Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
File:                     w3i8O9NQ7txPN3wiRVayUNpt3m8.mft (raw, json)
Hash identifier:          ScUEeltdgPLJuQNToHDDjMuXun0/FluHisgoNsry/HA=
Subject key identifier:   14:87:DE:57:C7:0A:4D:2C:00:34:4D:FD:6B:12:A5:02:F3:77:65:14
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Certificate issuer:       /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial:       0197BAB427C4EA1A22DD1E700D4489566338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
Manifest number:          0624
Signing time:             Sun 29 Jun 2025 08:00:58 +0000
Manifest this update:     Sun 29 Jun 2025 08:00:58 +0000
Manifest next update:     Mon 30 Jun 2025 08:00:58 +0000
Files and hashes:         1: 0Q8Bo2J90XUMNIwl8lLdR-UDwE4.roa (hash: TnbWuJA9GW6UEQp8B1NGJASNDk83wwl5ZC1Sg1vZIxU=)
                          2: 1Z-zCNSxwwGR5Yd2zMe5Wf5kaGI.roa (hash: fAwINqu8pF2sqFhHeDSmmFm60GW2WCeV5hM2N//U4OQ=)
                          3: 3il9k9kXDNL2w1vwi-jsWgXj7Cs.roa (hash: wYgUViS2jW9Q9QXJxvxQsQTYzFOjlOCzYoWeVuy2Ze0=)
                          4: 67STDF8xiOME9RNWXpEQKZiFvW8.roa (hash: jjQZD20+917ImEuDA53t4U8Cib7GpjSkmZaz0rgBOVo=)
                          5: AslEALjD3jqgb7OYY5yS1FROuRs.roa (hash: FMQQmm86scKl0oq+daLBTizZR/b5Mb49RI9X4+SNpF4=)
                          6: BePRjTkR8iqS0aKYkWoXO5rdZqs.roa (hash: 5lOIKJhZgBSvV56adD3ViMIXkXtZthUITRA8YVcKob8=)
                          7: E4tkY6zblFMpVqsni7B-ofMRutY.roa (hash: 74VgaEt8EssdGX5pSED+ku3PlVJoOq+D+qtbOPMDNdI=)
                          8: E_Z3mIW9TNYITCFb3vt1gjzqnQw.roa (hash: +3GXuJPizeRy4QpFuHrwjpn47RB2tZNJ60Sgjxt77QI=)
                          9: FAnVPdZJq-F5tPbJdZlOrfHA0HI.roa (hash: oiyCxnnmoEXkJzXvWvbIjTgRJMu2oeQxpPsZMwrF/Y8=)
                          10: HkS7Bac_zcquqwSybCqXQXvJOIM.roa (hash: EqtRFndz4VpKLUGXJoOkuKh0qLK1JuNwkeTtOUz1uOM=)
                          11: IjfYu5YtvnD_eqZFZoLQuuRZqW0.roa (hash: vXyqFCbJqLuTFFpCDPF7GbQVCgPiH/CCLqX2I7KC0w8=)
                          12: JbbUNWxHHxy6MiAe8ebWvNECM30.roa (hash: M0tgIIZy+v/zca0l8WoGoHrg0B/fVzCFVF2hyKJNWlQ=)
                          13: Lpli3kAj25bb_xZB9zuGIl_Ga0U.roa (hash: Owi2xVLVrSiJiFC4P2tj1RPAYTL7fNDtMY5F7tNvt3k=)
                          14: OSbUFc2Qchp245BcUCLbk8X6Wbw.roa (hash: RHNHVrnaBqvecm9wU9n/W/eTM73Oy9JpA5EZrdT9big=)
                          15: RR2by3n0lq5XyNRXXkItY8Hr0hM.roa (hash: SFg3wqwSuA7S9SOVc+G8ta1X6M9IYIZFRg9lLbiQtrE=)
                          16: SU7ZLAjAJKIawhecxRDYISHoM5I.roa (hash: AzADrs/HQRSdaq4djQaamxj/C3LgFFh+XBozivMTMAM=)
                          17: UezpV8LDbO9QY5mhXNignEZRikk.roa (hash: Uo3aH5gxfO+5fk9T820dX2193FzWdNtaZVDUTDXlQxk=)
                          18: aRPqPQS5qjVN7fqBJyx28YuUnGA.roa (hash: 9PmRNjeFVt5irYfav9SSn1lbWccXKiJgpY3LZTHz4Mw=)
                          19: aa2iqnGJjm8dqVZRU3DDGx1OPnc.roa (hash: y950PBsNWZIFFJZtmJx7ziK3xXbDqGMaez6zI7FiGR4=)
                          20: eT5m53IL73YU9_5bJx83ttalH6E.roa (hash: JlTHLmR+DNILunTV78e+k4LiP9+8ADy4n3cxM903NQQ=)
                          21: fIsfmLnr_w2LCa-W9JFfz1bavck.roa (hash: awolv9QzMx/fIIyt9ekcO6gN2FzZ5y/I3e3t34eXyhI=)
                          22: i3WDTXf4P5YZNNXIFIyRzScdYPc.roa (hash: 0Nv+83KRbUZwpzhQqB9HAzISHvv5xROsmfwXcZEo7Xc=)
                          23: kjgR6fCEfo65l1JeZJ4Li2dEsBk.roa (hash: 7TNnk4RZS1xFfqUG/LsyTtoiK4QkaicTxMSXRgQotRw=)
                          24: lhh7boh6PFtBNRSF33ryfDrDwcs.roa (hash: /A+pg/gWbfPRqc4yCcnYK1YtLek/XAOCpZOAEljzlng=)
