Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          9VMXiwKJpxkgXBBuRQ1gSLb4SK30LMW+TwD/alm23Zc=
Subject key identifier:   45:E2:51:44:68:7B:75:47:FE:26:A5:D8:31:33:1E:C8:BD:1A:7A:AE
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       0196AEB22EEF10DDC856EE2928E93F414B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          07A0
Signing time:             Thu 08 May 2025 07:00:35 +0000
Manifest this update:     Thu 08 May 2025 07:00:35 +0000
Manifest next update:     Fri 09 May 2025 07:00:35 +0000
Files and hashes:         1: 0hol4KQQNK8fioxmI1w3sUN9afE.roa (hash: Mu4/+fU/Vk76+VhmcBGjy3It7/1O500tnd/IgdpfODE=)
                          2: 0sXA3IeAoIVAXrLvJHnvifdk6W4.roa (hash: EFrw6dc9D3S3/lhfk9rHsXpO4ttSJES+k0IjLuAxkE4=)
                          3: 2GKa1vIOkhpOPczR8W34x1NEGEE.roa (hash: 8Q04xt13Xxm5ppiJkcNE3EUUs6iw/E7n8W4XdRTD/QU=)
                          4: 4mCnhfoxOGM-GWSaIwaJ-d-A55s.roa (hash: saKeM47ThRuME/8Mw3npl5ekHzg5RhScY/795Q2ksJ4=)
                          5: 8OSYTODqs_OVKKJ0Xn8VmQ-cq5Q.roa (hash: vLGuiUaaMRg3Oh7AvVSEZuZjqVJEBlIV9vKNBDoC7tE=)
                          6: DP3dCaMLsH29a1sg8q_ioKW0oYA.roa (hash: nzkI32eaj4t4xK3OTClLQb79vJBi43NJzrJVBekj9MI=)
                          7: E2CsRwz9g826xgce9UMdi-jpNc0.roa (hash: p8vKwGNWyPepiaRRxHDNJ9XMoMoNlWP3l1RLiZkb2+U=)
                          8: E8lmVC7bau5tj5Iiwk3c0i8l2Ps.roa (hash: w6Z0YEJQvfL4NvmqQHTVNtC2n3ge/nKiZiSd6ate0dI=)
                          9: Gs6wyM63OMnbKZMOf0cda_N7OHI.roa (hash: klxL/qsoExOmtoi4MkmdkNuAIFKSpx+D0u3x1SSJEX0=)
                          10: HlFXUHdwXGJZBKMfob4UKNQ4HWo.roa (hash: FgAisfkYOtHtqPca1uMEVAA9ecV9h1pOsVf2alGzd9o=)
                          11: KE2Kl2utsUvHpt-c4smFQJF0LuE.roa (hash: iI0waX0t6mW7DdwMyQO/vbkTVqg0aNq6VMeaB2Q+awY=)
                          12: M_Vi73CFA0pYsLc_tnhRMlqnyzw.roa (hash: Sa1IToWhunFsh7PNrbHTSOaXwck3hxZREJV3TqwmoFA=)
                          13: NfFWK6CE2t9Pa-x8zwAV9BuwlEI.roa (hash: YfoMWCybmpdOuYSX8n89Rg3jlFAY6S7JvtkdJ5G+mxc=)
                          14: TDAc9CcJ41Ui8d_u_RWG7olCzm8.roa (hash: 5TOUXLSShUEIyyWwQvXlNv+6kmdqCB9iCboytyJ7clM=)
                          15: TtfN6MrzuRN0blf6l43DfiJw4FY.roa (hash: 4D1RtlDjpU99LJVibXUhjXq2RuCXBlU256HXsluu1qY=)
                          16: VZZ9WawBePhv4LDIZfO_F9oGyz0.roa (hash: tpSdt2I+RDE+fPAieXAjll9NyOZ/5yWRInrrSwy0o3Y=)
                          17: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: YFezzfs6PnOX1H2sleAjbW6Wv565N/ZUORKwNEDiv8w=)
                          18: dOwbaQzqcRYTsS9whCXtEpuCSXk.roa (hash: 1R7jY8US+XVotTudXZJyXVeOcS1o5JnuJJgbbY55aZU=)
                          19: eUtBoT5j0z-IYqDSfwpzibFEqJY.roa (hash: xrripoBlTawer5hRJBFA2IV4xDGQFgwmcY1MUaK5VFs=)
                          20: hUld0bztgVsjCx1wOfJFp5IoOW8.roa (hash: yhAFJhhqEely7Z+gYD2UjZa+MFUNj+TLxyxBcw9l33Y=)
