Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
File:                     v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json)
Hash identifier:          o4EGzwB0mghcBTFABKkSNpwCqs1ur2RCTrcYF/qLFlk=
Subject key identifier:   0A:C3:67:61:97:94:AF:03:A2:15:85:D6:88:5C:85:7E:4A:CF:66:A9
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Certificate issuer:       /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial:       019671C1EC502B096B80098DEA2CAD6D60A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
Manifest number:          11AB
Signing time:             Sat 26 Apr 2025 11:00:56 +0000
Manifest this update:     Sat 26 Apr 2025 11:00:56 +0000
Manifest next update:     Sun 27 Apr 2025 11:00:56 +0000
Files and hashes:         1: 1-DCahpulJuiQi8zdfIBNVSBP_a0.roa (hash: nTSeDU5/i/b0oztZzrG2CtOkwm9ZNipV4GkBR8TKl3w=)
                          2: 4HUEzjvO1URr-UPygZ4Bs6_KT9Q.roa (hash: 8gqeOkmM8zl20dUfCC3W3gzkl4K07sQTxtiB6AnAR2Q=)
                          3: 4V9UnV1Yi4lf1STc1xhZ4bIgUvA.roa (hash: OKQzkBUD42iLo7oYo0ouIYvBAPZ/5GAsgIcFR+QH2YU=)
                          4: 4xHSFz_h8RDTEizlLHiNqDZdB8k.roa (hash: k0/n97wXnLuKC+5MEW+78XWyuksvPTuMv3V0hsYhTuY=)
                          5: 8BYyiV_FmTFHvbWCMT9MCIE0Jec.roa (hash: vchZYcV4SDRnLThnALYy/67VTOlcKJqhG1pqy1A7Xrw=)
                          6: C-9z8ht5WfkqXe5T02TWElDQHq0.roa (hash: 1QuiVMAynqn64XKAO48JlQaP57PEKALVhYDiuC06tGA=)
                          7: C6g1ONP_vtRLZw5SWoA9vplmgJM.roa (hash: HonD5XzzqQhi7JX6hKbSZGFHe/yxLPBH/XIA/EDB12Q=)
                          8: G2tkwYCq1epLdMKie4LX8cE5P9o.roa (hash: Ni0rFUe2dYAkDiA5++8GEYEiYsMyJpa7zDTHqDytp8k=)
                          9: GkulWb9O_JudfoJFvg0VKRWcC-c.roa (hash: imc0Oai3NRq2Ce4v1cDaGA0yeaVNNKi0sCBD6N92KYk=)
                          10: L6GWTTrHxO-JZ51LcuLOYdMiEbM.roa (hash: UxDEXdh5d2jh46Fk+YwOMskZJl46OqzJeR6dl0YZpLc=)
                          11: MVzetovtGmRyshR5xnQeUk8Tcj4.roa (hash: mg7B6jgZRyqNtZfobIMwdCZZ8B96W2fgBgCBDsqyUw0=)
                          12: PKjMMvZfZGO6d3QofJpMp8mLoEg.roa (hash: PLZzvSg9ShprS72UhVRcTHvYPm2OE+eVMBgJ7lsQMMA=)
                          13: Q2uH0kQd1mGKZxWodmd4mRQRHhk.roa (hash: sUsJy3husqKKmvF1HsBe/XSQWllpwuvFf6kbg39WROs=)
                          14: QDo92mi4UWCLSwxkXaA5OctFTkc.roa (hash: ovBhPdG/TKSn9sfg2AM068Pokavj0m1i5AMYnj3jGLs=)
                          15: RJ_pu626Ce_XeWRRjGCg0rBJ5No.roa (hash: CnjyAdkpFkqDDXWo/A5sDL6/Mzrh604ryWOcVYb0EdU=)
                          16: RaVMKG2645hSw8y8UtUaGBAwkAU.roa (hash: 9aDMOauVfFOOhQT4IpNbE5PgpP7wgZNG9iwkQYJqQgQ=)
