Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          lpXbjTI+0ZN/15JYH6ZMxHi8PXE1nu8mRcGNLOwyGIM=
Subject key identifier:   3C:32:BF:57:34:C5:0D:A3:8C:89:E8:01:82:AA:54:85:90:68:7A:2C
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019672D3E73701C0BEAA7E9797CBBB658603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          154F
Signing time:             Sat 26 Apr 2025 16:00:11 +0000
Manifest this update:     Sat 26 Apr 2025 16:00:11 +0000
Manifest next update:     Sun 27 Apr 2025 16:00:11 +0000
Files and hashes:         1: 4h8DSu4LCqLu5y5DGLyVNLDaW_8.roa (hash: 5dgH0nSjVBTs16em525/U4kAjurzhSSV9U/WWc+xCEs=)
                          2: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: A9cCqjeQtUlSs88NAmQt73EdFqR1HO75KMR5Oj+aksc=)
                          4: EXOzgHW5xF_eCb4beMY-ADgtMig.roa (hash: JdWcweOl3G9hcB5kydjQVTXm2d9bZdeGrMw625AtAxc=)
                          5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          6: LwR5e-3XdDXFjm5eJuuKPbFg1wM.roa (hash: 4JsswUG9Ou5/9jUtsWyiDQhEMAGV7MLxdDyUU0ZVg4A=)
                          7: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          8: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          9: X0X7YHZdxd-Fm-vSH2gkoaNKSEE.roa (hash: 0wypLX2pYlj/wkC9RZ/dWCbs3OnpHFJIgo8rTP3dhfk=)
                          10: XyJzr7K8kDR7Crh0eGA64cNXh5o.roa (hash: O/tUpYLyJqFNhTOL8oVDzZYICuybOlG7LlJD8DubnZc=)
                          11: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          12: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          13: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          14: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          15: mDeAGVyiWAF47pXY_yRjdrhBIJc.roa (hash: yHPdV/sdxT3kKE70fyJDmdwrcaFh24i7D2+vtQY7LN8=)
                          16: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          17: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          18: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          19: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:d3:e7:37:01:c0:be:aa:7e:97:97:cb:bb:65:86:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Apr 26 16:00:11 2025 GMT
            Not After : Apr 27 16:00:11 2025 GMT
        Subject: CN=3c32bf5734c50da38c89e80182aa548590687a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:da:32:df:75:ea:15:3e:e7:0e:78:0e:36:
                    71:e6:45:43:08:77:f2:7d:bc:29:dc:00:a3:53:bb:
                    a3:57:aa:12:52:a3:96:d9:de:f0:41:df:3a:1e:c4:
                    95:db:c5:85:c9:59:9a:30:4e:ae:5c:53:bf:bd:78:
                    b9:ff:72:b5:aa:da:c5:10:02:c7:a7:81:9a:7b:9a:
                    f3:df:a3:ec:09:49:e6:80:90:90:0c:db:cb:e7:75:
                    2d:28:95:8f:3e:53:f4:a4:51:c2:18:47:d5:35:d7:
                    40:ef:35:7b:23:9b:e2:64:e7:47:92:bf:35:ca:80:
                    f1:ba:c7:75:38:f5:e6:f8:25:da:77:1c:60:6e:d3:
                    15:10:52:56:c3:de:3f:7a:66:37:b9:e5:4c:1c:cd:
                    da:ca:cb:52:e7:39:29:64:1a:8c:a7:12:04:4d:25:
                    27:0d:17:d3:e2:e8:01:3c:e4:fc:9f:13:8d:62:4d:
                    c2:9c:58:1c:53:b1:09:67:13:a1:19:ed:dd:e4:4d:
                    7e:a7:76:b8:12:dd:c9:56:ab:ba:23:27:be:51:ba:
                    c8:21:d9:3a:3c:eb:66:44:f9:e3:37:86:35:1a:60:
                    d5:b0:d9:0b:c8:bb:13:fb:19:29:e9:76:8f:f8:af:
                    70:90:07:70:5c:d0:52:2d:c5:ca:d5:a1:f5:ed:e7:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:32:BF:57:34:C5:0D:A3:8C:89:E8:01:82:AA:54:85:90:68:7A:2C
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:fc:10:b7:4a:ea:71:d7:7a:3a:53:e2:df:44:e5:b2:d9:e0:
         81:d2:ea:20:cf:fc:20:ce:f7:17:17:2b:96:0f:97:1b:eb:01:
         ca:68:cd:93:ff:1d:f7:e4:16:0b:36:a2:fe:34:fe:3c:58:5b:
         98:a7:37:36:82:ea:b5:e5:81:29:3c:a5:2b:c3:d9:96:70:84:
         62:cb:72:41:6a:a1:ef:80:40:e6:92:34:c3:a2:f5:ae:79:7a:
         a6:c8:7a:86:55:4d:ee:b1:07:53:94:6a:31:82:2a:c3:fb:b1:
         15:66:6a:58:5a:1d:b4:f8:76:4c:84:55:19:c6:05:30:28:e8:
         dc:8b:89:b0:ce:d3:c1:f7:6d:95:da:54:11:5c:51:be:b4:6d:
         34:0d:e1:3b:69:c3:ea:f3:ee:0e:ff:ea:6a:05:34:d9:f4:94:
         f3:7d:13:85:ba:47:b2:bd:0c:33:46:4b:03:fb:31:af:cc:7f:
         a6:c2:f6:ee:00:a2:88:9e:f0:cb:2e:2e:65:82:66:de:5b:1c:
         6f:2a:8a:7e:48:c2:a9:55:3f:a0:63:52:83:4c:ba:82:b5:00:
         9b:9d:f1:3d:a0:1c:c4:5b:51:06:e1:78:b7:ed:f2:1c:f4:bd:
         fb:1c:5c:bf:80:2b:0d:4f:5f:34:96:26:1d:ef:ef:ad:8b:94:
         68:9f:88:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:55:54 2025 by rpki-client