Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
File:                     Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft (raw, json)
Hash identifier:          L46HPvjWHg4VDvoZrIpCWfndLjNUz4+Vau2sS0VSwAg=
Subject key identifier:   4E:92:29:B5:CA:E2:CC:B8:8F:43:06:2E:C0:8B:2E:64:4D:80:A3:3B
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Certificate issuer:       /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial:       01969E9A14723C04A89ED25BF8379E2B2B52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
Manifest number:          048E
Signing time:             Mon 05 May 2025 04:00:19 +0000
Manifest this update:     Mon 05 May 2025 04:00:19 +0000
Manifest next update:     Tue 06 May 2025 04:00:19 +0000
Files and hashes:         1: 5HV-tkSn-nvaTCJgq2qZMjXXs3I.roa (hash: V4YAUXA1HwXaJ3mud6IQQG1XhWx4lpV0RuNwmpEC5DM=)
                          2: 64k07xHeVqfVk_gc9ks2CvFktaQ.roa (hash: xmm7dCARGCdAJFIRnR9S4+VZk93CY7wzcj0G0mf/7v0=)
                          3: 7CPmL__8gA4lLs7QOSTCZXmCJZA.roa (hash: GtV1L0m2RsX9Hqoq8q90eEy48paLDjo8TmbfnScifF8=)
                          4: B4_oxATnGbDyQRnpDFsFel2qJro.roa (hash: Eu+Z19cukHF/X5BwY4vJJ3PD89GFZl84ZrwWgUf0Sdc=)
                          5: B627jyelsOrc-4KEk9rr5UX-6bs.roa (hash: emvror6oG2+K4wO+RDr3+Uj+3eP2vVbV6xrjlFdUiWQ=)
                          6: Ba1NqD6_p9vQrWB-kAyp0er5uHU.roa (hash: fRiDqhfW2rBzfJSvdE7QFaE7Ru5cnrq0/b1xWUv4QEU=)
                          7: FJERd9vUT0Kg_8tCO27uUpQBaGo.roa (hash: 12MUnTHhtFQGoQwHqPv1crFdaIeFV1soA/yVgXeNaTs=)
                          8: Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl (hash: ZsogqXihYyr5jUBG7WyFsA0tn7QGUNlP4suffeyBVNA=)
                          9: K6GiiZJ71L0lYgovFnICdAk-1Ks.roa (hash: 6qHwOyZ8UfE4rkOQqwwP70JdW41FclRsGgCcII3xOE8=)
                          10: M1aqRzQAx0u0GH1aXLjObYZ4Q7k.roa (hash: mN6UichsOlqnG+M84GTpzNqXCEcMKcyFp6FqDGDV0E4=)
                          11: MSXSTFKnAwZwbqobS5_FZAQrg-M.roa (hash: D45Ar0ZBYy4iC6UD1t5qGymD/cKcsHTZdI0FaRgD4/k=)
                          12: PDIQfwBM2G7ffsnUH2YvcCfE3MM.roa (hash: sG/brPxpBzyg1NKJzaV3PK0r4VawovV+khB+BUBPlqs=)
                          13: Sw2GbKoJ8rfrZjEQTkFwYz2FnOg.roa (hash: vokvJGT+Pa2Ai2Kj9IpjJzrJytLkCCqfTkYZIe2tcyQ=)
                          14: VT6si4kLyd6zpNaqVEXQZbgj2Gk.roa (hash: wBULHsK9N7KoZlhMck164GyLKkfZrvnuLnG6dNTvUtU=)
                          15: VyPRPElyLMa64hjFDMtKRmA01ZE.roa (hash: +7F5UqAf5wUUZwuFkWwjFywpzFhfs0Yb0eBzU06/pPY=)
                          16: W3embmPidGjM40yP8wnfgaEwkWA.roa (hash: MUZikKTuTLVgfrVyiP94SzJd2z8LuwWnXjqjkeWcrfg=)
                          17: fL9K7tZGGZ0rxKtEuSAiWj4Rpjg.roa (hash: m3RbbbRnXoZDyJVx1OpTbKRsiAgJOpn/2JivbbReHo0=)
                          18: fmODc7MENEc14rO10yX01KjqK28.roa (hash: uJCEf4lpY599iRYVqaOAvP8jY7fLqVDXB1BusGXHNpw=)
                          19: kvTlBi_B8QrdRGJqo_C6nAXRdfc.roa (hash: 6MLCaYZkCCpTI+u5625D24+Iiiya7eil7hcGEmC1dUY=)
                          20: lU9bl4hVEw5hzibuRIs13xmbj9M.roa (hash: ZUdsZ2gex8weJr9deejWFGIwiEepSjgNX4ZZr24MPDg=)
                          21: q3zcXrFdqz6-ebDLhi1lZJwtu5A.roa (hash: ffK0VRogNussudkwdDgXscE22ZXUPViHvyqZg4Vc5l4=)
