Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
File:                     1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json)
Hash identifier:          g4dOLGxRDixE4V61ZGFoszQFHg0+uopVfHtnmXdSFhY=
Subject key identifier:   55:16:1B:B0:B7:F5:FC:7F:C8:8C:A9:CF:8D:06:10:D3:4E:DD:58:37
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Certificate issuer:       /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial:       0197B89042B54B6E67C233B9F70698F28CFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
Manifest number:          15BF
Signing time:             Sat 28 Jun 2025 22:02:30 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:30 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:30 +0000
Files and hashes:         1: 0MIjC24hYDTW286dNJh5qkIVoQM.roa (hash: MXU+N4PdoB06EZ/HjOQwFUwlQG2n1kwzXC/QtbLmJF0=)
                          2: 1-TrGp-z9XirqNAVi00kZmMtegAQ.roa (hash: cZ4yM8vQzUWF39oRoRKvKg08K8izx43nKLI06xAV69c=)
                          3: 1i8rkHyD_GEpEeT-VSPmrM7G9hg.roa (hash: T9uIPUHDBJqXpx6DpvHR6pRhllvR8xZm3kC3o7hqoD8=)
                          4: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: GQdrHiaaD6vOovH9730a98v7vk6ONfMKXQve5F3l3XE=)
                          5: ARk7nVFItdFVCXn3sJgvaZ_sS0g.roa (hash: 7EEJNomrXNWfyMmnkFvuBOXpyWJs7s8lvlhWBalFymc=)
                          6: AgHi8XOuA8AW6mQ9081yaHFi7LY.roa (hash: GntMqrIeYlMh8GQHa17dRcWuW6VcPzJOKzx7OubvqC4=)
                          7: B3ZVVduO-XEeJJT5EOMOysoNJrI.roa (hash: hGLOqNOpZ+B1pvsSFo3MX/h7GOvVIRzBnRvB+fSCcjA=)
                          8: FCxYBsvWXDM15GSlGFr8QNu4RYE.roa (hash: 0mvD6N4h6dDsOpud4GT2Wd7vYleLAl39nQHcItAcmYc=)
                          9: IP6dxUf_151oN-w_YJNTEK8gFBY.roa (hash: DuBNN+Dmeyf3QMZYAuCqpfhCledEl++glFpZz6IL1T4=)
                          10: P1PPxJKJvcVWj4wZUdazuOzBw4Q.roa (hash: HnwzMbfg3535mDnah1e/JlAfCR0Kk2ea4N+rWTnPdJY=)
                          11: PXVQtp8fbfqZ5jFNvah34s8vf1o.roa (hash: jLDp0a0yIOcsSTqlqaPMGk/PVKwXxyLWYql8ZP+aAO4=)
                          12: Q6ELIGGMyAWLP2-8AinpN7dCP-I.roa (hash: +d8Mriz+mLl19IhnPZ6nZe1Nzbfe1sFAT1awQgdm62g=)
                          13: cdoljHUC9Q9DPh0xJN6bOQNfYgI.roa (hash: asTmSigp9GpUrfz/TvjdPq/vlaO8kX04TRA2R2OR/KQ=)
                          14: dukzfVMcltyysZZBvIjQGrHZPLo.roa (hash: lgww+jOruUco3lHQUmYd3nD9/JIBuRROS48oFbH8RVc=)
                          15: ex-k0hBYMJp3Xt63sbFH4dmaPp0.roa (hash: S04+oB5rzQSuvoSFbDJ54Q32HsuNGomFta+C8/uA5R4=)
                          16: hansf5f-8ZlprgL3Get4FXhM3qg.roa (hash: tdLlts3wjizciN3JSF4Zj+MG2KHEHQp/kr7Y9fEY9Hk=)
                          17: ktcN_1CUp7LaLxP99XlfX2aR3JY.roa (hash: A4GSKwqS/3qXXX5KzVNih95wvOg7T1xafYwJVI0/Hp0=)
                          18: rw3wmNK1T9KyKFmnPInliFk653U.roa (hash: byyB+zxuPES8tnSL4mP/gAsHzJQoaaZNw85rrGkKtTM=)
                          19: s-kJqLbM0KEIQbJ-31AW4jYwkyY.roa (hash: lel2X5N/TCz7Pdk6leCd67OSoke7W8rTYmRW3JpbyRE=)
                          20: thGwDSmOCB2egMkJayh7HTNBOoA.roa (hash: vrdMbk1dhZJxT4RMXRheIxv51EMC51s58JC+BTY/Vpg=)
                          21: wAAXYuIkUKtvrw39DQ6SG8wkbtE.roa (hash: jytRpaU7guGLhPsBwh2sgZuD9rMlPbNl3UHkvQz/oCo=)
                          22: y51hiFPZW-gkNjlGWGRcL6QruIc.roa (hash: IeyRLiiRko+dn467AL+M0JoJJpnysqiT8H5/V2IcxR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:42:b5:4b:6e:67:c2:33:b9:f7:06:98:f2:8c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
        Validity
            Not Before: Jun 28 22:02:30 2025 GMT
            Not After : Jun 29 22:02:30 2025 GMT
        Subject: CN=55161bb0b7f5fc7fc88ca9cf8d0610d34edd5837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:92:cc:f4:e1:16:3e:c3:55:dc:01:92:79:
