Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
File:                     dqdYJumRIlpCn_ih5__cgEZkIN8.mft (raw, json)
Hash identifier:          zAkYinf/LKKtNLRZ+ZscoU90WFo+/xoIiOGMNF80uF4=
Subject key identifier:   E5:9A:1B:7D:25:39:91:44:F2:62:C6:D6:88:9B:D4:26:8A:7C:27:73
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Certificate issuer:       /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial:       0196BF00C80E314A0E7497E161CD89D92AD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
Manifest number:          1549
Signing time:             Sun 11 May 2025 11:00:21 +0000
Manifest this update:     Sun 11 May 2025 11:00:21 +0000
Manifest next update:     Mon 12 May 2025 11:00:21 +0000
Files and hashes:         1: 0GRCDt4fJ388QfTkHCpESDtsT30.roa (hash: k9OOgOfGm6/D5FgP/oCwjZmCMN3rSoxJmPb/amgvunU=)
                          2: 1-yKYajfg5LY4mvNwPfafD3WCloA.roa (hash: WHC+36zJ+PfduDAkHrQdjdBbj6qnsfp62GV4AEEhmh8=)
                          3: 16QrQeCpwuqAfGGNMUzWS0WBV8Y.roa (hash: bmMldajlx/sTBR7HO2a2fTU2N475J5MRbFTSSzzaMIE=)
                          4: 4EfNGR4wiWbi_y1y433ICACWCZ0.roa (hash: W3KUBln3jDDd0cmmpR54v75Ll2wQ3RHqXSQ0s5O+eAU=)
                          5: 6yOls-b1_zSEPoNekFa6o4CZVU8.roa (hash: 4upnvyLgri06Nt5KSgO8Uwq/0K4QFNyV2w+ngXB4/18=)
                          6: 8np9ht0G3b67t2N9j69khCA5swc.roa (hash: s5WWOQNVlSSecjPvMShY+13EouocPqyy6TUkRGLT9Sw=)
                          7: DYMRxMEMoWV3Z5tMWRgW1jHqK9s.roa (hash: 6wMdwoy8UyJzHKKarNEHW2Cdeen4yoziiPrTe9YFHSg=)
                          8: Dpy95jXaeVWXPozFztldShHCRU4.roa (hash: /YGR1d8dV4jSlropxf6JRB0rYbUE70tJU0k00P3NxfE=)
                          9: FguRz0zA5etvzxWwMxGIJgd6k9Q.roa (hash: bUHFCLBTCucLtw2+JrZ57cEqNMKllYDmKc3mR95hRPw=)
                          10: L2UCeVHHcg9euQRtLcEzhApV2UE.roa (hash: awT5trUmAy4FPSzNkgCSgldj93M9lPrOlgd5pOswERE=)
                          11: M66I0UzjQBS9vnsa6hJXUcQSBYc.roa (hash: V+buEBexkfH/z8IfHQHVN3d+jviM7gfofPkFusouHl4=)
                          12: Orn9mMECvNnMxcocGzjxOdoRHk0.roa (hash: aAMLejN67KDw/WEq6MTlllANPts4owmBi6ah/2ILaOs=)
                          13: WEP8t9A44--cEjL5pRqrcK4NrA0.roa (hash: elcme8pyEkMhDdeVhgtzdCn+oqpKZYwu+OBHtYqbN08=)
                          14: WH2mqCoP_fWwSJcPuGUkRGobwNc.roa (hash: 7ARLGzAANjQVfOe30KclN1L6S5EbZnzPNgQQS4I4lwo=)
                          15: X8C31I22e7AIAIjXdr_l8xIku6c.roa (hash: 7Qhdi1NeFgvJPaxWBB0us3PX5KoyYrtl9JfPmMsmHRs=)
                          16: aKC4Ve_rwXPA5F4UwLOqVSzUoxQ.roa (hash: C2m1c3bcRtr4/LzoB1kvIKIl5IupGv3jDqJQPFpHE+Y=)
                          17: dqdYJumRIlpCn_ih5__cgEZkIN8.crl (hash: +K/DoPJgTJXPD3W0kguKDXm5m48XWrHf5138Rf1uToM=)
                          18: itJrIiDbZUHX0hMzNvHagOk0kkQ.roa (hash: 93vrSgc7l73uP0vt9qb0d56TAGfuxzEHnQxV4M3Vt/w=)
                          19: nA8ldX9v5Ip91riXYh1Is3JlGWU.roa (hash: LGoPjUjc03K0F3TRSud6cQW/fDxbqmiVQ8elBoGls6M=)
