Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
File:                     TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json)
Hash identifier:          90I5VG4rqI7tQTEGA3Rrn/mOABzfuRp1GnHNX0QOu2g=
Subject key identifier:   02:F8:78:AE:B7:40:CA:CF:DD:3E:DC:7E:8D:54:92:79:8B:71:A9:9E
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Certificate issuer:       /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial:       0197B70EA4054D9BE3260ED8FDCEC389D893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
Manifest number:          15C0
Signing time:             Sat 28 Jun 2025 15:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:19 +0000
Files and hashes:         1: 5ihFdcr9l-tc7rukSnsuZYO-sCc.roa (hash: jVp/K4TFXHukJ6ToifAvqgLYscP9U1YkYRjyQ/vS7rs=)
                          2: 6yNeqI6cfHc3f4rCblxx3TjO0eA.roa (hash: gtLbnA120/ol5rBCSdNOOaWzTA+gt7YvBjty1F7J0T4=)
                          3: 7gxbTtd2MWAA1UFCEQXYPpfPvms.roa (hash: amp+QH+F/V8niu7DI7vvmehuw42ndWHc/H0Eed9oDAk=)
                          4: CwYygfo9jnbGuyyosVtnwcbQSLk.roa (hash: rDCG+Vedl9KUCPHae/ViKic222skTUa8bdoX1jGnAHk=)
                          5: GFaNvHrEv5oHgAo-PT7wrqzBOz8.roa (hash: q+xSJMcbTKpowxU7QHIFpGoYjDWd2eTHceMvN5t2SgQ=)
                          6: HFBEdH3RlWYpvPeNgp6xKhpodko.roa (hash: JH1fjI/K5jNqNFebQu9ct1cPojHEsM6BVZLaKE0xEso=)
                          7: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: RkrtOYuYcYgXQRY5NbHsdHwKiMPNwBmD1ept8q+fEKo=)
                          8: cmmjWfTbdXm_bIqEm3CK7WZFF7I.roa (hash: byumgI5wcwBFgn7pCdwnQhSp1RnK/Pa96CjEn1SbRyM=)
                          9: ehged3mZieiEQPKX6YV4LMY94IA.roa (hash: 7eCOyiKG9ZW1g+yYlD3ivpQA1oY2V4uQMAsWpNV5czU=)
                          10: isgHEY3DLcIdH7fzaoi9hSSweWI.roa (hash: UYsZ1nus3c+5ErOsOKu1wsJtYaH8MiA2+iXpl5haTe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:a4:05:4d:9b:e3:26:0e:d8:fd:ce:c3:89:d8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
        Validity
            Not Before: Jun 28 15:01:19 2025 GMT
            Not After : Jun 29 15:01:19 2025 GMT
        Subject: CN=02f878aeb740cacfdd3edc7e8d5492798b71a99e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:1e:26:b4:15:05:29:e8:2a:e9:98:cd:62:
                    70:e4:71:ba:79:c7:e0:90:a8:2a:8c:11:a3:99:1f:
                    61:04:fd:46:8c:85:f7:6f:26:4a:98:9a:8b:1e:5b:
                    62:af:7d:c4:74:52:f6:33:1f:77:5f:36:88:da:c9:
                    bf:cd:08:d6:be:9b:06:60:eb:e1:b8:0f:7d:d6:02:
                    b6:0e:dd:b9:18:fe:f0:30:65:05:af:ff:46:2b:85:
                    67:7d:73:a9:76:ef:b4:5e:dc:1a:5e:7c:4f:59:53:
                    9f:08:f5:34:e3:e7:65:d1:0b:74:89:36:8c:5d:3d:
                    a9:a9:92:ac:42:82:3f:6e:50:72:57:b5:2f:6b:42:
                    60:d8:b9:ae:9d:41:cf:dc:4c:bb:a2:bf:fc:3b:01:
                    58:45:8b:71:57:0f:d5:b4:c1:b9:c0:d8:da:75:75:
                    1e:93:ad:d8:a9:b0:ac:65:25:93:6c:48:a2:e5:7f:
                    a7:a0:1d:46:e3:f4:fa:f2:9b:46:69:6a:fe:c3:8c:
                    8f:7a:c3:49:97:ed:c3:46:e5:fd:72:9f:17:e5:1c:
                    26:bd:e0:32:b4:7b:82:a9:ad:94:e7:ff:88:d5:4b:
                    ca:22:35:3c:6e:e2:bf:f7:33:3e:8f:dc:70:12:f0:
                    1a:74:b1:6d:00:6e:2a:16:a0:0a:31:c3:b3:cf:66:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F8:78:AE:B7:40:CA:CF:DD:3E:DC:7E:8D:54:92:79:8B:71:A9:9E
            X509v3 Authority Key Identifier:
                keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:88:5f:e5:8b:21:ad:52:ca:e8:0a:c0:58:ad:83:d0:5d:ef:
         4b:94:be:3e:e4:66:94:33:dc:b6:3c:85:db:88:bc:6c:87:af:
         dc:01:05:5b:63:64:75:ab:b7:ed:80:29:21:64:83:a8:08:d9:
         52:33:e7:9d:e8:a9:6b:54:bd:04:8b:b6:74:14:f0:e6:d3:6c:
         ad:d3:d9:34:12:57:ca:d3:7c:d2:aa:20:bb:aa:86:2b:ab:cd:
         b6:d1:df:aa:26:a0:c3:77:30:35:3b:24:46:00:1a:ed:66:ef:
         b8:d9:f2:37:45:e5:3e:25:81:56:2d:ee:94:10:cf:27:9a:53:
         8c:28:12:17:27:96:95:c9:3f:9d:79:63:93:b6:cc:fd:58:6c:
         13:8d:56:aa:db:b9:b6:10:b7:f5:76:de:39:cd:2f:d5:6f:d6:
         9e:32:72:89:00:f5:09:b3:eb:18:79:eb:5a:c2:de:0d:5c:9b:
         a7:e6:ee:00:89:2f:18:f1:79:05:17:10:1f:20:ef:8b:b0:50:
         b9:ff:7e:38:40:c6:84:23:28:90:4d:0f:d0:9f:ef:88:64:78:
         cd:12:83:a8:8c:e4:3c:92:58:db:13:f3:a2:73:40:be:bd:be:
         c4:8f:8d:09:e9:74:83:ca:74:2b:8f:97:77:08:cb:9b:f9:be:
         92:1f:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:18 2025 by rpki-client