Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
File:                     v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json)
Hash identifier:          YSiil0P/uCnxlgKof1sDYLGRJ8ZUMHoXBmQI+pzVZM0=
Subject key identifier:   C0:E4:F0:C5:7F:7E:F8:77:8B:65:A6:91:1C:91:A9:2F:6D:81:A9:30
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Certificate issuer:       /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial:       0197B7B317EEEFA3942A0770B3434AA584EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
Manifest number:          1256
Signing time:             Sat 28 Jun 2025 18:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:56 +0000
Files and hashes:         1: 1-DCahpulJuiQi8zdfIBNVSBP_a0.roa (hash: nTSeDU5/i/b0oztZzrG2CtOkwm9ZNipV4GkBR8TKl3w=)
                          2: 4HUEzjvO1URr-UPygZ4Bs6_KT9Q.roa (hash: 8gqeOkmM8zl20dUfCC3W3gzkl4K07sQTxtiB6AnAR2Q=)
                          3: 4V9UnV1Yi4lf1STc1xhZ4bIgUvA.roa (hash: OKQzkBUD42iLo7oYo0ouIYvBAPZ/5GAsgIcFR+QH2YU=)
                          4: 4xHSFz_h8RDTEizlLHiNqDZdB8k.roa (hash: k0/n97wXnLuKC+5MEW+78XWyuksvPTuMv3V0hsYhTuY=)
                          5: 6QviIP7RKjJfXyJHP71i3FDYWL4.roa (hash: QwitosOHcwHPVpSg5VFkyXo/VZmtnyWUke/Nxvg71U0=)
                          6: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=)
                          7: C-9z8ht5WfkqXe5T02TWElDQHq0.roa (hash: 1QuiVMAynqn64XKAO48JlQaP57PEKALVhYDiuC06tGA=)
                          8: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=)
                          9: ENmvSrLnZ5l3zdl7_SWX-dmV2iw.roa (hash: d78rG1JxemNpbntQxK8HRnUpFVFRNZsmtcWweXwXHFA=)
                          10: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=)
                          11: M08pG0WnhIQX2KOfjmHJXSyaCoc.roa (hash: 7/2skEcs3WncoMu7ukPnikjrb0ygdobEezSJD1ACHfA=)
                          12: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=)
                          13: PKjMMvZfZGO6d3QofJpMp8mLoEg.roa (hash: PLZzvSg9ShprS72UhVRcTHvYPm2OE+eVMBgJ7lsQMMA=)
                          14: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=)
                          15: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=)
                          16: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=)
                          17: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=)
                          18: W5sU-ZO6WBhRXGkiRRiQQs5_9rk.roa (hash: buoQ3JOzvBjf3H+zLixOxcXYRqSn97Vev1LEOeeiEno=)
                          19: XlhxtDrnef0LIn9STUD5IsH1ycc.roa (hash: 8c7ddXQfFoWwM7tA+K1eFR8xfvHddWeWNMUF9Typ4Ww=)
                          20: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=)
                          21: fuMedyng8Q6xPnFdNbl_N8_Sxo4.roa (hash: sqU76Se28Ec/MvIdqZD/zhVxUgHos++zus2QQ63LwTY=)
                          22: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=)
                          23: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=)
                          24: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=)
                          25: m7lMiWju66nWi4ie7Vt74icILpg.roa (hash: x3s/oVaZakSkOMeloqbQaRy3FaKUq2eo4wHClY5zjYc=)
