Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
File:                     e6tsEdQRYtsDBoWPg-XmUSETKms.mft (raw, json)
Hash identifier:          Lj/TxmsjvSez9y+9+PCP1bnfDMui43e1P0rwyKOKWLI=
Subject key identifier:   B6:48:58:17:4D:74:2D:44:C4:7A:AD:F5:EE:A8:37:6A:A8:AA:BD:4B
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       0197B7EAA3808E8C50009CE2D18C9E6D469C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
Manifest number:          12D2
Signing time:             Sat 28 Jun 2025 19:01:37 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:37 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:37 +0000
Files and hashes:         1: 2d8VX1yVh54mGYkeHaHmzVPzhZo.roa (hash: cYGvSwaRPDVvS+Yq5KxRkZ+234/mFxXJD0RJHeKEEjQ=)
                          2: 6b7RGauO6Ww2qg1-Wbd88r4e3KY.roa (hash: BNLbnygG2YLNyjdpzyEOdm3sS9fiwqBzh1UyiyyKi+o=)
                          3: 7YhCJ28wSxD6190KY3LsL2-jFBY.roa (hash: TdMkcxbj/5amzDjgSgCV0/mP+NRcoQOnkj8hBKpX/xs=)
                          4: 7nwFZllPHib0qlQvTuec2CA4CFE.roa (hash: 6iCLCKodfg6yz/qGnLZGO0jH9QdQIo9q7VMD+L1L/38=)
                          5: DqWqWWUy5sm-gqrVg_icW_4BBuU.roa (hash: udwxBi6VLqH0wpPYZM7DDUViOUA0C7+6x2kGIlrfz08=)
                          6: OrQNPXkdwe2pNlw0XMXcSGXFk1U.roa (hash: rkSh/s+q1SivKdqDxSkXS4YbyDK7MKYmwkQaMtbR9jk=)
                          7: VIqwQa8sdjMY1fKlH4AVE9mX79Y.roa (hash: 26f1YQomtY0BiRJWIfpK3wiyYZ05du1tDa7jK3YouIs=)
                          8: WhRk9kZEyJiPe99DKK0ZIY2m2Yw.roa (hash: dZkGuR4JSyQqOAbFZVSVkGM0gVjd0Muk/GHy9vCkvbU=)
                          9: ZpHETbs_mb628Vvkity4w2NrOCU.roa (hash: urkAaKxvlWEgwM0Yu9Kvm1a0uJN5W0lCOvwAiki7CTA=)
                          10: awn21ccT2OEv9Rpfjh4DhmuTkhQ.roa (hash: 4BEd/kp3Xtbyx7WAgm3K/LeKVYfnYxJ84p9PC0RKbvE=)
                          11: e4ZdNT0b2vxOvlJIV_lJM64Zyro.roa (hash: 7puUfcu0W3Urnah55eUUcVEFPOq9IEAVasFR/gSe8IQ=)
                          12: e6tsEdQRYtsDBoWPg-XmUSETKms.crl (hash: brXtg4n0S7HfCY7JuMGF96SFO83xDUKIibTjL0opyzk=)
                          13: njGgKFMMQYCCOcUQU9FLXyns41E.roa (hash: mOXzfRSGU/yibvLqtvjYzBQ5Qk8Adr7qWGYN92JzeoI=)
                          14: oH-KuzEBTT1Jj9jRIYSrJhWWDA0.roa (hash: OT0X0o4GJQ8rzCrOkZIscdAmjhqqaxADA5FmAXxEAv8=)
                          15: rtNgU16vRfGlfgaBLeA-LVfZYfk.roa (hash: 7272BB0beEnCZnBZky8uGVsVo4pWm3st4EyVIbuSPv4=)
                          16: sJY5TLcMj31ewK9GbQlhZPgo3bo.roa (hash: whJtUyjGYNm5NN1NGfkIMGWBSnbpfKeUHyqGZYB1kB8=)
                          17: uxodH0SAIfY7QfL1CFY1zsVKTTU.roa (hash: MFYf6i70IowcUu2vDq3Z87sRlyhGfcm0kqBV+8MGNH8=)
