Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
File:                     V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft (raw, json)
Hash identifier:          Rr3JlhmVkRqHng/Kk5U+ZNlNXFlPo6iqwkHKaWg1mlo=
Subject key identifier:   1B:08:96:BC:0D:DC:AE:70:69:03:E5:BB:C9:D4:B7:70:85:3F:C7:A6
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Certificate issuer:       /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial:       0196C49527E27FAD310884C5468F0093D5F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
Manifest number:          04F6
Signing time:             Mon 12 May 2025 13:00:31 +0000
Manifest this update:     Mon 12 May 2025 13:00:31 +0000
Manifest next update:     Tue 13 May 2025 13:00:31 +0000
Files and hashes:         1: 1-mdVAsmWSwnu47gZ-8q53R0gQ3g.roa (hash: sY0eiu7hdjYEcs+vPLPq8MzuIT52Q5Es7I7pLLIxMVw=)
                          2: 1iNqSGLBurdVBRXSj9jkGbrkAYg.roa (hash: I52bbOoIJFwXUk3tZr6SbiTpSM/ybqgeCNsRlccE3vw=)
                          3: 34v70e-AuL53x6XeHVfYUbbbFF0.roa (hash: NNmZSE1+eD+eECq8uaXsw/X0n6p3Qe7qeIsePK/4Fig=)
                          4: 3HtwkT95c4BvctrZZJ4dreWdYa0.roa (hash: 2Da4Bok2PXZylT9jV8MFmzVUScHtevU5HgdinS17zLI=)
                          5: 3RlASXJFq8-CFsitxm3031VufpM.roa (hash: SEsjbRHRxzK/k9UKyWx2Xdj+vQNsC9NbcKuSGMVnHCA=)
                          6: 4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa (hash: uj1CpTYiuNEnoBSr8Niym7afjHD/7ENr6+d1VZIXhys=)
                          7: A_elPY7zPzPBy98o20Zvw2Pf34s.roa (hash: 7IEfyja20k0JOW6h30shZ5sYEGCCL8982cOL8o5c1oE=)
                          8: D96EcvLqQ8mg6gUpgeSUDuWzoII.roa (hash: 47dUj7Yx8C1/dz36m92H2I2YJQ2HstfZCg46ryE4YRE=)
                          9: IBubaaq1KjiQKUwUaYMKhoS5vGY.roa (hash: waPQP0MZ40/qIka7y4UCztuunDgDVp7g/9u2t0hcwRE=)
                          10: MMhAInQYtdpemgLxLkVb7UapM2Q.roa (hash: RsvGtg1Oh/rT4G0MJhnLc79JCFUU1eA/yV9wUhFZTFo=)
                          11: V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl (hash: zNZaxfe+ewJId/oGp45Olt9t6FY3ZRm9qTUWWP1IOaU=)
                          12: Z3XKrGVp2Xl9zGxjlW3GuCf1-HU.roa (hash: PGeDPFeIQjFBRjCURjcgvm8bWjQIdMceaR1t9c7i9A4=)
                          13: ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa (hash: UXYn8r3aaYF24M8BGs9jgK62IwYmPfR4KIUePwkGsBs=)
                          14: ZlueNo25GUvLqjkuVCFwyElg2rQ.roa (hash: aj/CGKLCRPUdD2tIc7FHrJFT9sJCeOPsSAxO2ThHbg0=)
                          15: bVTj9GlhWonuaW4I9cjegUl8Y0k.roa (hash: I+YpInZ6hhq3JvCTpsODfdn3dONvUDWi4McBY8idMDA=)
                          16: jY6rzV24DSHBqF83mDHyDcxT9_Y.roa (hash: awVGf7u9AukzChaDLKH/KdOFbhrkdA+Lgwe8PkUBz8c=)
                          17: ocuE4fXKrDYrpQocYLXuAkcw4qs.roa (hash: Nydk7rHdYX2vee746eKrRwtJaLs0LWeYf6W299bGydA=)
                          18: pSiHzZ6NNZSWDrxpjGd3n4aNM88.roa (hash: de9D5UdKP4SSxcQu2P7Wa7gGHaS0oc0Mu69Uzk4RR9Y=)
                          19: qagToqYwWoVNWzUu9qXg7Hb8iO0.roa (hash: NjTbRCsZpXfIxlTNVasjWSDHJx+yddX5ww6d4YwOJF4=)
                          20: tbTmb1wIkJcjOTrxUE98Gt6Tr68.roa (hash: 9h+1BxgCsdJlPqcdrM6DVHk3XBGU8ObSrJfDgfcbyEU=)
