Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
File:                     HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft (raw, json)
Hash identifier:          5UEwjCTf/t1NWQyF/CI5a3O0M9lFPNpP/jHKWjqHzn4=
Subject key identifier:   EF:F5:AF:BD:A2:DE:DE:2A:2A:96:EA:56:BE:8B:DD:C4:C1:6E:F7:40
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Certificate issuer:       /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial:       0196A4662BD02D77DF0AFBA034DB2EC34B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
Manifest number:          0B62
Signing time:             Tue 06 May 2025 07:01:21 +0000
Manifest this update:     Tue 06 May 2025 07:01:21 +0000
Manifest next update:     Wed 07 May 2025 07:01:21 +0000
Files and hashes:         1: 1Gb7bKOB6qaqSl4slwDpG6HeQuU.roa (hash: +m50Iqil1tpGPCH1POgDTMYG3pR8qHGO84rW5K/euCI=)
                          2: 5yN22ahrdAN1NXIIN6NZ1jhN7Jg.roa (hash: j0qMcGfpFNrPYWDQOmrLH7ZMvqbrcA5XzAeaKGehsQA=)
                          3: 62FFRbLMZiAc_YdwN0J8zGIbHPQ.roa (hash: CNhEA8oMJlI+Kr9kCi3nuWGoLgttS1CSckkHhL7fMBY=)
                          4: 8EQPiSjQEYby_XgXqAmaDuC4v4s.roa (hash: 8d10+B2y/tYDuhscsgeyLhd3jc337orMULwx5SPapmY=)
                          5: E4_h1qYRN41D_VDuA1H5nUNKrr4.roa (hash: cIztELSHss6QRuEFFxw4N/UrkNKRSLWYj+DkUBUvoq4=)
                          6: HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl (hash: 4jWUxqQ8fEgkRIlX7UtMZCvAGpnjHjN2tTNlzCLhSzU=)
                          7: HxQPVTCiHIEZEvZuDoFbWMCKkq0.roa (hash: gUjH3fV/xGXEx9RSjByHdu4FqtAvEWS+pJpQ7nPwfHM=)
                          8: I_uguIxF_BMEoyGLoIURMKuvuX4.roa (hash: 8eCD2dZaEAtY0Dv9hMHZwLlo808FjJsySBHzoOCHK7Q=)
                          9: JljJiSWFuhVdyGXatEB9x9JdnZk.roa (hash: jAkIP+k6idLyICi/ICZpuqWo5Ubp27FQJ+EpWgBEDeU=)
                          10: K6xaLl2fknJBgw1Nb2Cj0TA8oJA.roa (hash: +DXRxtDiDTuNPP3XfbOuBoSJqxfeETnbTJao9qkvOp4=)
                          11: QECshKhyym3U39W11wvqgySCjwE.roa (hash: aX5d7QpOhGIPJ4lMxrEQ7G2+ORViErZX+IKTs8thiL8=)
                          12: Q_qTon8MvtRJ7Yc5pdD8eXsue1k.roa (hash: tTK7gSyyI93W6RmRW4OEkhpUWe2cbJoZYsLm8Htm4m4=)
                          13: UmjABTUr0Zb4pHIrxaH4BnUZZBw.roa (hash: 5WOS1og+TrtZTsHliThud8m2Aj8cNpDdBDap4VqTPRc=)
                          14: XI623dsCQno6qF3qQmT7tBPRYL0.roa (hash: 68h6NdWczDm9jsCruyHJWBo3tYdsQcqc0/iou/1F0NA=)
                          15: ZLpoyTREbTFQSrueNjcvwhc4UVM.roa (hash: znxYwYux+1zAcRv+r+9X6VGpZLk/JOsk2KAl4CWZVu4=)
                          16: cQE0U4xZCH69tgR4nrNYYPj6JOo.roa (hash: bmWiNVCBbvYWUh9gi74WST8Cmi7v0uEcrjWGnyUEh+0=)
                          17: d3pxfpSAdMX5-xYmVFQaOfvLDSg.roa (hash: NLZDZC6DgJ7PomVCUoylLvrMZJUUP5EGmw8tlYepepc=)
                          18: gl18mKpO2JmUfkGnm0eQydlc6tI.roa (hash: OH9VSaC9xrFx/iWwi8X6+CuDn8+UvNS7uG5JY4B0Oao=)
                          19: jB-z6tU49eCpdLJATgE8Ex9roFU.roa (hash: i061JOQcxN7EcQaNeqtPKLXeQ2gYUgXTC3ZwpyVqD5g=)
                          20: q_nlZkVqMlecgYlyALwoNvlv0GU.roa (hash: XWj99O5UU/Tl9hJ/AXU1UIfYkTkR0RwVzYKv59mEUos=)
