Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
File:                     BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json)
Hash identifier:          m1JWG5A1bcpRDX93dcjth3eiGKbnSFQfz+zjwtvidQk=
Subject key identifier:   19:7E:42:04:FB:BB:87:21:B3:6F:B2:5F:02:1A:64:B8:F9:BA:DA:CD
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       0196722FDA918615C8A8B39339D1CF1BBD65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
Manifest number:          EB
Signing time:             Sat 26 Apr 2025 13:01:00 +0000
Manifest this update:     Sat 26 Apr 2025 13:01:00 +0000
Manifest next update:     Sun 27 Apr 2025 13:01:00 +0000
Files and hashes:         1: 5QubX3BsIOZmCr0lJWaWo_8taiI.roa (hash: Jf6CPMuS9TJ6fnoWKDQrgx5dNf/KjdcmveH/bpaz+Q8=)
                          2: 8-yw9B2nPkCfG0ri-05wxbzK95I.roa (hash: D9ViM4Gvio4pjQlbZ1UG+yr83bOB/c4pGt/sWMwpAIo=)
                          3: 8h_JebN18U-DQLa7g_VNQTnzmD4.roa (hash: qaZfGE5JnXlAKOoOZ4NfG/E3st+EoiejWrngTgnqPGg=)
                          4: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: NLvjnj2jkLO40hqjlfo81TZgJu+ORqDW4K+cdd7tE2s=)
                          5: ByHPyEaADbbqpeyBTeUJrhmCuYQ.roa (hash: dRJ7Xfhd2IktdnYweUcsqpbKflQdcxF/jmr99tlC1i0=)
                          6: CNtM8zejZ349bsOx94QsI819vZU.roa (hash: xxnS1MVGHtYdDD2abmYeFD2yf6kRsOETWylSJhltDEE=)
                          7: ExusXckLrxsZNqKlfCaNi76wyn8.roa (hash: 958U6++7iG9JMRvtU0OfoU8TdGPIQhNtWPh5XYFfc1E=)
                          8: OY-GIx9hD1F4OFf4n-y0JK1ANZg.roa (hash: PbCMLXyHRgfKX4P/i6p6IrPplONleRWnbtsOIMdtbRA=)
                          9: PT5V9DI-vTGcX-g7Png7Cy1LYh8.roa (hash: mbbkqBuIkuxl1XHSOYFImXOP6BpkovOruDLkWb6LgCU=)
                          10: PYLIgBr_BwpwqIBq0uDXjMVCcO0.roa (hash: cKqK7iISq+hHAlg/ZJ1m7UofToF0VF0S/PulOyt8vLw=)
                          11: QG_ywXuGzcVcDbL0Ot-t5w9kRBo.roa (hash: Vf7sV0Dokqk2S/AmWq/v5EcW2ZBPDeSF0QqtOYLZ5jE=)
                          12: QQ5JdZdcsAoWOsN0lcNfuSR1KXU.roa (hash: mOHdApB4PLrH4OsyY1d2WJlEAql5oBZn7Z/33FYWd/s=)
                          13: Ta7kjalga1V_Unp7oAdLuMVKQlI.roa (hash: dKUmdkq/PNVI9kf9ZPvt3TbaX6jLwhovvL+xksxf48k=)
                          14: V6Fx8HKW5vYtwoUl9-FGq139rH4.roa (hash: VbwVmnD3kf6YOoUlp8nFzAYfvI3kHMT1G3evyq8grxI=)
                          15: VaSnvGehSBiCY3r20anmzbVCVxc.roa (hash: mj1GZ2Tpt8ALCYTlIoKPu1wF44ZKzGxmdnQYidmfMkk=)
                          16: a6Y4aK3dcMkVOhxaPCkj4tv_r9o.roa (hash: AjkSxRf4m/hDIVmcEg8Nz3dPC++vr47UARhugAtRJG4=)
                          17: boJmz216E2pVUR2unuNVUplfhyM.roa (hash: i+zLjdL9F/qjZdj6l1k7yZCeKyy95BgZFZ1ZAYbGuBs=)
                          18: du1wumr7xYGJbc7K9EGp_C8KghQ.roa (hash: 9MrBUWrUA1+He9qgQ6KOaw7pAUr3HTlALJK0R8ucEhc=)
                          19: f2D3UV4sYjo4Otohoy79vFEF0Ag.roa (hash: KRgW361Frr8F6yZbGVOnQ7xVzqdchF195Wcn12RxysE=)
                          20: gInPQlRVmCNSzrvan8h7y-hKl_k.roa (hash: Tv5elGYRXotHxTYq83W2fSTiORkhfEiLF5Tn9EDX64s=)
                          21: gicegBW5Q1xikkf_SLe1-6lH06U.roa (hash: pqN+I3n4dBN3SZnpQPA/6vzrG5l7HojgVKb3SXvaH9M=)
                          22: kNKW14Dxh4X2xbIOHRvhO-4tzcE.roa (hash: ENDHKI6G3Ef3eUled5c74JZlLpucyibX5X1QKlCy8/E=)
