Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          ghTSF/gKxdIC6zrhKovYCVOUOQMgXBSxcCAOB3HacpE=
Subject key identifier:   E5:D2:E1:46:DD:90:70:0E:DB:68:ED:E9:B3:BA:25:34:0B:75:88:1C
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       0197B7B2FFEE7E95CDD1D0240EADE8AEE87B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          15E6
Signing time:             Sat 28 Jun 2025 18:00:50 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:50 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:50 +0000
Files and hashes:         1: 2WxqwaZAVv2dyvITo-AesFShXVA.roa (hash: 6t+meRGm9n30GD2goCpBFQRLPzip0i8RlRot9CqnzDs=)
                          2: DMu0CRg6kU40ulv6UeUceUeLmAg.roa (hash: G0oKxDjCVkHsKYcHUkTYYLJl4+Ed9cBLda+tBTwobuI=)
                          3: GqSZzRT-6EUjEpPpSprb5uTXjdY.roa (hash: R5dBboLAVD51kW1cDVdwcoH+HEQsopVvdEZu8XFQjoA=)
                          4: IJUrnOsXqWHMR09b2WThxrOzZ7I.roa (hash: pLY1rvU8nCKjlyh0WPOsU89VyudJIjrK5QOTjl/IWbY=)
                          5: MoOd3UbtCS1jCqfk4Eq1ESLwwHA.roa (hash: IUTY6Kac0RWR6KocRHT3FV3q0t8rT1+uiwnGYkc7UDc=)
                          6: Nlgb7JYdYFon3ATeZJpEg1k27pw.roa (hash: NSOx98amr5Ih2M9Z5olSG0RUve4KE3kRKxU5Wk0rOgM=)
                          7: OL--k4HWjTYCqoOiHkb6J7Zbllc.roa (hash: JA4H42s/1jVK78rUsdByr4/C6vbBqxY7qzGRzKdj1HE=)
                          8: RdMfFmFjHDJDX_-5uaaUXQKDls0.roa (hash: O6jVvm7OX0OHLjep55ba573pokqJBTfgyVcBvBUtHtI=)
                          9: UtNq26d9JSb_Nw7v93_rZSfntfI.roa (hash: BwxbdOm0odI7W9CsiapOsPFRt2svrB57iDDfUu1jOsA=)
                          10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: dStQPyGIi+Pb3n1mUAK0HwvuSypHk3Nu1BQDMejv3pY=)
                          11: dx_5lNWl8316FN21jYYHgM9Omcg.roa (hash: Qr4/FlwcX1RS39pjsqMjlcq6atyfDlGR+M4UNYZEX2I=)
                          12: e2cInBTd-rmGJiE7XxhPPld1Ulg.roa (hash: IvekKh/rpFdvGGB9vKZ/0VojUSPhCbP5Lk2iZ/nlU9g=)
                          13: eRoiwHCGGWzsakU0Sd9_pvvGdAc.roa (hash: rIC53m0wk/AEJI6S30/Y82l7fTBuA5MUe7EOXE+qyks=)
                          14: iXyw4CJeCTCBDoOmqw9S5M03Oho.roa (hash: /0Njq6baGydQf0hCnZDNdpKQZB7dTLuwHGMng0slCJk=)
                          15: pM84h9NKkkwXGLtMIPbJpgkc55c.roa (hash: kTHVs/be3Tv2n1C0vv3DFuVKeuz0WY3EFxZXtvfz3Os=)
                          16: v4rd-n9pP7sJ5GOh0KiW7fnx7wg.roa (hash: 9L1btaeR2IxkcTwRMJ2qSfeTGoLSvpZoH9+bU9dbSnc=)
                          17: vQsJW15dMwHZY104nt15UgW_JpU.roa (hash: Wpy6rJjJCiowwMoCuc7Oz0XTeA0XwRwWa9jhMg3QDw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:ff:ee:7e:95:cd:d1:d0:24:0e:ad:e8:ae:e8:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Jun 28 18:00:50 2025 GMT