                          21: keun2IRw7haIIKkVfKP-snALaeQ.roa (hash: YB+3CYxlHEJ9vwl2a7w4/uVnP5GuPShO8QVbYUihRFU=)
                          22: nDCQMjqJYZzn6cBHaTW3WoI-N1I.roa (hash: OMmnNufOFNF1WSMlxRX3hhHWusPYAz+qyX0FtxvkgWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:b2:2e:ef:10:dd:c8:56:ee:29:28:e9:3f:41:4b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: May  8 07:00:35 2025 GMT
            Not After : May  9 07:00:35 2025 GMT
        Subject: CN=45e25144687b7547fe26a5d831331ec8bd1a7aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:95:34:35:27:ad:c4:04:69:7f:13:40:fa:07:
                    25:9f:a4:78:ad:7d:92:51:0d:b9:4f:10:5b:5b:3d:
                    68:77:06:66:14:5b:db:30:c1:e6:99:5d:1a:02:ce:
                    2b:c1:f3:c2:42:d2:0e:d0:a0:0f:02:51:7c:04:4a:
                    54:dc:e0:f7:40:3f:c6:95:57:34:b2:ee:69:81:29:
                    ec:1a:7e:f3:90:01:bb:3f:00:d1:07:01:cb:b2:3d:
                    c6:bd:58:5e:9c:d6:2c:00:1a:4e:09:8f:ad:e0:7f:
                    06:70:6f:e9:2b:90:ee:8c:7b:c5:d8:3b:49:89:62:
                    26:75:40:20:b0:81:eb:f0:d2:83:30:a1:7f:5d:9f:
                    37:2c:58:cd:d6:94:a9:92:e5:a3:a4:05:6e:57:8a:
                    3a:93:23:32:4c:e5:66:4b:41:cd:be:ec:09:9e:af:
                    2e:05:95:da:7e:8f:28:cc:e5:50:4e:0a:46:38:fd:
                    55:94:e6:58:9c:5c:44:1f:c7:d7:d6:50:0a:f0:80:
                    9d:58:a4:a0:81:b8:75:ca:ac:ce:53:78:e9:55:e2:
                    6f:e9:29:63:2d:55:f0:7d:01:ef:e2:53:b7:d8:d6:
                    76:71:d5:ea:ff:e0:31:a6:71:99:ff:72:2b:74:cd:
                    c6:b4:5d:49:c7:55:30:ed:19:79:8f:8a:8a:42:05:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E2:51:44:68:7B:75:47:FE:26:A5:D8:31:33:1E:C8:BD:1A:7A:AE
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5b:b7:93:79:bd:29:e0:b9:7d:22:c2:f8:85:83:74:63:f7:
         2f:f5:8e:35:d2:20:99:3a:e9:10:10:98:63:81:78:e4:50:95:
         23:59:c6:1d:fa:f7:3c:3a:9a:07:1b:2a:2e:28:76:ac:9b:c0:
         b6:f5:19:14:82:3b:bc:60:7b:83:7e:c1:8f:99:78:02:17:b9:
         b8:d3:ce:b5:20:64:77:6a:1c:16:a2:e3:43:43:fb:1d:cc:be:
         80:ec:e5:ed:59:41:00:89:14:40:4b:21:d9:c1:c5:74:ac:40:
         d7:e0:b9:92:3f:d2:f3:71:38:c8:2e:5f:a1:79:7a:6a:3b:49:
         99:88:97:e4:9a:d0:6b:ab:21:66:5e:0b:5b:55:d7:6d:c1:1b:
         f0:a3:ba:c9:f5:f8:88:3f:ba:a6:b9:ba:31:81:2a:ff:41:c2:
         eb:a9:fe:f4:d8:94:5a:7f:6a:db:72:07:17:36:8b:3a:d6:8d:
         7a:da:56:2d:67:00:73:f4:34:5a:75:24:19:af:1b:4b:e8:95:
         1d:ae:c9:b4:a9:3f:c2:49:c2:d0:84:f7:da:cc:29:dc:36:aa:
         d3:c7:4d:59:68:f2:ab:1d:87:6e:67:d7:ca:75:b0:e4:01:c6:
         18:8b:fc:8b:67:56:fe:9d:e9:4a:6a:f5:29:9a:d3:fc:4e:82:
         bf:7a:43:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:54:55 2025 by rpki-client