Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File:                     _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier:          xv7VLkGxEWCGuJJ+U7ALmxclA6/mOxrmx0E/UktAF/4=
Subject key identifier:   90:4E:2B:D4:1F:62:2B:B0:D6:85:C9:F8:C1:F6:25:8A:E9:35:81:92
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer:       /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial:       01969E2C9C680DB69CF59F3D13EFD6A8EFA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number:          1565
Signing time:             Mon 05 May 2025 02:00:45 +0000
Manifest this update:     Mon 05 May 2025 02:00:45 +0000
Manifest next update:     Tue 06 May 2025 02:00:45 +0000
Files and hashes:         1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=)
                          2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=)
                          3: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=)
                          4: 8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa (hash: v8PEoTepb8SY5IPZDmMyByiGGEsM8VZnFBHuEpMHhf8=)
                          5: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=)
                          6: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=)
                          7: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=)
                          8: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=)
                          9: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=)
                          10: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=)
                          11: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=)
                          12: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=)
                          13: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=)
                          14: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=)
                          15: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=)
                          16: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: KGCrK8ounL2kvZ82xCfr2umQuR3peUTzMj25S00usTY=)
                          17: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=)
                          18: bloAk3yeA7RnUogV_JT9EWIP-hM.roa (hash: 2fE3VucaSZiB1/IjzEIuOiCkE2iec+1KGKY3worRZJI=)
                          19: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=)
                          20: cvTzrIYooEqCYZcTeeMvVkAMxYo.roa (hash: NG5lHzxF9cCWRX9QDdwGDjbgn25GA3c/1BtMGNNx+qk=)
                          21: iUM8bJHwQ48CpEg1dQgbuZoF2F8.roa (hash: FAU/hqJaw9dZlVsB9TPc90NTrKoL6yNGJeYIXg92yTQ=)
                          22: mphDesgjK6Onr5y6IZPMTWlrP-U.roa (hash: ilbmBxOIagqo/tPLQF0wDgYFEpCdkEK/5ye43lns6Ks=)
                          23: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=)
                          24: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=)
                          25: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=)
                          26: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=)
                          27: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:9c:68:0d:b6:9c:f5:9f:3d:13:ef:d6:a8:ef:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
        Validity
            Not Before: May  5 02:00:45 2025 GMT
            Not After : May  6 02:00:45 2025 GMT
        Subject: CN=904e2bd41f622bb0d685c9f8c1f6258ae9358192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:be:28:26:6e:6e:e9:7a:ca:31:14:ae:a3:
                    92:3e:d6:f3:bd:f8:c8:2b:e8:56:f3:ac:79:8c:e4:
                    bd:c4:4e:ec:30:36:42:69:09:92:c3:08:35:fa:0a:
                    b5:12:8b:9c:7d:19:09:9a:45:dd:b1:69:fb:f9:e9:
                    cb:78:96:17:ec:dc:4e:36:b4:e9:f2:17:17:35:cd:
                    de:5f:68:ef:b9:8a:bc:98:19:39:4a:7f:26:aa:0b:
                    78:c5:bd:67:2a:28:cc:fd:0f:5c:7e:58:ae:cf:9f:
                    10:90:3b:e6:5e:42:88:2a:78:7e:74:e0:bc:18:8f:
                    06:9d:d8:9c:c9:28:87:4b:11:fd:b2:51:ca:14:23:
                    2e:55:70:ed:34:6a:60:f7:e7:ad:3c:92:15:f0:e1:
                    ef:fe:a0:b8:eb:e1:f3:6f:d2:29:53:de:90:4f:55:
                    0d:ee:8e:d5:f6:4b:69:57:c7:77:16:13:6b:06:f6:
                    78:39:af:3f:89:7b:04:a8:df:b1:7e:5e:55:1e:54:
                    a8:ce:c9:7c:f7:63:c1:a0:f8:a4:f7:21:e1:8d:4a:
                    47:1e:0c:bd:e9:53:a3:07:b5:79:71:06:0a:e3:41:
                    dc:46:b6:c6:67:d3:b5:b7:a3:7f:2f:14:32:76:43:
                    b5:73:04:ec:08:d5:48:94:0a:d9:7e:87:7c:68:59:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4E:2B:D4:1F:62:2B:B0:D6:85:C9:F8:C1:F6:25:8A:E9:35:81:92
            X509v3 Authority Key Identifier:
                keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:56:9c:db:ce:3d:98:54:35:e8:5d:b1:c0:59:8a:39:02:a5:
         e9:e6:21:fe:ed:16:a5:dc:7a:0b:06:df:75:38:72:eb:fc:6c:
         1c:e6:d1:34:cd:b9:a0:7a:6b:ae:3c:66:9e:74:6f:2f:7f:6e:
         1d:5a:3c:62:78:48:18:d0:c8:d8:06:88:52:12:1b:d6:02:47:
         a8:41:e7:b2:d2:92:39:79:35:5c:ec:3f:df:b4:ab:09:fc:0d:
         b6:32:73:43:82:12:32:2c:dd:61:13:ca:d1:44:04:44:8e:8c:
         6a:2c:52:b3:29:2b:48:71:59:d0:da:79:1c:47:9e:51:ce:29:
         94:25:1b:09:df:b9:47:91:00:6d:14:5d:17:6f:38:15:1e:92:
         07:7f:7f:d7:97:7b:1c:7d:ed:9e:74:4d:b5:a5:c8:54:b2:d3:
         54:13:58:6b:0b:10:9e:f7:6e:da:c1:1e:94:62:9f:82:68:24:
         4b:2c:48:0b:a0:01:50:05:d8:5f:36:0d:32:40:43:4a:7b:aa:
         93:69:95:af:9a:0f:a6:ee:b8:91:1f:8b:61:2b:2d:75:8f:51:
         ce:1a:28:95:2b:d7:86:e5:2f:85:84:6d:ae:2a:47:e1:fb:d7:
         5a:68:c9:06:3b:03:24:65:6c:68:59:a7:c9:13:b7:71:fd:b2:
         59:c1:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:20:00 2025 by rpki-client