Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
File:                     LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json)
Hash identifier:          d/jCpAi3fONK56IexIZ8bqyhBNwBGLdzeQkVnI+EdtQ=
Subject key identifier:   68:5B:40:76:58:99:C0:19:37:C2:1A:19:BA:27:6D:C8:13:C8:74:54
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       01976961AFAFDCDDBB9107CED3E7579D635E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
Manifest number:          1510
Signing time:             Fri 13 Jun 2025 13:01:39 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:39 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:39 +0000
Files and hashes:         1: 5NarqgL1IqRhroqsljH0A9V5qCo.roa (hash: 8kRquWjA2VpTsIouS+9omLPNkeJK9gTo7+86zZ6sCIM=)
                          2: 6IT_BzvklmTudv5oWhsnwF3a-HU.roa (hash: yHMxyci5MGgfPQNCjiVcx+HG2m+XK/ZE2dtlZ+9kpiU=)
                          3: 6_ol7Z5xqC1IIH-IRx34A-DKJcI.roa (hash: XecDVlXcHRTe3uKLJfofxrPQJllwwj7/IR6Dd2oXagI=)
                          4: CufnYSstlNtENOE9efd7-2ln8Es.roa (hash: z8qQP+b43sULkWDkQAPO4p2CYsOjqrih9Z+imFI0Iok=)
                          5: EHwltC08ilFwg74PNzNRyR9hVJY.roa (hash: kTVk6RwXEmFkAsbQs66VhrNokWyowXf6IphdnMZIaOw=)
                          6: HxLqP0kj9dcPG7CfFd7R8gZjYyE.roa (hash: kHbTsJD5NdmK1vLZSQigG4P1BUyQFBvibnG4XtzolO8=)
                          7: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: SrCmOxFlJlDts8z6zM38udr/5IIjtDnGdcvwywgC9PA=)
                          8: NZWNUN6SFbISLl_oXjXKemQjJ80.roa (hash: dj+DtJpw9egcGyq75CC6K/sXZyCgFtQ8hTYp8M4jY+E=)
                          9: S31ZOfjUKXHqumIitPUzwNH5MBo.roa (hash: 6OktdKUpvFcNMtIKT9x1/tMHyAezG6+Rn6sN9L0iNIc=)
                          10: SjmXZnG51JRTtLsN9sJ8Rvd5Pt4.roa (hash: tJBERu9Lo1wC7SnI5+hmLMCW8eZfTvyvoHgD0vHT/x8=)
                          11: VgVq-6TLMiL7Sau_RtgQ3m_Vpv0.roa (hash: 1YKBUCdRYV8CfVZcj+eVWU3GK5hSdpogHam93h2rJ6k=)
                          12: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (hash: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=)
                          13: j7SwKUDozV9eRZtyWsYdGV05fvA.roa (hash: uPxd50CDn/sS3ZC0BcBHPTsoRoY4F3yBh/g2OyRVlTs=)
                          14: nOkgjQYrArcyyihUQCswunvrPDA.roa (hash: Lt1DqMt+BLg34tBT2X1N/gPEKBgxtUFzVdCJoM3+LOM=)
                          15: r-zZtBtHKSlqIgPyswHVBPpJFCg.roa (hash: g6gMg62OKJlfx0O98yn7sj111GSOrUWBhYf7jjUlcVU=)
                          16: y-HAJt-CbQPRgql9Ue-TAPUiTVU.roa (hash: 3yB5yJhLwEvSYs/fk2t82WQfYsXETG/NOhlzHBnsvoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:af:af:dc:dd:bb:91:07:ce:d3:e7:57:9d:63:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Jun 13 13:01:39 2025 GMT
            Not After : Jun 14 13:01:39 2025 GMT
        Subject: CN=685b40765899c01937c21a19ba276dc813c87454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:7f:65:04:bd:36:91:b3:9d:9d:a4:92:75:
                    aa:5e:fd:f6:c6:0c:92:fa:23:6b:4a:31:b3:e4:1c:
                    d9:88:25:ae:fa:da:0f:b1:b8:ea:03:ab:05:82:34:
                    ba:93:56:e9:b2:80:44:b2:c4:d8:7f:1b:a5:6c:69:
                    73:23:41:1d:f6:d8:6a:98:66:85:02:68:7a:f4:0c:
                    c6:f8:e8:bd:33:21:c0:b4:13:a4:9c:a4:95:bd:de:
                    ee:9e:b0:a5:0b:86:67:f6:01:1b:36:f9:29:f3:a6:
                    e8:76:6c:3c:f0:4e:0c:98:a0:0e:c3:19:22:c6:ec:
                    99:87:5a:36:8c:1a:89:28:fb:da:2f:9e:4a:5c:04:
                    89:f9:27:52:4e:42:22:fe:3a:87:6d:53:12:bd:41:
                    b7:14:ae:04:10:a7:f1:37:c3:df:89:90:c7:e7:07:
                    88:0b:f6:8c:3a:8c:c9:20:63:10:c8:17:f4:6c:f7:
                    9d:75:c8:ec:b9:e0:01:6f:d7:af:d5:be:30:df:05:
                    9a:34:38:a4:78:6a:5b:c3:63:1a:5b:4c:1f:ed:04:
                    59:c1:b1:c8:14:29:4b:2b:60:3a:a8:3a:f2:dd:ee:
                    35:e3:23:be:4d:fd:75:73:8a:44:d3:6d:d4:42:c2:
                    8f:df:40:e6:c9:60:dd:1a:19:d9:b3:d1:43:eb:91:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:5B:40:76:58:99:C0:19:37:C2:1A:19:BA:27:6D:C8:13:C8:74:54
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:96:fe:74:13:af:c2:cb:c2:6b:59:47:f2:f8:fe:8c:1a:f5:
         08:35:78:85:ed:95:48:5f:1e:9c:3d:a3:65:1e:da:ca:bc:48:
         c7:9b:71:2a:99:4b:c7:5c:eb:ed:60:c1:3e:a4:86:c9:20:e5:
         7f:da:09:46:38:6b:b8:df:d7:36:e0:08:53:2d:77:92:0d:83:
         e0:89:5f:b5:61:40:3b:85:ce:22:00:06:b9:0d:94:1e:7f:79:
         cd:70:be:73:09:88:d9:a2:ea:bf:37:16:de:e6:f0:bc:fb:f2:
         9a:5d:d9:f9:59:33:fd:b9:bf:32:88:40:c9:58:2a:b2:54:ff:
         d1:ab:7d:b2:0d:6c:5f:70:19:24:be:44:0a:d3:76:37:bc:1c:
         e9:aa:1f:e6:06:1f:7e:aa:7d:5c:9c:5d:69:20:e9:3c:9a:7a:
         b5:b3:db:c8:5c:7d:25:2b:88:07:ea:29:d1:de:b9:56:9c:92:
         0e:af:44:b7:12:9a:aa:27:b8:00:5d:37:81:81:a5:08:95:e7:
         51:ba:d6:9d:5e:80:51:d6:97:73:32:a3:c9:0d:04:6b:0a:9f:
         22:59:bf:f8:83:e6:8e:52:2b:00:91:68:f9:6c:07:8d:09:c8:
         6e:8e:ed:8d:d0:9c:f8:49:34:e8:37:c1:8c:ec:e0:1e:df:0e:
         4a:4b:ed:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:31:23 2025 by rpki-client