Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          HUUB9pwNbTQ4+UHw8BekRer8c/MFy8HI2ZEwwPPPMBY=
Subject key identifier:   9C:A6:77:CB:F8:32:B8:43:7F:CB:B6:01:23:95:A5:4D:63:6D:AD:AA
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       01976CCF830EAB88DEE916647604B017BAC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          0113
Signing time:             Sat 14 Jun 2025 05:00:28 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:28 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:28 +0000
Files and hashes:         1: 4xVy8n1nhBpAya1KevWUaTI2tB8.roa (hash: 20aLYH4n1FuIXOWrztzrtcCxRBgx6WLXVkqg5CHqw0k=)
                          2: 52yRIEJtEfgFBpWr58fadnScoJw.roa (hash: YmNixuazA5Vsqwop7vZiylftf51KooRSucAzjd1m6wI=)
                          3: 68M2owrwonGUKTmptsMxSICxvzc.roa (hash: Oa0fedQajgDxkwDeccQyxl6+5J3W6s2tK5cH8eMToVk=)
                          4: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: TdcqAdO+iexMKBnoX1nQUZW8SGuJByfLOpTEiMK8WC8=)
                          5: ExntZfd8HKZJX9NxtffDdUcjDs4.roa (hash: we5TYett/Q2v253FNWM1V1eXU4uCcrPLyP/h5rNmYaQ=)
                          6: GMHzXo7-IPmzYXhPmW5mUb5PMGs.roa (hash: nH4bS8gf7/I1aed2UFJ6bLIZ1f70L3EoTiE8Uj1XGds=)
                          7: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (hash: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=)
                          8: Hqc62MqaiR1ENBvYXYbBphPGFN0.roa (hash: 4i8o9r31Hh5HW+0+aK2z52UE4F0xdqPSMZVRQXOPULo=)
                          9: I5RmTjKFYz79KqLmMtO2U-JhAFA.roa (hash: B1+cDeSVZwC0LcfXe39/RIErdfHZS7Ts0F3A1wzPQzw=)
                          10: LMMZZ3U_VXbcFd48owkZmwcU1hE.roa (hash: CfbUK0Fwv8dagnk4QuCJP/+wm0mVrn+IK19LJoG4Pqk=)
                          11: MGKJpERDE2jnyWueLH30KtbVtvg.roa (hash: 1ThnV+vZEowhnC8JJvBU7EgcOXPtpnTjvVoY61XcB6A=)
                          12: OyEHyocNzfaASvSX9ghIhZoK7Vg.roa (hash: LVpmM0BObmcCqdx4fHr+ScoOKewYgjGRBFNNC7CN86o=)
                          13: PsmRSosaJeQmzFSK3qy4_ABXXTU.roa (hash: Y7apUM55LCHcQ0UAKmKLhKFwZ/5OJTrUlZSSaxMEOws=)
                          14: SJtR9yDFalD5cZd0JaUHeuQjWF4.roa (hash: o+pZOrweCiX/ZW2TkzQ2pD2uz9mIgJjpPK75RQvDCsY=)
                          15: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (hash: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=)
                          16: WMQxf1zi-Lf6j9Cav2HEsfqjShk.roa (hash: 6N/qUEPFoSq8fQxUA5quoxJstsRBkcyzrlkubzD8xSA=)
                          17: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (hash: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=)
                          18: WjMtWaWVlsclmFUeATa0Rgoi2JE.roa (hash: aFMptd/iDTRFNCht4XhxbuJoCK35XgXERP97iKChGWA=)
                          19: ijWWWaOxCmM3cwDgmzsAAXOTkSQ.roa (hash: EIxf2RrXqw+wZ7wbaiGZ0nlMKgHj8UESgG0wJxy1ReQ=)
                          20: kK6YDKhFK0O4ZVPYiKbnrwP6h6g.roa (hash: eYiZG4qotu5f2pJqUyvz45seHMJB4Y67i3mWJoKdrWA=)
                          21: kxyWOBFXSt-3zO-AhMR-aAEvICE.roa (hash: BJ9CoZ6lS+YtB1ISTorhmQZ2Z80hHtmbVd+Pg8Wn9Ds=)
