Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          vLAnuBa2D/2WC5v7fY+Vk1AoKkvDKcvsn3AZazZbgcE=
Subject key identifier:   0E:9F:69:4A:6D:1F:A8:E0:E8:2C:84:66:3F:00:AD:7D:85:32:2D:CE
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       0197B77C09E365CB0B8D9BF3FE23AC659AA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          15F9
Signing time:             Sat 28 Jun 2025 17:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:48 +0000
Files and hashes:         1: 2HcLLIfy1JMDCVGEVTptM8elLd4.roa (hash: LoXji0ZJfkE3eJjr+G7N7ZYdU5+oCyWMzqs03IJOVrg=)
                          2: 4h8DSu4LCqLu5y5DGLyVNLDaW_8.roa (hash: 5dgH0nSjVBTs16em525/U4kAjurzhSSV9U/WWc+xCEs=)
                          3: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: a8YekYKMKAduEgwJXLpPAKyP5JNptDISkM1nNfAQj/s=)
                          5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          6: LwR5e-3XdDXFjm5eJuuKPbFg1wM.roa (hash: 4JsswUG9Ou5/9jUtsWyiDQhEMAGV7MLxdDyUU0ZVg4A=)
                          7: O-s7sLwyvER4n7KZ25-xO-rbC6M.roa (hash: S3u//Ykp1StY/C11qR48/ymNimiE+nEYX14hg2A2Bbw=)
                          8: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          9: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          10: X0X7YHZdxd-Fm-vSH2gkoaNKSEE.roa (hash: 0wypLX2pYlj/wkC9RZ/dWCbs3OnpHFJIgo8rTP3dhfk=)
                          11: XyJzr7K8kDR7Crh0eGA64cNXh5o.roa (hash: O/tUpYLyJqFNhTOL8oVDzZYICuybOlG7LlJD8DubnZc=)
                          12: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          13: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          14: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          15: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          16: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          17: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          18: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          19: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:09:e3:65:cb:0b:8d:9b:f3:fe:23:ac:65:9a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jun 28 17:00:48 2025 GMT
            Not After : Jun 29 17:00:48 2025 GMT
        Subject: CN=0e9f694a6d1fa8e0e82c84663f00ad7d85322dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:04:e3:a5:2c:e3:4f:5a:6b:4f:c9:7f:66:
                    16:91:be:d2:5d:ad:b1:83:f3:a1:ef:35:87:f3:ab:
                    37:7b:ef:3a:79:3e:d1:d6:02:9b:40:ee:d6:28:a9:
                    31:2f:5e:09:da:e0:36:00:6c:81:23:b6:68:cf:39:
                    7f:a1:f2:f7:51:d0:90:36:e8:db:9d:9f:d4:db:f5:
                    0b:5c:28:f6:36:19:bc:ff:0d:e3:9f:05:a6:23:e6:
                    4b:87:a6:f1:d6:26:9e:a5:bb:cd:6e:32:e5:10:30:
                    79:d0:29:8a:ba:76:fa:bb:c6:f7:6b:b7:80:38:2d:
                    82:6b:62:02:28:f9:26:eb:bb:33:c1:57:84:1c:f1:
                    fd:db:ba:77:f9:3f:46:53:c5:9d:61:fe:17:65:73:
                    5d:18:9b:a0:5a:44:38:50:aa:04:3e:3f:5f:51:cd:
                    74:15:0c:0b:bb:02:18:9b:30:ad:25:2b:c2:af:1c:
                    07:16:d6:96:a8:dd:6c:1f:3f:f4:90:97:6e:92:9e:
                    dd:e0:d5:58:1e:04:6b:fd:fe:ed:6b:c7:e6:d1:f9:
                    c6:41:f6:7b:48:6e:76:00:2b:45:44:10:8b:fb:da:
                    f5:bf:99:42:57:0d:23:57:a1:cc:a6:52:b9:96:99:
                    71:60:3d:a6:ac:4c:57:8e:70:6b:50:83:9d:c9:4b:
                    90:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:69:4A:6D:1F:A8:E0:E8:2C:84:66:3F:00:AD:7D:85:32:2D:CE
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5e:32:f0:b4:fc:93:a1:bc:63:59:fa:3b:d8:a8:46:3c:b3:
         09:14:57:42:66:e3:2b:b0:e0:71:7f:eb:58:45:61:de:56:bb:
         1b:87:6e:15:be:e5:2f:9f:b4:23:f9:c7:3c:ca:86:d0:48:84:
         16:d8:19:51:7f:c7:e0:2f:86:0b:24:e6:ac:cb:07:86:b4:c1:
         01:aa:cd:4b:43:3b:7f:0b:69:2d:52:1b:46:04:0b:3a:be:4f:
         8b:50:3d:13:62:ae:ac:18:35:58:49:02:d3:70:31:30:c1:e1:
         5e:ce:8d:5b:85:5d:e1:f4:0f:3a:69:4c:a1:53:4e:57:35:13:
         cc:ed:c5:89:4f:c6:d7:f8:12:93:a8:88:28:79:0d:9d:6a:1c:
         9f:c4:ca:cf:33:ac:fa:98:78:83:2e:ca:7a:19:80:16:64:f9:
         10:ef:3f:db:2d:8a:64:d2:00:7d:4c:29:39:e8:c2:e5:9a:e6:
         48:af:10:22:f8:0f:01:2d:28:4a:d4:45:4a:82:a4:4f:98:0f:
         03:e1:cc:25:0b:ad:66:21:c5:22:2e:f5:f4:82:5c:2f:92:89:
         bb:70:86:a1:70:d4:d5:b1:ef:4f:29:ea:91:21:09:c0:00:64:
         2e:2d:f8:6b:52:24:f2:f0:87:e8:1f:d2:b8:e4:bc:93:6a:57:
         bc:22:d7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:10 2025 by rpki-client