Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
File:                     b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json)
Hash identifier:          qvizl6s49FWc+8RVedvdYAX3tjlG5xGW9RObMhKX3AA=
Subject key identifier:   9A:C2:67:A9:13:2F:87:FB:6F:FE:89:D9:17:C9:C3:EC:84:02:B6:B9
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       0197722D1B461CFAE33757311E2E25D92BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
Manifest number:          15B9
Signing time:             Sun 15 Jun 2025 06:00:47 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:47 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:47 +0000
Files and hashes:         1: 0Abj6PSR4FyJUqM6LoN6KFa-26E.roa (hash: 3N4/akmiC/u7gL1HF+D/mYuikLJRGoPmYVruDqzajtA=)
                          2: 1-HYjW61poyKPMhvfx7U4CngkbXQ.roa (hash: FgaQ7pllPxrtYs+K7a4T0YujtsmGhQlX0nAW+eszuLQ=)
                          3: 1X78ozO3_5ULJTTX4ARholYkMtY.roa (hash: 1YfjPO55+mmSYnYEpQNn/8Y7Ymp0JTDMtIPTDKYWHh8=)
                          4: 3yeC5jM2ksuqKR2Zh5IvhgGT7kM.roa (hash: aly6yVEpJfsikwPOCEOA8sYqzyulJ58cobvGMlp3Pfc=)
                          5: CRniCcWOMEu_O5DQOvVrjuaGUUY.roa (hash: O0dkbyqYi64iii79jbjPeoIAejefEkUri+ePo9W2qtM=)
                          6: H6AhUHbx8OlryRkBD15AK_97AFI.roa (hash: aVuSxMtEE3jtCIFUPkZzKs9s0u5aGihLcG9skQiW4iU=)
                          7: IE5Ot6kXSpSm_XTJaCWCEcClZ1E.roa (hash: ecVDNUR7HlsILjWVcvUtVx/095hxRc4P38CIzJWANj8=)
                          8: K8brr-FPsMEnGF0kbZo88qS6lTk.roa (hash: qW/T11RMV283PJtyNsGcccWeoOYrXus8SlIyII3hPJA=)
                          9: MUTo9Ct9l1WiyIQQ6nBvZnM1A-M.roa (hash: HPVZ7aUwttQYyFcDKuNoILD9oscZW5Yi/RTFS1BnUw8=)
                          10: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (hash: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=)
                          11: RzzP2UDDSAPrZWNFm6aBz91iMgQ.roa (hash: 1RDkfiEzt2ZEB4LXorNIAFk4fcDKeMEBcQ7w1edzRtU=)
                          12: XKHgN2jT3_6QMfOgHKrS1JlPtdM.roa (hash: 0/lku7LnO6lIZwW3HNYBW2LCc3aSui+jPA3GCkogDfQ=)
                          13: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: BMHt1byXA37zO3O/UmRuWClT0COHFqPVnhh33M/nQCc=)
                          14: hz97jgo9bqt0uT-ArAt9KzOXsP4.roa (hash: bhze+d6pD3xd6tpzBiM9HUGCjaef6tJylvnHETr5GxE=)
                          15: iNYkqcS0PNGby4-GJu8UVMQggRY.roa (hash: nyGk+qZgZIHoVA2y4TNTNY21X6xYGa600Okb1SMJu44=)
                          16: wEFBReYub_TeCbtnkjQHEDS6zaQ.roa (hash: 5e2lfQsxA6BsgP6dDtPIK0Ql9foij6lPOeMn2Q1JhkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:1b:46:1c:fa:e3:37:57:31:1e:2e:25:d9:2b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Jun 15 06:00:47 2025 GMT
            Not After : Jun 16 06:00:47 2025 GMT
        Subject: CN=9ac267a9132f87fb6ffe89d917c9c3ec8402b6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b8:e3:ea:bf:11:22:f8:6d:c7:63:42:e9:72:
                    64:b9:00:a4:2c:cb:91:4c:9f:0d:4e:fe:6a:05:a9:
                    95:80:1f:81:f8:83:74:4e:f9:00:27:4c:d2:87:63:
                    57:32:83:12:b5:35:69:58:b6:ee:91:73:e5:6d:f9:
                    72:e1:b0:f5:e1:b1:58:bd:32:4c:38:32:d9:77:34:
                    26:d3:2e:26:fa:f9:3b:af:a6:eb:d2:be:09:52:40:
                    91:25:6c:00:3f:17:23:d7:ed:a2:26:44:d9:bc:7a:
                    1b:8f:d5:eb:fe:01:29:46:35:da:40:da:1e:d9:b7:
                    ec:f9:84:53:74:8b:df:d1:32:60:c7:32:54:a8:19:
                    18:c5:88:ce:87:f2:04:35:9a:29:7a:50:d6:a9:67:
                    93:84:3e:73:b8:5f:37:55:69:67:f1:7e:d7:3b:d3:
                    df:90:f0:dc:e6:9f:f8:59:21:f6:4f:d3:20:69:1a:
                    23:3a:47:b9:f4:df:f6:54:40:0c:e2:e9:b5:1a:73:
                    d7:8d:6b:83:e0:5c:cb:8b:12:92:89:8c:21:b3:45:
                    e8:47:5b:a7:aa:67:8c:a0:9c:4e:a1:9c:7d:49:22:
                    53:e1:d4:6b:80:8d:47:f7:50:cd:12:88:1e:08:4b:
                    0b:52:3f:7e:fb:ad:25:51:a5:15:ea:aa:4d:80:0b:
                    fc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C2:67:A9:13:2F:87:FB:6F:FE:89:D9:17:C9:C3:EC:84:02:B6:B9
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fb:ae:f1:a1:e3:ac:c5:23:02:c7:fe:aa:b8:db:23:ea:35:
         61:97:1b:5a:71:42:55:94:07:50:b5:56:87:f2:03:0a:1a:f0:
         96:5c:3a:8a:8b:8a:0e:d7:b1:cb:63:0a:a0:48:a5:8a:26:cc:
         34:be:02:e5:23:18:c5:13:10:35:6f:bc:bc:85:5e:0d:08:4e:
         54:c2:a8:2b:ad:7e:ea:22:7c:3c:df:f7:d2:23:99:aa:ea:37:
         9e:2f:56:d1:49:09:3d:9e:a4:cf:f3:95:4e:29:a8:8b:06:5a:
         d1:dc:fd:ae:63:b6:f9:26:d4:7b:5d:74:ab:58:5a:05:b5:eb:
         f6:39:19:a9:87:84:3f:28:27:3a:89:70:30:c9:81:16:b8:89:
         f6:e0:dc:15:b2:11:ae:43:22:c6:10:19:9f:41:e2:90:cb:2c:
         a3:57:a2:40:14:7a:e6:28:25:8b:bf:bf:f7:cd:ec:51:bd:88:
         87:e5:9a:7e:83:99:a4:5b:72:76:05:79:c2:f9:2a:ae:87:5a:
         68:3a:97:87:82:02:66:8a:36:96:33:42:70:71:a7:62:87:35:
         05:e1:82:ab:42:49:cb:b6:d4:1d:1e:1e:23:69:15:b0:26:12:
         6e:18:21:c4:8a:02:e1:80:9c:95:14:e1:ee:47:20:13:6b:da:
         66:b2:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:12 2025 by rpki-client