Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
File:                     H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json)
Hash identifier:          DNkMlMCLOHrpQmu2+jCe6n+GlcyNwLYOYRe9Aeu4D88=
Subject key identifier:   1C:9A:F7:98:C9:D2:6F:B2:BE:73:21:67:04:A2:E7:DC:84:10:A2:7A
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       0196BB5AFD8E8B7C4B05018E2B5BA41DC348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
Manifest number:          129C
Signing time:             Sat 10 May 2025 18:00:24 +0000
Manifest this update:     Sat 10 May 2025 18:00:24 +0000
Manifest next update:     Sun 11 May 2025 18:00:24 +0000
Files and hashes:         1: 1-6x9jHZ3cw39179HQd4O3fAvnpk.roa (hash: PgXhvVg0YUToc07oyC3isPahNyz6852StHcO0CF7qN8=)
                          2: 1nUEd9XAFqDWEykKA06-e3Jht8E.roa (hash: FjXuDY1LWSoerVvC1COnQH7k++3mS52vkkMLizNO12Q=)
                          3: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=)
                          4: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=)
                          5: CGtvlVAjeOKgmOegCwgkAU5viUg.roa (hash: tYOH0itDmxfLkiehctgBZN5JIUldgyHwoFbKsMtsM8Q=)
                          6: E2kHiMdYodrnFH2KHA9US6yByGg.roa (hash: 4gqy0Z2gsQk+minstyMsiIr4y+M4uI9pxsNNqBMzDmE=)
                          7: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: 6iKd7fukrJ5T49tikqQ6yQKgCpM3bgVTvDR25xFelAE=)
                          8: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=)
                          9: LIpJLbylGhFRNKd4Vb6i8k36YRg.roa (hash: Uma+Nee5Et6Up+tXMeUjv4OVtrZCCxIFiku3HIhbB/4=)
                          10: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=)
                          11: PLU8wqNdMXnL9v3tJJzISiKB10E.roa (hash: VqGtKJSXmrM4NojpQ2fDKWSLpkBqvw8V5Igvg7IZsCo=)
                          12: PPj3izdANTPOG9FQYtIHYchyjRw.roa (hash: jE7bR+K8GQ13CqQNdOkrb03t6MGrMEYn6EGrRlPQv3s=)
                          13: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=)
                          14: VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa (hash: HSIRCE/846JiI6ro7JECbGIyt/cQkLU+ZkGrpS5afGk=)
                          15: WZBLvv9OFIzqKVar5Stt9tIoe6c.roa (hash: eDDz9g857ZbC4qMPJ/+ARLyYUZhWBgiSlQKhk+w4u2c=)
                          16: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=)
                          17: gDccJCyvv-XSleOWBZa0j1v0ILc.roa (hash: CO5e5TItEhwMis3LPrh0yYWspCPoVfBb8vdm/rXIFt8=)
                          18: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=)
                          19: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=)
                          20: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=)
                          21: w9RX6MaAp0BwQCPK8hrZIWWzFm4.roa (hash: 6rxWErjQqbL7+OcI7QwVV76+tY/f2tbAGsAv/hz0KnE=)
                          22: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=)
                          23: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5a:fd:8e:8b:7c:4b:05:01:8e:2b:5b:a4:1d:c3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: May 10 18:00:24 2025 GMT
            Not After : May 11 18:00:24 2025 GMT
        Subject: CN=1c9af798c9d26fb2be73216704a2e7dc8410a27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:2f:c7:12:bb:6c:d8:43:72:5e:41:ba:81:
                    cc:06:cd:52:90:65:4d:50:f8:f8:56:88:b1:34:62:
                    c3:cc:b1:b2:07:43:4c:a9:a2:3b:f7:c2:a7:d9:09:
                    e6:08:7e:10:94:b2:18:ee:ea:10:62:c5:f0:59:83:
                    20:fd:c6:2c:f7:1b:ce:d9:30:56:44:9d:bd:30:20:
                    d1:4f:4c:2e:6c:26:c9:f8:3d:3c:58:01:8f:b1:17:
                    69:ea:05:0e:27:39:3a:12:91:13:ec:1e:e1:c2:89:
                    33:2a:06:22:99:d8:e2:a9:9b:ed:e7:20:dd:37:19:
                    f1:9e:ec:b7:2a:c7:ad:ce:7b:2a:72:17:82:66:9a:
                    af:c3:1b:7a:a9:9c:fc:16:02:c4:15:bf:17:7d:fd:
                    f4:2c:6e:17:e2:31:2e:96:47:00:e9:0b:3e:0d:b2:
                    1c:76:5b:d4:26:4d:b8:e4:d1:8c:00:fc:91:96:a8:
                    e3:e0:1e:11:7f:07:1e:23:1a:b9:66:6b:34:ae:09:
                    60:97:0b:45:46:3e:d0:f7:37:1a:f2:67:52:f4:c3:
                    b2:92:e2:12:5f:55:2a:f7:91:29:ad:48:e3:4c:31:
                    12:e8:5e:39:7b:14:cc:a8:e5:0c:d8:d2:fe:b6:3d:
                    ba:f7:2b:df:51:21:84:e1:01:01:b8:52:2d:b4:85:
                    01:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9A:F7:98:C9:D2:6F:B2:BE:73:21:67:04:A2:E7:DC:84:10:A2:7A
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:44:a0:ea:01:66:b9:94:93:7e:ed:f8:8c:d2:96:b8:00:2c:
         38:be:ee:51:a9:75:9b:b5:ac:56:0b:35:09:cc:47:a5:75:4d:
         70:8c:36:09:77:5a:ef:0a:31:33:6e:b9:d8:df:6c:50:1a:b0:
         d8:d7:a4:78:b2:1d:e7:30:2d:55:b0:04:89:a5:c9:99:4e:13:
         7f:1d:d1:ae:6d:16:b3:fc:a8:fb:39:92:34:80:61:b4:11:b2:
         1d:86:66:4d:6e:c4:53:0e:c6:a9:d2:d6:de:43:4a:e3:b7:f6:
         a0:fa:9e:e1:7e:47:51:2d:63:94:b3:d8:16:ec:38:46:fc:a0:
         c2:14:4f:00:99:54:11:5a:96:1b:c9:87:fc:b3:3a:aa:ef:70:
         22:1f:2c:ac:34:2a:64:33:3b:df:5f:15:12:59:97:7d:d7:98:
         f0:fe:54:17:d2:64:ee:e0:d6:e3:01:9c:89:3e:7c:f2:bf:27:
         45:0d:4f:cd:9e:4d:48:71:1c:13:52:0a:22:08:24:d2:99:a3:
         e9:89:69:b8:e4:a8:27:02:49:9f:2b:a5:e5:1c:81:d0:c9:a8:
         3d:c8:9e:69:1c:ec:0b:55:33:b1:bf:7f:a7:ee:fd:38:84:4b:
         c7:1e:ab:89:86:b7:b9:e5:aa:05:d4:7e:d3:9d:5f:af:1e:cb:
         57:a5:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:46:40 2025 by rpki-client