            Not After : Jun 29 18:00:50 2025 GMT
        Subject: CN=e5d2e146dd90700edb68ede9b3ba25340b75881c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:b4:1e:a9:5c:ee:1a:0a:3c:2d:69:15:89:
                    52:3d:9c:7c:63:dd:53:9e:21:d2:a5:b6:8b:b4:b4:
                    44:20:aa:9e:45:07:e1:d9:a8:b3:94:20:6d:7e:e8:
                    ac:a8:1d:6d:23:db:c9:26:4b:91:32:a7:a7:71:46:
                    bb:66:de:0c:ea:5a:84:f6:e7:30:54:69:c8:a5:9a:
                    03:a8:c1:2d:63:79:fc:8f:8c:d3:fa:7a:29:e6:67:
                    33:78:9a:03:c5:9f:cb:f5:3a:6a:c8:97:5f:36:48:
                    f1:b0:71:dd:57:92:21:4b:f7:c4:61:a7:ad:fa:57:
                    67:4d:4b:71:9c:86:3b:10:88:57:c7:1f:c0:c4:85:
                    3d:1e:93:e6:63:b0:eb:7d:65:7d:6b:71:69:4c:b9:
                    87:f5:3b:7d:43:ea:66:45:dd:59:47:e6:ab:bd:90:
                    06:0c:51:0f:78:13:8a:03:5d:98:54:d0:64:43:06:
                    44:b6:70:e0:41:5d:a5:c7:8e:46:a5:86:12:34:6d:
                    cb:46:ea:42:63:e5:b2:89:d5:0a:ca:41:c1:d6:2d:
                    68:9e:11:1e:07:50:0e:b7:9f:5c:3b:42:b1:8d:f5:
                    4e:c8:5c:9c:58:94:3b:f0:c9:a8:b4:4d:a2:fb:55:
                    82:be:ad:53:d5:e4:34:7a:c4:8f:41:9b:99:54:f1:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D2:E1:46:DD:90:70:0E:DB:68:ED:E9:B3:BA:25:34:0B:75:88:1C
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:2c:16:c4:69:64:fd:19:13:e2:db:18:dd:53:b7:24:f3:64:
         9b:52:bf:da:98:2f:93:46:09:21:89:80:6a:bf:ab:df:3b:08:
         99:ba:db:55:c6:a7:f6:7c:17:dd:c5:f8:87:0c:27:d1:2c:3a:
         3d:ed:28:4e:73:06:97:10:ac:2f:ba:40:a1:79:89:e5:3a:9f:
         75:ef:d4:25:45:31:34:e5:8e:26:f8:62:cc:02:0f:f7:80:d9:
         22:6d:37:d0:d2:04:85:fa:0a:f6:38:25:64:7b:7b:33:e7:47:
         3f:67:03:79:ff:09:23:10:d3:56:15:f4:1d:2a:26:4b:eb:8b:
         d8:6a:1f:06:c5:fa:76:ed:26:6f:5e:a9:0b:60:1b:20:48:44:
         47:7d:fa:24:be:35:94:ec:bb:4d:0b:81:5d:e1:0d:fe:ff:eb:
         72:ef:06:33:6a:0b:25:67:3d:5b:b4:7c:93:4b:8e:8f:cc:6f:
         7d:fe:3a:00:5a:d9:e8:e9:7a:46:79:a7:99:69:eb:3f:a3:a5:
         09:b3:b5:56:35:5d:25:fa:b3:1b:b1:6f:09:15:00:19:06:2b:
         48:7d:23:ad:f3:ba:27:f4:55:94:bd:94:ce:25:db:63:ed:5d:
         1a:4d:b4:5e:70:a6:52:71:ec:cf:b7:cc:fa:f3:eb:e8:04:4e:
         9a:1d:7d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:28 2025 by rpki-client