Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
File:                     C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft (raw, json)
Hash identifier:          7nbx4Y9oBG3hop8KmEU9q05JK9g/slyqdqTwkRgIVpo=
Subject key identifier:   90:CD:91:B5:F0:73:15:AF:CB:F7:36:51:A5:97:BD:5A:AF:7A:85:65
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       0196A2E51189B4F01EBE0882B1A00C2DF3B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
Manifest number:          11D4
Signing time:             Tue 06 May 2025 00:00:43 +0000
Manifest this update:     Tue 06 May 2025 00:00:43 +0000
Manifest next update:     Wed 07 May 2025 00:00:43 +0000
Files and hashes:         1: 3kJhXofCpFDD7Eo6E2j1Gd-FMQ4.roa (hash: K3OTcQcoZnzC8T3KuSMerKr1Yy1y4ZL68Y/lWSF+tJA=)
                          2: 5vgRN93Ikx6vDyOuxjecwfDMpQo.roa (hash: Nm0/LoBBPkWnuWn59UFBPJeNenuNXFQpk38gCTpN7ng=)
                          3: AfLHT74NdL4YRI-gpiiLO8PPShM.roa (hash: 944lZaS4mAfM/S0ieSHEvM3mRV9M0T2Y3u48y1aDIjk=)
                          4: BqUsGxJbAHaodSor8dzxhiBDYnY.roa (hash: UcdL5oWXT3jVU2069PpqlnxiDKWvKcXri93cb+kI6qY=)
                          5: CLgBj6oYt6sGJ5ZpJJTL8C3Fnrs.roa (hash: aUOM41Nf+BqbKmy9YjUFL+mBeBI8749PsIPj/loME94=)
                          6: C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl (hash: 0mD/cfySOo3ahcw4n9EN+g3DHhlo8N2053ae3Kbcc0w=)
                          7: CqNmCGGQsBrEt7zh-VfcGtUv9RA.roa (hash: 7HTEUHavuiaMXQtqJhG62cD/8gu3Fv5evoWWikvAioM=)
                          8: HZmCfsHb09xlrSBh2iIxpOWZ3Ow.roa (hash: RrsPdmWqoOnc37eNmh2WMAAS+360HWRIjhjqZURUhWk=)
                          9: JPuN2YPz_l01LHcxJTRgQ5fN06Q.roa (hash: sO4iVZOw03myN2KiGjBOdg4pmq+1tC1eFs8GD/uCEJk=)
                          10: L7BpeKSr3aJNyrJ3jyLg3Vye834.roa (hash: BKU0s1AFVfjoQBSMzARmXiXP2HsCC4PJttRceRONfMI=)
                          11: MDIbS6sEXbMo4ibcLekhzijIjYY.roa (hash: 7iIxmTu02d89hGoTIMu/80TJLS3BqGKAagC48ze8HTo=)
                          12: MtRudBwfeuM_gV5Rxs2GMGZwQ28.roa (hash: jyZOCTzazS4hZAS8vXh55e8wdvGkjLOC1l/j4Cldlkk=)
                          13: MvceJYeC7exu39P-KklGzIhKezo.roa (hash: l7CWLK2x2ygZPduMunzZSQp+ZhD4hpMbVwc9AxPKUD8=)
                          14: OctDu_DWJM_ePhGKcxjKDU812B4.roa (hash: 8PSwDnEoVXcVpWULLxMU/tnZb/t/w988BD3T8r1Vyqk=)
                          15: QB5_xxRGXCHsGPaKE_F_HuFsFXc.roa (hash: e7wfZoRrHPAl9YgBZA9mESSygC6N1gWRWhEiStosBqs=)
                          16: QqVG_Jig1AWpsZjXM3ozkcck_rk.roa (hash: cuOJ8bahzoMT5MnSdXLE/ebuIEkibnbU4Phcnk8deko=)
                          17: RdFk8pqwtmhHw2UX4x0rgDjdvVg.roa (hash: UfFtH0Qa2ULdo2eWM4CXCIXafZmQBAeqkERPoGsE9DY=)
                          18: SlBCxI-Gr8RZUcWFdhLWCcmpICs.roa (hash: JIPe6vhu+AxbOSgeBUS8yHnoK/5rZWIA9A3Gij3IhXY=)
                          19: T8DiPd4COZAMrM15dsDMZh3-46k.roa (hash: FLVoIftsSDw3XycsNixyrK2164vfuETBh8sALFOAFvo=)
                          20: YKuzm8eZ5thjoG3YWlLmGyis6Hc.roa (hash: lRlLqWarJKTArL8I3Oh3IGUAjFaJLYWsMsfvgIvdCEk=)
                          21: ekzy4TbSmKoAngHD6nt1XvIY_kg.roa (hash: S4bTYJiZvd+MIyq2CNE9A391k97deJn0Ljqufvr/oI0=)
