Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          0S4hJfBUzYS/1dNyw1zyCcGXDcjZAkcnuyOt3e8QIwk=
Subject key identifier:   40:60:FD:AB:59:D8:01:42:46:62:6E:00:86:59:D3:FE:95:ED:98:74
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       01977609DD8810D072DE0C0452A603A13E5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          15EB
Signing time:             Mon 16 Jun 2025 00:00:47 +0000
Manifest this update:     Mon 16 Jun 2025 00:00:47 +0000
Manifest next update:     Tue 17 Jun 2025 00:00:47 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=)
                          15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=)
                          20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: 3Z7HlHfOtxbbqOTOlpEN9aZS90+q62NWANjaqfaFois=)
                          21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=)
                          26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:09:dd:88:10:d0:72:de:0c:04:52:a6:03:a1:3e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jun 16 00:00:47 2025 GMT
            Not After : Jun 17 00:00:47 2025 GMT
        Subject: CN=4060fdab59d8014246626e008659d3fe95ed9874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:cf:27:5b:97:ed:57:31:1f:15:68:cb:d7:
                    1e:5a:5e:88:6f:22:b6:cf:d3:1e:28:f3:ff:41:6e:
                    01:b2:04:07:ba:74:c4:4b:32:0f:88:8c:73:6a:cc:
                    62:6a:db:5e:fb:96:19:75:67:ac:91:44:88:c8:57:
                    6e:9a:4a:5a:b0:ca:29:16:a5:5e:ce:56:e2:b4:49:
                    06:b3:b2:c5:be:26:f6:7b:d6:73:e5:50:26:f0:16:
                    8d:76:91:98:eb:ee:fb:f5:d4:4b:4f:b2:df:ee:ce:
                    c9:38:57:74:b4:bc:73:51:f7:3e:05:04:7e:b0:ed:
                    ee:ee:af:a7:29:82:f6:7b:ec:fa:39:76:a7:09:e2:
                    22:17:7e:d1:60:d7:ed:b0:89:9c:a0:ff:1c:0c:1d:
                    4e:d1:ed:6b:37:8d:66:3e:db:d4:00:00:c2:0d:72:
                    f9:45:e8:72:7d:fd:c4:5e:b8:2b:17:ea:2f:69:ed:
                    3c:b8:c1:3c:82:32:8a:6a:21:db:b7:d1:f5:fe:f7:
                    e2:d8:fe:91:be:06:36:d4:af:5f:9a:4a:8e:8d:8d:
                    b0:42:11:47:a9:83:56:3d:83:f9:e9:1a:15:9e:d6:
                    17:71:72:8b:2e:f9:6e:2f:9c:cd:d2:40:a4:a7:17:
                    20:e4:a1:ef:99:af:ad:2a:63:0f:64:53:cb:b2:80:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:60:FD:AB:59:D8:01:42:46:62:6E:00:86:59:D3:FE:95:ED:98:74
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:1f:93:01:35:1f:14:ac:d7:df:87:ed:7d:21:1e:f3:f9:ea:
         d6:80:91:75:3b:06:57:da:c5:da:fa:eb:11:7e:16:e5:e5:78:
         2c:79:07:df:cf:81:42:65:a3:51:ca:2f:b9:af:90:6c:e3:80:
         fc:5f:1b:7b:43:46:7a:2f:c4:81:7d:20:58:ad:2e:8a:a3:a2:
         18:a0:c7:32:11:c6:e5:29:01:1e:8a:f7:ce:68:7b:ac:8b:9f:
         74:33:a3:cc:dd:60:ea:e3:11:b3:f1:04:e6:62:82:ba:8f:51:
         7f:d1:23:3e:f7:b2:fd:3f:d6:b6:02:cf:6a:b1:17:9b:cc:8a:
         d4:f2:68:13:30:05:74:c8:89:2d:73:18:f0:cd:a4:b1:13:14:
         76:2d:52:4b:76:38:28:f6:75:d1:31:d9:b8:3e:71:c2:c8:11:
         cd:af:8e:c9:e3:0a:f0:05:c2:e8:c9:05:70:db:43:9c:a3:e0:
         7e:7a:37:c8:a5:55:89:2b:a2:3f:9d:1e:6f:2f:cb:64:cb:db:
         69:e8:40:a8:18:45:43:7f:24:46:d4:14:b1:70:92:e4:ea:25:
         74:b2:f2:22:54:02:bc:72:60:7f:ae:bc:06:24:de:cc:af:65:
         57:0a:83:5e:1f:57:cf:e5:cc:ca:ad:21:c4:d7:48:29:65:71:
         06:dd:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:41:35 2025 by rpki-client