Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          qwJiXOJsqMboezoRv0YUx5ToY6+vZSFMF6o/GAue/lY=
Subject key identifier:   25:03:F6:A3:DB:96:9D:94:30:EE:0E:44:46:7F:CA:6E:34:8E:D2:08
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       0196B859F6C088B17FC41B50A9D1BD035D70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          0483
Signing time:             Sat 10 May 2025 04:00:25 +0000
Manifest this update:     Sat 10 May 2025 04:00:25 +0000
Manifest next update:     Sun 11 May 2025 04:00:25 +0000
Files and hashes:         1: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: 5nXirBHBhzlWVNRfauADYsJc/n64ZTPm8M6zHsj6v20=)
                          2: G7iDQ4AJCfPlSLJm51qXvFLT34Q.roa (hash: ypV03h6J08o2WIBzZwFVWtQuB9T4WQvABamDXKjZwKk=)
                          3: HMxNgNFdF8dk4NZNgQEVD66pjCY.roa (hash: cLGIO41CcdK/y1Cm8zjj3K9e1WKl8lugUBmgrtQHqaI=)
                          4: HRwZymnXLOUIoxoUINYn4to6JUk.roa (hash: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=)
                          5: KZgShytB2Dg6qgF16xBAvAwz96A.roa (hash: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=)
                          6: LknrUTtAEec3_ePoSrQI9a24pv0.roa (hash: 5LCDVstZXT07n5MXzWJORGDSXvB8tmWgOiCs8Dsf9ig=)
                          7: LozgjGA37xFvEWDTYPM2lAwAduA.roa (hash: 8YO3hU1Ao5pQO7Cei7oHHsrN3p6eZUJVpQ+H7w2cew8=)
                          8: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (hash: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=)
                          9: OXV0-TxR9fTn7R31A0-Uw0G4ujo.roa (hash: 3WsJ+LJL05UI01VNuUtaF+j1jHQBCRtShSGIP5WWMP8=)
                          10: WIegxRMjR-9moxZhOQ3nJPWKLY8.roa (hash: TtEhJVh7NtkRT5o/iuF9tFI5ap6kWm0LLfHrrY0AXxs=)
                          11: aSJLBpImrYRI6Qksf9RRvtZ92p4.roa (hash: IwnT2ZkdlNjDPUGhSINR1ImeGfkRN8NOC8Rn8xX20LE=)
                          12: haThuVvZke29rpbqvF6n622h23M.roa (hash: e7PG4kR3fuIUuXElSVJhLTRYlZRUn4Xb9DDc4PsCu2M=)
                          13: hvyCjD-sr1w6tm5UxwSderd8UxE.roa (hash: yEejB8VN7eRKYdvOBcuTAVJxtwqqoPVaxdtPUz/eqYQ=)
                          14: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (hash: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=)
                          15: nMsRKGL1_JNonvFYOo8XapYWg_Y.roa (hash: 0zjtbl5thW5KK1yuV6e1gQ/H4BrleI2lexyiPXWKx+4=)
                          16: nOQG8M5trDQh4XjFetXQ5gl5hAk.roa (hash: jO9QLXj1bBC/jibhnilQOLleHuZugOPI3ebTy+5yP/A=)
                          17: uUxZil2b159003xfkfWtUQreHkQ.roa (hash: J/52Jbvu/goI1MIOwJZWmsnYU2my4DOGAr8T0IS/l48=)
                          18: vgsTODUN4DNu4XsvZWX7_dDziEU.roa (hash: OpvsJv1O2mE0888WpNjBckKl+Q9vODkDoyJf989gi1w=)
                          19: w3q1wrUy3n2NgVQVYrYOx0D0Low.roa (hash: +dMHTvR4ZE8N0MS6osIM+G5u4qHC04WNVeq5GmLIS2A=)
