Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          LjX4faCEc7duB2CefCDgEoQ5q1oo5SYNKUQrWkDXREA=
Subject key identifier:   D5:6F:23:54:0C:C2:B4:F4:0D:87:A9:DB:10:15:81:2C:E1:36:A1:B7
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       0197B6A24417364309ABF213581AAADF4560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          15C8
Signing time:             Sat 28 Jun 2025 13:02:56 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:56 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:56 +0000
Files and hashes:         1: 8di0JR2sBDqCzwfACUp5jc6sNOg.roa (hash: 6jnn/UoIQpQf2La2mU6dV1X65DafcaqRGMNQyAMe50g=)
                          2: 8qPzk3i92WQTk-wt_v7p_vpVqyc.roa (hash: Vr4+wnI58r5JlZhXLc/F4KXwinF8OGvFwFH/c6ixFo0=)
                          3: BoWmTI__e-Glb1z0cBIjpyHXgQs.roa (hash: pj64V0U6xFSD/nQa9fKFAm/iVJWbs/Grl5y5nYEfIQc=)
                          4: BxXmPXHAMnptVDH7wCFQXUziB-s.roa (hash: QHwoDd5q7PsNhxLoPk4g1mRbhD0ahp55EZfPa2G2LPA=)
                          5: DN12qBzUGkVhRMYHW6P-wHN3H-Q.roa (hash: x2S5h7iauxlMwn5C36mbaOnEH7ELW/M3cT6pPWGqdXw=)
                          6: F2uITNu1PZNUmusi91Ke733wGf8.roa (hash: 3vwk9Z7TvNwvsLZES2ih3ivleE8KPvyuVHfW4JEi938=)
                          7: FkatwMJJT1uX4-yAfNDw9hhU0d4.roa (hash: IoIeRwx7xjV2gZEpUFrXa/vojLvAGOo0og2HL4PEFNc=)
                          8: FwFPhve-Ur2YYjR6PhEM60vBCm4.roa (hash: VbacaTbSlFbv0eKfop+qehpszCobi/wg+iI7m+i3hoU=)
                          9: H39PTMA2gGFe9xH1KV-JqWq7MjU.roa (hash: k7B5bfuejXmx2Owh01QsOa96PVf7Mq09gHYS7Tkg7z4=)
                          10: JA4Vnlp94dx7pdfFYivUO5bxQwE.roa (hash: IipRjxySJxMNAW6cj+q38/v1wGsVMiF99YUHrN24pQY=)
                          11: NLDDw03tanwowRZBZVQwxpt3X1I.roa (hash: uuCYqPU0msqqtLarzfG/+RzFSwBylYsgMtB+nZh6at4=)
                          12: OgO0qLtc0ec-MjMBQ53t4-rptXE.roa (hash: w91s16MWPuzHB1WR6Q3hfduMm9ggv+KrE5sEqCd/ROk=)
                          13: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: iCRL1Fwj0KJbtgMvkckRg/CA11pw27HLB7rRIzasHFU=)
                          14: Xl3YP80xX-lEr2eQm3awPuPHr44.roa (hash: IVltrVCCkev5qfS6hOgTTi/wTpLcPKHhJAaNYBwXwe0=)
                          15: _V9iNdLNvzcILlqD4tp-rDulSmM.roa (hash: kxzIFRUPsKA3j+xYpHpOGCAi5Yz0wuFJtVxH/VGdwMM=)
                          16: b4y23CdQKJMwlXk-rNcwViMo1I0.roa (hash: V5UNF+POoMvGVkOV14de0nXYv1GmU6C8i3denGfbZkk=)
                          17: bEsR_bsR3ikUUcshXZNcBKr0I08.roa (hash: l9dBPGG+y8zO+InKdH53jqGyx/nEGyuK6fNVvZsOFl0=)
                          18: c6svDOJvCOMtHd0HAkmTUiNPmwY.roa (hash: 6qVcS/FkhUyMMSLQvWkursBUtWD1KPBUHSc/lCRTw4g=)
                          19: m186KC31bgKlEMWGFAobzWCuMU0.roa (hash: no2Gxio5VP44e2oXIvLRIGA5EH2XVBlfFRLeito64ng=)