                          23: mN1SF0jqXFbA77Cv4kSAFM7eMrI.roa (hash: bd+gRbyeXkhCADuawPp6Y7Zl70oz5JVqv5T2uQOkFmM=)
                          24: sEeMx7Xy6olm8O3Hb7-nIWkl8X8.roa (hash: 1kTUQGyENj5OE2dLqf3kwETU6u1mEMcH0DOZizfo6zI=)
                          25: t-nVwMrqHHxrE1ark94Yjjtte-Q.roa (hash: LPqKL8VE/r4l01BQV0rr2GgmF/BaUOTIrC3hVfr4ek8=)
                          26: vZmH2bvHl1nSGW5nMPLYnxBlkRU.roa (hash: JOoXAeAAIZEiWY0Rg+/OZMN4l51Mdx07GGAUcyh78VU=)
                          27: xWNsCw4Wm17UDjnUmJUpC1lzZ3Q.roa (hash: NIpf4SimRF3YYu1N0AO553A+ccCpp95SQAsoP+cL9IM=)
                          28: xeu-hzKDc-eVglHB1miGTXbF6zQ.roa (hash: 7N/3XZ9fPFor9GoNoZEe3bW+7pgd2BnLOdmvwn7ql7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:2f:da:91:86:15:c8:a8:b3:93:39:d1:cf:1b:bd:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Apr 26 13:01:00 2025 GMT
            Not After : Apr 27 13:01:00 2025 GMT
        Subject: CN=197e4204fbbb8721b36fb25f021a64b8f9badacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:12:4e:65:f1:fd:0d:cb:fc:43:fc:fa:bb:91:
                    4e:58:13:2e:7c:26:73:c6:78:fd:df:b2:8f:02:2f:
                    39:72:b4:14:24:c6:59:b6:6d:de:9c:e1:67:cc:08:
                    cd:ac:37:aa:6a:20:22:c1:35:77:26:46:f3:9a:a3:
                    dc:0e:d0:49:8a:95:ff:00:88:ed:a8:5a:5a:37:b3:
                    44:0b:f7:58:af:e6:55:32:be:49:0b:43:7e:dc:4d:
                    0d:e9:55:c0:77:9e:f1:6d:4c:fe:3b:02:ff:96:cb:
                    fe:45:b5:16:fd:7a:93:18:08:e0:df:10:a1:4b:4f:
                    15:d6:68:f5:30:70:2f:65:50:1a:7b:d6:2b:4d:65:
                    7a:d1:5d:c3:93:34:16:12:a3:a1:cd:c2:35:f0:18:
                    96:0d:08:e1:ca:0c:81:2c:e5:39:60:23:53:7e:65:
                    09:61:a0:5f:a4:6d:1b:6a:f9:ef:b7:3f:bc:67:17:
                    7b:11:ed:58:2a:78:cf:83:a9:2a:be:01:62:fa:05:
                    ec:47:3e:30:b8:9f:41:d5:e6:56:6b:70:18:56:7b:
                    89:79:96:2a:02:a7:84:97:55:5c:ac:d4:6c:b2:ba:
                    d3:19:ac:92:2c:9e:e1:04:0c:b4:30:9f:89:32:3a:
                    c1:1e:f1:a6:e6:eb:8f:3b:16:1c:9d:cb:4c:c9:56:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7E:42:04:FB:BB:87:21:B3:6F:B2:5F:02:1A:64:B8:F9:BA:DA:CD
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:56:b4:4e:af:50:c4:6a:55:b4:42:b2:b2:d4:60:4a:04:8b:
         e1:6b:78:3e:7e:37:b2:01:74:d8:a9:a6:dd:c6:17:70:b5:31:
         a1:3e:17:a0:11:7e:24:76:9d:54:00:90:05:c7:14:6a:8d:97:
         80:55:06:10:60:f9:e6:e3:46:11:e3:99:39:5c:6e:5a:2e:8d:
         66:8a:dd:c5:fd:81:cc:ec:22:83:57:f6:0d:25:f8:6e:6b:28:
         56:90:b1:cf:89:5f:7e:fb:0c:93:07:34:03:88:46:ab:58:0c:
         be:99:c0:81:0d:b4:e9:69:40:65:64:0f:96:6a:20:2a:2e:51:
         94:91:84:dc:f8:75:da:3d:4f:63:82:f2:5d:2c:f5:d1:4a:51:
         2e:a5:4b:ab:33:0b:62:f2:a9:22:0a:cb:fd:f2:e5:a9:4e:2e:
         f0:d5:dc:f7:6c:64:d1:33:2f:80:d1:21:3a:23:bf:fe:a2:fa:
         d9:a9:77:67:05:a6:a8:11:23:be:20:ff:6a:d8:d9:62:99:b9:
         2d:78:76:f6:c1:dd:5c:b2:84:be:b8:89:91:3b:30:0a:ff:c8:
         26:7a:51:c5:04:eb:ee:07:25:3c:97:cf:15:f1:6c:e2:44:30:
         3f:d6:66:fb:31:9d:f2:69:6c:a8:84:48:4e:dc:f2:c1:64:28:
         59:8f:98:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:12:02 2025 by rpki-client