Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
File:                     OroRckcuqAJl0SmCln3gqLC8WQE.mft (raw, json)
Hash identifier:          rgq0gtvd+/NYvKppK+UCxmN7H8QKoA3a9O2Bm36rlJk=
Subject key identifier:   DC:80:65:48:FA:81:75:28:EB:03:C8:B8:1B:B6:C6:0B:26:FD:CC:1F
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Certificate issuer:       /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial:       0197868F1D6DBEA16AF323410E911C8AFCF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
Manifest number:          15C5
Signing time:             Thu 19 Jun 2025 05:00:15 +0000
Manifest this update:     Thu 19 Jun 2025 05:00:15 +0000
Manifest next update:     Fri 20 Jun 2025 05:00:15 +0000
Files and hashes:         1: 6BTZ5AaOEQekUYjUxJjubDiWWfg.roa (hash: Eh6waq+vwtUrAUXpLnHirNMkZ/QKST4EehD+sMDaTTU=)
                          2: 900joE2kII87-kVZQYJE9AVHaUE.roa (hash: 0o1fmx1wkON/yzQU3eDlgv0XvPCaxuqScr/6FHEDSAU=)
                          3: Aen1ptkAkBXaq1czhGP-DVw8RvQ.roa (hash: 8EPbflQikNMAMGUCzGjmJV+qRBy9a9YNzod2d9hjXyA=)
                          4: F7JXtoqYAnfTjuecjcOTuo1qCkw.roa (hash: OEFPqG5xW1fNzTGExyHBZVtQ+HvaVdHh6rDRxCBiNXc=)
                          5: FXMeaT7mqLaeoQKo6gjW0hUo-Kg.roa (hash: ai3NnXxTZaMRdq2X8gaZ6slmnlshdaCfmTM1E9B0TBc=)
                          6: IMZsLst-i3zLkfnvqryos4hVmUw.roa (hash: i5YfMzxIGSy0m8WqoPL2plr7dDe0Vlfs7aCvCgRQqk8=)
                          7: JIOTHuHxMtqBMx5mXgc6EZ3pd2k.roa (hash: DCxRs8r4ffmbTDh+ON4DjiCp8BK/u4NKeBfbW9CrT2I=)
                          8: JLwtTQi8VNVHhaVDu0kN5D34KjI.roa (hash: 8veoK+i1W9Fs1rw5NS+3eYVP4YbxUV5xVG3SSE+qpqo=)
                          9: LWbif0B1GjIE18I7vwELt-c9l-w.roa (hash: d8IrvYkKiZyuhb8k6fQb7RXqEUdNoQvoKy7SfXCWzdQ=)
                          10: Ln8QlB3P0RX7C0x_g97ovwG-MN4.roa (hash: 8wye3Q/ZQvQqLzNWOjfsPRuB58YYCzfOe1zTV5GvyPs=)
                          11: OroRckcuqAJl0SmCln3gqLC8WQE.crl (hash: dR1/NLk8oJxOamwb1FtNdGLcZTx1r86qaGnw1Q11rKw=)
                          12: V9Ig1pXUbN50LMFOuKXdZ5mkCig.roa (hash: y87CF5Ma433/41wTDv6chywUFnZfYbGNq95lOWwWnTA=)
                          13: bpV8b7AtbhXdGFm5LUSeu0J87Js.roa (hash: dlLYGpRMWUx9YdT08Q5m5VPvbiMJH/5+liPq9p5+8YQ=)
                          14: dfVrorkgDXq-b3-QlttQA8sgW4w.roa (hash: 5H66iIzqCMGoksSoQLOuKiVcrRxOIQ4J1jOJkX6At50=)
                          15: hs3PS0PRyRLIwptbOrxYgVXbpUk.roa (hash: EMDVPaUHTTvlVBnvbCHPVNncgqYud935PafdYG6UmCo=)
                          16: kW066m9DXa5QVOUSyinFWrQGR_k.roa (hash: qDkdXP2dueHR9dJeUVzMjqaWnTwJkS158Rm7QFLdZvQ=)
                          17: ljrsKkBLXJvYvcdZuX8JWasQFe4.roa (hash: vBmx7C2e8PSmXtfZdupHaynZdSjLgLaFpSb8R62FCP0=)
                          18: mu7b1tGZ3fBLWT4iPiraLyQmVpw.roa (hash: Ly2x9jR74YwOV4U+ROUU4l7SCpCPjv3zvv96qJ1in/E=)
                          19: nPqUpg1aR7hnc6HTlLtA9BuMCTE.roa (hash: KwhXJO05kwAc7WcWDrPEDKsnvptXZGJFAiZEMHkerdU=)
                          20: nfdXz1IG7b_z6nn3ZM-dFbFrj0o.roa (hash: 16xUnfqni5W44fEXrAqCEswn3RFCkRKYxijUqdQX43o=)
                          21: nkeXVKF6zzQCYL4BHAHTb24meB8.roa (hash: pcIicCRvZsHCwkYq5WwVoVzOQXOI/E6R317Mea33uac=)
                          22: w5_xzg68siU1xwo2TRNx9ptuZUg.roa (hash: dz0710YGDAoK//WB0wD9yVfkTEtuo0ioNy/ODQjxKRM=)
                          23: zMLH0Z0n_ZfTiWpxjWDNCBm8FP0.roa (hash: 1zSkkqDH7rhfTGP6CblxxApp8yosaiHxrLIiFpb9d40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 23:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:8f:1d:6d:be:a1:6a:f3:23:41:0e:91:1c:8a:fc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
        Validity
            Not Before: Jun 19 05:00:15 2025 GMT