                          26: pWKwCP_lM1lV6k1_8iA6jNpjHqg.roa (hash: RStEnKPVfL8STTUgjI+bGS1TABSbUFHPohIVOs18xGk=)
                          27: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=)
                          28: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: r0d8LEe397oGv2f8UicbuG+NfrGbaQprfiyjVSa45Uw=)
                          29: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=)
                          30: yk3hphpJLiCKLV3SI7_6_xUDd3U.roa (hash: 3xzT8sNUhSTcHGn9AimzGczqHTxSrNzAtFY6ULbmku8=)
                          31: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:17:ee:ef:a3:94:2a:07:70:b3:43:4a:a5:84:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
        Validity
            Not Before: Jun 28 18:00:56 2025 GMT
            Not After : Jun 29 18:00:56 2025 GMT
        Subject: CN=c0e4f0c57f7ef8778b65a6911c91a92f6d81a930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:46:fa:30:d1:1b:54:36:8d:23:6e:40:ef:99:
                    78:de:bb:b0:51:ef:63:64:b0:ea:e9:43:97:19:59:
                    66:9b:fa:ce:67:2b:ab:74:ea:33:43:2c:7e:d7:4d:
                    48:a5:10:f1:2a:a7:a8:05:dc:00:12:84:04:59:cc:
                    dc:c0:0f:30:93:12:f1:af:bd:32:66:6e:40:81:55:
                    9e:0e:fb:2f:d7:70:61:e4:5c:f9:34:df:17:5c:44:
                    c1:f9:e5:67:ea:23:33:64:30:12:11:69:20:42:6b:
                    e1:e1:1d:b4:8f:8e:a5:81:24:5d:1c:4a:35:39:45:
                    f0:6a:ed:2c:cd:15:4c:84:f2:60:a4:66:db:6b:a6:
                    64:ee:23:b5:4c:9d:c0:e4:bf:6f:77:94:0e:f1:57:
                    a1:51:54:0b:41:c1:03:b2:71:10:6b:6a:e6:ed:bd:
                    02:83:47:93:7e:58:57:ae:22:5f:15:85:e8:0c:b6:
                    f7:9e:b0:79:2e:4f:d4:59:13:e0:b3:e4:64:cf:61:
                    ee:a2:8f:a8:35:97:a2:28:47:8a:0a:b6:12:bf:38:
                    03:74:93:71:64:c6:4a:3e:ef:93:1b:93:e3:5d:31:
                    85:79:d8:18:e0:a7:aa:33:4c:fd:f5:28:c7:50:40:
                    88:90:fe:89:70:43:a2:f7:18:af:98:e4:af:ae:89:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E4:F0:C5:7F:7E:F8:77:8B:65:A6:91:1C:91:A9:2F:6D:81:A9:30
            X509v3 Authority Key Identifier:
                keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:49:3e:b3:2f:56:a8:23:05:fd:7f:3f:97:a1:96:03:6a:
         2e:68:d9:46:02:66:a3:08:5d:06:94:08:d3:1d:38:27:5b:36:
         e2:c1:6c:82:dd:94:51:b4:e9:ad:87:0b:b4:ed:6a:41:c9:de:
         23:00:f0:f2:c1:ac:db:26:c1:57:f0:85:13:dc:90:2e:bb:70:
         93:24:44:f3:a9:c6:70:45:95:49:68:d2:18:be:a1:fc:1a:82:
         0c:6e:fe:4e:5e:61:52:73:b6:c6:3e:a8:9d:cc:f5:4e:f6:21:
         c6:27:6f:7a:1b:3f:a3:bf:4d:17:5e:d5:6c:ae:7d:62:83:40:
         33:fb:df:18:54:9e:5a:ab:51:8f:9b:db:f9:b8:0a:4e:e4:c2:
         9d:ac:50:8b:85:8e:c7:6f:c2:5b:79:4a:f6:30:52:60:ee:76:
         8c:29:1d:8a:6d:08:3d:a1:97:4f:ff:ed:a6:60:d6:5c:b8:7e:
         6f:57:c2:30:b7:f3:ed:33:1f:cc:70:3c:86:40:52:ac:00:9a:
         f2:a9:5a:d6:f3:3e:25:7e:d9:63:0d:6a:41:a7:11:94:d4:ca:
         b5:e5:58:41:7a:db:6c:e4:29:e7:0c:19:e1:6a:74:89:d9:5d:
         c4:8e:0d:ff:7d:ab:16:18:5e:e4:0d:1c:d3:2b:2f:54:92:ff:
         83:24:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:39 2025 by rpki-client