Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
File:                     rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft (raw, json)
Hash identifier:          /waEF93NN1e12jPpiI55vhj6gVlhm8ONLOwTf+3p5Sc=
Subject key identifier:   F9:CE:83:3D:8A:9E:11:15:54:DA:ED:98:6A:65:B7:00:5D:60:70:99
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Certificate issuer:       /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial:       0197B96A7ECE413BC46010FB358AAC69C5AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
Manifest number:          15E0
Signing time:             Sun 29 Jun 2025 02:00:53 +0000
Manifest this update:     Sun 29 Jun 2025 02:00:53 +0000
Manifest next update:     Mon 30 Jun 2025 02:00:53 +0000
Files and hashes:         1: 04Xl2v7VZUiTmCr_w4v8QX2gTRY.roa (hash: MycY07gNOE3Ooqi4Uv41zgpH/iEzpn8tkzRPcGSW9aU=)
                          2: 26R907b9JZTa9LMd6c9-dwXbanc.roa (hash: Nr0pZSVAGWFTdm0Q/t/4gBjJB3CHvlfJvfnTY1Rsu6U=)
                          3: 4CkYdPgwuFRB9yfCSUR4mFZ2aRY.roa (hash: uxH7iNCE7ZmZDPzgHrmT88B0442eI2IPmR0JGvSaYus=)
                          4: N8IkUZJzTBOZlu70RR-lhbMLsyk.roa (hash: ibQxnRGTbY2fQW1i2qvy/3e4lxCnd9xPyOoTE1V98yc=)
                          5: Nz5RTdbiVqvTyf1uMtVJTNrUInA.roa (hash: 6DxKi3ibNRNUsq7DVRyyl9egdF22G2yI1jKGFf7eGvI=)
                          6: OrB13yHYot_uIXf_gXlQc8xI_hE.roa (hash: FMQdsecZx+s70UXzEHExqDx9Jcs+3DRJcI4Unl+IGvY=)
                          7: Pl7-hE7wkLNvDQabKfSwU8DkQ6w.roa (hash: 27nFWy7GlxT7WEaqE4vpzeeamTgM2rIB5rRF1VNL9hc=)
                          8: R6LZ_8XH3ExvRg1dUKFNV8Ey0F8.roa (hash: qFpymdyEBp79zE8j0kfuySy0J6zv46CXUcpRwgvhrUg=)
                          9: cMwLZYfTsXdjIqb9jx4UAT_n7A8.roa (hash: DlDoiDsmZqGB/sH+jVsLeAbtXXyd2YUnrqrE/juxJb0=)
                          10: d4OCK2D4mSeWoRqf9p5C2kL05YA.roa (hash: Elq7S05bbGTPAkW786TpCyuI8W7H2meHxaBdt6oA0iQ=)
                          11: eve0R85Bzf8fVYZiz_CwkQbNrfY.roa (hash: C31CurjzM4ZbD0eThfczK/2Jz2E+lMaCmCEqjBcpDzI=)
                          12: lGrajh7a_wa1_LmUlCkskSpHEUA.roa (hash: cqiS1zwnFw4W1rzDIACXMZPc8ZNVkVV3Hme04FAS5Cc=)
                          13: mk-EE-jomB4r81nV5hqnq3SbThA.roa (hash: s/WHq7pvPXbuGboH15G/GxJVOO9+dXTAtYjUAcjZio4=)
                          14: rEnKo4uFTJMFYN6Cn2Ft0459Avg.roa (hash: INMUl7RzFx1P7Rf6UvWbPgwSFgMQsbOXObYuvGU4UyU=)
                          15: r_x3Fm5qPpLt6tIgjqPoDH6NSOU.roa (hash: eOXFdxOR7gIGvVyPrVo91AN3j7CdU+E/QIH/+e1t/5w=)
                          16: rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl (hash: IJXcUwfNELg1zN85HOmFBAymSHmuQpNrJN3hsrW6Pwc=)
                          17: xgJFjaLiTqyrTAWyq4f18Pg7amk.roa (hash: 2iBDAhKAGL78CKGIrACCnUM4WIuzKixnPTq74lNq4V0=)
                          18: zNVGFbRsiePBxz6FwsPTrdVje0c.roa (hash: iOwivHuatZu0dYUoIFiY6LVls3U7FPznyEYVX0N4MfQ=)