                          22: nBGaxHS4njnBuZih8vNGsp1DG9c.roa (hash: XLGWBSyFNOz/Nq0CINiB/5Nx/Ff5JQHbqxgQoHl8pY8=)
                          23: obljm5gfRN-n2SKdDY2NA9WVkYE.roa (hash: iEb0cLJOJn58raI44T/QYZh9dLBRwT4473VAczsApI4=)
                          24: uF1fzkxS1dvB384G_6ACG-gahqw.roa (hash: /0hDj28NRbF23VkEh2wmxEvtyGKZo3nN4bNoYlxvanE=)
                          25: uiEwRDzyo2IATe2UZ8J34lJkwOQ.roa (hash: qd8Q/scpzUgFvAn3rGCEs42W3qdpmfptd5u2EgNgXK4=)
                          26: zgvcOUimolOfc-2snaZEdo8wyhc.roa (hash: S2xJZFbuR+fVbmsKnaewbJdRcVJWvtsi5rfDD2/PNaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:e5:11:89:b4:f0:1e:be:08:82:b1:a0:0c:2d:f3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: May  6 00:00:43 2025 GMT
            Not After : May  7 00:00:43 2025 GMT
        Subject: CN=90cd91b5f07315afcbf73651a597bd5aaf7a8565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:95:18:26:1b:e7:1d:34:71:58:ad:a8:fc:
                    ff:86:64:e1:38:e3:66:5a:9c:60:c9:7a:7a:c7:42:
                    0e:da:cf:9c:b3:5a:90:38:c9:60:27:b2:27:a1:11:
                    9e:84:25:5f:ad:e8:f8:a5:52:a9:d6:eb:98:d2:fd:
                    e4:b4:d4:37:74:ab:54:b7:cc:9c:3a:0e:2c:c8:6e:
                    9e:b2:a5:e0:98:f2:36:14:b6:ab:43:f8:1b:a0:9c:
                    09:6e:b2:6e:fd:8a:8a:90:5f:31:d6:3b:d0:37:13:
                    8b:a8:74:c4:ba:df:b4:65:da:0e:41:13:2d:58:b5:
                    ba:0f:5d:3c:d3:22:15:a0:cd:22:e2:f4:8e:25:5f:
                    4a:18:b0:b9:36:f8:23:80:32:5f:d4:3a:da:9f:c2:
                    82:d1:f0:2e:88:87:12:7e:3a:c6:8f:c3:7e:71:bb:
                    38:ac:9b:4c:8b:82:da:a7:91:70:63:e6:d0:69:42:
                    2e:a7:b7:3d:5b:25:18:aa:0a:14:55:0a:b3:11:1c:
                    fd:83:6a:85:9c:44:cd:aa:2f:bd:1b:44:36:00:3e:
                    c6:b8:e7:68:30:8f:3b:f6:2a:b4:16:11:e2:09:7e:
                    d0:92:86:fa:20:76:43:e2:95:32:e1:be:9a:38:8a:
                    e6:2b:0b:fc:dc:0d:68:d4:ef:6d:49:62:1c:3f:35:
                    f4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CD:91:B5:F0:73:15:AF:CB:F7:36:51:A5:97:BD:5A:AF:7A:85:65
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0a:84:09:04:5a:18:ad:93:29:52:a6:62:b5:6b:15:1b:3e:
         2e:49:a6:a4:1c:dd:14:2c:eb:67:f5:63:3e:1d:bd:5f:0b:a1:
         2c:f0:c7:10:59:ad:95:ee:89:9b:4c:2f:c0:b8:4d:cd:2a:c4:
         ce:29:db:cc:60:58:f1:5c:cb:79:ca:30:fc:f4:a7:2e:06:39:
         33:89:2d:dc:b4:3d:98:2f:6c:3b:5d:dc:3c:f3:ca:b9:91:d5:
         a8:49:db:32:e2:d9:1e:87:7e:5c:24:11:1f:1f:1d:aa:ad:9a:
         1c:8b:60:52:24:b0:2a:b0:fe:5e:47:2d:a0:88:0f:48:e2:ea:
         31:e5:57:eb:32:b6:20:6a:4b:b9:70:76:8b:77:43:a2:e1:a8:
         11:92:c9:69:75:00:4c:5f:76:52:11:7b:88:fb:30:44:9c:24:
         61:ec:23:c7:cd:6d:de:1d:6c:2a:3b:15:46:0a:fb:e3:62:0b:
         32:e6:48:98:92:7f:80:90:58:49:0c:6b:6d:99:eb:56:95:b6:
         29:84:11:18:6a:1a:89:26:ab:fd:d0:6f:c5:d5:b4:25:89:b6:
         5f:4e:d8:56:a2:9d:4e:dc:38:80:97:4c:00:9c:a7:e2:75:cb:
         8b:6f:8e:c6:a7:fb:48:fc:66:f1:ce:4d:d0:4b:1b:ab:cd:06:
         8b:8f:09:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:06:45 2025 by rpki-client