Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
File:                     C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json)
Hash identifier:          EbZlGVaZQb/gvl/4sRvCk2eGuWId0PfZJNn0vxLCOTs=
Subject key identifier:   28:00:C9:FF:CF:0E:40:2B:BE:06:34:7E:D1:BD:F6:9F:EF:16:FF:DB
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       0197B70F0D9C51E3B9FB73E21C634F214B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
Manifest number:          1263
Signing time:             Sat 28 Jun 2025 15:01:46 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:46 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:46 +0000
Files and hashes:         1: 3kJhXofCpFDD7Eo6E2j1Gd-FMQ4.roa (hash: K3OTcQcoZnzC8T3KuSMerKr1Yy1y4ZL68Y/lWSF+tJA=)
                          2: 5vgRN93Ikx6vDyOuxjecwfDMpQo.roa (hash: Nm0/LoBBPkWnuWn59UFBPJeNenuNXFQpk38gCTpN7ng=)
                          3: AfLHT74NdL4YRI-gpiiLO8PPShM.roa (hash: 944lZaS4mAfM/S0ieSHEvM3mRV9M0T2Y3u48y1aDIjk=)
                          4: BqUsGxJbAHaodSor8dzxhiBDYnY.roa (hash: UcdL5oWXT3jVU2069PpqlnxiDKWvKcXri93cb+kI6qY=)
                          5: CLgBj6oYt6sGJ5ZpJJTL8C3Fnrs.roa (hash: aUOM41Nf+BqbKmy9YjUFL+mBeBI8749PsIPj/loME94=)
                          6: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: jXlDAhrP17rMZPJWcHNsiYBcZgzUqpScWLvYXgQ587w=)
                          7: CqNmCGGQsBrEt7zh-VfcGtUv9RA.roa (hash: 7HTEUHavuiaMXQtqJhG62cD/8gu3Fv5evoWWikvAioM=)
                          8: HZmCfsHb09xlrSBh2iIxpOWZ3Ow.roa (hash: RrsPdmWqoOnc37eNmh2WMAAS+360HWRIjhjqZURUhWk=)
                          9: JPuN2YPz_l01LHcxJTRgQ5fN06Q.roa (hash: sO4iVZOw03myN2KiGjBOdg4pmq+1tC1eFs8GD/uCEJk=)
                          10: L7BpeKSr3aJNyrJ3jyLg3Vye834.roa (hash: BKU0s1AFVfjoQBSMzARmXiXP2HsCC4PJttRceRONfMI=)
                          11: MDIbS6sEXbMo4ibcLekhzijIjYY.roa (hash: 7iIxmTu02d89hGoTIMu/80TJLS3BqGKAagC48ze8HTo=)
                          12: MtRudBwfeuM_gV5Rxs2GMGZwQ28.roa (hash: jyZOCTzazS4hZAS8vXh55e8wdvGkjLOC1l/j4Cldlkk=)
                          13: MvceJYeC7exu39P-KklGzIhKezo.roa (hash: l7CWLK2x2ygZPduMunzZSQp+ZhD4hpMbVwc9AxPKUD8=)
                          14: OctDu_DWJM_ePhGKcxjKDU812B4.roa (hash: 8PSwDnEoVXcVpWULLxMU/tnZb/t/w988BD3T8r1Vyqk=)
                          15: QB5_xxRGXCHsGPaKE_F_HuFsFXc.roa (hash: e7wfZoRrHPAl9YgBZA9mESSygC6N1gWRWhEiStosBqs=)
                          16: QqVG_Jig1AWpsZjXM3ozkcck_rk.roa (hash: cuOJ8bahzoMT5MnSdXLE/ebuIEkibnbU4Phcnk8deko=)
                          17: RdFk8pqwtmhHw2UX4x0rgDjdvVg.roa (hash: UfFtH0Qa2ULdo2eWM4CXCIXafZmQBAeqkERPoGsE9DY=)
                          18: SlBCxI-Gr8RZUcWFdhLWCcmpICs.roa (hash: JIPe6vhu+AxbOSgeBUS8yHnoK/5rZWIA9A3Gij3IhXY=)
                          19: T8DiPd4COZAMrM15dsDMZh3-46k.roa (hash: FLVoIftsSDw3XycsNixyrK2164vfuETBh8sALFOAFvo=)
                          20: YKuzm8eZ5thjoG3YWlLmGyis6Hc.roa (hash: lRlLqWarJKTArL8I3Oh3IGUAjFaJLYWsMsfvgIvdCEk=)
                          21: ekzy4TbSmKoAngHD6nt1XvIY_kg.roa (hash: S4bTYJiZvd+MIyq2CNE9A391k97deJn0Ljqufvr/oI0=)
