Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
File:                     KUC2lLuglTROS9uZ9R4fECO-V84.mft (raw, json)
Hash identifier:          VYDAhROzCwYsQG4qDFr2YIuH5sHm1pR+Zlx9yq2gNy8=
Subject key identifier:   10:7A:FF:86:A7:11:A0:E4:FA:5D:33:10:28:E5:33:59:A0:94:24:0E
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Certificate issuer:       /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial:       01976D3E577D96230FD42683CA475EC96E87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
Manifest number:          11E0
Signing time:             Sat 14 Jun 2025 07:01:31 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:31 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:31 +0000
Files and hashes:         1: 1ovUioPSRpwIq2x5dlTtKSWuJt4.roa (hash: glwS98kItQ5aoRJZQt2/p+Tl6Vu2+KBQ6fnWyRCpxeE=)
                          2: 5ukXNC3ufs5Ifk5kp-hI7U2U8bk.roa (hash: 7ZgXZStDcuyKQtO7JFrlQRnqUqaRLXXlsW/IZ58nkBY=)
                          3: 6RkSnq1YobTmQ_SgAx2wlTkM2hY.roa (hash: Qt/KZiThTuHL2rOKsl4Ng5FOwbzizcKz0/dUQrpTSQc=)
                          4: B5wkeGWZjqgz1y_Wsk4MaKTCZiQ.roa (hash: ygucH/c6MgSrKR9IgUN2NMGsbIDgc3W5HpOJEaJUGPw=)
                          5: BXsWIMS27-emUbxg3N856ta0Zhs.roa (hash: VLEvZClMBOllgwcFIEd17EnHHY/+y56YDL+ioA9gy2o=)
                          6: KUC2lLuglTROS9uZ9R4fECO-V84.crl (hash: pcFoG90VgjS7yY4WM9Z0RAGgTtyaU8vgw/3yR78mtpk=)
                          7: YCe-DX5vspCo53n_t9ku3ipwr0c.roa (hash: bsw052ayicKeBY1zBDEewyIk2nJP8d+tgqf/wW7oirc=)
                          8: i4f1t__SHD-QTSI70hcDe0-iLuE.roa (hash: x5mSq7hcGWnjVGsMlKR9T5XBSWXyZ8MGhLOD1IalJyI=)
                          9: nlwD__Rr_Kz3vDBdg3j2YS8w3UU.roa (hash: oYim5zXBclNnekk/jArnYzaiEFQpBbNaF9nzqE+fJWU=)
                          10: t_T_n2rHgRaUg9w286JLApHuPsY.roa (hash: Xw7YLCCdVoaSNcuVfBLtogrNakQDxTgFieuFH7n8sSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:57:7d:96:23:0f:d4:26:83:ca:47:5e:c9:6e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
        Validity
            Not Before: Jun 14 07:01:31 2025 GMT
            Not After : Jun 15 07:01:31 2025 GMT
        Subject: CN=107aff86a711a0e4fa5d331028e53359a094240e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:5c:c9:f9:89:ef:79:e7:8f:12:04:06:e6:
                    e4:21:0e:71:10:f4:8d:1b:1e:74:a8:38:23:b7:b8:
                    4f:c4:94:c2:f2:d8:8a:78:05:80:33:bd:8b:24:29:
                    25:ec:0c:b6:76:04:6b:7a:67:52:79:92:34:bb:be:
                    4b:2f:2c:e0:f3:43:0b:d8:1a:0e:ec:6c:06:83:94:
                    6a:ef:16:b6:50:98:47:62:13:10:ea:34:1a:1d:16:
                    21:0f:42:7e:ae:d6:6f:c2:35:05:4a:8d:b6:14:36:
                    9e:83:63:56:3a:c7:14:d5:5b:b8:5d:f2:10:87:d5:
                    33:72:56:b4:f5:af:7f:fb:65:ba:1a:13:8a:10:7a:
                    44:2a:68:4c:aa:51:f0:70:62:e0:a3:bd:70:c4:7b:
                    0c:b6:cc:14:21:63:fd:2f:84:09:79:0e:55:9d:af:
