Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File:                     250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier:          knj05hbuZkV8F/4kK2ZKXPAiWXzMI0HVBB/AyvlUUww=
Subject key identifier:   9D:B5:C4:3A:76:11:CF:03:FC:25:E2:F5:DB:97:B8:76:4C:2A:7D:AE
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer:       /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial:       0197794189FA258BEC9BF6A971E815A5E683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number:          115D
Signing time:             Mon 16 Jun 2025 15:00:27 +0000
Manifest this update:     Mon 16 Jun 2025 15:00:27 +0000
Manifest next update:     Tue 17 Jun 2025 15:00:27 +0000
Files and hashes:         1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
                          2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: 6um2n+Ro6bth1sP1UTxz8c2vngEKGjFNsw7Y+Vtin6o=)
                          3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
                          4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
                          5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=)
                          6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
                          7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:41:89:fa:25:8b:ec:9b:f6:a9:71:e8:15:a5:e6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
        Validity
            Not Before: Jun 16 15:00:27 2025 GMT
            Not After : Jun 17 15:00:27 2025 GMT
        Subject: CN=9db5c43a7611cf03fc25e2f5db97b8764c2a7dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:eb:19:2a:95:42:f8:a7:31:31:55:e2:4f:
                    25:9d:21:73:3d:13:d7:07:cc:b3:7d:3b:bc:d8:a7:
                    58:14:7e:9a:f7:c0:ed:a5:e2:b7:75:16:29:e2:5a:
                    56:75:97:13:d2:0d:23:6f:28:86:6c:e7:39:da:54:
                    71:18:14:ea:ee:f4:32:3c:76:22:8a:65:49:d3:27:
                    7c:80:b6:f9:bb:19:29:94:82:50:df:dd:f5:dc:28:
                    33:75:5e:85:7e:8c:18:1a:4c:fa:09:59:b1:9c:9a:
                    8c:af:5e:94:70:86:17:cc:fd:80:b2:ca:af:61:01:
                    d0:c8:27:c8:26:f4:5b:b0:bd:5f:8f:c2:7f:4f:3a:
                    84:b7:9a:b2:6a:ea:8a:69:e9:22:80:24:98:99:e3:
                    ba:af:03:cd:8c:73:f3:0c:1b:58:25:fc:d4:47:a7:
                    0c:5c:0c:12:95:80:fd:67:f0:a7:af:fb:95:07:56:
                    a7:9e:85:2c:cc:ac:a4:65:35:a7:43:a2:de:6c:68:
                    de:d7:22:a0:6b:55:ac:0f:7e:70:cf:3b:8c:b8:1d:
                    ae:43:1f:39:7b:b9:3b:2c:a8:a0:2f:93:eb:ae:2c:
                    a5:20:f1:6d:15:12:b2:9e:3e:9e:3e:c8:05:78:9e:
                    ea:03:3c:0c:a1:67:2f:68:ba:11:02:28:68:33:57:
                    d8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B5:C4:3A:76:11:CF:03:FC:25:E2:F5:DB:97:B8:76:4C:2A:7D:AE
            X509v3 Authority Key Identifier:
                keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:66:ff:41:cc:4f:da:f0:82:f7:a6:1d:9f:38:ac:10:e0:cf:
         19:8c:d2:80:e0:96:08:32:a3:63:e8:3a:ff:f2:79:d2:8d:98:
         21:b1:9b:51:ef:b9:18:36:02:ce:96:31:6b:61:86:4c:74:15:
         f8:cb:85:48:61:59:2b:66:ee:24:04:13:d0:e6:35:6a:2e:cc:
         9b:97:9a:c1:7d:63:2b:a4:01:d7:6c:2c:aa:74:a9:61:86:4c:
         4d:30:23:cc:9e:2a:f2:49:2e:17:7c:8f:14:af:a1:4c:40:7e:
         0e:33:ba:78:bb:59:8f:5e:a1:7f:4b:f5:63:97:6e:07:c0:c8:
         e4:55:c3:d9:28:64:c0:1f:fa:88:89:31:7f:46:ff:5d:0b:9e:
         55:39:66:03:03:9b:96:02:83:25:b0:3d:ba:2a:29:37:aa:36:
         9e:57:c1:a9:42:c6:0c:47:d2:45:e2:f0:49:e6:2c:08:81:77:
         ef:e0:95:5c:48:ad:45:a5:df:f1:2c:bd:c7:a5:f4:e7:97:fe:
         48:ea:1c:55:80:7e:0a:cd:99:f1:4c:cd:08:87:a0:90:cc:d6:
         4d:46:91:48:fc:26:70:84:8c:8a:c8:3d:5a:ac:d1:6b:d4:ad:
         06:9c:19:ac:71:96:63:9d:40:fd:3c:da:b9:ac:12:2e:74:75:
         bf:38:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:55:01 2025 by rpki-client