Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          zOGIzWDWLia1KhCigV421wobq8H2Qy8kTEHfd5Qa+Yo=
Subject key identifier:   68:19:5F:4F:A5:63:E3:72:D8:A5:8F:55:28:80:04:49:41:34:89:0B
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       0197B820F70D4254B33DB7D385C44AC8DA89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          161E
Signing time:             Sat 28 Jun 2025 20:00:57 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:57 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:57 +0000
Files and hashes:         1: 0a-KrfdskF1P1eak9gMq_rpHwLQ.roa (hash: 1r6R/eLHp6yqNJSUm5rRHogfjj+timL04ipzPj2uofE=)
                          2: 1-z0xCJwtZ7oNjVyEZRiUl707L_U.roa (hash: kH96KZu4zVwqWimn8lprbltf+L6jN14xGOOzu5+uka8=)
                          3: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (hash: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=)
                          4: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (hash: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=)
                          5: 8HMlEMu_BSHgTuVZxYXkPOUH-XA.roa (hash: nzR0epdeX2+WJtESwgq5prAKeUM2fNXd9Y9hluvNjBg=)
                          6: DPety_jnIlz1JoKIkUOdvSdzlkA.roa (hash: 8Qo2m3ff3vX5xCcQXsmVD5nJfQNAALizPwwsueUp9rc=)
                          7: EU4QWvJeKnbJ2gVJ_l-zXW58tiI.roa (hash: 2GTsiEN1pVkfT8wxoGUw+kBia4yRrXQI1p3cFmoAfU0=)
                          8: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: FMZZzaKRVGhO8WSYD1SLES8MARVl35J7TpLNIMloBII=)
                          9: F2_wmuIlF_Fr4vPu8BktVcIEbJc.roa (hash: C0sIjHqlElpVFUnaeluaj4Gkav9vDU7HqpMYLEQ16Xw=)
                          10: IZW8Cqwr_D-Po8j-rY2wg4gV9R4.roa (hash: faXsZmEmW7RzlcMaOmIqHP7qeNNDTUksCHYYQluTIl0=)
                          11: JY0sVxRmdyc5WAgUY19lxnxmM4I.roa (hash: 86gvkJrlTS8XF8/W3CjtN+tW5tBzNGMNDhj7XFXK96U=)
                          12: MnZ1UPaVCGVHsNlWr6g8E6HAsqk.roa (hash: FH915nFqYYP34soWy98+e7VhhgoPoCqjvzoYA7ew36s=)
                          13: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (hash: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=)
                          14: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (hash: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=)
                          15: PICG-s3Q4YZkop6Z75tQ1uqUjjc.roa (hash: RYwj25TTRgCRFd7rjmY1yuMhB2tlpTJT7SA0DAX0bR8=)
                          16: Pv-j_xb12EoFL0KNBNjL6M9JeGE.roa (hash: M4QfE5BRH6sL/kzaNewIcbpvUYFUCu0wLgQkXw6CEIw=)
                          17: PyyzXUdlmoA9Bk7oa0uF75YdupI.roa (hash: KrKiurvSNPj8UgpNpGVtpzLAre3QiNcGoEwUhT8E1Zw=)
                          18: RRHkc1lOsJ0WrMbiCvf9G3l9Ja4.roa (hash: fpJ4KH8CMslY9U5qvXp1614yNP772K6f37C+wQxE5Ec=)
                          19: WGVFdHdOhrZ6oEGNKaADeEDXEkc.roa (hash: upyn2YAU1bBK3yksfLZUYvn/2Yyr6nO1tneR3QTm/D0=)
                          20: WNxwGRqjvkzEEIFtJUKhx8EpDnA.roa (hash: NuJcsLFQveWA7JrekR32MafYf69Fr1QL8arEGvczy7k=)
                          21: WdrQA2XxuRSob5fch_vmulfj1p4.roa (hash: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=)
                          22: YshAp7kvzSEqzUAJqYQaXPlimXM.roa (hash: 9wAijCHBf70P9HVKz7vJxcgO3NSgfGywCSLu5rKQFcc=)
                          23: dcujdY7nZpLDRD7umvphEez-qpw.roa (hash: DCDyLYPDKXFLZDtPjhfGEgVVy0YwKX5izGR8g7lqUrY=)
                          24: gg8zzgS55uq5P6kGkuaJFoKcCTA.roa (hash: nEDs7oqRrIVyofxdHlPaduwYU8FU0iwSUVYcN9fZIC8=)
