Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
File:                     6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft (raw, json)
Hash identifier:          X0ELDgaOUs5wL5NGyncBVcOZwq91QLvv5kAr58vLRA4=
Subject key identifier:   F7:23:D9:37:7F:99:67:15:A6:E5:B5:E1:0D:3E:FC:A8:05:3F:32:9C
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Certificate issuer:       /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial:       0197B5FC0BE0C139D081237C1FBFFE4DDF0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
Manifest number:          0141
Signing time:             Sat 28 Jun 2025 10:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:23 +0000
Files and hashes:         1: 4xVy8n1nhBpAya1KevWUaTI2tB8.roa (hash: 20aLYH4n1FuIXOWrztzrtcCxRBgx6WLXVkqg5CHqw0k=)
                          2: 52yRIEJtEfgFBpWr58fadnScoJw.roa (hash: YmNixuazA5Vsqwop7vZiylftf51KooRSucAzjd1m6wI=)
                          3: 68M2owrwonGUKTmptsMxSICxvzc.roa (hash: Oa0fedQajgDxkwDeccQyxl6+5J3W6s2tK5cH8eMToVk=)
                          4: 6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl (hash: 2bgDdzPYFqqk3zeS0nGUCdkbxBhLXzyulJNxkOB3l0s=)
                          5: GzCf6eer-0KJGSOeGO_GMefOjZo.roa (hash: JaQqkGT/EuzyZjXMN8QEs56lhsj8e8xWE4PqIQSZNSY=)
                          6: Hqc62MqaiR1ENBvYXYbBphPGFN0.roa (hash: 4i8o9r31Hh5HW+0+aK2z52UE4F0xdqPSMZVRQXOPULo=)
                          7: I5RmTjKFYz79KqLmMtO2U-JhAFA.roa (hash: B1+cDeSVZwC0LcfXe39/RIErdfHZS7Ts0F3A1wzPQzw=)
                          8: LMMZZ3U_VXbcFd48owkZmwcU1hE.roa (hash: CfbUK0Fwv8dagnk4QuCJP/+wm0mVrn+IK19LJoG4Pqk=)
                          9: NN1cd2iJG4iA-Sgj7ULt14MKMuk.roa (hash: m64daGVuU+ITPisctVvuqeSgJlwjwiPSgCn0UAv8NK4=)
                          10: OyEHyocNzfaASvSX9ghIhZoK7Vg.roa (hash: LVpmM0BObmcCqdx4fHr+ScoOKewYgjGRBFNNC7CN86o=)
                          11: PsmRSosaJeQmzFSK3qy4_ABXXTU.roa (hash: Y7apUM55LCHcQ0UAKmKLhKFwZ/5OJTrUlZSSaxMEOws=)
                          12: R8N31IenIt0xkEBBTQjeM4Z87uM.roa (hash: Ic4nMSUJKsiGM69kIZMaWnmOqFQT0bgB9YdN5w98kIY=)
                          13: SJtR9yDFalD5cZd0JaUHeuQjWF4.roa (hash: o+pZOrweCiX/ZW2TkzQ2pD2uz9mIgJjpPK75RQvDCsY=)
                          14: VmIiz7Cnwt8QdQZXsSuJ63A6JhE.roa (hash: VRDLvebsgzN2IopaBRSitbLUQukOe2HbgDWn6E5mzfg=)
                          15: WMQxf1zi-Lf6j9Cav2HEsfqjShk.roa (hash: 6N/qUEPFoSq8fQxUA5quoxJstsRBkcyzrlkubzD8xSA=)
                          16: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (hash: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=)
                          17: WjMtWaWVlsclmFUeATa0Rgoi2JE.roa (hash: aFMptd/iDTRFNCht4XhxbuJoCK35XgXERP97iKChGWA=)
                          18: aWKog40pGL6sORA6pEtOojYboA8.roa (hash: HLbR0QhrfnbO4DGUjtHTlvgvFgq3EJ3/bV8y/euVnNg=)
                          19: dx58yh-dSv2JgPIFomDm2gd-Re4.roa (hash: xlQAPIKpbZbxvxscJLu/dA02W65rF8gyeeFSGhxfjxo=)
                          20: kK6YDKhFK0O4ZVPYiKbnrwP6h6g.roa (hash: eYiZG4qotu5f2pJqUyvz45seHMJB4Y67i3mWJoKdrWA=)
                          21: kxyWOBFXSt-3zO-AhMR-aAEvICE.roa (hash: BJ9CoZ6lS+YtB1ISTorhmQZ2Z80hHtmbVd+Pg8Wn9Ds=)
