Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
File:                     O0duEuiYflswLNwkvdnbP-g8hEk.mft (raw, json)
Hash identifier:          m4Ox6NM3Ds3eozHIiGgdVl7udflO71HRzo9E8Ih/hew=
Subject key identifier:   78:67:34:E6:33:AA:B9:E3:69:6C:B7:0C:91:97:EE:62:CB:AE:F4:B9
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       0197B96A76328F7BC78D5684A5A2D1323524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
Manifest number:          1795
Signing time:             Sun 29 Jun 2025 02:00:51 +0000
Manifest this update:     Sun 29 Jun 2025 02:00:51 +0000
Manifest next update:     Mon 30 Jun 2025 02:00:51 +0000
Files and hashes:         1: 4vgCB29E8qksUTRT80hibqkfyyc.roa (hash: jmfyWEEY9JnvGnTw4OogSC5Brt6r5w8K86EHD/wwf9A=)
                          2: 526untxz-mzv2dHnFDXL_1ptt60.roa (hash: eTZ7gYAJgAUW5KmvOus9/SXIOPMjtfVvCRByFZ9gVg0=)
                          3: 7AXFe4yxIHvF0jtzsP_F-wLpTyo.roa (hash: fz447Zdcr7iuvJ9YqYhhlssvYnd7PF5Z4bBFuoyFksI=)
                          4: 84Sb-xKInlKJ_G9LIQgTC0H0Jg0.roa (hash: vVyPQo0gX0sZLlx3G03pHEDg91KEfGyxQJfg0zCmOZE=)
                          5: C-8-iMMsxJ6tnwl9OBqOWIwbNsU.roa (hash: pdyDDn72ivSi04YeLJDn/Rf+owjmwql5RY6I2jPWQjI=)
                          6: Cz5IOaLfZShikRrc5qEp3L0_dDE.roa (hash: yJQIMc4u5I3PxM3zxWJYXZyrXzNKlBnDlO54oa7k+I4=)
                          7: D0L0LFndzzXtixPyXy6YiMbyR7Q.roa (hash: le65wEoYAgLiuW7LHDLfiJaMqsJkMNtdkgbBI9+aSho=)
                          8: DXkQJWoXXxUWl_6wOwUCNK2iqzE.roa (hash: Et9FWADnNl04HSdSo6iAdV5+gKD6jObcWqGDBUveUoM=)
                          9: DxgEUmzhCfbLGW1VYUfMpFa37nw.roa (hash: aTiJxBWDUefv6IrHKfkDtn+24ct4bHV07inB3EBckiI=)
                          10: GXy-YScDdlVSOjaigEKgJ51XCY8.roa (hash: Y3LR/iT+9EdXx7rq4pgAup8VPeSq/ZLbP9lE7Caoknc=)
                          11: H7yrNUT75yVv09M5UBmNbZIqcoA.roa (hash: CZfSBGRpxyxAFQpjENd+v0cJ93DJ7YkMpWAIc48uiNM=)
                          12: KfRroo9-BNURF9yUWR1WlHgU1ig.roa (hash: d0EUN/5YCOmmW4SmyztOjubnx+pkCFBWNsBncoAozSc=)
                          13: KtPtCnsNO7KrNH_mi8irxAh2a64.roa (hash: 0X6VJNdKzEQIN2KQI1h+LTGHgQgh9YXQ8FCAd7HKCL4=)
                          14: NBdPQa-wvhCcNUR62UijOKmqLb4.roa (hash: FBuWOoWqS3kDovQ4RTLJifcKo3Lt+KtJgveTvXA1/PY=)
                          15: O0duEuiYflswLNwkvdnbP-g8hEk.crl (hash: qIpTIXpMrWMqNT3XvQnjsiOkHH2wKJX2VRH01g1k+8E=)
                          16: OHtdamk3K8NdLEh-keiR2rSuuSg.roa (hash: qIQbXlJhQUZZHP5a7YOGBONxaoVnF9gndUOU4O5iAEE=)
                          17: ONvCFUby9FQsaJnAxo4Axtdte3w.roa (hash: Ifw+sRLVQyRVbH8IoOOspPffjTFu/L5Tp5Iujz6vsEg=)
                          18: PqyNHcmLJdPWxXV1ritb4BmJxi4.roa (hash: 3vlH477/W9mn8TAvOvuTdFa84/v39cjh6RY9RiJ8GGQ=)
                          19: RPtIr4SyxST2FhDUlfIaVDvDv30.roa (hash: GtTmqq9ciOzu0ubmXjSZndWCRadfRgXNWiYJpFrJC5s=)
                          20: W4gGQid-BJ2ydE-GfarPQD0BXHk.roa (hash: AIulnkFQm6EME0MTgDdsXVMYUQiBqZHjvvdiEh/TZmw=)
                          21: Xf3YKxRqkeL7M00W8PeVBpyDwo4.roa (hash: l1kq88C+6MsbDoI9xmNG80iyS2+gmcx5dOr77F5QPn4=)
                          22: Y2m9dQZRR5IryF_5Zz3iwenilus.roa (hash: Jz9GiZ+cQjwgpfumcixZsPRulTmHrskYTNVB0A9hwMs=)
                          23: aRKgFuNEew699NwvZOmMVRESxJw.roa (hash: BbnnNcBf5b80ecOVIfxt6czSFR5JGmFsnVDqmj8IYKc=)