                          22: nBGaxHS4njnBuZih8vNGsp1DG9c.roa (hash: XLGWBSyFNOz/Nq0CINiB/5Nx/Ff5JQHbqxgQoHl8pY8=)
                          23: obljm5gfRN-n2SKdDY2NA9WVkYE.roa (hash: iEb0cLJOJn58raI44T/QYZh9dLBRwT4473VAczsApI4=)
                          24: uF1fzkxS1dvB384G_6ACG-gahqw.roa (hash: /0hDj28NRbF23VkEh2wmxEvtyGKZo3nN4bNoYlxvanE=)
                          25: uiEwRDzyo2IATe2UZ8J34lJkwOQ.roa (hash: qd8Q/scpzUgFvAn3rGCEs42W3qdpmfptd5u2EgNgXK4=)
                          26: zgvcOUimolOfc-2snaZEdo8wyhc.roa (hash: S2xJZFbuR+fVbmsKnaewbJdRcVJWvtsi5rfDD2/PNaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:0d:9c:51:e3:b9:fb:73:e2:1c:63:4f:21:4b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: Jun 28 15:01:46 2025 GMT
            Not After : Jun 29 15:01:46 2025 GMT
        Subject: CN=2800c9ffcf0e402bbe06347ed1bdf69fef16ffdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:84:a5:af:22:a5:9e:cc:c8:6b:5f:0c:fe:95:
                    9e:00:86:17:3a:b1:22:4c:ac:2e:f9:9b:58:b0:8f:
                    07:3c:7e:3d:71:49:9b:e6:2f:5d:c0:c7:45:1e:cf:
                    13:d9:31:48:f1:87:43:6a:79:7e:e6:20:d4:f0:27:
                    4d:94:a1:ba:95:73:a1:2b:02:5a:17:98:47:f4:a6:
                    c5:1e:ed:0a:cb:fd:ee:c6:49:29:e7:8a:74:2c:b5:
                    bc:a1:62:33:8c:e6:27:50:6e:2f:e6:5e:64:52:af:
                    d5:c7:35:76:52:c1:b1:7a:30:f3:d3:42:01:e3:18:
                    40:13:ed:0a:dc:cb:0a:b4:05:d8:bd:88:08:c8:5c:
                    3c:d3:8c:46:a7:90:1d:85:b6:6a:14:47:a8:d0:8d:
                    c4:3d:d4:4c:ef:38:4f:54:c5:52:d4:3a:7b:61:f2:
                    7e:2e:3d:40:78:df:10:91:0a:f9:4c:f8:1a:c8:31:
                    ab:42:06:e0:e2:5d:eb:0e:da:cd:68:5a:c4:38:09:
                    9f:37:dc:6d:70:3a:0f:a8:29:6c:1d:4d:fc:f5:3d:
                    b1:90:cf:0e:b9:1f:91:0e:7b:74:72:3f:5e:3c:fb:
                    c2:b7:8f:99:95:32:0d:4b:f4:36:f1:bd:5b:8c:19:
                    24:45:5b:36:ae:35:f9:7e:8e:b8:c8:ce:1e:69:2d:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:00:C9:FF:CF:0E:40:2B:BE:06:34:7E:D1:BD:F6:9F:EF:16:FF:DB
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:87:52:00:4e:af:61:04:f2:f5:03:e7:d3:ad:d8:af:07:ed:
         ab:d2:f5:52:66:a3:ca:c2:a1:c7:b8:59:27:a5:11:ab:8a:50:
         6c:84:09:2d:42:d1:7f:82:74:5a:4d:87:1a:c4:fa:99:7d:ce:
         25:7a:6d:f4:e4:c5:ca:73:60:b9:b1:30:34:bc:20:bd:85:14:
         08:91:e3:2f:dc:48:3b:c0:49:d9:d0:56:b7:30:2d:aa:47:6a:
         94:08:11:4a:6c:26:88:82:eb:fe:08:12:ee:32:ad:d8:1a:6d:
         56:da:c6:1f:73:81:7e:e7:9d:b6:22:cd:12:fd:ad:ab:02:6b:
         69:8c:81:b6:47:1a:d5:ad:4e:37:ee:aa:ad:dd:45:2b:3d:d8:
         b1:5f:28:fc:94:50:72:83:52:de:21:93:14:32:9d:20:d4:12:
         74:e9:68:bb:6a:15:07:c0:77:b0:91:db:c6:53:f0:2f:5e:a0:
         5a:37:d3:69:ba:cc:1e:ae:13:23:20:20:30:b6:f6:7f:3f:77:
         ab:5b:ca:27:f6:2a:3b:4b:77:04:e7:77:ad:74:0c:8e:d7:e3:
         b4:cb:f0:be:38:7b:4e:9b:59:19:39:4f:d9:ce:15:d5:1e:7e:
         fe:5f:f3:9c:9b:1b:5e:1a:5b:29:78:0f:eb:0c:a2:af:5b:77:
         3c:c9:66:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:09:15 2025 by rpki-client