+RwZkGrwt4I=)
                          19: mM2enVDYdLiXBKAs6x9oVxUDYoc.roa (hash: 8WzLZPt1oUUmxk4YfWhm8jgi6Eau9QV4/cHfIxSx6Rk=)
                          20: nvGMbscQr-nCRZKJCx_sXVAuXnM.roa (hash: FEjJqoH/uFbjUlp+UiOuar/ZgJYrfKdP4uZu1K+Z/R4=)
                          21: uRSWH2fyLGHoSmbIrZwajOUdCZs.crl (hash: rpDd9BJPDFHfbEL4pkY59zFC2Kf5OUTtuT3JmnJOTgc=)
                          22: vM4pwSi8sw4lUOIAjvajCx7ETsM.roa (hash: fyFTTUciTRmBPzGF2SYSyVt7KyF04gllHZfanVt+Ptc=)
                          23: wD8nYbbqM1KLj38YM5LFeps6dvg.roa (hash: XKfem7e78QtcKfKCo2GBRZOY9h90lNcWcBElf0PBnV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:89:4e:ef:87:25:ca:30:37:9d:09:d6:e5:6a:f4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
        Validity
            Not Before: Jun 15 17:00:44 2025 GMT
            Not After : Jun 16 17:00:44 2025 GMT
        Subject: CN=daecd304f493df9c01125bf611f011666384d235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:10:e1:c0:74:d3:03:49:b1:ee:a8:6d:c9:
                    19:e8:dc:a9:fd:cf:f2:3f:9d:87:c5:a9:7f:01:e5:
                    78:d3:6a:69:55:47:a3:66:d0:59:c2:f2:2b:7f:64:
                    79:98:80:eb:c4:d7:d8:f5:3e:82:23:c6:4b:1e:24:
                    2c:5c:1c:ea:81:21:bb:68:1a:28:dc:26:dc:7c:30:
                    be:05:5a:7d:0a:9a:02:e3:a4:22:87:7b:2c:b3:05:
                    72:0e:c3:7f:e6:ab:6a:a7:7e:70:53:9e:44:5c:7d:
                    13:a1:1d:42:f8:ed:2f:6f:62:f7:bb:a0:e5:dc:62:
                    0e:61:21:c7:a8:84:97:69:51:bf:be:19:11:e8:a9:
                    73:67:04:88:f7:46:ee:37:92:62:a3:f2:09:88:57:
                    a9:7b:ed:a1:50:ae:7b:ec:8d:c3:e6:12:b4:85:cd:
                    aa:4c:5e:39:90:ed:45:a3:7a:70:1c:aa:af:ee:c0:
                    e4:da:7b:76:87:ef:4e:16:ba:08:eb:be:1c:68:bc:
                    3a:3a:86:77:21:88:c2:43:e8:4c:07:df:82:34:f0:
                    42:81:83:94:97:af:ad:f5:4b:e6:56:d1:f2:3e:c8:
                    e0:40:08:4e:7b:42:68:25:7a:14:c6:8c:f7:8c:22:
                    a9:aa:a0:85:6e:54:84:2c:d8:4f:34:95:72:1b:8c:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EC:D3:04:F4:93:DF:9C:01:12:5B:F6:11:F0:11:66:63:84:D2:35
            X509v3 Authority Key Identifier:
                keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:22:57:9f:22:44:e9:22:de:5d:b0:6a:04:12:e5:dc:a5:82:
         59:c7:98:7c:a7:5a:25:cd:0f:6b:22:ff:c6:4d:6c:91:64:08:
         c6:f9:60:74:ff:23:93:c6:23:40:53:f2:4e:df:11:89:43:a8:
         df:fd:06:d4:ca:6f:03:95:c3:0d:9e:08:22:b3:8e:96:f4:aa:
         cb:e8:32:be:47:4f:8c:00:d7:d2:dc:e9:53:6e:35:43:6d:11:
         2c:13:02:a2:fb:c7:0d:37:a0:49:48:13:63:44:25:70:99:21:
         45:61:a4:6a:46:45:e0:85:e1:4c:8f:22:a3:98:e9:b9:17:4d:
         0b:a7:88:a7:27:df:b0:32:45:f0:16:bd:f9:e5:8b:49:71:c2:
         49:28:ac:72:7b:43:ae:e1:89:93:b3:f4:e5:a9:63:cc:62:95:
         b1:f4:24:00:7a:9e:35:d1:de:3e:e0:e8:cf:70:5a:4e:12:7f:
         f0:d7:95:40:c7:90:18:f0:c1:66:80:1d:65:aa:45:43:2a:a1:
         55:23:46:25:97:6e:00:d4:5a:ad:d2:90:7e:d1:a3:c9:c7:3d:
         b1:53:ab:0a:57:35:40:cc:ee:04:2e:25:e0:8f:d0:2a:12:1f:
         70:91:ae:0b:8e:1b:35:37:9e:8d:b2:c3:b7:b3:41:a5:ff:4b:
         ee:2f:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:29 2025 by rpki-client