                          22: nytPIUYQ48QhDLlfVIi6pB18SwQ.roa (hash: 3LFgebPoNXiMAwsZ07ED/DZ73Cy6wJRysoaaEC5cNnA=)
                          23: uxc5vfve3Si08_1CchI8ifdgJPY.roa (hash: /SI48xsbMIADKemEHZ6Oy1FfH6dit3gQxDwLPx1S1UQ=)
                          24: vYFd8PA0YadUvoZOf5GnUFTlGKg.roa (hash: LwvSvFPd1tZvuor2quDZg75Xtv6mx5QL0g9reG8ijGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:0b:e0:c1:39:d0:81:23:7c:1f:bf:fe:4d:df:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
        Validity
            Not Before: Jun 28 10:01:23 2025 GMT
            Not After : Jun 29 10:01:23 2025 GMT
        Subject: CN=f723d9377f996715a6e5b5e10d3efca8053f329c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:e1:2c:75:d9:19:3e:0d:7f:34:ec:86:7b:
                    24:6f:b4:5c:50:93:d9:70:b3:40:1d:cd:ff:ea:46:
                    82:79:e8:06:af:01:80:a6:42:1f:cb:9f:43:94:fb:
                    08:75:98:f1:a2:17:c6:c7:7f:74:2d:35:fe:2f:b7:
                    91:51:59:e2:61:da:d8:41:b3:78:cc:eb:84:26:1c:
                    e7:30:8f:ad:ee:50:53:6f:ea:23:ff:6a:1e:ef:4e:
                    94:47:fb:c5:be:a9:44:49:d8:6e:14:cc:0f:71:81:
                    5f:6b:30:00:76:4a:a8:c9:1a:25:79:19:1f:4c:81:
                    7b:4d:bf:a1:29:69:ee:4c:01:55:56:35:3e:83:5c:
                    4a:91:56:64:a0:67:a0:e2:3d:44:3a:f3:fb:a8:70:
                    9d:9d:e3:c1:8e:3a:f0:f7:80:f3:34:ea:b1:02:68:
                    f3:63:5c:79:9e:b2:58:f2:26:15:a3:dd:a9:54:da:
                    13:87:24:83:cd:7b:7b:fa:75:a2:02:d4:f6:d1:af:
                    21:77:68:cf:81:da:8b:d1:9a:7b:e1:05:7f:bb:59:
                    b5:11:00:8a:9b:9a:5c:c2:b9:ea:06:10:f0:b8:b2:
                    40:02:9c:16:d5:11:33:1b:7c:a2:2f:3e:07:bd:c9:
                    ff:95:f6:5d:a1:04:b5:e6:59:08:ad:86:26:68:94:
                    02:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:23:D9:37:7F:99:67:15:A6:E5:B5:E1:0D:3E:FC:A8:05:3F:32:9C
            X509v3 Authority Key Identifier:
                keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ff:ce:a3:03:66:71:ab:a3:2d:14:2f:f6:a7:30:7c:b8:56:
         7c:5b:6c:dd:8a:79:f9:a2:be:ac:70:9e:e1:4d:00:fa:32:b2:
         11:cf:54:8e:78:29:6f:9c:e9:10:9b:c8:de:02:40:c0:71:9c:
         8b:af:6c:0d:17:70:fb:ea:0d:e7:55:4a:fb:fb:2e:52:76:48:
         d5:eb:96:dc:ed:b3:a8:84:ed:d8:6b:9b:a8:87:0c:fe:54:d3:
         52:33:99:f9:09:ef:f7:78:a5:41:70:e5:7c:f4:17:24:2f:fb:
         5e:8f:93:77:e7:9a:08:98:e3:63:a9:3d:bf:0f:80:7b:13:03:
         f9:60:2c:72:54:f6:aa:7f:22:d5:e0:8d:95:70:e0:bd:a5:17:
         7a:59:35:5e:c4:95:33:55:a7:ab:f4:cf:8e:14:dd:25:27:72:
         30:af:b3:c4:bb:97:f2:13:64:cf:52:a7:1a:17:f0:0b:7e:bf:
         68:98:9c:5b:af:25:9b:c1:38:10:a3:a8:46:db:3e:c5:0e:0d:
         d0:70:3c:fa:ba:80:2d:96:9f:da:15:22:6b:9c:8e:b0:24:a9:
         4d:2e:ee:be:be:12:5b:1a:66:ae:27:5e:4f:8f:48:0d:a0:77:
         6d:ca:14:d5:3d:9f:22:68:6c:f8:21:c8:27:11:5f:8d:79:31:
         0d:ca:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:29 2025 by rpki-client