                          24: atVw4xeqFsYkbv0YanpMvYj9YJU.roa (hash: 7v09PHKrV9HFGitf9dm+OHYN47o0kgfyg4toCmWYsN4=)
                          25: bIscYSktyuSdXA8uuitNFV9EUno.roa (hash: w2B+jU39CkMFN16wFNwH+8WwrfFPrjamkhdn7et9g8s=)
                          26: ilG6y2Wso3mOgxG85ra3iR2e8Ck.roa (hash: INQh1RPZ3Hg+l39PdTi0B9Y2GnJwgu1gLpokQWLUkWY=)
                          27: lRiWjK4xEGSZ7hhdPgk-iqq1mwI.roa (hash: JgHkOVWJLhXz09JsY8CuxiPcEyyxQ/VY17v428GySkE=)
                          28: nei3AaGClDiyy_EfGYw9mDGViqc.roa (hash: qXKOsUvJTZ9r5zNLO+LyECtFcWGid4ruKizdlfVXjdw=)
                          29: oMVUugxzWQV8CTV8CsCSyXRaVrM.roa (hash: pMKFMHKU1JhFpXnjr6tLo7AocNPXia8Qa3GSVsF74/E=)
                          30: rV-d7VXcUbLnrbK3ohsI3QLRWIw.roa (hash: Si6Gbj6iN9YCKSRyp8uzQUvQVAIZ5dMzfyTQ7eulP40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:76:32:8f:7b:c7:8d:56:84:a5:a2:d1:32:35:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Jun 29 02:00:51 2025 GMT
            Not After : Jun 30 02:00:51 2025 GMT
        Subject: CN=786734e633aab9e3696cb70c9197ee62cbaef4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:02:f9:e7:0a:86:a2:b0:a7:c4:85:fa:c8:
                    0c:42:c1:23:63:64:e3:33:cf:37:de:e7:e7:5d:95:
                    10:81:00:49:d2:d2:89:ed:af:a4:12:fd:77:c6:28:
                    fa:13:5d:ad:80:39:ca:92:54:6a:0c:75:8a:4c:dd:
                    d4:1a:86:09:bf:54:c2:72:ec:f5:12:39:ff:f6:1a:
                    8c:6e:5c:0e:03:2e:3d:54:93:bb:10:e0:25:df:0e:
                    2a:5a:34:45:87:b7:42:3b:e4:ac:db:19:6d:0b:35:
                    f0:9b:bc:2c:94:8c:7c:d0:d7:74:85:33:63:bf:61:
                    8a:b2:b8:dd:d8:75:c5:0a:67:89:4b:e9:ec:b0:6e:
                    27:ab:7f:09:dc:a6:aa:72:e3:76:aa:45:c7:86:b4:
                    f5:e2:52:6b:c5:9e:3b:8b:0f:85:62:b4:ce:6f:d7:
                    41:b5:a2:7a:84:61:ca:a8:4b:ec:ac:8c:7f:44:cf:
                    75:df:f7:1f:a2:39:29:68:28:b1:97:c1:c1:5b:c7:
                    69:1a:39:88:cc:5b:42:73:0d:64:ee:4b:90:67:4a:
                    8e:d0:67:2f:b3:cd:6d:bd:19:65:7b:69:9a:6c:c7:
                    ac:bf:fa:f7:72:f8:39:b4:d4:56:cc:07:93:27:ec:
                    34:6d:3d:c3:34:ec:aa:95:89:1a:65:ca:73:18:16:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:67:34:E6:33:AA:B9:E3:69:6C:B7:0C:91:97:EE:62:CB:AE:F4:B9
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9e:ca:1f:14:78:08:9f:9a:df:ea:74:d0:65:ea:0f:fe:98:
         b7:16:dc:d2:78:fe:17:2a:ee:07:ff:d3:ca:6a:99:9f:dd:9b:
         be:5a:96:84:ce:34:52:0a:e6:f1:ff:14:31:b3:5b:0e:75:52:
         d2:6f:0a:15:83:91:8d:6f:26:3e:f2:d2:a4:59:4b:86:48:75:
         f6:da:6c:b7:2d:c0:35:ff:2d:d3:f7:7b:b1:ca:04:64:d1:8f:
         2c:e0:88:51:82:17:a2:b5:dd:a0:4a:33:3f:71:d8:be:b5:7a:
         06:2c:25:e6:2c:dc:3f:d3:e0:f1:14:3f:3d:a8:86:8e:de:d7:
         e4:3b:a3:a1:19:49:a0:75:8f:22:6b:d2:c5:99:a9:85:b3:16:
         10:04:22:57:75:7c:19:b7:63:50:24:99:11:26:b5:c0:d9:86:
         dd:fa:b9:0f:ed:3b:48:39:18:2a:a4:13:93:96:1e:dc:b3:0e:
         9c:13:32:f2:00:2f:4a:c3:01:d1:9e:1a:23:6b:61:28:fa:c3:
         18:23:f5:cf:20:0e:9e:16:bd:0d:a0:4b:b8:a0:c9:cb:f9:2b:
         11:b6:da:b6:4d:d5:47:44:4b:a2:13:e4:18:db:68:5c:49:d1:
         2d:b5:21:a8:6a:0e:3f:c7:98:6e:da:e8:4e:97:cf:4f:3f:d0:
         4a:30:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:01:13 2025 by rpki-client