Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
File:                     Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json)
Hash identifier:          613hw0pBHy4xHophNVXR0TDsaYF1Xr8jl+8CRG6l2D0=
Subject key identifier:   AE:FC:2B:BB:DF:34:ED:0F:79:80:3A:D9:85:BC:4E:EB:30:A6:CF:6F
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Certificate issuer:       /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial:       0197B6A1EEFEA31D7A6FBF16336FB2363846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
Manifest number:          09AF
Signing time:             Sat 28 Jun 2025 13:02:35 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:35 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:35 +0000
Files and hashes:         1: 1zxqTZu6SRyYv_Ffy0lFoBPOEm4.roa (hash: ThozvqbE39I99NwlKLMA8FultirTXMcz2Kd4yrw2ZKw=)
                          2: 2JQiF-KuxisBuWKzCCYjlMYezbU.roa (hash: SXSN+jTHRj/1XPCNhGNyMfhXX6aenkr84XXZn44oBus=)
                          3: 2wuDk6nFqqGYiaSC6iucrRXcbQk.roa (hash: 79MFBQJOifCFih1gwOm9utzcHryDlN0MlgfAlM0KB/E=)
                          4: Dd0lNs2hky54dQAv3vPisZjCFp4.roa (hash: NVL0LmaHqGXfi7RWJ5Z26iREn6xhTna8KN7jsCj7oR4=)
                          5: G79Wrqy1Lf8BeR2TvbTFt1b4zUw.roa (hash: mkWsUDpUk6REoIb9yGYNYnYwXC9syYE03KiortiRCR0=)
                          6: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: xi95bNieR0TMGZjuQhc0A05eXqc+NPnBUHdddjNqRsw=)
                          7: MtXcqoleDqMSyVWGFxd3850uGF8.roa (hash: 5zTGwHssmIeS5Ukj/HGoA7Wxq1gUaItGj34ri17+IlA=)
                          8: Q6bkyyQLjY5spQCrn9goEf71pPU.roa (hash: 9lviglTOByJ8RQWmZ8UPa2cM7z/LltLd8urB8JmBNnE=)
                          9: U6LKInYX6jQwBV8KMEesVDrNWSk.roa (hash: g36WmG/r5q9WK7xtEoYV2z/lqj+2PVHpdEIB93a9SEM=)
                          10: U93bZjAVh1P1joBT40YtFgkj33U.roa (hash: zo9QHI0N0+rtiU9CTdPl68EA0JwhDa16Oocr2Zm0PWg=)
                          11: Uaif5mluHcrJUGbfFQOQv5aGmqo.roa (hash: 4GcANOdK85GtkfgKCJ6D/Bc//mwXx0P/TVTNMp8rznY=)
                          12: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (hash: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=)
                          13: jyDBS4SlMdZTmgBvwq4TdZHy1_k.roa (hash: LeAOH2iyHYZi5p/Iq7kAMVJlSvm2ZJXwY56cgcvgz+I=)
                          14: kWZqnAqGVCQZUMelFlFHrbydZtM.roa (hash: 9J/2cfRnnGFBEvwGJLQNSpjlPJ6nqFC3XpqXj5zCg1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:ee:fe:a3:1d:7a:6f:bf:16:33:6f:b2:36:38:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
        Validity
            Not Before: Jun 28 13:02:35 2025 GMT
            Not After : Jun 29 13:02:35 2025 GMT
        Subject: CN=aefc2bbbdf34ed0f79803ad985bc4eeb30a6cf6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:3b:b7:46:e9:3a:8f:ad:ac:67:c1:bf:12:
                    e2:a8:f8:14:1a:cf:69:00:d0:b2:e7:05:ac:b0:cc:
                    bd:91:e4:9a:2d:e9:bb:d9:a8:43:0b:bc:46:96:9f:
                    6c:b1:0e:de:99:f7:cf:80:0a:1c:b6:3e:54:b2:f9:
                    53:17:53:8b:87:b7:7c:48:e2:f4:7b:70:05:5c:80:
                    b3:0b:ea:4e:3f:77:c6:d5:5f:3f:fa:f1:71:0e:f1:
                    36:77:e3:fe:eb:3b:a0:db:09:6e:9e:ce:d6:a6:4d:
                    39:8b:1f:ae:88:24:a8:1a:df:13:6e:11:a7:43:4d:
                    9e:b3:5d:22:a3:9f:ae:e2:ef:36:3b:b0:ba:13:44:
                    9c:9f:10:1e:d5:32:a0:68:00:b4:ef:3c:be:f9:be:
                    d9:54:3d:27:7c:f9:2f:53:48:52:c1:fe:97:b1:31:
                    be:43:c6:bf:6f:87:2d:a4:60:b0:fe:6c:c6:54:5b:
                    8d:fa:e8:cb:8f:a5:2b:d7:59:40:e0:fd:25:0e:5c:
                    2e:4a:9a:a7:29:3a:83:d2:18:f6:20:59:28:fc:a3:
                    a6:39:5c:55:d1:b0:24:17:99:1c:48:f9:22:37:27:
                    48:2c:7b:08:ad:b3:1f:81:30:ff:f8:24:1e:26:66:
                    8e:dd:43:4d:18:7c:3b:b4:51:46:f3:20:05:a0:fe:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FC:2B:BB:DF:34:ED:0F:79:80:3A:D9:85:BC:4E:EB:30:A6:CF:6F
            X509v3 Authority Key Identifier:
                keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:08:05:ef:76:23:8a:24:ab:c6:46:99:3d:4e:72:be:54:2f:
         fa:bf:02:50:62:ce:f3:73:8b:9f:05:f4:38:29:a7:01:c1:1a:
         f3:79:cc:4f:8b:af:9a:a8:32:0e:c2:33:f6:85:d7:2a:9a:11:
         ba:1b:bd:59:15:2f:c2:34:5d:65:ce:77:9b:2a:56:cd:c7:a1:
         01:d1:54:89:1c:06:ef:a4:5a:fd:9d:a1:5f:cc:db:fc:f8:e8:
         84:99:ea:0f:1f:0e:10:b6:ad:c7:55:f0:62:8e:4b:d9:06:bb:
         b1:1a:97:e4:59:cf:9e:5d:66:a1:61:cf:8d:4e:7b:e1:62:d2:
         02:62:62:a4:0a:47:8a:1a:d7:85:c9:1e:eb:2b:8b:38:df:6f:
         ac:97:f1:59:9d:90:f0:be:9c:3c:e5:5c:56:b0:f6:2f:27:32:
         15:b6:0d:5b:28:54:8f:ca:bd:5c:9f:48:a8:6e:02:e6:32:75:
         9e:c6:2e:50:a1:ff:0d:7b:38:e1:aa:b6:89:a3:0c:f5:d1:59:
         ae:2c:29:38:e8:5a:33:75:ea:96:1e:b4:00:62:3b:21:af:a6:
         ef:65:99:71:6b:f6:f1:31:cf:7d:26:15:c2:7f:96:72:31:87:
         bc:97:94:70:9e:a9:ed:6e:b7:7e:25:a9:5b:79:a0:be:a2:e8:
         9b:f2:7b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:27 2025 by rpki-client