                          18: zM4hFOeWneXhfMX60yWm7dJXOqc.roa (hash: GFt3zcUn//9D4z2GQsOUfTRTmxcTyGZcc8EgQft8j9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:a3:80:8e:8c:50:00:9c:e2:d1:8c:9e:6d:46:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Jun 28 19:01:37 2025 GMT
            Not After : Jun 29 19:01:37 2025 GMT
        Subject: CN=b64858174d742d44c47aadf5eea8376aa8aabd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:cd:7d:38:25:9e:de:a0:ef:c1:8d:34:7a:
                    dc:47:3b:e3:31:9d:21:5b:e3:11:e4:6a:7f:5d:e8:
                    27:3b:ea:83:3e:d5:d4:99:9d:b2:16:47:b0:8f:c9:
                    b0:0b:6f:99:51:f2:d8:cc:a3:9d:d2:89:1c:e3:78:
                    fb:72:cc:93:22:a4:fe:d5:32:06:5b:9d:86:64:76:
                    5f:6a:13:ea:f2:b0:a5:c7:99:e9:45:d6:eb:5d:08:
                    a9:28:5a:a7:3d:03:25:0a:30:87:d8:30:fc:dc:ff:
                    17:df:7d:04:2f:43:2a:9b:2d:5f:25:6e:cc:d1:a0:
                    24:15:ca:4f:09:31:ea:af:28:3b:82:39:b0:aa:2e:
                    a5:c8:18:e1:bd:84:7b:24:39:96:32:3e:2a:bb:af:
                    ba:a4:f2:03:b8:22:db:49:4e:fc:d4:71:72:1b:ba:
                    06:bf:c0:2a:d2:74:10:a9:b5:c5:de:97:58:86:66:
                    6f:81:28:34:24:da:60:64:97:cf:45:a9:5a:dc:50:
                    ba:39:f4:70:9b:e7:79:f1:1a:b3:3b:ab:67:67:ad:
                    1c:c5:1f:f7:b7:c1:76:82:da:bc:ef:3f:65:c2:4d:
                    19:4a:ac:02:89:43:56:38:f3:ce:81:7c:94:57:45:
                    ae:70:eb:e4:bd:b1:ad:d7:10:5a:f9:05:e2:06:db:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:48:58:17:4D:74:2D:44:C4:7A:AD:F5:EE:A8:37:6A:A8:AA:BD:4B
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d7:a9:ce:3b:50:16:c9:38:da:f0:00:55:94:9c:84:16:68:
         d1:a5:74:a4:ad:d9:9d:21:e0:bb:24:db:47:99:1e:88:d0:cf:
         b8:22:95:46:3f:cd:8a:7d:84:fb:06:74:02:7c:e4:75:d8:c4:
         39:8c:53:2b:9d:b9:09:5f:fc:e9:e9:56:97:b8:ee:93:9b:06:
         82:49:86:df:52:ce:47:95:b2:fc:5e:78:a3:f1:94:6f:48:fb:
         37:2a:7d:92:b8:a8:76:ae:7e:c3:2f:af:c6:36:12:2f:2e:ee:
         b9:2f:3e:a6:4c:26:e8:ea:ae:9a:33:9d:73:b5:09:4a:3f:3b:
         3a:ad:52:79:fe:9e:01:be:41:8f:1f:f2:ec:c1:fc:7d:c6:a2:
         06:b8:b6:72:b6:d5:31:67:32:a3:b9:bd:8a:51:e1:70:37:94:
         39:20:dc:29:5c:c0:6f:ac:44:50:78:3f:d3:5c:06:67:8c:c3:
         f7:f5:19:5a:fc:47:88:36:bf:db:aa:31:02:8d:5d:44:d0:e2:
         49:ba:97:bb:a5:21:6c:fa:56:90:71:80:76:7c:15:14:49:69:
         ed:fe:0b:2b:a6:c1:e8:e8:64:b4:3e:46:d0:05:e9:c4:31:91:
         ce:97:40:53:0d:b9:22:5b:d7:71:94:79:ad:c3:d9:aa:cb:80:
         b5:95:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:20 2025 by rpki-client