Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
File:                     u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json)
Hash identifier:          1jrRVc4yytz4A0RTqixayNBs2nY4w1NSOav+qhjTi/0=
Subject key identifier:   4D:8C:E9:3E:0C:16:6D:45:71:70:6A:82:39:EB:22:FD:E7:11:42:B8
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Certificate issuer:       /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial:       019768BBE842BD14558777A7618B63A81F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
Manifest number:          15CD
Signing time:             Fri 13 Jun 2025 10:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:34 +0000
Files and hashes:         1: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=)
                          2: 3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa (hash: 8QA8TR1b1eaSEAsPrBsT2EeJQQNKv/ChzK9Nd3Kvl/4=)
                          3: 3cYEcx55Jeov9uoHhaE5j8d-Hls.roa (hash: yy+pSOPQxwEIkgPGY3M7bj7jp1HL8fwmOalEYO4eOrg=)
                          4: MdYXP9JDqyEnQSSpfC3vQstDRu4.roa (hash: 9CrtuWJI6l7IbdwDLorSOiVfWXkvbfh9OjjPb0sDWaY=)
                          5: PbW71RIBvB328VTIPh1scqZr_24.roa (hash: ZhoUQFHnvxU9klhLxoI/zN467hf68pEuS9x78HwJXRs=)
                          6: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=)
                          7: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=)
                          8: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: Y/muPIljEpTWLWyFIXnFPgCrmh6ksm76KZ1xd0Ve89Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:e8:42:bd:14:55:87:77:a7:61:8b:63:a8:1f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
        Validity
            Not Before: Jun 13 10:00:34 2025 GMT
            Not After : Jun 14 10:00:34 2025 GMT
        Subject: CN=4d8ce93e0c166d4571706a8239eb22fde71142b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e0:40:5f:dc:04:05:74:f8:02:e7:fa:bc:35:
                    5f:26:8b:9a:26:19:d3:1c:e1:c8:7f:c0:0e:4d:51:
                    19:72:1b:e6:42:40:ba:80:d3:d2:99:c3:6e:c9:e9:
                    b8:64:97:c5:25:67:4f:f5:61:31:a9:aa:c1:d3:35:
                    a9:02:6a:85:fa:b6:74:ec:de:5f:0a:97:60:31:6c:
                    c3:38:44:7f:49:64:e6:e4:7a:d4:b1:d6:8c:f2:1b:
                    20:9d:29:d9:f7:f9:b3:99:bd:db:b5:98:26:e2:f2:
                    ff:6c:3d:57:98:92:1c:1e:7b:50:88:29:47:69:56:
                    74:96:f6:f0:cf:ee:6a:c8:ff:4f:a0:9f:24:7d:1e:
                    e4:4e:64:e1:c9:89:02:1f:7e:b6:ae:1d:dd:52:52:
                    7f:19:93:01:c7:6f:5a:c3:06:67:9c:44:b3:ea:8c:
                    be:ef:03:79:b6:35:2b:f2:a0:9e:8f:e1:8d:5f:b0:
                    65:85:ab:50:26:13:a8:79:03:7f:ba:5b:3e:6a:bb:
                    c7:22:3e:45:a7:45:92:45:22:b4:9d:20:0b:59:96:
                    07:bf:d4:33:f2:bb:40:9a:4e:f0:ea:7a:e1:44:cd:
                    56:55:8b:c5:9d:0e:0a:68:94:02:74:d8:06:0e:08:
                    07:86:01:5f:10:7f:e9:40:f0:cc:1e:dd:4e:fa:a9:
                    91:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8C:E9:3E:0C:16:6D:45:71:70:6A:82:39:EB:22:FD:E7:11:42:B8
            X509v3 Authority Key Identifier:
                keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b9:8e:70:c3:39:39:56:4d:fb:47:48:a5:57:6d:ac:b9:5d:
         d1:55:85:4f:e6:ec:aa:a0:56:1a:3e:3f:51:46:86:56:d1:ff:
         10:83:85:b5:fa:96:d6:0a:e1:43:1c:c6:0f:bb:1e:bd:e0:2a:
         48:b8:0d:2e:28:77:48:a6:38:33:bc:5b:ec:f3:07:b1:04:14:
         b8:a3:91:52:0e:fc:63:6e:6c:b0:52:cb:74:71:03:de:c4:18:
         de:62:e0:56:e2:13:bd:08:bc:7e:12:83:aa:d9:b7:e8:e7:57:
         6e:af:88:38:0c:94:37:22:d4:d9:0e:57:ef:bd:a8:6e:4c:a0:
         dc:2f:c4:71:b0:f6:1b:9c:c0:0e:e4:59:e5:93:39:19:13:54:
         f0:3f:2c:97:bf:a7:3f:1f:f2:83:96:79:9d:e3:8b:b1:8c:3c:
         b6:61:f8:99:b1:bf:50:33:de:31:a6:a8:e4:02:c8:94:92:30:
         1e:50:5d:10:98:3d:6c:8f:02:0b:c5:9f:59:22:58:e6:d9:83:
         f9:cb:b8:ca:a8:bb:e2:f1:b9:70:87:6b:dd:cb:5a:06:af:ec:
         5b:cc:aa:e5:2d:7e:cd:ea:4e:cc:77:5c:ce:9c:83:0c:41:a6:
         32:42:bb:8e:c0:0b:09:9a:fb:7e:4d:0e:90:23:bc:87:79:d5:
         b9:f1:cf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:00 2025 by rpki-client