Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
File:                     6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json)
Hash identifier:          /WH34Ou7mTqkbZ9YYLf53ZwMPCAi31ZZfH2b2zB8vxQ=
Subject key identifier:   95:03:FA:A8:36:AF:3A:0C:D5:46:50:D9:1C:70:FD:23:23:6F:66:F8
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Certificate issuer:       /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial:       0197C68184D441EDFC7051ECFC77119EB9B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
Manifest number:          15D7
Signing time:             Tue 01 Jul 2025 15:01:06 +0000
Manifest this update:     Tue 01 Jul 2025 15:01:06 +0000
Manifest next update:     Wed 02 Jul 2025 15:01:06 +0000
Files and hashes:         1: 1-TaCRcgr21TvpQXP2txBwhS56hA.roa (hash: KHZjR7WUZNhVQwflclEipajJ/Wn9iLr+1LQGG1l2CNw=)
                          2: 1-fU6KWdkuz3iR7ZQOpBxR2sedI0.roa (hash: gjJx45guChbhy0m/xEIBSHB06+zn2ylMhRT3oYLGiWM=)
                          3: 4zqjJQ54tnfvuWqP4q5HT_tG78I.roa (hash: 4CxXSPWcwR0vooLT58rCHtl4yna461Xu3YJUyKhp4T8=)
                          4: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: c4KGlg0YuZBhtg7sWYz1bJC1Y5fRKPc6agzVbxb78T4=)
                          5: F-mOL_vvtaH8j4HozgTvwJ1ADv0.roa (hash: dR6lpfQoc94mbznYYoddiYKpR7CQD6t8Gifp28SY3LU=)
                          6: F_Vpqfvbjxx20g95CeLrBsXvf_k.roa (hash: qNGonkdXf+gHEPyA9PESPfgKfYoSpxpEByMqfe+I7MQ=)
                          7: LqgMdLmzZfPPNVVL0TSKOfjuask.roa (hash: WTZx7Qb69rQ7242yE9FQUcUlhccWz/PWLVTI8R3vG9Y=)
                          8: S5-7pFac3Ww2rKkOW0pDvjHzO1w.roa (hash: y0paFatbjL3QesVnybDnaaTih+L+bbmSVD8cw6FJ/Tk=)
                          9: TzuzSGjWwV3OX8zX79IT4KZ2KbM.roa (hash: km0dEl7ZooKnmSTFDQzgqnm2fuMBjhQx4KgIive/k7E=)
                          10: bKjVJOTQEmK6CBXhuHKDL_MtVNA.roa (hash: bw0+h33P5VdWTPSoMFRvI+rSiT2enbeGyOyycE406Ig=)
                          11: hmzomv1-759nj0qSVJG0M2x1-8Q.roa (hash: MK4TAOVTO08aktfn+4XR5IYWs4vIY8zv+w46XozbGLk=)
                          12: j5JUp4dpZXOc3dAFDFR264JePYQ.roa (hash: 7z6a7BTyRtoByeNzH/m220ETEsm3++fGEVvk5z41eYw=)
                          13: o5yg3z2ttjMPQUGfQ2mgZ2QkyKs.roa (hash: I3MHEYCMmhtWaJuIqpxZMoC4+VmpWPCOyIyu+46S58s=)
                          14: u8eSG8Tv1dGu5xy9LAZN3LadMO0.roa (hash: 8ftGbQK6TKosgJWFS94PMu1Zj3OMZJC66zppWk0qzYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:81:84:d4:41:ed:fc:70:51:ec:fc:77:11:9e:b9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
        Validity
            Not Before: Jul  1 15:01:06 2025 GMT
            Not After : Jul  2 15:01:06 2025 GMT
        Subject: CN=9503faa836af3a0cd54650d91c70fd23236f66f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:4d:6e:4c:2e:53:31:a5:9e:6d:f3:f6:36:
                    12:d3:b0:ff:76:4b:7d:cf:ff:a8:2c:f4:7c:72:39:
                    58:a5:cd:4a:67:a1:3a:03:5b:b0:f9:a1:92:e6:e7:
                    32:43:98:da:8a:fa:c5:c2:5b:70:b4:1e:f4:f2:5b:
                    36:7c:36:94:88:2a:38:0c:69:3a:01:95:7a:18:b3:
                    c7:fd:78:65:e3:cc:d6:f4:63:ff:1c:3b:0e:78:0d:
                    a5:61:8c:b1:48:0e:64:de:2e:1d:7e:7e:2f:68:7c:
                    18:08:a1:23:62:a6:10:50:8d:4a:29:0f:96:b7:f1:
                    13:95:30:94:cc:2b:26:d9:11:cc:e6:eb:a6:23:58:
                    f3:4e:17:9c:ca:53:ba:8c:2f:6a:72:cf:2a:7b:f0:
                    b0:b7:e4:af:2a:5b:c0:43:1e:3f:42:dd:15:12:4e:
                    3c:42:9c:9a:b8:43:2c:44:99:38:85:03:c7:d2:51:
                    58:a2:9b:93:d6:61:40:67:47:ab:82:1d:1b:50:07:
                    4e:8f:ee:3a:f3:9f:0d:f4:4a:3b:a0:22:1f:fb:ae:
                    44:e4:b4:8c:6e:8c:1b:a2:7e:23:85:49:1d:ff:2d:
                    c5:de:da:3c:10:50:fe:a4:3e:a3:9c:aa:5a:0b:87:
                    51:4b:56:f9:75:c4:08:8c:11:64:fa:d2:b4:5c:4d:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:03:FA:A8:36:AF:3A:0C:D5:46:50:D9:1C:70:FD:23:23:6F:66:F8
            X509v3 Authority Key Identifier:
                keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:3e:c2:a3:6a:11:ca:81:90:17:04:97:a0:4a:4f:dd:d6:
         d3:d5:29:b1:df:44:d9:2e:23:9e:09:6a:d6:95:fb:7a:50:d2:
         8f:f9:06:39:ee:72:7f:9d:55:cb:f2:cc:01:2d:f0:a2:f7:bd:
         66:dc:3c:00:b3:4e:b1:c7:58:ed:9c:9c:89:94:b3:6f:62:31:
         29:7f:bb:ed:32:4c:9e:b3:ac:a4:28:45:de:7a:34:b5:10:ea:
         94:5c:26:35:fe:30:f9:2b:37:f4:85:20:6a:cc:98:23:07:18:
         33:b0:8c:64:ec:9e:a9:f4:c9:9e:18:18:b9:44:ab:21:74:4c:
         bb:cc:d5:63:f2:3d:78:56:22:4f:57:1b:13:ac:a7:b7:a3:21:
         ca:bf:19:86:df:a5:d0:f5:10:e1:9e:f1:40:c8:e4:55:36:78:
         cc:87:dc:ab:6e:1d:b1:b6:d6:56:99:b6:06:2e:1f:26:ec:c0:
         df:7b:e6:b0:cd:bc:33:ed:21:63:04:3f:7d:e3:c3:b3:4c:09:
         56:c2:cc:2c:c5:50:4f:7b:cb:60:96:5f:c8:72:37:b6:d5:dd:
         59:c7:bd:4f:d2:fe:96:d2:e6:c7:97:a1:65:4c:2c:90:14:d4:
         4c:97:70:68:33:bc:32:a4:17:7c:5d:85:e9:93:a0:29:99:33:
         58:7c:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:57:50 2025 by rpki-client