                          25: o3FpZUaMCqS0PJ-p38gLRiireA8.roa (hash: 8+rSXVxhddmrUPWbbOUkGkf6mzc7L21bbQhqQDlDK6c=)
                          26: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (hash: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=)
                          27: pHrarVnk95oQe2hI0xpt7DgCX4I.roa (hash: sJ3eEhOn7jQjhfcoZ42EdbEeYJY/zzcWxgg/rji7kDE=)
                          28: pxErwoucWB8yQbaQqe1v45Sxb10.roa (hash: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=)
                          29: ul3uv5hec5ukIf7FCGeau4nCEHc.roa (hash: pc0UTa1zNFc4D1XbCiXp6Zxm7lOslpwK+C/ygH0+nGg=)
                          30: x9hv5VI53E9lfmCoCZYbXA2hByU.roa (hash: /EpYHmEUvDFytn2JV2b/puVDndIWdyEA5WbCaF8KMCM=)
                          31: ys8EEYV9duz4vQMnV4A63KTELEI.roa (hash: Mzw/QCxXFE0BItwPGjx2i5l7tZTi3Kn7VnGnniz1APM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:f7:0d:42:54:b3:3d:b7:d3:85:c4:4a:c8:da:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Jun 28 20:00:57 2025 GMT
            Not After : Jun 29 20:00:57 2025 GMT
        Subject: CN=68195f4fa563e372d8a58f55288004494134890b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:10:8b:56:11:71:f2:f9:8a:6d:ff:59:ed:
                    8c:6d:80:f2:77:75:a5:0b:9a:95:15:a2:69:c7:fd:
                    38:10:54:d1:a3:85:f8:32:a2:60:4b:34:83:54:7c:
                    52:b2:d6:5f:d2:f7:c8:50:7d:a4:3d:d3:ad:b6:40:
                    84:db:6e:69:14:ce:4a:50:ba:02:2e:dd:10:0a:1b:
                    57:d7:8b:33:83:1b:36:84:3a:df:6b:66:12:4b:f5:
                    2a:70:6b:8b:af:69:2b:d2:58:63:1b:52:2c:dc:ab:
                    0b:f4:91:41:a3:a0:09:18:76:08:32:02:0e:4a:f5:
                    cc:b8:cf:c5:21:21:ac:02:c0:4f:9e:7d:1c:54:a0:
                    1a:d9:73:25:c8:e5:d4:6d:d5:48:f4:70:61:9b:d3:
                    87:1f:3a:2b:74:df:59:8f:c4:f6:c4:00:bc:64:6d:
                    fd:ff:7b:06:e9:fe:49:45:5f:ad:25:78:98:73:65:
                    4d:70:0f:08:5c:db:01:e5:51:d9:fa:c0:c2:33:b0:
                    90:c3:7c:66:89:dd:61:6f:98:57:18:cc:bc:b7:aa:
                    d5:a4:a9:df:90:2d:cb:6d:21:38:5e:23:0e:05:8a:
                    7d:c6:25:78:f0:03:fe:03:e3:36:48:0e:76:e8:a1:
                    7a:8f:b0:ba:39:32:da:4e:b0:ee:e2:56:19:e7:96:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:19:5F:4F:A5:63:E3:72:D8:A5:8F:55:28:80:04:49:41:34:89:0B
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:70:c5:4a:25:f8:04:e8:e8:ed:e1:26:7d:d6:73:ea:26:33:
         23:32:a2:9d:1a:56:a1:fe:be:3a:28:e1:a7:e4:eb:f2:2c:09:
         e5:a2:a9:5f:a7:9f:c7:3f:4d:10:8a:d0:d4:26:f3:c2:a3:23:
         6e:0f:19:8b:17:70:69:98:af:ba:9e:27:b2:81:c2:1f:b9:c3:
         69:6f:ac:13:f9:19:e9:eb:e8:f9:ae:63:1d:1d:98:8e:83:aa:
         93:a0:8b:07:e8:85:53:ec:57:16:0a:4b:cb:40:c3:c6:8f:1e:
         26:80:eb:14:6e:5e:d3:f9:45:0e:7b:3a:91:a7:5d:6c:fc:0e:
         ba:25:f0:cc:1a:c4:62:4f:37:27:f2:8d:5c:2a:74:01:be:1e:
         3c:f7:b3:ec:7a:67:1a:ad:5b:4b:82:4a:63:a0:cd:ea:73:9f:
         22:90:64:26:a3:0c:e1:1b:dd:cd:f6:66:e4:c4:77:62:18:50:
         15:8f:d7:52:52:af:aa:10:fe:86:8a:02:54:1c:d0:23:b3:92:
         95:0c:19:e4:90:8d:85:0d:2d:c0:f4:aa:fa:03:75:3b:0a:4c:
         bd:7f:72:90:85:be:b9:24:fb:43:54:bb:e3:92:90:b0:7e:0e:
         e4:06:a4:2e:01:42:aa:d5:99:27:43:e3:fd:84:73:da:bb:2f:
         06:99:a6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:02 2025 by rpki-client