Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
File:                     DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json)
Hash identifier:          RX9YvTqFXhc2r1evS1OC0iKjN7WJiU3chnYgmnf/OqU=
Subject key identifier:   6F:41:86:0F:16:AC:DC:F5:AA:E6:5F:0F:9B:3B:E1:A5:D6:50:EF:A8
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Certificate issuer:       /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial:       019768F2B5C581F725347F10BA06A5DAACB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
Manifest number:          1597
Signing time:             Fri 13 Jun 2025 11:00:25 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:25 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:25 +0000
Files and hashes:         1: 5M4zCnvvjSxCYBlFbnwQpZ9UlkM.roa (hash: CTFwCkXzu4XeQNbM7r22BlzBrhJGIUU61enUxp3Rq3Y=)
                          2: AON4ZpKko42JqMxXWasdP_Q-hKI.roa (hash: VZV7yGRp6BiKtFz+0aFvdEjnsGcgf2NRUmspoO4jVi4=)
                          3: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: kDMfhd87XlmFfZkK5gP0C2t2gRcgpF/fdl+xAJdLe/g=)
                          4: FV89yKEnJJf8cFjvR9Vki0QO9t8.roa (hash: k3tkxxzDkpYNhsYpf0KFRZKMIMyT/JEHuIuOCtSMZvE=)
                          5: TnsP3c8ljtDfwNyWoGa8UfiAr04.roa (hash: BFEKTG/BJ8TYYcLpMrevk8B4J5OsYLzQSOr+EgTvqyM=)
                          6: V-GANZk8zgRBCmWdgtRekVv6Ieo.roa (hash: 0/Ye7uv8t9dKqIOJeC/D0AbpxDbyr1f7PAdt2Lxz/f8=)
                          7: XXMqKNWcdHK56ZOW6uSXt0tZOk0.roa (hash: SkaYwFtEJ39Bl8BfD8EMwUBVvSDTMKzH8kLosiMJZHA=)
                          8: Y0C-htCfvnbnmYNv0PkfbKtYljU.roa (hash: 8fWI3mxeJyTLiMswCNgTBvpO5nBn7ysdbrCOfcMFa7g=)
                          9: ejo_WiL0taGonFpAlSb4AsHajYw.roa (hash: UT0ywWFaCFxzkeiWdcVQIkU34SOJHmdiNYALHbKkEe8=)
                          10: gYyJwgZGJ9e3XKPVSbvM9IXV0Vg.roa (hash: XaSrY4omx3p/NThHjupfWF2WRx+gyMwNeud1bNhsOiM=)
                          11: mjLB-bEMP_mAjMHYYkuWnHyH8ss.roa (hash: zmpcdaY+H694vIvld+B7EW6G3QZz1GKWPGGaCzm8/dc=)
                          12: o5cnjI-DlfovW69O4E5TXamicdg.roa (hash: TjWMnTfVEIBVkMdtr8uICbCS+ryyiE3b2rYloeDrNhM=)
                          13: pt7YpGM2My2PdDyCBGt2NmS6PdY.roa (hash: P+B4U+0XYxhQOjAD9qo+XbXRvRXuvftqWPsCnQZHWFA=)
                          14: qzYD-LxdoTjeN2r93iyR-gO4B7Y.roa (hash: 1OcWIRpS96AM24Ho5HdtDu6H5GRkPbH/wR9BNvLn/RI=)
                          15: uEbXlLvD8Sc9kox45dMnk33Zux8.roa (hash: 580EDzoGmK5uM1ZDlMJ39w/BJcyyLtvAm6jFzIXr27k=)
                          16: vAvbhkQvD9TsQCZ0NvsYWeBVCLo.roa (hash: i7Z2wCDmQVQI2Xgo5GUOLsxXyGkjjHm7KLwFkNy/T6g=)
                          17: vHzjveqbJGroW6piTZbIds7wEKk.roa (hash: XYFVkAOYJxVM8Jwz7xbLW1xZU2LkFFc9heO9wO59KBI=)
                          18: vlQbTGoH0Vj1qqoPxW12Go419SU.roa (hash: yzCuwoIenHk5QPabBRQ4pSAAy18lkp48R8GiDYTob+8=)
                          19: w7OtAH3XDnsruYzhRehG7KfOZOU.roa (hash: pQnzeIo645NizwvlTF/+oK4TZpKOtLd4d1aL7PZuYvU=)
                          20: wIJzurEZu5ljpd2voxRvOici9Tg.roa (hash: VhJ/prLjw56z328WuvD7zS+8llDbdFytlZ2uHrF+o4s=)