                          19: zwam10qTIbqdFHd30kfqv_ZzWgE.roa (hash: FkxbmAbpcrj+MmOQBWMwaW9Kx0P0rYzKKqUDU8tkNdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:7e:ce:41:3b:c4:60:10:fb:35:8a:ac:69:c5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
        Validity
            Not Before: Jun 29 02:00:53 2025 GMT
            Not After : Jun 30 02:00:53 2025 GMT
        Subject: CN=f9ce833d8a9e111554daed986a65b7005d607099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:5c:38:99:38:34:93:8a:ba:e5:84:0d:eb:
                    c9:b9:c1:59:b9:66:65:46:38:b9:02:03:fb:70:bd:
                    07:fa:ff:a6:46:c7:2d:b0:dc:1f:0f:0c:d4:7d:b2:
                    4f:09:b5:62:68:c7:27:1e:be:e3:83:f6:0a:65:d3:
                    8c:95:bc:82:a5:be:4e:83:8f:2d:4d:ff:52:82:2b:
                    e6:02:65:c3:5f:2e:b2:7c:63:9d:e1:1e:2f:d0:3f:
                    be:05:67:1b:44:7e:dc:1a:8e:d6:dc:a1:06:05:c2:
                    5c:be:e1:fd:25:30:db:10:ef:8b:1e:1e:fd:8e:f6:
                    c0:c9:fc:12:61:90:f8:a5:6b:e9:76:63:db:fb:1b:
                    f7:d1:99:4d:99:bf:98:da:cd:4c:fd:5d:8f:1a:af:
                    74:b0:53:d1:7a:39:d1:f0:04:a2:92:0c:08:72:48:
                    a4:ac:6e:07:67:7b:5b:60:41:e4:c4:ba:aa:85:c0:
                    ac:e6:08:22:90:b4:07:d0:9a:7c:28:3d:5a:16:e4:
                    a6:26:90:da:48:85:ec:28:de:5a:0e:db:cc:f9:e6:
                    18:de:07:7e:a4:da:20:80:56:25:54:2e:ff:ff:d5:
                    c1:85:5b:41:92:17:e2:3a:2d:eb:ec:2c:69:f0:51:
                    02:74:06:d8:33:df:7a:52:55:25:f8:b2:f6:94:96:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CE:83:3D:8A:9E:11:15:54:DA:ED:98:6A:65:B7:00:5D:60:70:99
            X509v3 Authority Key Identifier:
                keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:7e:05:33:1e:52:03:9e:06:b8:ad:0b:5b:c4:03:17:ca:b8:
         57:ff:db:a6:48:62:c5:4f:5e:bb:1b:54:ec:fd:4e:f5:ae:01:
         1f:b5:40:09:aa:ee:95:a6:ec:14:b0:35:b6:f4:1f:3b:b3:d6:
         12:ee:2c:e3:f0:44:e0:0c:a5:01:4b:0f:1e:42:af:6a:50:ce:
         3f:53:73:c8:06:b9:8e:76:25:51:3d:eb:df:a6:1f:2e:21:f0:
         b2:b4:4e:e6:33:2d:97:23:9d:50:90:bd:b8:05:8b:cd:99:48:
         29:54:bc:e3:66:e8:03:e3:9f:9c:6b:66:2d:5a:9f:f4:c8:41:
         00:11:95:3f:6e:ea:40:38:27:65:33:d0:03:81:90:15:66:5f:
         ca:c7:44:c6:30:4d:9e:67:22:8c:67:11:8d:88:d4:12:0d:40:
         e1:c7:75:ba:0f:a4:7c:4d:63:5b:59:e2:c3:37:ba:ce:2b:59:
         fc:1c:f7:fe:7b:7f:19:b8:de:6c:c9:77:61:d0:a1:8d:81:d6:
         44:96:ea:d8:81:07:8c:79:05:b2:25:00:88:08:57:49:e7:b0:
         9c:43:68:ee:5e:e3:6b:c6:c3:8a:b6:fb:b2:3c:9d:ae:d4:2b:
         94:4c:81:d5:d5:8f:2f:08:a4:58:1e:8a:1c:ca:35:9b:7d:ae:
         d9:ab:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:27:32 2025 by rpki-client