Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File:                     j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier:          dkdexv6MO7dSh5V/XeBu4SlRfrFJNBtGFjABe1en6WY=
Subject key identifier:   56:A7:D6:EA:92:11:25:3A:3B:51:09:41:3E:13:18:14:93:A5:09:9F
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer:       /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial:       0196A2E4C517CA07C8C02657BB53D5E47751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number:          10AE
Signing time:             Tue 06 May 2025 00:00:23 +0000
Manifest this update:     Tue 06 May 2025 00:00:23 +0000
Manifest next update:     Wed 07 May 2025 00:00:23 +0000
Files and hashes:         1: 33CUfDLiP8hMW8-xKnh5gWXZm9w.roa (hash: Bh9+3b8fWDJobwnZ5uEge8oWIc5s9pLu/K/Qpm494l0=)
                          2: 37WDsJgS29ArcL4Cmhv4wwYMgFc.roa (hash: AXUUOGrTgb1EkHkLKG0Np5XXpArC+TW3abI6bwcRXy8=)
                          3: 4UeqOidVxXtllJBCXqccAPMB0L4.roa (hash: F4SRHUsUQrgLFfE9vd29L5EUyTp/MgFHpYK0szqzOSo=)
                          4: 8Pql3WWXWEFRERRDmVMGD4G9M-A.roa (hash: Ou+GeKB9aMm7s/S9nX0yfjyzbehhUnphSDoiUeT/MCo=)
                          5: 8sf3AriWeoOoKb2ZrL9ruFI5-yU.roa (hash: akXe86mXNL4F4xYmekk3EuMAOLAD/RcPwHK74zX/QY0=)
                          6: 9a6AdkqAs0vIWdMjgvg0SfIEVG8.roa (hash: 3MZg0XXsOYdVObhOBprmqJ/8u/fpWKxyx3HFfsb7hhc=)
                          7: AmHkvm73L7WuRs2OBkCuUN3ylao.roa (hash: mk6A7F32UtKijP2YOQDh8IbbK8Vw0IDJK2YgMl3UZWk=)
                          8: Gkj-_sNoI1_V4Aq0AR967JJ7iIA.roa (hash: D6alHFBw87PSRUedkFujLNRW9+yoaIFCiBA4D58vz5s=)
                          9: H9HhLY73Vk4PBLowFwmqq8qnEvs.roa (hash: yboN6O4NEwN/9jtzcqVhwL7Xp6BAuM4oUmdLAuSlRZc=)
                          10: TgV1xu8ntnem5zfBufPUC7kUDYk.roa (hash: viX/DxmV4FfM1xJLQLNfoeWsVndpgszxqhUN0jk4LmI=)
                          11: VuwmrfCYeX-5-G3EACirZwyCtzg.roa (hash: 1HbLhGjSO6WtBBMMxb8oy/0MhfWurHjl8dezIem0SBE=)
                          12: a_gWGAH_HkQq48s4xebSJs8e9SM.roa (hash: /PN+oDh7g+uIG4/Jaj9EAzn6xGtetecKxsI53eVsu+k=)
                          13: bwAG82vgu_-f3Xus3V_4NK2WQyQ.roa (hash: qly2qjfn5eyWDXm67Zp4c9WaqGquHK1Au5pP/Lwhj6U=)
                          14: fczn2jh4ajq3X4s1Mo_fsWXXm34.roa (hash: J5rtauXxpoCURr4ah9LdMnYQCXOtCScxCM8XbJ0ALGA=)
                          15: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: AZgGj9MHuVVMIKYpwq1GhlpQSKOPe1NluO4XuAYSzM8=)
                          16: tUXcljwuTzZu2HFVE--E_B3XnQ4.roa (hash: Gfw3NzI90kBuKsp8o/a8mrst3zcJzAdSNtNsY8SwJUA=)
                          17: tgzOB-X3X9hQIl9WIvEW-sVk2TA.roa (hash: dct8dEsqnpkwRMNVp0z4oU64+Yxl27f7QQdtJgkmALY=)
                          18: xrtDAIk3vWJYXPnZVXMHaoJfbQs.roa (hash: u3EOwyWtPWjn//AFUgWdQ3LoVgi+BzUJpSJKyhN9AL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:e4:c5:17:ca:07:c8:c0:26:57:bb:53:d5:e4:77:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
        Validity
            Not Before: May  6 00:00:23 2025 GMT
            Not After : May  7 00:00:23 2025 GMT
        Subject: CN=56a7d6ea9211253a3b5109413e13181493a5099f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cf:b4:38:5a:e3:22:09:c3:8b:a5:7b:ce:0e:
                    b2:92:f0:f2:5b:61:33:02:df:af:29:b6:e2:05:98:
                    d7:36:56:fb:59:08:4a:46:62:35:9b:2e:4d:b6:d5:
                    61:5f:20:0a:b7:34:68:da:a6:8c:92:4e:23:6c:01:
                    9f:71:03:38:81:53:e3:45:59:58:bb:91:96:c1:e1:
                    a7:fc:ed:69:97:ce:91:c7:92:e5:6d:2f:02:17:a7:
                    86:19:48:cf:b1:4d:0c:b6:b1:39:68:3d:ea:fb:d6:
                    1b:76:f9:ed:cc:d2:cd:cd:b7:71:3a:2c:b0:9b:b4:
                    a8:c3:7d:b8:75:4b:27:ef:6e:ba:5d:98:5e:9c:54:
                    b1:bf:e0:14:5e:b8:16:b8:35:e6:31:2d:f8:b7:ac:
                    66:33:66:72:5b:67:9c:6a:c6:00:ee:39:b6:ab:62:
                    28:c9:2f:cb:ef:89:e9:b7:27:07:28:77:6f:2e:dc:
                    af:e3:fb:2c:a3:ba:d6:ff:b0:72:0a:7a:4d:1f:d7:
                    c1:52:00:f9:15:cf:5e:46:03:f9:4b:0e:ec:94:59:
                    e4:3e:20:7c:fd:4d:f6:cb:97:8b:f6:b9:1b:0e:b5:
                    e3:70:c0:3e:f3:19:7e:e4:63:ef:09:f5:4d:84:f2:
                    22:14:79:85:b7:18:a1:92:0a:1e:44:13:ec:93:3e:
                    f4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A7:D6:EA:92:11:25:3A:3B:51:09:41:3E:13:18:14:93:A5:09:9F
            X509v3 Authority Key Identifier:
                keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:82:a3:74:32:eb:bc:e1:05:ce:63:db:56:cb:d1:65:fb:e1:
         41:03:4d:ff:fb:fb:8b:03:29:be:30:09:e0:2f:3a:de:e3:75:
         c3:85:f7:6b:e7:4a:47:d9:ad:cd:e3:e5:35:17:de:86:36:55:
         ee:f7:cd:e0:40:03:c9:b7:dd:4b:a1:75:3e:4e:e7:16:20:ef:
         24:1c:73:25:d9:77:6c:75:71:63:d6:11:e7:69:19:62:0e:72:
         d1:4c:db:7c:5e:ed:2e:37:3a:1c:58:92:cb:65:f7:c6:27:18:
         6f:0c:7b:91:5c:54:b3:97:d1:3d:e6:f2:d9:7a:b1:b4:09:19:
         f4:e0:0e:6c:4a:44:7b:13:70:96:83:fd:80:f9:e0:d8:ba:ab:
         7f:31:51:72:7a:9c:cd:a6:f7:ec:5e:5e:d6:dd:8d:31:51:d5:
         fd:d5:ea:39:18:7e:81:72:c1:39:39:55:24:15:b3:4c:97:d4:
         56:13:e1:fe:37:d2:37:6e:89:89:95:cb:f4:3d:51:8e:0b:f2:
         65:b3:53:92:74:c8:ae:2e:e3:08:a9:fb:27:8d:20:8f:74:2c:
         9a:2c:7c:34:91:d6:a0:38:fb:e6:c5:ce:35:3e:a9:1a:9a:fc:
         df:55:cb:80:b0:74:7e:be:bd:ad:20:b9:7d:de:f3:34:fa:db:
         6b:b0:82:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZai5MUXygfIwCZXu1PV5HdRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjUwNTA2MDAwMDIzWhcNMjUwNTA3MDAwMDIzWjAzMTEwLwYDVQQD
Eyg1NmE3ZDZlYTkyMTEyNTNhM2I1MTA5NDEzZTEzMTgxNDkzYTUwOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s+0OFrjIgnDi6V7zg6ykvDyW2Ez
At+vKbbiBZjXNlb7WQhKRmI1my5NttVhXyAKtzRo2qaMkk4jbAGfcQM4gVPjRVlY
u5GWweGn/O1pl86Rx5LlbS8CF6eGGUjPsU0MtrE5aD3q+9YbdvntzNLNzbdxOiyw
m7Sow324dUsn7266XZhenFSxv+AUXrgWuDXmMS34t6xmM2ZyW2ecasYA7jm2q2Io
yS/L74nptycHKHdvLtyv4/sso7rW/7ByCnpNH9fBUgD5Fc9eRgP5Sw7slFnkPiB8
/U32y5eL9rkbDrXjcMA+8xl+5GPvCfVNhPIiFHmFtxihkgoeRBPskz70lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFan1uqSESU6O1EJQT4TGBSTpQmfMB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4KjdDLr
vOEFzmPbVsvRZfvhQQNN//v7iwMpvjAJ4C863uN1w4X3a+dKR9mtzePlNRfehjZV
7vfN4EADybfdS6F1Pk7nFiDvJBxzJdl3bHVxY9YR52kZYg5y0UzbfF7tLjc6HFiS
y2X3xicYbwx7kVxUs5fRPeby2XqxtAkZ9OAObEpEexNwloP9gPng2LqrfzFRcnqc
zab37F5e1t2NMVHV/dXqORh+gXLBOTlVJBWzTJfUVhPh/jfSN26JiZXL9D1Rjgvy
ZbNTknTIri7jCKn7J40gj3Qsmix8NJHWoDj75sXONT6pGpr831XLgLB0fr69rSC5
fd7zNPrba7CC/A==
-----END CERTIFICATE-----
Generated at Tue May 6 03:32:38 2025 by rpki-client