                          20: xzuQISkcD-LDwaStk5Po8cHtiJw.roa (hash: MTlh23S7S0fGqADN5d5jEOMtMCQeo6fF2QEVS5QqY6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:59:f6:c0:88:b1:7f:c4:1b:50:a9:d1:bd:03:5d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: May 10 04:00:25 2025 GMT
            Not After : May 11 04:00:25 2025 GMT
        Subject: CN=2503f6a3db969d9430ee0e44467fca6e348ed208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:59:f3:32:d0:a4:4a:f7:17:ec:55:d9:65:
                    dc:3e:3a:14:a3:65:35:f7:74:fb:a1:95:4c:7e:45:
                    57:99:f5:ce:f1:b7:da:4d:c9:00:70:56:ab:43:67:
                    bc:d4:54:e9:9a:ff:4d:a5:60:4f:c5:9b:12:b2:5a:
                    a3:68:8d:70:64:f0:7f:28:9a:38:49:48:8e:6e:b0:
                    fc:c5:b8:48:20:0c:58:39:85:e8:68:e2:cd:92:9c:
                    ee:6c:67:73:05:f8:8d:a5:c0:82:7a:3f:80:00:e7:
                    0d:43:6b:a6:da:f9:ba:d5:a2:51:74:86:a8:50:cd:
                    86:a7:d9:f9:d4:0a:d2:21:da:89:68:a5:b9:6d:04:
                    00:bb:43:c1:6c:61:ac:ef:2f:0f:1d:f7:09:3f:d5:
                    6e:47:45:58:47:68:43:76:cb:c1:34:62:8d:53:e6:
                    d1:76:ac:70:41:80:0b:e4:68:da:6f:29:2c:eb:0c:
                    04:7b:7b:74:aa:98:50:a1:c2:07:6a:3f:2e:12:28:
                    b9:a0:c2:3e:5c:c9:97:2e:5c:c7:c7:e7:e6:7d:d0:
                    2b:6d:50:42:26:8d:0b:c7:b4:ab:ab:03:49:5b:2c:
                    f0:ee:df:2a:dd:dc:80:fd:f7:0b:2f:4d:81:3a:e5:
                    e6:f6:cf:87:a9:97:ec:c4:7a:3c:65:5c:a5:14:a0:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:03:F6:A3:DB:96:9D:94:30:EE:0E:44:46:7F:CA:6E:34:8E:D2:08
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:5e:6d:93:24:d9:23:76:f2:12:34:af:22:36:75:34:6b:dc:
         ff:20:b1:c0:2d:bb:d8:68:4d:02:db:24:f8:d7:0f:d1:6a:22:
         46:32:e9:6f:95:41:54:91:94:78:34:06:17:ae:56:41:84:b6:
         0d:10:75:3e:f4:a8:d2:ca:04:bb:51:59:d4:13:37:91:cf:f2:
         af:b7:3b:5c:f8:a8:64:63:3f:82:ed:71:74:2f:de:00:d6:5f:
         df:68:e1:81:ac:35:4b:9d:8b:6a:28:ed:6f:9e:31:90:d3:b5:
         5f:c6:c9:54:ce:6b:94:3e:dc:25:7d:96:cf:20:5f:a5:b2:47:
         68:56:df:74:53:24:83:de:35:25:ec:72:80:f1:f0:9c:9b:a5:
         00:c9:7d:7e:9e:df:71:38:20:ba:8b:46:f6:a3:a3:c1:40:73:
         df:29:ae:bb:f1:fb:7a:03:07:35:1d:7f:6e:c3:2a:d9:df:e5:
         a4:fc:aa:e5:4b:d8:25:71:32:72:db:22:48:12:42:a1:e8:81:
         ea:41:7f:26:22:cd:35:53:79:dc:45:cf:68:e3:36:51:6e:6a:
         ec:63:d1:82:82:33:a3:95:d8:36:7a:97:69:58:bd:06:a0:2d:
         35:87:b4:e4:39:cd:47:e4:b7:33:0a:09:8f:d5:c6:c3:54:ac:
         55:c7:08:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:46:14 2025 by rpki-client