                          22: nytPIUYQ48QhDLlfVIi6pB18SwQ.roa (hash: 3LFgebPoNXiMAwsZ07ED/DZ73Cy6wJRysoaaEC5cNnA=)
                          23: tPH78P19OMyg8GNH0L_VBBgKycE.roa (hash: lwoKVsQS8cNkbPndBQpdH6UBk/fM9ynr6BdoedkZHAM=)
                          24: uxc5vfve3Si08_1CchI8ifdgJPY.roa (hash: /SI48xsbMIADKemEHZ6Oy1FfH6dit3gQxDwLPx1S1UQ=)
                          25: vYFd8PA0YadUvoZOf5GnUFTlGKg.roa (hash: LwvSvFPd1tZvuor2quDZg75Xtv6mx5QL0g9reG8ijGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:83:0e:ab:88:de:e9:16:64:76:04:b0:17:ba:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Jun 14 05:00:28 2025 GMT
            Not After : Jun 15 05:00:28 2025 GMT
        Subject: CN=9ca677cbf832b8437fcbb6012395a54d636dadaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:ba:96:44:91:43:a0:2d:15:d3:62:8e:23:
                    85:60:3f:3f:2f:98:66:1f:5a:71:83:64:0e:91:da:
                    ca:a5:88:c9:49:68:9c:3c:79:00:23:1a:34:7d:d4:
                    7a:1b:b1:09:2a:f3:9c:f6:da:87:47:18:df:c8:af:
                    6d:6e:2d:4d:55:c3:ec:7f:f7:37:8a:af:e6:3f:b9:
                    bf:28:32:de:4d:25:a3:e0:0d:1b:19:81:01:75:02:
                    7d:82:23:08:c1:ba:7c:ab:5d:64:c1:0b:bf:3d:e1:
                    60:63:93:5d:c9:ff:6d:a4:c4:2e:e0:5d:6e:b6:86:
                    72:c0:56:5d:cc:b9:97:3f:fa:78:ec:b5:7e:8e:ec:
                    13:c7:8a:a9:dc:87:e3:46:05:d9:0e:95:fd:a6:a5:
                    10:f4:b9:65:79:60:98:d6:34:28:4c:c6:19:90:90:
                    a4:a8:ba:de:69:37:c7:c8:52:34:c1:71:1c:1b:65:
                    27:e9:fe:f2:57:42:81:16:ef:4e:47:68:90:64:6a:
                    1c:83:1b:66:1e:5d:cb:a2:ab:c4:c4:35:e4:34:e3:
                    32:72:18:99:45:bf:c4:4e:72:ff:38:57:0b:1b:d3:
                    c8:5e:5f:f4:50:57:35:16:28:22:4d:88:45:2a:29:
                    45:fe:d6:a5:f3:61:98:6d:5d:43:ab:21:c8:9a:79:
                    30:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A6:77:CB:F8:32:B8:43:7F:CB:B6:01:23:95:A5:4D:63:6D:AD:AA
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e7:ac:2a:af:c1:c6:2b:73:a5:b1:ce:c5:c6:7b:30:98:6c:
         03:a6:44:35:b8:8f:8f:73:fe:82:e3:e7:bd:ab:33:ca:67:c2:
         73:03:44:48:05:5f:a7:57:3e:43:fb:4b:17:7c:57:fa:32:2b:
         ac:49:bc:87:bc:ad:3b:dc:04:40:81:3c:a4:e6:4c:61:c0:5c:
         42:70:c8:e9:9c:a7:ce:0f:56:71:1c:83:d8:80:38:51:69:9f:
         94:00:87:ca:13:48:77:21:73:5e:aa:76:3a:7c:32:95:4d:a9:
         a3:e6:b6:82:7e:9d:c7:e7:41:36:a0:30:bb:f9:4c:7e:92:1d:
         84:57:53:be:76:dc:95:80:6e:3d:ef:b0:3a:e5:83:dd:9c:7a:
         5e:95:7c:64:01:ad:4f:3d:8c:c7:0f:62:94:68:ca:e3:4d:64:
         74:15:a1:43:66:cd:6d:81:3b:b2:b1:2b:63:21:05:4e:76:ae:
         fd:5c:60:44:08:f5:ef:2c:da:59:e2:48:62:31:aa:a2:14:3c:
         7f:9e:1d:36:77:a3:a7:9c:d6:e4:54:8b:76:35:1b:b3:d9:c4:
         03:2e:39:47:9e:e0:9e:e1:04:f3:bc:57:fa:3a:63:73:40:de:
         0d:e8:6a:1c:44:ba:d4:b0:8c:fe:9c:06:96:90:b1:b8:d6:2b:
         d4:66:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:57 2025 by rpki-client