Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          qGHY+NplBMpWCJ/ndU7vBXnkkA9Uczb3KGfsh3WFO98=
Subject key identifier:   94:5F:11:EB:3A:0B:93:1C:39:17:87:D9:08:AD:25:5D:33:40:F4:4F
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       019770AC51A1322D142595EDF085A396CB45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          0BDA
Signing time:             Sat 14 Jun 2025 23:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:30 +0000
Files and hashes:         1: 2WiO1f5EhQssmjwts2keHMtxp_0.roa (hash: NWrqOovHfICNJCyHQiM+ZP3uBBl6rhRnwWtyhVM14Ks=)
                          2: 3AOOtYTWHUkwb_ukWlmm-pchoVc.roa (hash: dLeS8pBtm5oY4QvpEAkbul72HIrvSThofwAjFyamsOo=)
                          3: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=)
                          4: 62FFRbLMZiAc_YdwN0J8zGIbHPQ.roa (hash: CNhEA8oMJlI+Kr9kCi3nuWGoLgttS1CSckkHhL7fMBY=)
                          5: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=)
                          6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: UNKE4gWY0+1Dm2hDs34z1ObZALc0BwAb0BV8BEoQVVE=)
                          7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=)
                          8: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=)
                          9: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=)
                          10: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=)
                          11: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=)
                          12: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=)
                          13: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=)
                          14: bBfij7COcdTaz-DnHyGrtWC4ET8.roa (hash: SxtaFbLu+enyY4LEwLb32FF12bBUTD4V3sUoQFy2hPk=)
                          15: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=)
                          16: eGVXCVl6aukVP8mO60zACiQMPqI.roa (hash: z8mcscbLEVWWmCc+MHtcdzxxB51JnoAK56OuCjKkOHY=)
                          17: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=)
                          18: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=)
                          19: ldIKIl2hT2hAwQTKrdRlmsB4juU.roa (hash: zq2UnfowZc/m8YEPTF9rVW1m2lxfMiYzzAeVxQdzTe8=)
                          20: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=)
                          21: tJ79cq_yi3A62VekuJ2m1vtMzGk.roa (hash: 6qaddqYc4/Huz35oMQeKPcA4PDeE/OG5YrHssVIrrjw=)
                          22: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=)
                          23: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=)
                          24: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:51:a1:32:2d:14:25:95:ed:f0:85:a3:96:cb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: Jun 14 23:00:30 2025 GMT
            Not After : Jun 15 23:00:30 2025 GMT
        Subject: CN=945f11eb3a0b931c391787d908ad255d3340f44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:54:28:f3:21:66:d8:7b:20:b1:10:b8:2c:
                    ba:e9:54:4c:65:4b:42:e0:fd:05:21:d3:fa:e6:38:
                    11:e9:9f:66:be:b9:bb:25:bb:66:45:97:2a:07:ed:
                    50:89:03:1f:6b:a2:5e:5e:3e:26:ba:c5:84:d9:30:
                    92:a8:7e:31:38:c7:50:49:0a:a0:a6:40:7e:fa:ea:
                    9f:34:1c:c7:15:23:ad:c2:b2:ec:e4:b9:c3:56:74:
                    5c:ca:f0:45:d5:f8:5d:16:23:45:b7:1d:fe:af:60:
                    5c:82:00:67:f8:f9:61:83:50:11:ed:ae:b8:06:3f:
                    65:2f:a8:f4:3b:50:85:dd:9c:14:fc:67:70:21:39:
                    24:de:16:a3:04:43:97:c1:b5:56:1c:f4:41:40:e6:
                    2c:3b:76:2e:de:30:1c:55:24:f8:d7:15:ab:88:68:
                    a1:36:ce:6f:30:e5:0e:c6:ec:1e:02:ca:e0:43:f0:
                    02:f4:c9:c4:af:5a:13:cf:74:f3:b9:5b:d1:25:03:
                    7b:10:e2:9e:a5:bb:5d:28:47:50:9a:62:e8:97:c8:
                    23:27:de:02:8b:ee:8c:b9:e0:67:1c:17:28:fe:96:
                    98:bb:f8:17:3b:c1:1d:f5:ce:70:8b:7a:2d:81:83:
                    f1:3f:b2:15:26:a7:3f:61:cb:43:54:d6:91:c8:9f:
                    ce:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5F:11:EB:3A:0B:93:1C:39:17:87:D9:08:AD:25:5D:33:40:F4:4F
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:da:90:5e:9e:89:08:a6:13:c9:40:0a:86:6b:ef:bd:30:69:
         3f:c1:6c:c5:91:21:ae:04:0e:b3:37:81:a2:72:0e:6f:f9:e5:
         ea:39:56:f5:02:2a:ea:a1:de:37:8a:1f:65:dc:7d:ba:32:b6:
         29:cf:a0:a5:c3:b1:e3:bd:03:c5:a9:c5:8c:84:e8:7f:bd:c4:
         b4:f8:e7:c7:aa:fd:7f:bc:b0:38:9c:17:c2:fe:e6:39:2c:55:
         03:f7:d4:d6:34:44:86:35:ea:b3:9b:12:2a:dc:40:b0:b5:b0:
         23:61:05:c3:37:40:d1:b9:f0:9a:29:d1:1c:7d:7d:4d:8c:32:
         58:94:00:76:3d:d2:42:3e:a0:de:86:41:fe:0d:66:c4:d8:1b:
         fc:da:73:2e:0c:d6:6a:9a:f8:e4:ea:50:b8:72:b3:79:d6:90:
         d7:96:2a:1f:9f:43:10:8c:3e:f6:76:c6:07:c3:54:c0:d2:6f:
         d3:09:b4:96:59:8e:01:ca:e8:9a:77:42:ab:7a:e2:dd:79:4c:
         f6:d4:e4:7b:70:e7:83:6b:8c:0c:7b:df:99:99:df:ac:89:52:
         c8:6e:ba:af:aa:c8:be:24:49:96:a8:78:39:f1:1c:70:5e:65:
         f3:2d:e0:85:7a:88:12:50:29:8b:28:71:4b:4b:71:5e:9f:71:
         b6:4b:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:07 2025 by rpki-client