Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
File:                     RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json)
Hash identifier:          00qPuApcWFwkQPuPttooRVjYXKEt1UHiNbbTjwBi0so=
Subject key identifier:   55:97:76:E7:FB:A7:A4:94:BD:77:A0:4C:D3:52:F0:C1:03:4A:30:78
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Certificate issuer:       /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial:       0196BB2414707423D65E269F4BE54E04FF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
Manifest number:          053E
Signing time:             Sat 10 May 2025 17:00:26 +0000
Manifest this update:     Sat 10 May 2025 17:00:26 +0000
Manifest next update:     Sun 11 May 2025 17:00:26 +0000
Files and hashes:         1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=)
                          2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=)
                          3: B5kdDxNFhlA9AT3PyqFkTX6RY6M.roa (hash: Xin+IDogu4+kKllgKutdfXdJm2piOKuXIHOph9bE8Zw=)
                          4: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: ekvYp00yofhDoFNUOzVVNvuxskYLZUDE6PN8M3ToImE=)
                          5: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=)
                          6: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=)
                          7: elD2CPARB_SCiElYBqX86L528iA.roa (hash: 4GpojDoTFDR9/As1unQ2wQcCWk8x0pykSLzc87gKTZw=)
                          8: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=)
                          9: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=)
                          10: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:24:14:70:74:23:d6:5e:26:9f:4b:e5:4e:04:ff:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
        Validity
            Not Before: May 10 17:00:26 2025 GMT
            Not After : May 11 17:00:26 2025 GMT
        Subject: CN=559776e7fba7a494bd77a04cd352f0c1034a3078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:f7:16:59:d8:89:66:94:79:de:3c:c8:00:
                    e5:8f:57:a8:03:b2:17:27:31:7e:a5:76:68:71:a4:
                    78:7b:8d:96:0d:cb:91:85:7b:bc:99:13:7d:72:53:
                    06:4d:1d:38:a7:01:17:be:83:c9:ef:dd:c7:4b:10:
                    53:9c:2f:e6:b6:ae:be:a1:01:25:25:b7:db:3a:53:
                    2e:57:bc:d8:96:44:37:21:05:9d:8b:ca:d3:3f:56:
                    40:39:7b:72:cd:d1:2e:68:20:0a:63:97:33:d8:fc:
                    fd:b6:15:17:48:da:09:26:5d:12:20:e4:e8:bc:c4:
                    fe:4f:bf:47:bc:ff:ab:aa:02:9e:35:65:42:91:16:
                    5a:1c:88:69:41:c8:c7:11:e1:d3:3d:c7:24:d0:e2:
                    fc:7e:91:4d:06:d7:61:3d:7b:48:74:f1:d3:33:43:
                    64:fa:1c:6b:8b:56:06:90:a7:ee:c3:98:dc:d0:9e:
                    43:0e:e1:c9:4a:da:2a:fb:19:b5:57:ed:27:23:d4:
                    f2:36:dc:be:f2:db:52:c6:7f:93:1b:2c:74:d5:8a:
                    05:86:05:2d:1f:28:00:23:6f:3c:c4:a4:88:e7:c0:
                    39:f5:70:f3:3e:d6:b3:33:a6:7f:57:a7:69:92:58:
                    e1:ac:f9:3d:7f:1d:cb:f3:95:e5:2a:cc:24:22:f4:
                    07:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:97:76:E7:FB:A7:A4:94:BD:77:A0:4C:D3:52:F0:C1:03:4A:30:78
            X509v3 Authority Key Identifier:
                keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:7a:53:fe:25:af:91:c0:b7:ec:0e:7a:a5:cc:b5:87:d6:
         1e:fe:b0:0b:1d:f3:2b:17:a2:0b:1a:ae:a6:f0:78:78:6c:a4:
         a5:d4:eb:8a:79:46:54:01:32:df:fc:91:59:85:16:b9:5e:72:
         6b:58:57:f2:a8:78:c3:5c:8f:64:7d:f4:97:71:a3:bf:ae:09:
         4a:08:3b:b0:2d:79:42:37:5a:2a:18:2e:12:d3:3a:fc:e6:75:
         49:22:94:35:03:08:61:62:ce:53:9e:d0:88:e4:29:59:9d:bb:
         99:61:8e:b1:bf:6d:e1:91:87:e8:37:85:0a:a7:1f:23:70:38:
         0b:ea:53:ca:20:2a:36:13:c6:b5:5e:52:10:b1:ea:3d:1a:4b:
         6a:a5:0e:08:22:c4:f0:23:1d:0c:16:74:7a:64:3b:e1:37:6d:
         5d:8a:52:59:99:a1:b5:32:c5:f4:84:87:33:e3:f3:72:a2:46:
         cd:8a:b0:0d:ce:e7:94:56:22:94:7b:f0:71:58:af:d9:be:83:
         54:e7:f4:cd:df:84:5e:cb:b9:9e:1f:6b:4b:cb:51:76:1a:9b:
         85:e8:aa:e2:d8:ad:b1:76:cf:b1:63:6d:88:7b:29:92:65:bf:
         5d:dc:48:c4:a0:ec:57:df:46:c1:4d:55:7d:c5:50:f6:56:f7:
         4c:35:45:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:39:33 2025 by rpki-client