                          22: rW9xL-Blor3a7KeOFcdz4MZUIZ0.roa (hash: m4NWziBJ7p7f8NFdds1mBjp8BH+ppFVvWoMG+PNQoc4=)
                          23: rzNtqibxO6_UiLoaKbvclbVtzdY.roa (hash: usyHMWRWGdUTBwM1WiN7oQ/DTqUHjwTmL5djbLqDl1E=)
                          24: tWCaBWq3ZgV3-7XX1cWsxbC1zrE.roa (hash: 1GYVtpcVNjgzgm/oYqnREnTQrGZnX2ki31par69caoA=)
                          25: u0kiBRm7lPy40aL5Utg1OzaItA4.roa (hash: dKGxS0Em7PGdI3BmuuAWqogEozKj12mYiRlt25Q1BKw=)
                          26: zkP5uuZLYo9QPyhko4b81Vp75xk.roa (hash: Q7jfrwpN23UNp0QlVl+g69LdPL/9j4DNCRgUr9ow76I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:14:72:3c:04:a8:9e:d2:5b:f8:37:9e:2b:2b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
        Validity
            Not Before: May  5 04:00:19 2025 GMT
            Not After : May  6 04:00:19 2025 GMT
        Subject: CN=4e9229b5cae2ccb88f43062ec08b2e644d80a33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:5b:6a:4f:19:c8:50:66:2d:f1:4d:ff:f6:
                    ce:69:7b:34:a6:5c:5a:7d:c1:48:4f:7f:84:52:bb:
                    6f:dc:85:a3:30:49:cd:8a:c9:1b:61:46:b7:97:c2:
                    43:e2:cb:4e:52:07:ef:be:40:8e:b9:0c:51:27:29:
                    18:e9:be:a4:87:15:59:e2:2c:43:5a:7c:bb:0e:22:
                    cc:29:45:8f:16:de:16:87:8e:54:c8:39:f7:ec:31:
                    17:b3:c0:c0:03:43:23:be:e3:8b:3e:f6:2c:fd:99:
                    d0:f4:72:98:2e:cc:52:60:91:20:4b:9a:27:1c:e1:
                    0a:51:1e:d2:dd:5c:07:9f:57:6d:46:71:7e:d4:7f:
                    6c:f5:93:db:69:df:98:62:92:f9:cd:6c:58:46:81:
                    e0:ef:48:f2:b1:4c:9b:24:fd:7d:f0:f3:8c:8d:09:
                    f5:f9:87:5c:30:1a:f0:d2:ce:b5:57:91:8b:5a:1c:
                    e2:cd:a7:4d:1b:bd:75:7f:d3:34:62:d2:6e:2b:10:
                    99:ff:e8:cd:45:c9:fe:d0:2d:24:ac:c5:62:2e:83:
                    a8:33:1d:31:8d:e6:f7:ec:30:fd:62:70:37:8e:0b:
                    56:36:67:b5:93:19:e0:9f:ac:61:6f:ad:d5:cf:e8:
                    bd:77:43:b3:e7:a3:d5:b4:29:b5:fb:be:d3:fe:81:
                    c4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:29:B5:CA:E2:CC:B8:8F:43:06:2E:C0:8B:2E:64:4D:80:A3:3B
            X509v3 Authority Key Identifier:
                keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:0e:5d:a0:b3:71:85:dd:64:cd:e8:43:cd:a8:90:7e:ef:8d:
         49:96:11:1a:2f:ee:3d:99:be:09:dd:bd:fe:e7:76:51:fd:3e:
         47:6e:29:2f:b2:b6:78:f1:ec:95:90:cc:13:e7:bc:a8:c0:71:
         7c:6e:c2:3b:1a:a3:e4:5d:bc:a9:9e:96:df:78:0e:a4:f7:da:
         26:bd:01:31:be:e3:6f:0b:fc:bc:73:57:5c:79:14:ff:9c:74:
         60:4b:6a:d8:da:04:5b:b7:df:ec:83:8b:de:92:61:3d:20:73:
         04:86:0e:bb:99:b5:dd:81:f5:38:ce:a4:75:41:fe:b2:76:15:
         90:ce:b2:fa:b3:1b:dc:ad:02:fb:08:fe:f6:57:90:fd:a3:9b:
         a8:58:27:9f:79:1c:01:53:a0:32:97:2b:96:54:e7:29:c7:8c:
         7f:fb:24:9e:b7:8b:31:d0:0d:88:99:05:b0:03:24:af:d3:51:
         2a:d7:2e:c5:12:23:61:41:6d:87:20:6e:92:a1:17:8e:02:30:
         25:5a:30:9c:f1:94:78:6b:30:23:5f:ef:0f:25:90:7c:86:5b:
         f9:f0:00:2b:67:00:28:ee:62:e7:91:10:eb:b9:e1:cb:1c:8f:
         d4:78:5c:de:7e:3e:12:20:0b:71:68:25:76:29:5b:0e:2e:03:
         36:26:8a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:33:14 2025 by rpki-client