Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          GiltS1ffOYViwbMWtu7HBrPkTOgcYYdHEHJjYmhRnug=
Subject key identifier:   C8:CE:4E:32:9C:F6:4C:BD:CC:F6:0C:49:1A:19:AE:1E:52:9F:3D:56
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       01976E8769F4B4761A3827C46557EEACF4D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          15A7
Signing time:             Sat 14 Jun 2025 13:00:57 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:57 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:57 +0000
Files and hashes:         1: 1-FVNiQvWEXUQsyhSP2mXL7ZeFhI.roa (hash: h2VWp4VUz/KwikufobsIYuUTWP+PbubtA5kM1+IYNJ4=)
                          2: 1-cC_8sf2Sjlcbm7-DZh4XuYIArQ.roa (hash: 0N5yH6BWqUs7tPNNDSMGPx2mfE/ZRDiPQfeLQl52Wgo=)
                          3: GTiO-SupitdTmKiZ_HKcU4MJuTk.roa (hash: +PZAxnriWNXJlrxxhGkuM8aqghAi9SsDw/xLwTjAVR8=)
                          4: Oe4b0YKTYWpvik3U2IZ6qMIqY0Q.roa (hash: UL3WTeHzd5FXSU3d7socZAKRgjBZ+Jri4TxH4t/75EI=)
                          5: XF9ImwV6WWJIs0xQcjK4t7jAy60.roa (hash: cqd2xtXIiuriNNQV4wixCocQ/6vU5JsRpBkdhH+9z5k=)
                          6: f6ghH_7B3PzM3ktCIJpbMer11MQ.roa (hash: gQOe3jDJjm6Z8U0Sg1BUTciGU/YhoqXEIyyDOVhhKCY=)
                          7: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: Lx4Zu0muNF+6hqAGphysPkjBvcb+z8jgqF5OzAuXZTw=)
                          8: i30xTo-UR4_VbHo8fjprUc4AF6g.roa (hash: a1dsNKX1kvmUfXHRJMRlL3dZirJz9clcR1rF2jPzapU=)
                          9: uhgMFZw8rs0tJvJzvMK6WeU68F0.roa (hash: qV6k2QQIZBdjD0SstNGQRZVonpUjQ86it1wpOl33iLI=)
                          10: xb_V8FoCziLwhsNf2nDbMavL4CE.roa (hash: FYXyUhIT7c2rjGPzDYmHZI9gN0Jm7MertTGE0IiU5ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:69:f4:b4:76:1a:38:27:c4:65:57:ee:ac:f4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Jun 14 13:00:57 2025 GMT
            Not After : Jun 15 13:00:57 2025 GMT
        Subject: CN=c8ce4e329cf64cbdccf60c491a19ae1e529f3d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:c6:0d:64:3d:87:64:55:cd:98:d0:06:b1:
                    48:cd:c2:00:f1:4f:55:55:ad:5d:84:09:9c:75:7b:
                    bc:d5:94:69:8c:38:98:c0:7c:fd:d8:11:8e:5b:3e:
                    6d:58:5a:b9:fc:9a:1c:05:68:27:44:1c:c5:c5:60:
                    f6:b8:c4:81:fb:03:a7:80:63:33:45:ff:52:1b:4b:
                    0f:99:02:2f:ea:5f:60:4d:ab:c4:78:ca:44:b5:75:
                    e9:5b:13:d7:47:ff:7b:f8:3c:6c:5d:2f:4b:6f:77:
                    35:21:c4:2c:de:47:a7:f3:3a:15:7d:77:42:d8:f3:
                    e7:18:f8:88:23:92:f3:32:af:95:08:10:d0:6f:8a:
                    79:73:17:d1:27:8d:10:30:af:b6:2c:65:bf:19:29:
                    0c:d9:9b:6b:b5:83:c5:5b:2a:0f:d7:e9:3b:86:18:
                    b3:29:48:95:d2:23:a4:aa:d3:b3:43:a7:55:68:30:
                    69:99:25:7c:f9:ac:d5:fd:21:d9:f5:ae:fa:f2:c7:
                    3f:18:4c:4a:ba:e7:99:95:35:88:1f:41:b0:84:eb:
                    54:89:13:0c:61:6f:a0:cb:06:90:cf:e7:87:2e:7d:
                    e2:3f:11:7c:6d:b9:56:b5:79:ab:8a:fd:cd:4d:d4:
                    24:1e:44:5b:13:d2:1b:6d:0b:35:a1:82:dd:c1:ee:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CE:4E:32:9C:F6:4C:BD:CC:F6:0C:49:1A:19:AE:1E:52:9F:3D:56
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:af:5d:da:f0:0c:b2:41:34:f9:e8:1f:62:67:05:33:16:
         52:a4:5e:62:56:68:d1:59:6a:78:5f:b3:9c:53:8b:97:aa:81:
         bd:43:65:0a:52:11:de:47:1e:65:9d:da:1e:9e:12:ec:8b:a8:
         e5:e3:57:52:19:9f:d3:99:b1:f7:44:9d:7b:13:37:f7:2f:94:
         1c:42:0a:dc:23:d7:f2:b8:31:9d:3a:dd:fa:4c:91:77:c3:7c:
         6a:4a:45:57:59:64:5d:df:4f:12:3c:7f:5d:52:f5:13:c0:c0:
         e7:2e:ed:dc:eb:06:10:67:10:a4:31:99:aa:f2:ae:d3:76:5d:
         0d:59:af:d8:d1:70:b0:c8:b6:08:61:d0:0e:bb:b6:a1:b8:49:
         b9:85:b1:68:2e:42:6f:1d:3f:3b:bb:81:ed:1f:bf:b1:7c:43:
         ff:fd:a6:31:05:d8:f9:3b:6a:a8:f7:ba:51:ef:65:0f:d2:71:
         24:3a:9f:ff:9b:08:d6:53:1b:b2:87:7f:e1:58:1d:86:bb:e3:
         04:e9:85:b1:41:7e:0c:a0:74:d1:2d:08:e4:60:02:54:61:8d:
         f5:a8:36:38:27:60:6c:0f:f1:3f:14:a5:45:55:8b:bc:74:62:
         24:d7:86:7e:a2:54:64:b8:96:d4:6c:b4:08:3c:e0:57:9d:22:
         55:33:fb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:44 2025 by rpki-client