Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
File:                     ZbfWaZg1v-moCB38EU3xv20hXac.mft (raw, json)
Hash identifier:          rhfBju5LPWZE6cl+v7tKB6gdSxiAfeGJkAjlbLN17rI=
Subject key identifier:   44:53:A7:9B:DA:C7:D5:56:39:3F:B6:10:EC:55:9B:38:66:2C:12:41
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Certificate issuer:       /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial:       0196B28F3AD15FC9E343BCC619E3B90176D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
Manifest number:          15A7
Signing time:             Fri 09 May 2025 01:00:53 +0000
Manifest this update:     Fri 09 May 2025 01:00:53 +0000
Manifest next update:     Sat 10 May 2025 01:00:53 +0000
Files and hashes:         1: 1-YvEReZaLsTO0jjKZ78pRhHRfsQ.roa (hash: zdufkDo+ZHpmPAX/tYX0aFypSlJTt9HUATtQVpaRiJ0=)
                          2: 18sxOB5Kpihtussm1nLKSIGMFSE.roa (hash: b7X7RSJm4cnyNvUC/xqU2kCOGFYxn6Od5qlq/zQq/DM=)
                          3: 2SAQLA7QMTW3rJ2MPjCOahlOsgA.roa (hash: YQiN3iKo5zTaytwvVXkZsjdfMdlDibNqV0v4+CZFgPw=)
                          4: 4ugbCy83DcO9TYhxoGqg3xYqKBI.roa (hash: uW7VWLBw91JN4k11JcZFpOcPQ5HtPfwoG25WkIgbLeQ=)
                          5: 56lpErzmKA6zdpC8K6uqShjX918.roa (hash: JSNhnLmZxVAM2Ix+mj/nVmnsa17Mxaa20aoo3EM5/C8=)
                          6: 9_6Qgvz8x0xmVgbjQq9RZaCrzwI.roa (hash: XDjG9XViYUZoXuJfh57cLMJxvVfFwPpTj7Ylh+rpLA4=)
                          7: CkBRqOo4nHpiMZCMmHhlMyMyMW8.roa (hash: QqiQ/A2UMFrHNJ7zFLbdbwUvQQ7O2J6ld5ZejB7+vXI=)
                          8: GxYedkSTeiLaGGZm3zR7zXc_okU.roa (hash: yZtZ5bEs3PMC5gEdtfPDZZYkR4su+br574QwtztI1z0=)
                          9: IGXep-Sp1xTx1rwpzVruBZRjNug.roa (hash: cujh35boqOnCbI1nKqG05ttKtrmdk5otJzYosXhUDII=)
                          10: NNPkTDbtxCjIv0T_rkcglbIHKsI.roa (hash: IKxplvCU83AT08NdV5QMZT2pNZspbe6MXkpY4tcztgc=)
                          11: Olvba8b0LQ3XYjmweIYYCWlaL24.roa (hash: Wj2tE5RhOaTBOgwtpy7j+LlliXQCV/ipn4kpk6MvU1M=)
                          12: PTy298-nUrNtL6XANPxlJ7TyOo8.roa (hash: xKKmkxhyHB8ISDXmYkZq+hQ/caVLmzK9MfNxnz4PSO8=)
                          13: RBC7xRCUrzAV3xcSRBDVibZqCTI.roa (hash: WHOYeqrd+Q7s/pv59QgW/Re/r+BuES3bFI1GIinCkZM=)
                          14: YVwxp9vRo78D3Zkq4PWUJjvh2ys.roa (hash: 6SWi7F6i8jnqxlALTm3akUKfwciw3a80Vo8UDIGTBq0=)
                          15: ZbfWaZg1v-moCB38EU3xv20hXac.crl (hash: m8AXkXwwqoVMMIWW//icoa39UVKbowmbFg/OkpT2Vzk=)
                          16: Zgs9-zOzZ1bVcmw_hJ-aLd6LSw0.roa (hash: Hd3GHtUQTqMRi7qf1gZPAx94+btgVUkFfnwpTbzv+nY=)
                          17: iEpDEVUAC0FqyMEjeItbSe6hHhw.roa (hash: uIxiBqhS0laFOTljS8IeUdTLfRVqc/6t1ILn5Hh8PqE=)
                          18: llk4ofXvRzHEH-qWue__dsHka_s.roa (hash: K2BZhTog7Vh0tYt+YbAIQfdPEsZY55aQG6EI2WxH2g8=)
                          19: tR6Fa03gzifqR6_y9F-SUYuYgcc.roa (hash: uncWfY5Wy22Nief+j+lCY37qfqCxhpjeMeXy7CgUPqE=)
                          20: wCb4vbrgGFRhU-Cc5NMZl-jzWqo.roa (hash: zpBJ6kRrehBfcMMd+SMf9RfgRe0zUoI1wInwbsH+nsg=)