                          20: rfigrTn07ocoAkOSawj-VdebQGY.roa (hash: qoGE4+e1kfbZ6ogHHmUrJX6Kbr9RUjqfc9ARDXaGhts=)
                          21: su4UX0WgAIe-RTFJgATeIxSoIDs.roa (hash: zggx/69ocPMuDmyngoNSdJPHSMprHHBe8kkHut+fbcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:44:17:36:43:09:ab:f2:13:58:1a:aa:df:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Jun 28 13:02:56 2025 GMT
            Not After : Jun 29 13:02:56 2025 GMT
        Subject: CN=d56f23540cc2b4f40d87a9db1015812ce136a1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:91:6c:d7:37:ba:15:dd:f8:83:5a:ab:97:
                    ac:ae:7b:6b:c5:3f:96:ff:99:7f:f6:39:0a:9a:c0:
                    ca:64:bd:d0:68:a9:5c:e4:c0:5a:fc:3b:c5:fc:3d:
                    95:0d:16:96:3f:dc:31:c5:c5:6c:94:1d:84:3b:15:
                    30:d5:1a:d6:d3:0c:e4:98:3b:59:9c:17:6c:bf:02:
                    6d:09:6d:13:70:32:fd:53:d8:ab:f3:16:f1:0c:6f:
                    d6:7d:4c:c5:09:a9:29:26:b7:dc:4c:a9:fb:61:6b:
                    13:b7:c4:10:aa:a2:26:98:d6:db:37:46:a4:41:dc:
                    9f:2d:17:7e:ea:c9:9c:6e:62:f2:08:f3:b2:a8:db:
                    aa:c1:f3:61:0c:a7:0a:7e:7c:6d:19:f7:02:fb:00:
                    f0:6f:99:d8:35:7c:d8:f7:b0:90:66:51:55:54:d3:
                    c7:d4:8d:ae:fa:5d:e6:64:43:32:c5:d5:77:81:e0:
                    f3:19:59:80:0c:61:a5:7b:f1:99:d9:47:42:9f:6b:
                    2c:25:b4:4b:92:00:d1:92:57:85:87:e9:e5:da:bc:
                    97:0c:fd:e2:3a:0e:ac:d6:fb:81:79:a9:87:ec:c7:
                    e2:f3:77:92:e4:f2:49:71:d0:d6:48:86:d5:1b:15:
                    1f:d3:21:39:34:96:03:f2:f8:a3:84:70:db:0e:98:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6F:23:54:0C:C2:B4:F4:0D:87:A9:DB:10:15:81:2C:E1:36:A1:B7
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:ff:0a:e4:63:8d:3b:4f:08:5c:6b:de:78:6a:8d:bd:69:
         1e:74:bf:57:87:96:36:fa:de:4a:22:7e:ac:6c:48:51:52:a1:
         35:39:ff:be:bc:50:48:41:26:5a:ca:49:c7:80:09:83:fd:09:
         4f:f4:d5:bf:f3:1b:41:d2:77:15:e0:98:f0:e4:82:33:ae:04:
         cc:92:87:68:da:e0:ec:f3:80:43:3b:cc:fe:02:5f:27:c6:f0:
         73:05:55:05:eb:1a:0a:e4:42:37:2e:fd:10:54:06:f7:fe:f4:
         90:33:01:2a:8c:46:74:f3:3a:d6:d5:1b:e8:9c:ae:e4:25:ca:
         96:5d:36:ec:95:50:77:d0:05:94:4e:16:30:5d:fb:c7:da:a6:
         58:4d:55:3e:9e:05:d3:ff:03:a6:60:3b:db:ce:e2:97:d3:0d:
         e4:9b:2b:85:1d:3c:05:28:ee:2c:d9:8f:aa:c4:df:fa:ca:85:
         17:a8:49:b3:75:02:6d:9b:50:9f:27:39:67:7c:26:de:5c:fb:
         81:37:0a:f4:d5:34:0c:08:8f:c6:82:d1:bf:ef:af:70:f8:c0:
         a4:0b:42:c3:ff:e3:ad:34:b2:63:d1:8b:a5:80:1d:52:bb:d3:
         8a:8c:b3:83:cc:c6:b9:ce:7e:0d:96:70:a8:17:72:7f:1c:92:
         6b:81:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:42 2025 by rpki-client