Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
File:                     H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json)
Hash identifier:          Nae+b+E/0GRMwbTHIKdPp8U3VCA1NyslNAXE4zd+C4E=
Subject key identifier:   7F:1E:4B:0C:61:41:6E:E3:B0:DC:09:26:DF:78:FD:B7:15:E4:C2:B5
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       0197B6A19F128AB4E41234768860775FFA81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
Manifest number:          131E
Signing time:             Sat 28 Jun 2025 13:02:14 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:14 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:14 +0000
Files and hashes:         1: 1-6x9jHZ3cw39179HQd4O3fAvnpk.roa (hash: PgXhvVg0YUToc07oyC3isPahNyz6852StHcO0CF7qN8=)
                          2: 1nUEd9XAFqDWEykKA06-e3Jht8E.roa (hash: FjXuDY1LWSoerVvC1COnQH7k++3mS52vkkMLizNO12Q=)
                          3: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=)
                          4: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=)
                          5: CGtvlVAjeOKgmOegCwgkAU5viUg.roa (hash: tYOH0itDmxfLkiehctgBZN5JIUldgyHwoFbKsMtsM8Q=)
                          6: E2kHiMdYodrnFH2KHA9US6yByGg.roa (hash: 4gqy0Z2gsQk+minstyMsiIr4y+M4uI9pxsNNqBMzDmE=)
                          7: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: b9M9gO9H8m707lXrVC3ShANy7D1Pq47+5s4o66LdL3s=)
                          8: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=)
                          9: LIpJLbylGhFRNKd4Vb6i8k36YRg.roa (hash: Uma+Nee5Et6Up+tXMeUjv4OVtrZCCxIFiku3HIhbB/4=)
                          10: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=)
                          11: PLU8wqNdMXnL9v3tJJzISiKB10E.roa (hash: VqGtKJSXmrM4NojpQ2fDKWSLpkBqvw8V5Igvg7IZsCo=)
                          12: PPj3izdANTPOG9FQYtIHYchyjRw.roa (hash: jE7bR+K8GQ13CqQNdOkrb03t6MGrMEYn6EGrRlPQv3s=)
                          13: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=)
                          14: VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa (hash: HSIRCE/846JiI6ro7JECbGIyt/cQkLU+ZkGrpS5afGk=)
                          15: WZBLvv9OFIzqKVar5Stt9tIoe6c.roa (hash: eDDz9g857ZbC4qMPJ/+ARLyYUZhWBgiSlQKhk+w4u2c=)
                          16: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=)
                          17: gDccJCyvv-XSleOWBZa0j1v0ILc.roa (hash: CO5e5TItEhwMis3LPrh0yYWspCPoVfBb8vdm/rXIFt8=)
                          18: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=)
                          19: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=)
                          20: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=)
                          21: w9RX6MaAp0BwQCPK8hrZIWWzFm4.roa (hash: 6rxWErjQqbL7+OcI7QwVV76+tY/f2tbAGsAv/hz0KnE=)
                          22: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=)
                          23: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:9f:12:8a:b4:e4:12:34:76:88:60:77:5f:fa:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Jun 28 13:02:14 2025 GMT
            Not After : Jun 29 13:02:14 2025 GMT
        Subject: CN=7f1e4b0c61416ee3b0dc0926df78fdb715e4c2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:46:72:7d:37:d5:18:21:1e:9f:79:65:7f:
                    64:e9:32:82:78:86:46:e1:23:4e:7a:7a:f0:92:89:
                    e2:8f:14:bb:98:35:07:ab:f3:09:32:31:85:10:01:
                    7e:9b:6f:d3:38:b9:1e:9e:51:a7:76:b3:d1:0a:53:
                    10:b7:8e:2d:a5:d6:91:9a:c3:5f:79:1b:cb:69:51:
                    9f:b0:95:9a:6e:4e:7e:26:e1:ad:1a:c4:69:21:bb:
                    ad:b8:3e:30:08:fd:ca:c0:a5:c9:b7:bd:b1:44:d2:
                    4b:ae:e2:51:d0:4b:85:e4:16:5e:b0:f0:d8:9b:91:
                    b1:55:13:30:48:1f:12:f5:22:20:71:06:83:a3:74:
                    dc:14:b8:6c:55:ea:1f:9b:a9:a5:66:eb:04:97:ca:
                    dd:10:af:a5:0c:98:35:e6:53:c7:8f:9c:bf:c3:2c:
                    f1:3c:d3:66:36:54:a8:e0:bb:cc:61:58:16:75:3a:
                    3e:3c:6f:75:02:f7:0c:ae:17:33:8b:bb:3a:3a:2d:
                    fe:d3:ae:53:ef:16:db:a2:00:3c:b9:2e:a2:7c:b4:
                    62:f7:a6:44:bc:a7:5a:7d:ae:c4:ef:f1:4b:fd:c6:
                    cc:57:67:b7:bd:5f:1a:c9:6e:65:92:c4:9b:44:bd:
                    0f:fb:ba:a7:b8:3c:0f:bc:04:ac:df:f4:95:7e:e9:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1E:4B:0C:61:41:6E:E3:B0:DC:09:26:DF:78:FD:B7:15:E4:C2:B5
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d6:0f:7b:88:c8:8d:2b:82:07:2c:44:7f:e7:8b:0c:3f:d6:
         98:96:2e:d2:3c:e3:e1:55:99:87:1b:a3:29:56:23:61:20:d4:
         03:4c:57:0a:58:0c:24:12:76:67:79:cf:f3:4b:81:2e:e1:8d:
         94:60:da:37:70:2c:94:35:27:1f:98:8d:6c:79:9c:62:2e:0f:
         50:d4:66:00:32:eb:37:84:3e:da:24:cb:45:f2:e6:5c:4d:3f:
         44:f8:88:43:06:dd:b1:63:50:40:12:17:1a:ea:60:da:21:99:
         81:da:67:6c:84:0d:c6:f9:ce:03:c5:a7:33:c8:2f:82:69:fa:
         bf:14:13:1a:50:02:e9:26:45:cc:36:74:24:71:5f:3e:e0:e1:
         1f:80:1b:da:8c:4e:98:26:a1:48:36:40:cf:f5:18:72:c8:4c:
         ce:6f:cc:22:6c:fa:fc:d9:91:f0:41:da:4b:0a:42:ee:4d:f8:
         6d:a2:bb:21:ea:28:79:b4:82:45:48:bd:ab:20:c2:60:a0:c8:
         77:cc:0b:01:75:11:98:88:e4:86:7d:b2:6f:b8:1c:c7:98:bd:
         ae:20:e5:b3:f1:03:f6:18:e5:87:f7:36:d0:e0:87:23:d2:51:
         fd:f9:f7:00:e8:30:75:cd:6a:28:b5:c8:cd:49:46:0d:68:d1:
         6a:60:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:38 2025 by rpki-client