                    b8:24:bd:25:1d:22:f1:97:c9:7d:b4:fb:1c:f1:1f:
                    43:64:90:8e:65:22:e0:46:bf:45:f7:0e:49:bc:0d:
                    e2:24:bd:cb:a2:b3:da:de:d1:e0:7c:2f:f3:11:ac:
                    d8:d4:4b:4c:c6:d3:c1:c8:13:a9:8d:f6:36:3d:8a:
                    4e:98:e0:2b:1b:64:c9:b3:b1:fa:60:8c:ec:24:b2:
                    04:7c:71:54:70:a5:0d:11:ac:32:52:1b:45:42:61:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7A:FF:86:A7:11:A0:E4:FA:5D:33:10:28:E5:33:59:A0:94:24:0E
            X509v3 Authority Key Identifier:
                keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a2:86:c9:95:5f:1a:f0:57:a5:ec:0f:09:13:58:84:db:19:
         41:76:92:d5:2a:74:fc:fc:54:55:49:1c:21:73:b2:a3:aa:d8:
         7d:22:f7:da:91:1d:a3:2a:e4:5d:1d:6d:1b:41:10:04:a2:96:
         45:8d:ed:5f:a9:92:ae:4f:7c:b6:cf:31:31:32:02:62:b0:9a:
         bd:77:ca:4d:69:d6:7c:11:44:a2:80:c8:01:8c:e2:98:5b:6c:
         fc:ac:d5:ac:ab:95:11:6a:0d:f5:8b:7c:e6:32:33:b2:aa:6f:
         fa:2a:51:1a:cb:aa:50:68:5e:14:bd:3b:ba:20:29:16:cf:f3:
         52:2c:f7:d6:56:f0:f1:7c:5a:12:a0:2e:99:26:7e:8e:c3:f0:
         41:2f:ff:e4:8e:e5:cb:ad:45:79:ab:30:ed:66:fe:8f:0c:ae:
         c9:2a:4b:86:e6:1b:ef:2d:11:fe:0e:24:5e:cd:47:d2:ed:50:
         78:a0:b2:7b:cc:b8:8c:22:87:2c:8a:2f:82:b4:08:e9:5a:f3:
         a4:ed:7f:3b:96:08:94:d1:8f:9b:8d:e9:5a:37:85:1a:72:cd:
         67:99:81:87:43:1d:38:f8:d5:f2:65:75:a0:fa:e8:9d:02:b2:
         e5:d4:bb:86:bb:57:97:35:2e:cb:7c:72:02:60:d8:77:1e:14:
         df:4d:cf:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPld9liMP1CaDykdeyW6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi
ZTU3Y2UwHhcNMjUwNjE0MDcwMTMxWhcNMjUwNjE1MDcwMTMxWjAzMTEwLwYDVQQD
EygxMDdhZmY4NmE3MTFhMGU0ZmE1ZDMzMTAyOGU1MzM1OWEwOTQyNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZFcyfmJ73nnjxIEBubkIQ5xEPSN
Gx50qDgjt7hPxJTC8tiKeAWAM72LJCkl7Ay2dgRremdSeZI0u75LLyzg80ML2BoO
7GwGg5Rq7xa2UJhHYhMQ6jQaHRYhD0J+rtZvwjUFSo22FDaeg2NWOscU1Vu4XfIQ
h9Uzcla09a9/+2W6GhOKEHpEKmhMqlHwcGLgo71wxHsMtswUIWP9L4QJeQ5Vna+4
JL0lHSLxl8l9tPsc8R9DZJCOZSLgRr9F9w5JvA3iJL3LorPa3tHgfC/zEazY1EtM
xtPByBOpjfY2PYpOmOArG2TJs7H6YIzsJLIEfHFUcKUNEawyUhtFQmGa3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB6/4anEaDk+l0zECjlM1mglCQOMB8GA1UdIwQY
MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt
MjdjMWEzNTk3NmRlLzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl
LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKKGyZVf
GvBXpewPCRNYhNsZQXaS1Sp0/PxUVUkcIXOyo6rYfSL32pEdoyrkXR1tG0EQBKKW
RY3tX6mSrk98ts8xMTICYrCavXfKTWnWfBFEooDIAYzimFts/KzVrKuVEWoN9Yt8
5jIzsqpv+ipRGsuqUGheFL07uiApFs/zUiz31lbw8XxaEqAumSZ+jsPwQS//5I7l
y61Feasw7Wb+jwyuySpLhuYb7y0R/g4kXs1H0u1QeKCye8y4jCKHLIovgrQI6Vrz
pO1/O5YIlNGPm43pWjeFGnLNZ5mBh0MdOPjV8mV1oPronQKy5dS7hrtXlzUuy3xy
AmDYdx4U303PBw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:52 2025 by rpki-client