                          21: vP2xgKPjxexBd9elzajYP9djzSw.roa (hash: 666wkPXnB8va+FhTZzHDfJzrl43782Zx7uG28Yjj0ck=)
                          22: xa0pQq-tzXZJ9qWqDGQiLSuJe2Q.roa (hash: HXMP1GMDjDTbIw4GEhYV4aHqEPGVTAftKR+Yt5JJrQE=)
                          23: zAGkvZDi5GKm7RaT5qRHQq9Y3aI.roa (hash: b/4EVy5mQO5WrpROE6epbzPlL80tDYlW6g0ZerhEzvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:66:2b:d0:2d:77:df:0a:fb:a0:34:db:2e:c3:4b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
        Validity
            Not Before: May  6 07:01:21 2025 GMT
            Not After : May  7 07:01:21 2025 GMT
        Subject: CN=eff5afbda2dede2a2a96ea56be8bddc4c16ef740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6f:83:44:88:df:85:9a:d0:21:c8:d2:95:f7:
                    69:3f:5f:fe:d7:cc:85:9d:72:43:f3:f2:20:80:c7:
                    94:8b:bc:0c:f5:b9:bd:4e:b2:66:ee:0a:29:21:fd:
                    e8:38:79:59:f2:5a:dc:74:16:7f:94:0a:3d:7e:f0:
                    af:5b:0f:a2:bf:01:07:ea:0d:a0:bf:c1:b0:6e:a1:
                    52:3d:28:de:ef:93:03:e0:e7:29:cd:f2:67:a7:d4:
                    04:46:13:81:43:93:99:df:45:ef:3d:0d:7e:1c:32:
                    6d:4f:59:8f:67:45:ea:f2:97:51:12:1c:ae:b2:1d:
                    7f:c1:08:be:98:5a:b4:e6:5f:eb:5f:dc:17:2d:f9:
                    87:1b:f6:f1:58:e4:33:f3:32:5d:c3:a7:7e:71:7f:
                    24:f6:e5:1c:59:84:4b:f0:2c:9a:e4:6e:1e:ae:fa:
                    27:79:dd:7f:7f:ad:bc:74:c5:7a:98:64:49:09:f2:
                    f6:61:f5:e3:f0:da:c7:04:b2:07:45:0e:25:b9:60:
                    4c:ac:d4:b7:14:93:4f:56:14:5c:71:48:9c:0d:9d:
                    88:7b:7c:be:bc:8b:e1:c4:d7:05:e0:9b:b8:84:2d:
                    80:e3:13:7e:fb:7e:d8:f4:23:54:88:27:50:0e:c1:
                    92:35:51:b3:49:6d:91:8c:1a:7f:23:0c:d8:76:dd:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F5:AF:BD:A2:DE:DE:2A:2A:96:EA:56:BE:8B:DD:C4:C1:6E:F7:40
            X509v3 Authority Key Identifier:
                keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e2:67:f3:63:47:0c:7c:ee:51:9f:63:ef:81:cf:7b:c8:dc:
         a3:14:f0:26:f7:71:cb:1d:2c:c2:56:19:39:39:1f:f6:75:8c:
         a9:8b:24:d5:2f:09:6b:c7:de:ba:20:09:83:55:fc:ac:20:10:
         0a:55:c5:61:42:88:fa:aa:43:d6:fa:d3:ee:e9:b7:ff:45:4b:
         f6:32:18:ff:f3:cd:d7:94:48:a3:c5:1c:10:5c:cb:21:a5:4e:
         8e:08:78:5d:42:44:89:9a:86:76:67:d6:6f:f1:d9:42:7b:e7:
         56:0d:c1:cf:24:07:71:65:85:94:4b:8a:52:38:8b:c3:da:88:
         35:a6:b8:4a:18:38:c2:da:31:c6:68:0f:e1:4d:d3:5a:be:52:
         b6:1b:ea:8c:43:b5:27:b8:5d:9a:5f:78:ed:a6:fb:73:9c:f9:
         ed:86:b4:89:60:57:94:ce:ba:cd:f5:2c:2b:d2:9c:75:a2:5e:
         4a:a8:61:f5:92:68:6f:45:c0:a3:0f:a1:a0:0c:c3:4c:45:af:
         55:30:9e:3b:84:e9:b2:29:99:76:a9:4f:56:4a:6e:bb:5d:ab:
         92:77:7c:ed:03:59:8b:cc:4e:7d:bf:34:df:74:8c:f6:b9:f0:
         1c:1e:ba:86:fa:1c:8e:4e:f4:e0:50:30:b0:11:1d:98:e3:5f:
         15:4a:b0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:18:32 2025 by rpki-client