            Not After : Jun 20 05:00:15 2025 GMT
        Subject: CN=dc806548fa817528eb03c8b81bb6c60b26fdcc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0b:2b:62:57:7e:e7:70:54:8f:dd:97:05:63:
                    f5:a4:22:80:9d:ea:86:8d:8a:27:86:d3:67:e0:09:
                    c6:7f:07:02:5b:ea:50:db:5b:20:ce:5b:0d:fe:99:
                    28:7d:aa:bd:c8:fe:3c:55:b8:14:89:72:2f:e5:bf:
                    70:08:49:88:93:65:42:7b:b1:cb:1f:76:c9:7a:b5:
                    95:30:a9:83:41:93:ea:db:77:7a:83:6f:65:c8:85:
                    d1:c3:2e:11:1d:fe:1b:e8:28:94:b3:37:bd:d8:72:
                    8e:ce:10:45:98:f6:e4:83:f5:32:0d:8d:0c:f1:e1:
                    2e:ca:e2:03:95:4a:3c:5a:43:46:fe:ef:05:1a:67:
                    8f:51:b2:e2:de:5c:e4:5c:bd:7a:ec:51:ce:57:4f:
                    23:31:d8:62:13:08:22:f7:3b:5d:8f:d2:ff:70:39:
                    99:14:44:3e:fc:2c:7d:83:0f:82:7e:cb:e6:ae:ef:
                    3c:11:8d:20:2e:01:e6:76:0a:00:08:f4:69:93:eb:
                    52:ac:ae:47:7d:4e:dd:a3:e0:c9:9a:94:8a:a8:ec:
                    8a:ee:de:20:b9:1b:98:70:ff:3f:d3:96:89:0a:b4:
                    a4:90:0c:09:2e:52:70:90:17:41:40:97:42:e3:ff:
                    b3:86:5a:0e:90:f6:a9:90:49:06:56:8a:a8:ea:a9:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:80:65:48:FA:81:75:28:EB:03:C8:B8:1B:B6:C6:0B:26:FD:CC:1F
            X509v3 Authority Key Identifier:
                keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:c0:35:a0:f4:54:17:21:7b:72:5f:0a:a8:9d:b0:30:5d:
         73:ed:e2:f4:f5:38:2d:e1:06:40:92:70:6d:49:50:5e:85:26:
         f2:7a:01:fb:c1:0b:af:61:ed:be:76:98:95:da:52:f3:42:c9:
         a6:14:10:df:fe:3a:07:3c:4c:e1:05:83:9a:7b:8a:2f:bb:b2:
         c6:4f:0e:fb:e1:2e:5d:20:a0:2c:f4:3e:b1:65:02:ef:f4:d4:
         b0:69:04:7a:d2:9b:81:37:cb:37:fc:5a:f6:05:48:d1:0f:5c:
         e6:74:14:70:eb:7d:83:4d:bf:c3:5d:ed:26:98:16:95:31:85:
         42:33:fb:dd:dc:4e:7e:2b:14:45:6b:bb:eb:18:4b:fa:6d:9f:
         d0:53:0b:b0:cc:57:43:e8:99:6d:a8:55:55:6a:92:06:90:5b:
         1e:f3:87:a2:c4:9b:00:a1:59:15:9d:fd:b6:58:fc:d9:38:f7:
         84:f9:7e:bd:49:68:0e:9c:f3:e7:1a:ef:e0:af:b4:a4:5b:72:
         00:2b:4a:45:fd:c6:08:e0:77:5a:1e:6d:48:b5:d7:b7:36:f5:
         1f:2e:80:e6:79:26:8c:83:5d:28:a1:25:8f:3e:39:72:72:fe:
         49:ba:c7:6d:f7:d8:ce:ee:cc:77:d9:59:4b:8b:17:46:ec:69:
         08:b0:f5:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGjx1tvqFq8yNBDpEcivz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjUwNjE5MDUwMDE1WhcNMjUwNjIwMDUwMDE1WjAzMTEwLwYDVQQD
EyhkYzgwNjU0OGZhODE3NTI4ZWIwM2M4YjgxYmI2YzYwYjI2ZmRjYzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggsrYld+53BUj92XBWP1pCKAneqG
jYonhtNn4AnGfwcCW+pQ21sgzlsN/pkofaq9yP48VbgUiXIv5b9wCEmIk2VCe7HL
H3bJerWVMKmDQZPq23d6g29lyIXRwy4RHf4b6CiUsze92HKOzhBFmPbkg/UyDY0M
8eEuyuIDlUo8WkNG/u8FGmePUbLi3lzkXL167FHOV08jMdhiEwgi9ztdj9L/cDmZ
FEQ+/Cx9gw+Cfsvmru88EY0gLgHmdgoACPRpk+tSrK5HfU7do+DJmpSKqOyK7t4g
uRuYcP8/05aJCrSkkAwJLlJwkBdBQJdC4/+zhloOkPapkEkGVoqo6qmI3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyAZUj6gXUo6wPIuBu2xgsm/cwfMB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUrANaD0
VBche3JfCqidsDBdc+3i9PU4LeEGQJJwbUlQXoUm8noB+8ELr2HtvnaYldpS80LJ
phQQ3/46BzxM4QWDmnuKL7uyxk8O++EuXSCgLPQ+sWUC7/TUsGkEetKbgTfLN/xa
9gVI0Q9c5nQUcOt9g02/w13tJpgWlTGFQjP73dxOfisURWu76xhL+m2f0FMLsMxX
Q+iZbahVVWqSBpBbHvOHosSbAKFZFZ39tlj82Tj3hPl+vUloDpzz5xrv4K+0pFty
ACtKRf3GCOB3Wh5tSLXXtzb1Hy6A5nkmjINdKKEljz45cnL+SbrHbffYzu7Md9lZ
S4sXRuxpCLD1cA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 07:03:14 2025 by rpki-client