                          25: oekYTvLkFDyI1-Z9odG0JNjeqaA.roa (hash: gtbCujk1N6fS9mJbVtdHPJFcwUbT4eB3P4aPqB6tlBE=)
                          26: ok7WVktx7jJA0GSIjIeTx8mVZlA.roa (hash: YUtRN7LjsuJvapFjYbfrxE66tLPjtnDzZunYyWR6298=)
                          27: pdvBItl8CoyO4QTFgXUssA_LmW0.roa (hash: 3iD4pZChmT9EfU8WW77KADws+Gg07JC1ki8QyhjnxV0=)
                          28: tWR557dgEs8bad9HJxfUxpgmJ1k.roa (hash: 5N0HzITLcLE/mHUy/uOk0e6tVM+Al2Zv5XTmG0sY4Ts=)
                          29: w3i8O9NQ7txPN3wiRVayUNpt3m8.crl (hash: fmqS1+aShNrPRdyzIvbXhckZfTEJYbNIwRqHaaUy1bk=)
                          30: zaNwxj2L7Rv3Ag3yOTaE8ywz-X8.roa (hash: FWtS/Zmb6js9uR2wayKJhPmihHTbDfbggHKTL98KeAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:b4:27:c4:ea:1a:22:dd:1e:70:0d:44:89:56:63:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
        Validity
            Not Before: Jun 29 08:00:58 2025 GMT
            Not After : Jun 30 08:00:58 2025 GMT
        Subject: CN=1487de57c70a4d2c00344dfd6b12a502f3776514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:4d:8f:b5:70:46:08:a1:ee:a2:c8:c4:d8:
                    29:67:63:13:00:e4:4d:f5:f4:cf:8c:c0:99:64:a9:
                    a7:a3:12:4a:40:b3:bd:ea:21:d8:58:64:66:66:4a:
                    a6:35:78:56:70:f7:8a:d7:0d:4d:63:95:62:20:ed:
                    96:27:37:91:d7:1a:0c:cd:97:58:bd:5a:80:d0:f5:
                    8e:97:e7:1d:81:d2:ed:75:91:c0:9f:b4:d6:07:30:
                    e9:ae:b2:81:fb:56:75:b7:7d:df:03:96:23:d0:b8:
                    64:41:81:5c:7e:e5:0c:97:c8:58:6c:17:2b:c3:ec:
                    2f:6c:fb:74:bd:c0:84:50:e3:3a:84:00:57:3e:f1:
                    77:ad:0b:7a:9c:c1:d8:be:40:86:fa:4e:51:fe:ee:
                    54:07:d2:39:82:ff:5c:97:60:96:ea:83:51:cb:21:
                    8c:93:1a:d0:14:e5:5f:56:a7:af:28:fc:3f:7d:62:
                    6f:b4:35:d0:f4:0d:ec:fc:25:9c:27:d1:a7:e3:53:
                    83:9c:ff:28:bf:3e:d5:ad:a8:8d:fa:09:19:92:18:
                    6b:ba:f6:85:e3:e3:e6:ea:68:de:6f:24:d8:07:e2:
                    2a:b8:e0:de:1c:dd:ae:0f:bc:d0:81:95:e3:a1:0c:
                    1f:1e:05:45:ad:eb:e6:e9:79:8c:b5:cd:9c:5c:b4:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:87:DE:57:C7:0A:4D:2C:00:34:4D:FD:6B:12:A5:02:F3:77:65:14
            X509v3 Authority Key Identifier:
                keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:52:f6:92:72:a4:b1:f8:11:e4:9b:d1:42:f2:d5:71:b6:e1:
         c0:f6:07:b5:48:54:a8:02:c0:8c:98:e9:74:71:d2:9a:0c:31:
         ec:5d:cd:2f:f1:13:df:a1:ea:33:2f:ef:88:8c:93:c9:61:7b:
         7d:c1:97:8b:55:01:1a:30:10:82:99:6e:8b:d4:c4:ff:62:8e:
         01:84:71:2f:c0:aa:29:55:81:98:43:96:8f:c2:69:79:7a:e1:
         e3:6e:2b:2d:3e:6b:a8:80:9a:16:67:40:39:8e:a0:b3:db:bd:
         36:bf:20:cd:e6:8b:fd:11:e1:2f:d9:a4:d9:d4:77:f0:5a:d2:
         cd:00:72:8e:d0:08:6f:44:b1:69:e7:cd:a9:50:d5:24:76:be:
         d9:45:17:ca:1d:74:04:cc:b8:63:2e:7b:d2:c2:51:06:5a:48:
         a5:54:da:a3:41:6e:c8:1f:ea:6e:79:3b:22:34:d2:80:e2:dc:
         7b:94:f6:17:eb:b6:5a:70:a6:3a:d8:bf:d0:00:30:84:26:86:
         e6:ea:53:4f:22:15:7c:d3:31:f8:11:61:16:c6:e6:f6:bd:89:
         bb:4b:3c:22:0a:c2:40:3f:0a:1e:f2:9c:fa:c3:49:f6:16:26:
         cd:97:85:18:cc:9f:f9:80:9e:9c:28:69:cb:0c:7b:c5:2b:35:
         ba:52:dd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:52:21 2025 by rpki-client