Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File:                     WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier:          YONXv6ogR5kPc9Mh0cn6jfbkwKoxUDn8JV51x9W/Xpc=
Subject key identifier:   65:71:86:D1:B1:57:41:6E:86:BE:78:B1:5A:46:F0:3A:CC:89:EC:B8
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       0197B6A11D14297FFFCFB5F93BE0F3CFE1CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number:          12EB
Signing time:             Sat 28 Jun 2025 13:01:41 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:41 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:41 +0000
Files and hashes:         1: 5vJKf9rRscQn60NceOgS-TYmgqo.roa (hash: m3zVFgk+rH9oeWk1CAQpiduJ6luxwEoOtZqabqE5W9Y=)
                          2: 6y4ef_E4buArdFR0VyJFJok-UQk.roa (hash: SLHYiqzLk1jqb05UW5GYDuNyyYKGiUgX1kAE2Okbj9U=)
                          3: L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa (hash: K1PZCMBxSKerpN6ZYGV0oTGEJDr/K9Pijlk59rNCqys=)
                          4: QEHVevEfx97qRJzJKuZ_hmMRmcM.roa (hash: aOeQS/kAS4LIy+SM9GDPJaSv9Th7AJl/ZfLJY/RA0+Q=)
                          5: UVXJSMlcwPvX9wSFHlr_2BxTeBY.roa (hash: v4olu8knUOXGZo95yikqn7i0UUi9wj0a7lPXPrL3ohE=)
                          6: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: Aqi6tIQb22C0GzrfX2C6BixlHjxHx1Rc6VgMZBDKULQ=)
                          7: ZoTWcdrv2djCVVfjgwvpRHQ3NWg.roa (hash: seWv3Mu7Rv0gJUXQQdGo+KhenjTFqKj5MrZW9ZOh7XY=)
                          8: fY72RfJewKqE4BHfcDuBb7MuOUw.roa (hash: 1mSgSmq4Rwdfnxbkvm6ofs3NzARS1zrBjPxW4IoDGxA=)
                          9: gYjsJ-y7W3H1wSU0byQOrkeesKo.roa (hash: KMtB8kZ8a2+tb8V0dKPceRxW3qb73A3bHe6TsN48as4=)
                          10: rAEwzbDeabIwAl_0o9I5pV2p3gY.roa (hash: SwHzGigoMnrXH3tS8tZKql5tagaBzvPXk5oyiOZAhcM=)
                          11: sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa (hash: u07+w3FCYnOPK1CWqMt4bvUQwt/NentthMLbDs3pSwM=)
                          12: vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa (hash: LwyZth4BvDGg7r81c9JhkWiCU6TWnZDhRC0M5M601zo=)
                          13: w0wAwCKFIqoAmbB301MrAM7vQ4M.roa (hash: 2yGF3Y9Vr7k2FqKTETKlWzM6DlGaxlS+0cuWig86hMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:1d:14:29:7f:ff:cf:b5:f9:3b:e0:f3:cf:e1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Jun 28 13:01:41 2025 GMT
            Not After : Jun 29 13:01:41 2025 GMT
        Subject: CN=657186d1b157416e86be78b15a46f03acc89ecb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f2:64:cf:bb:18:27:8a:c4:da:9b:6f:56:54:
                    db:f8:15:08:7e:22:0d:7b:15:ae:3a:eb:ee:39:d1:
                    3c:72:15:11:cb:b1:ab:ec:db:0d:97:30:77:d4:cb:
                    6c:3b:52:53:ee:18:cb:95:3a:25:4b:00:c4:39:25:
                    3f:5d:25:9e:54:4e:6c:83:3f:e5:89:67:ab:a9:a6:
                    5e:b3:4c:21:31:c0:12:9d:bb:ea:d8:18:2b:0d:83:
                    b4:63:25:2b:e5:a1:b2:ee:d1:5b:bd:50:e1:56:2d:
                    5c:f6:86:16:33:49:71:ba:0a:e5:d1:86:bb:19:88:
                    4a:af:87:16:8c:e0:ad:1a:fe:4d:d6:fd:31:4d:19:
                    51:7f:7f:0a:82:c2:9c:dc:6d:d5:95:cf:bc:e1:dd:
                    5a:0f:80:90:4c:53:b1:57:18:d6:57:08:57:16:91:
                    83:7f:29:d5:03:00:7d:2a:a1:7a:f0:45:f9:fe:16:
                    7c:54:0e:a0:09:60:8b:90:5f:54:01:ca:a3:69:ca:
                    28:37:90:07:5e:63:91:d2:36:0d:1b:64:6e:02:f0:
                    7b:03:40:fa:cd:7c:5f:a2:5f:11:86:bf:7b:90:bf:
                    1b:a4:a3:46:97:a2:26:a0:b7:ce:8f:15:55:98:3c:
                    a1:9c:60:e7:8a:43:e0:0e:bb:ef:fa:65:34:b3:1c:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:71:86:D1:B1:57:41:6E:86:BE:78:B1:5A:46:F0:3A:CC:89:EC:B8
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a4:90:90:fd:f3:85:eb:a8:b8:7f:a6:7b:c4:77:a9:27:bb:
         f8:40:21:23:e9:11:89:6c:8c:41:17:ea:f8:d4:b5:f0:db:85:
         ca:32:35:34:e6:e1:81:ca:ae:83:ea:ca:22:e5:a7:51:f7:56:
         be:60:3a:12:7e:14:d5:3c:11:5c:6c:04:fa:e0:46:ee:34:c2:
         ac:4f:2d:f9:db:f1:36:2b:86:cd:82:a1:f7:5d:36:51:0e:e9:
         9b:d6:bd:cb:b4:8b:40:ef:43:82:11:87:68:40:39:8b:a6:4a:
         fc:d9:9c:ea:ee:06:15:8a:70:ba:5c:ac:5d:e5:bb:4f:b5:6c:
         ed:67:85:ce:61:04:ab:50:d9:03:a9:f0:f4:a3:fc:a0:77:1b:
         eb:5e:dc:03:c2:01:dd:f1:39:17:87:e3:e3:b4:89:89:25:bf:
         00:28:4f:5c:1c:30:fc:d9:da:41:49:fa:16:ad:2e:4e:9c:76:
         f7:89:c0:50:57:be:12:aa:58:2a:08:23:6a:a9:15:63:47:c1:
         40:7c:28:0e:57:ed:b4:0b:12:83:60:cf:30:2a:e4:5a:a7:f0:
         00:0d:ce:bc:15:0c:d3:f6:d4:a6:36:cb:1d:6c:1e:61:88:57:
         0b:67:50:fc:91:e5:4c:34:10:56:db:3b:16:de:08:7d:9a:2b:
         84:8d:61:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:33 2025 by rpki-client