                          20: nheDIdc7Ex5DQQ3yUWyXEO40Wag.roa (hash: QW76PsmZ19rGr3AHGvysCP+0ICfRHV3icfaUxRkR4IA=)
                          21: tjgASAOzma6f2Z7RoOryTeTZY9s.roa (hash: DpWY737dSZuYYOG9ZIqDhXCNF5lWUkY9/w4EmAF3fpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:00:c8:0e:31:4a:0e:74:97:e1:61:cd:89:d9:2a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
        Validity
            Not Before: May 11 11:00:21 2025 GMT
            Not After : May 12 11:00:21 2025 GMT
        Subject: CN=e59a1b7d25399144f262c6d6889bd4268a7c2773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:b3:d3:b2:2d:f2:f4:c7:51:a3:9c:e4:f6:
                    4b:a3:b0:83:78:b9:5f:ad:13:ba:56:80:41:c4:73:
                    24:83:8b:c6:fd:8d:1d:98:10:0f:73:94:d9:5f:b5:
                    97:28:40:de:3d:c2:bf:3d:a1:4b:01:0f:6f:11:47:
                    6a:10:97:59:7d:b4:8a:ea:6e:64:81:82:2f:44:17:
                    8b:46:f1:cf:30:fb:48:91:ad:e4:5c:27:8d:f3:d3:
                    a4:98:fc:87:92:63:f1:1c:2d:44:2a:aa:5f:53:4a:
                    9c:d1:cd:1f:ad:3e:d1:4c:4d:89:9b:16:07:0f:9b:
                    f2:2b:0f:84:63:08:79:af:4a:8b:27:25:82:24:47:
                    43:73:ae:e2:1c:11:fb:c0:ac:c1:39:80:5a:a0:67:
                    af:90:85:6d:93:f1:12:bc:45:7c:77:63:a0:3e:0f:
                    a1:0b:21:da:fb:88:73:bc:16:02:62:98:45:20:6e:
                    42:a2:1a:ca:ea:43:78:ac:a7:3f:24:b6:7d:83:fe:
                    f9:1d:4a:79:58:4d:2b:2b:a4:55:12:ea:0d:87:58:
                    2c:e7:4f:17:f8:e4:5c:b0:47:01:bc:db:42:d6:06:
                    3e:c8:24:17:47:fb:d3:21:e9:e1:07:d9:97:29:1c:
                    b4:d2:ce:bf:be:20:73:75:94:31:9a:e0:11:c1:54:
                    04:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9A:1B:7D:25:39:91:44:F2:62:C6:D6:88:9B:D4:26:8A:7C:27:73
            X509v3 Authority Key Identifier:
                keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6f:4f:69:45:01:24:76:e0:66:7f:85:35:ac:88:c1:e7:1e:
         12:bd:b4:9f:ef:a6:37:98:da:cf:70:d2:1b:c4:38:22:36:f7:
         4e:d3:2d:3b:d5:3e:ac:32:b3:23:99:33:93:6f:ca:a5:7d:f3:
         bf:6f:83:f6:c0:5f:93:6d:c9:6f:4f:b2:5c:b5:94:55:9b:fc:
         d0:ba:1b:07:03:b2:f7:ab:4d:7e:06:74:a1:13:d3:c1:d3:bb:
         64:e9:bd:66:3c:79:9d:04:66:06:09:4d:d6:fc:16:3c:46:70:
         94:a6:53:27:97:48:71:be:c7:d8:b8:f7:f5:00:7b:15:76:1a:
         7a:27:57:61:3e:7d:d1:b7:3d:8b:a5:f5:3c:f3:da:f4:4d:fa:
         f5:cf:8c:98:64:a0:4d:12:ed:54:94:40:45:43:13:bc:dc:a3:
         8d:95:78:52:d9:82:b2:e1:8a:fb:00:a4:28:98:ea:66:2a:7b:
         50:0f:e8:61:ba:bc:37:39:71:3d:92:92:8a:bd:ab:0d:fd:ed:
         73:70:d1:48:f2:8b:3e:2e:f3:03:6a:bd:1d:75:90:90:c6:56:
         9b:5e:00:5e:23:6d:25:b8:7f:ad:f6:f5:bb:53:f7:b2:1b:3a:
         a2:7e:c1:10:e9:b6:2a:0c:02:b8:11:f3:da:4b:e9:4e:10:63:
         99:64:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:49:08 2025 by rpki-client