                          21: wJwKd3mRFAiyh0yT-CL0-41LB7g.roa (hash: pcb8pjQEeUpJqcIKFYsbzwPQsskL+G0BlcwGT/5RqDA=)
                          22: x8Ehvzac4KgcLDOSfJFXxTgoNWM.roa (hash: axB+Vat/V1mBISzGYByuRFE49JATxD/IbWF4/HQFFxQ=)
                          23: yOtM9OR55m-QpbUpoY6gu7Ta_6k.roa (hash: onB5LZ7uG6aQ1SpExMba0NjrAM17D+dpxdTNUEhkidk=)
                          24: zCQB2Z-8_P9hDChicXvuOZrXDuA.roa (hash: xLi/3bpm8xQ3RrvIw5z5om1eNWJoJs3iffU2nvNtYx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:b5:c5:81:f7:25:34:7f:10:ba:06:a5:da:ac:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
        Validity
            Not Before: Jun 13 11:00:25 2025 GMT
            Not After : Jun 14 11:00:25 2025 GMT
        Subject: CN=6f41860f16acdcf5aae65f0f9b3be1a5d650efa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:74:65:7e:91:30:0c:1a:49:55:28:65:13:
                    0d:fd:a3:66:67:14:6e:66:8c:22:06:e6:54:9d:19:
                    17:1e:38:fe:cb:21:57:26:7f:9f:af:5a:0a:bc:34:
                    04:6f:ce:72:70:b4:7a:0d:5a:b9:2b:14:52:42:27:
                    84:ee:43:10:36:d8:a9:c5:54:07:3c:f4:bd:c7:7a:
                    c9:3a:da:d2:20:2b:55:b8:98:ed:11:ca:4f:a6:30:
                    76:33:ce:08:1b:fb:97:13:52:85:1d:ad:c5:df:c5:
                    46:9c:08:23:a3:55:08:26:08:02:cd:bd:9f:60:c5:
                    e0:b6:e9:e1:0b:a7:b5:1b:78:95:d4:ba:2e:8f:dd:
                    cb:95:db:b5:c3:9f:b2:e4:84:fb:35:8f:6f:25:11:
                    a8:98:41:24:f6:8b:fa:bf:7e:f9:53:04:d0:88:02:
                    b1:5b:91:86:ef:b5:7c:5e:5d:64:64:6c:44:66:96:
                    e3:33:ec:43:92:01:fa:d5:e7:89:42:41:e7:a9:55:
                    aa:af:11:ad:c1:e3:1b:38:6f:59:a7:07:30:49:c2:
                    b4:99:72:60:07:3a:c6:7b:c0:6d:c2:72:ea:5c:37:
                    63:47:8a:99:b0:21:29:db:5c:01:df:1b:1c:85:36:
                    5e:7d:14:96:b9:21:4f:48:ad:ea:4f:f8:26:23:96:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:41:86:0F:16:AC:DC:F5:AA:E6:5F:0F:9B:3B:E1:A5:D6:50:EF:A8
            X509v3 Authority Key Identifier:
                keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:93:a9:65:78:bd:ec:c8:4c:b8:a0:1d:bd:38:02:4c:d4:30:
         8d:e9:19:8e:bd:4c:0a:be:11:90:98:44:d7:e2:00:16:09:00:
         74:6e:ec:9d:72:9d:09:41:c8:98:71:2e:2d:6a:42:b2:5f:39:
         54:a1:ee:6f:64:88:b6:34:cf:26:5b:ac:a0:da:f8:71:c6:29:
         f5:00:c8:a3:46:27:9a:99:90:65:06:ae:41:02:89:e7:18:99:
         3f:ca:2c:fb:c8:3c:c6:bf:c9:b4:b3:76:40:8a:3b:d6:94:29:
         9d:4d:21:de:34:52:c2:1f:4b:ff:63:d7:46:93:77:88:dd:51:
         41:4f:9b:1f:f7:c7:ad:de:c1:8a:5a:ee:49:27:0b:08:99:59:
         20:5f:9e:53:95:03:a2:ae:1e:2e:ab:1d:d6:d6:a8:e9:3d:1b:
         23:91:3e:a7:8b:5e:5a:19:8d:4c:76:18:3c:5a:3f:14:bb:32:
         2f:68:bf:fd:8c:68:93:12:86:03:70:17:2f:9f:0c:5b:e8:bc:
         ea:96:cc:95:70:68:71:9a:2c:1b:3c:bf:ef:1c:65:b7:1a:e3:
         e7:ac:7a:9c:f3:69:4c:15:da:44:a3:87:71:7d:35:cc:e6:8d:
         bb:a9:02:0c:f3:88:a4:cd:b0:16:13:57:a5:e8:c6:f5:78:de:
         f3:eb:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:32 2025 by rpki-client