                          21: z6jYSnHDtoGGfHKYIRCDy4kC3uc.roa (hash: Vi9kGfRbZv/6QO+j/QQ2QU1ueyC8xJ89Nu2SL4QOCaI=)
                          22: z9Z9t7kfWwit4I9_Rt9Xt7bo-ms.roa (hash: xjQ2gHL1Jh7hwOv5Vlv0kGkojGyyO/DQzH561lm74tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:8f:3a:d1:5f:c9:e3:43:bc:c6:19:e3:b9:01:76:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
        Validity
            Not Before: May  9 01:00:53 2025 GMT
            Not After : May 10 01:00:53 2025 GMT
        Subject: CN=4453a79bdac7d556393fb610ec559b38662c1241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:8f:f1:53:84:f2:3e:cb:39:9b:0d:c1:49:
                    99:9d:56:ca:89:29:b8:91:3c:7e:a9:76:3a:a0:b2:
                    e3:1d:67:c0:16:31:fd:74:66:34:9d:3d:0d:02:54:
                    d5:f5:cf:44:34:2e:78:8b:59:af:d4:85:7a:46:ad:
                    29:59:cd:d1:b6:1d:da:02:4f:9f:95:c1:ac:13:12:
                    9d:2f:f6:9f:74:81:86:06:8f:45:2c:9e:61:72:80:
                    9e:f4:60:1e:90:73:e1:0f:bb:39:0e:14:8d:b7:d1:
                    61:37:ea:c5:17:23:cf:cf:22:40:35:57:ec:c2:5e:
                    43:9c:3e:05:66:71:56:4d:a4:61:f4:ff:e2:36:79:
                    81:31:e9:30:00:7b:f9:fb:da:53:d4:e4:1a:b8:39:
                    54:25:e8:b7:3b:a1:5c:bd:22:b1:f7:d0:ca:40:7c:
                    b3:d5:f0:6d:d4:c1:b8:73:c7:bc:fe:0a:1f:1d:c1:
                    bb:3f:ab:d4:5e:02:6d:df:54:dc:28:c3:41:9e:78:
                    55:66:0f:c1:10:f3:eb:c8:87:ef:79:b6:42:91:0c:
                    ca:ba:df:78:c8:06:0f:5c:88:03:41:71:72:fa:4e:
                    44:4a:4f:09:08:d7:7f:d8:f7:81:2d:39:9d:b3:00:
                    c3:9e:a6:08:17:b5:87:8e:62:68:96:f7:d0:c5:02:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:53:A7:9B:DA:C7:D5:56:39:3F:B6:10:EC:55:9B:38:66:2C:12:41
            X509v3 Authority Key Identifier:
                keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:b5:9e:68:cd:ad:aa:4e:b6:74:59:83:2d:17:8c:55:01:
         ba:bd:36:b4:0b:79:db:c9:bb:1d:7e:9f:5e:9f:55:8f:49:db:
         59:3f:8e:fe:3f:e9:c9:d5:89:a1:7b:12:2c:70:8b:73:74:0d:
         26:1b:3e:98:6c:2d:ad:43:06:c6:91:97:23:2e:f6:c7:4a:83:
         51:82:36:f2:75:d1:d5:b5:f3:10:a5:11:a6:8a:9a:5c:ec:13:
         fd:9c:53:35:aa:b6:90:18:c4:e4:9f:2a:46:51:95:ef:b9:e2:
         c3:17:41:f9:c3:25:16:75:92:ac:47:8b:85:47:05:18:ab:49:
         9a:13:4b:95:3d:89:92:03:cd:85:7e:8a:91:a1:e7:5d:d6:b1:
         42:66:88:ea:97:19:7c:ad:9a:13:15:07:4e:0e:8f:5c:19:ae:
         03:57:52:e5:fa:6a:b0:14:a7:e8:29:fc:e8:bf:fd:bd:8c:b2:
         8d:90:ad:dc:8b:48:f1:ae:fa:25:17:90:ee:be:08:1c:3f:8e:
         ec:16:10:21:d1:af:a1:75:e4:f3:cd:73:c7:fc:fa:a4:35:87:
         2d:b5:bc:3e:32:57:8e:6e:ea:9b:4d:af:7f:4f:69:da:24:75:
         36:62:88:7e:16:2a:82:cc:5c:6d:b9:55:bb:e5:c7:4a:14:30:
         e8:b7:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:20:46 2025 by rpki-client