                          21: uEa4VCZILMCQRsys6WvXG83b7YM.roa (hash: O5aMlB/YmCcBFoGT+J12Tptzaa4UmyfnNDq0vC5SG6c=)
                          22: w1iF5CiJeCHkszCW3U2fF3iWHfg.roa (hash: jSF2bgkChfkaiNUq0c9ACAnTtaiP8CKGbBiy1Ib+MAc=)
                          23: y6XbwTdraju7epdQsvZSGSFiGc8.roa (hash: 3bnMpjdHVAigcUzJ74ejz+TADuNILoqgQcIoOR7ifkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:95:27:e2:7f:ad:31:08:84:c5:46:8f:00:93:d5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
        Validity
            Not Before: May 12 13:00:31 2025 GMT
            Not After : May 13 13:00:31 2025 GMT
        Subject: CN=1b0896bc0ddcae706903e5bbc9d4b770853fc7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:df:72:41:e2:96:df:c9:6b:f0:32:93:e3:
                    d2:10:4d:3a:2e:84:9f:4d:87:34:b2:3b:85:d5:c2:
                    00:87:15:d9:d2:43:78:3d:3e:4e:0d:a7:d0:80:10:
                    03:fb:3a:16:67:5a:81:4f:3b:b3:fa:4b:94:ed:a1:
                    56:a8:20:40:5c:b0:96:69:e6:91:91:bb:c1:1d:6d:
                    e7:78:f7:b9:eb:b2:82:59:7e:12:10:8b:c1:1b:e2:
                    64:df:3e:68:a2:11:15:1c:fd:2f:68:e6:f5:2d:e5:
                    87:c7:c0:ec:ec:76:d8:c2:be:b4:ab:98:d4:82:54:
                    0e:59:11:21:58:2f:fa:14:9c:5c:73:a9:16:66:ca:
                    19:11:a7:fd:4b:8f:77:02:a4:d0:e5:37:82:b0:c5:
                    71:29:47:99:a5:92:68:6b:5d:ce:50:7c:ca:e4:98:
                    a8:60:45:1f:e6:e8:9e:43:6d:bc:c2:1f:e0:42:f7:
                    a5:bb:52:77:41:d2:9f:7e:21:b5:82:05:8a:9a:03:
                    7f:58:52:8a:d6:3c:c8:63:b5:a3:fb:07:3b:50:ea:
                    57:2b:7e:eb:a7:c3:44:68:57:d3:e0:15:cd:c6:5c:
                    c9:30:7b:09:c6:a4:b1:7c:77:d3:ae:28:26:17:ef:
                    e0:81:e3:23:d6:61:56:33:c7:41:f2:ac:7b:38:dc:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:08:96:BC:0D:DC:AE:70:69:03:E5:BB:C9:D4:B7:70:85:3F:C7:A6
            X509v3 Authority Key Identifier:
                keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:31:03:30:5d:ab:42:b3:63:22:dd:5c:76:6c:03:6a:e6:b4:
         8c:5e:40:d9:81:af:f1:12:e1:27:2a:0b:64:ce:51:42:73:91:
         3a:5b:2b:bc:8c:03:bb:83:b6:67:b7:36:b7:82:5a:74:0d:a5:
         43:9d:ad:74:ad:6f:b3:10:24:ee:5d:96:71:49:b1:0b:1d:5e:
         98:34:d4:3f:b5:64:41:20:e6:d6:08:8b:0e:c4:72:d1:59:a2:
         17:f8:38:0a:3d:19:32:bb:36:68:4f:ce:e6:2d:af:3c:56:28:
         b0:cb:c8:c0:38:8e:32:cc:35:b9:8c:b1:1f:22:b1:b6:a1:bd:
         94:8a:0c:9e:4d:5c:e5:90:4f:96:0e:d6:35:1a:76:5c:8f:f4:
         ec:dc:7c:27:d5:b6:d3:b1:e5:a7:28:35:c0:50:f9:7b:1a:b2:
         7c:34:e8:ce:32:45:d1:14:1f:72:86:92:5a:1a:9e:5c:d3:81:
         0c:c3:c7:69:16:27:cb:93:e7:6b:4b:4c:81:79:83:ed:f9:cb:
         c1:48:a5:e7:33:e8:9f:56:3a:99:91:f6:f1:d5:0f:2b:2f:52:
         61:78:be:ac:e0:40:99:57:d3:38:e9:c8:65:cd:90:a7:19:7f:
         af:9c:f6:8c:65:96:9a:0d:35:49:75:a3:7f:6d:7d:2c:82:bd:
         83:0d:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:00:25 2025 by rpki-client