Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          n6sE1tKyeiT+H7awkMaJeWNZPLhIL8v824IATOQKwyI=
Subject key identifier:   D6:D9:B8:BE:AD:CE:2D:8A:9F:65:D9:21:7F:3B:1E:6E:B4:1A:51:02
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       0196B6D98F371328180EF19256A6FE2C6401
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          1588
Signing time:             Fri 09 May 2025 21:00:33 +0000
Manifest this update:     Fri 09 May 2025 21:00:33 +0000
Manifest next update:     Sat 10 May 2025 21:00:33 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=)
                          15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=)
                          20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: 1cJJm+S3lL4JfFPN4fGKzROKZVHbFbF/3JpLModMXFs=)
                          21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=)
                          26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:d9:8f:37:13:28:18:0e:f1:92:56:a6:fe:2c:64:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: May  9 21:00:33 2025 GMT
            Not After : May 10 21:00:33 2025 GMT
        Subject: CN=d6d9b8beadce2d8a9f65d9217f3b1e6eb41a5102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:5f:16:2a:60:27:bb:c4:e9:3c:e5:68:df:
                    30:56:7d:ee:11:7f:1b:37:ac:3a:77:30:59:0d:d9:
                    13:7d:b8:7f:51:14:a4:be:63:66:6d:d7:4c:c0:6f:
                    8c:2a:96:e6:67:95:42:a5:05:07:49:be:63:cd:b5:
                    eb:7c:06:df:77:ee:6d:20:4d:9f:23:b9:cd:87:58:
                    90:21:51:b9:95:3e:af:04:6a:cc:cd:47:6a:f6:07:
                    08:5b:13:6a:97:b5:cf:0f:05:a7:97:50:af:0d:81:
                    e3:e8:0d:5b:9d:c2:29:9f:65:d5:be:d9:31:a9:ae:
                    33:72:a4:0f:d6:df:51:4f:01:d8:54:ef:86:f8:e8:
                    97:c2:72:c9:b7:6a:6e:3f:3a:c1:eb:e2:3f:89:b0:
                    48:02:8f:26:a5:18:08:aa:d9:00:37:b7:69:05:2b:
                    7b:fb:62:17:4d:3f:fc:cb:c1:69:f9:da:34:e9:e1:
                    97:a1:97:6a:0a:04:dd:4e:7a:ed:0a:f1:4c:47:ef:
                    58:c2:c8:44:b3:31:e8:bc:ec:c1:ac:4c:c4:d1:65:
                    fc:7a:e9:41:7a:56:d2:a4:02:7e:7f:d8:39:fb:62:
                    f0:af:35:4e:67:5c:ac:1b:97:a9:31:68:ae:03:92:
                    a8:20:1e:6f:ca:1a:2f:ed:d9:19:37:ca:d3:0c:70:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D9:B8:BE:AD:CE:2D:8A:9F:65:D9:21:7F:3B:1E:6E:B4:1A:51:02
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b5:db:99:02:07:fb:0e:90:34:8e:fa:88:fe:fa:3c:3b:85:
         21:23:52:f2:90:11:b0:a4:ff:8d:13:8a:0a:9b:a0:61:f6:ed:
         44:22:4b:fc:ee:5b:99:bd:42:78:ba:a3:42:b5:32:05:59:77:
         0b:9c:3a:75:8a:72:f1:e1:15:e0:bc:bb:dc:e3:e8:ba:ce:34:
         ae:a0:f3:1b:1c:c1:0e:a8:08:65:40:20:11:d1:74:0d:89:a0:
         2d:9b:03:c0:d3:72:3d:18:1e:8b:1b:41:95:77:11:bc:c1:c5:
         a7:23:86:75:fc:d1:04:ad:b9:02:d3:2f:67:09:8c:d1:a3:c2:
         5f:42:23:75:5d:9d:e2:71:06:18:f8:19:57:42:0c:04:07:bc:
         15:d1:f2:d2:c6:e8:2d:40:02:45:54:b5:fc:ff:a9:71:9d:61:
         f6:bb:09:59:1f:e0:a8:57:3f:8f:fc:2d:31:67:08:99:fa:9b:
         73:61:15:dc:e0:5f:16:1d:f7:c5:e5:0d:f7:9c:17:f9:16:4a:
         b6:2e:d7:47:49:47:e3:82:b3:61:d4:66:6c:80:a1:60:72:e3:
         19:3c:35:ca:31:02:6d:52:47:8f:0b:c3:3b:53:36:63:c6:f1:
         e1:c1:f3:8f:4d:87:bc:88:85:8c:96:0e:fe:a9:3a:06:7a:fa:
         65:aa:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:25:30 2025 by rpki-client