                    4c:8a:7c:d3:9c:a2:b3:76:00:dc:7e:ef:71:19:74:
                    2c:6c:da:67:9a:62:b8:73:1a:30:4e:66:36:50:bd:
                    f4:46:8d:12:e7:81:30:02:50:67:f6:2a:c5:bd:dc:
                    aa:71:34:5d:8f:77:99:aa:84:65:9e:1a:b3:1e:b0:
                    d2:59:af:37:24:f5:6f:9e:ce:e2:ec:48:84:ff:aa:
                    db:f4:84:87:e0:45:24:d8:29:94:bd:87:5b:a7:f0:
                    c5:f3:78:f6:52:d8:ad:52:c8:54:92:96:3b:93:bd:
                    62:a8:db:8f:f6:87:40:8c:ea:8f:7d:82:e2:19:3b:
                    8d:90:a4:f5:ac:79:ea:2c:3c:81:7a:6c:73:77:04:
                    94:d0:7f:08:35:80:e3:10:b0:9a:f1:6f:7e:f9:48:
                    05:ff:c4:5d:8c:57:d7:2f:4e:d7:43:1a:5a:40:14:
                    3a:cb:bf:63:97:a0:45:55:cd:a3:86:5a:6d:ae:9a:
                    14:47:be:2e:c1:b8:9a:59:26:28:21:cb:28:f8:74:
                    76:29:87:8f:19:ba:66:2a:ae:0d:e4:4f:46:e3:57:
                    f0:21:3d:56:d7:9a:22:5e:73:ac:fd:c8:02:ab:53:
                    e9:99:50:4d:5c:b1:69:09:ca:8c:1c:26:ec:c5:13:
                    6f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:16:1B:B0:B7:F5:FC:7F:C8:8C:A9:CF:8D:06:10:D3:4E:DD:58:37
            X509v3 Authority Key Identifier:
                keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ba:0d:ab:c1:98:46:2d:20:51:4d:d5:30:1e:76:e7:b9:37:
         c5:55:76:8f:1f:8d:66:f1:09:af:31:c1:a3:56:14:2a:e9:5b:
         ea:21:93:2f:20:a3:6b:f8:3d:3e:05:2a:8d:2e:93:a8:dd:f4:
         04:04:9c:e8:74:0a:ca:05:aa:b7:70:ca:d9:c6:ad:43:a8:68:
         ef:4c:41:60:8b:55:60:c4:2f:e4:63:30:82:89:2a:a7:9f:f6:
         eb:c2:c7:d7:08:c1:d8:39:fd:44:99:c3:b0:81:7b:e0:bc:10:
         5b:48:96:7c:67:94:08:1b:f6:e7:4b:92:63:f2:9b:5a:38:a3:
         13:eb:b4:c8:68:4f:b7:e3:61:6a:5a:f9:25:17:3f:c5:40:32:
         e9:12:cc:72:93:7e:01:13:10:8a:4e:99:19:61:17:28:e2:f0:
         6b:92:a3:9d:5b:18:70:3e:86:df:04:b4:50:78:c2:d8:3f:32:
         e6:95:7f:41:67:90:be:8b:5f:a4:94:99:a3:35:b5:4f:50:3c:
         9c:91:e8:67:2c:b2:56:b7:dd:ab:98:a4:91:c5:2f:c3:be:a0:
         0f:78:23:67:15:3d:ca:9e:d5:c2:15:17:a1:53:1c:95:3d:10:
         93:be:0a:46:7e:9f:2b:a4:e0:58:0e:80:1f:67:5f:f6:d2:8e:
         88:0b:5e:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kEK1S25nwjO59waY8oz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw
YjQ1MDYwHhcNMjUwNjI4MjIwMjMwWhcNMjUwNjI5MjIwMjMwWjAzMTEwLwYDVQQD
Eyg1NTE2MWJiMGI3ZjVmYzdmYzg4Y2E5Y2Y4ZDA2MTBkMzRlZGQ1ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtraSzPThFj7DVdwBknlMinzTnKKz
dgDcfu9xGXQsbNpnmmK4cxowTmY2UL30Ro0S54EwAlBn9irFvdyqcTRdj3eZqoRl
nhqzHrDSWa83JPVvns7i7EiE/6rb9ISH4EUk2CmUvYdbp/DF83j2UtitUshUkpY7
k71iqNuP9odAjOqPfYLiGTuNkKT1rHnqLDyBemxzdwSU0H8INYDjELCa8W9++UgF
/8RdjFfXL07XQxpaQBQ6y79jl6BFVc2jhlptrpoUR74uwbiaWSYoIcso+HR2KYeP
GbpmKq4N5E9G41fwIT1W15oiXnOs/cgCq1PpmVBNXLFpCcqMHCbsxRNvDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUWG7C39fx/yIypz40GENNO3Vg3MB8GA1UdIwQY
MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt
OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1
LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLoNq8GY
Ri0gUU3VMB5257k3xVV2jx+NZvEJrzHBo1YUKulb6iGTLyCja/g9PgUqjS6TqN30
BASc6HQKygWqt3DK2catQ6ho70xBYItVYMQv5GMwgokqp5/268LH1wjB2Dn9RJnD
sIF74LwQW0iWfGeUCBv250uSY/KbWjijE+u0yGhPt+Nhalr5JRc/xUAy6RLMcpN+
ARMQik6ZGWEXKOLwa5KjnVsYcD6G3wS0UHjC2D8y5pV/QWeQvotfpJSZozW1T1A8
nJHoZyyyVrfdq5ikkcUvw76gD3gjZxU9yp7VwhUXoVMclT0Qk74KRn6fK6TgWA6A
H2df9tKOiAteIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:18 2025 by rpki-client