                          17: UnjUUsbulhDzBwKFih0qX4dYSxo.roa (hash: zO3PIrwe+xgSWoHcPY2w0UaXKoLO1fCh81rcz/LjIf8=)
                          18: W5sU-ZO6WBhRXGkiRRiQQs5_9rk.roa (hash: buoQ3JOzvBjf3H+zLixOxcXYRqSn97Vev1LEOeeiEno=)
                          19: XlhxtDrnef0LIn9STUD5IsH1ycc.roa (hash: 8c7ddXQfFoWwM7tA+K1eFR8xfvHddWeWNMUF9Typ4Ww=)
                          20: YyBDnlwVRLs70MJK1KT4FesLKyU.roa (hash: 4tm/JGl1e/uknO1Ju/nt2CfaO1Nf+gSmh9MxSuAs2aA=)
                          21: cEYTUY2Gv5LvKwUtgUiMbfW42x8.roa (hash: BOXTdJAmCdGBr2zJ/vykA1bxEvQmFyIrI1sVhgTtVSE=)
                          22: gprH44AplwwXGaOOjeCuLFfIu_g.roa (hash: vbsZE0UvtEhxU037nRwlkmHVqRPfyWPC+cnqZxvX81M=)
                          23: hP2fgAy34XIg7aM2C0Ad6ElaYgI.roa (hash: /xs3DUUFJAe9wbGBaQmfw6+eASI54MfNuZpQE+CXA0o=)
                          24: lsUTyap9w4Y2oLY8ZnktLZStCYQ.roa (hash: emTi848aQBwWEDQNS5g3zSRylsJAzf0KVP+OaAM5+qE=)
                          25: m7lMiWju66nWi4ie7Vt74icILpg.roa (hash: x3s/oVaZakSkOMeloqbQaRy3FaKUq2eo4wHClY5zjYc=)
                          26: rlvR4lgAAPe6NxanZUVpezIwE3A.roa (hash: z8dG8w6G/0kvxVmZ+4RC/Z1OH/kukWiL1TxfJ/ZMp5Y=)
                          27: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: s1e74xUz0CxOxgX8vBiMpOaKZJ+/BEsfKYddL9vGofc=)
                          28: w8idkeWbG52TtIpx9U6pAxc7Df8.roa (hash: u3rb6lYT1ibz1O/axkufNUJsAz+Fi6V/7un9KfX38o4=)
                          29: yk3hphpJLiCKLV3SI7_6_xUDd3U.roa (hash: 3xzT8sNUhSTcHGn9AimzGczqHTxSrNzAtFY6ULbmku8=)
                          30: yn1GwROcUgRKZlTBqW_F9Or69fY.roa (hash: RW3qs3OMo0v6AzSxdEGAc3fTls7oUr/QT/SMMhP5/Tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:c1:ec:50:2b:09:6b:80:09:8d:ea:2c:ad:6d:60:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
        Validity
            Not Before: Apr 26 11:00:56 2025 GMT
            Not After : Apr 27 11:00:56 2025 GMT
        Subject: CN=0ac367619794af03a21585d6885c857e4acf66a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:3c:74:72:ac:b4:8b:54:ac:35:12:27:c1:
                    00:c9:62:ac:31:c2:53:2b:ed:e4:f3:ec:5e:75:86:
                    02:69:45:a9:fc:9c:d5:03:24:41:14:86:00:2f:9e:
                    39:51:c3:f6:48:2a:36:88:43:7e:a9:60:bd:38:af:
                    1f:19:c9:92:ce:88:df:a6:c4:c3:9d:9a:ea:93:03:
                    d8:43:3c:b3:02:86:ad:2d:02:4e:db:f6:6f:7d:d4:
                    48:0b:3d:db:99:b2:21:39:e5:b3:da:b1:8e:7f:a6:
                    10:a0:19:f5:f1:7a:11:bf:a5:48:eb:8d:1e:dd:dd:
                    32:dc:83:e0:0a:b1:62:8c:9a:26:14:31:68:96:dc:
                    6d:a7:11:4d:4b:cc:76:ff:fd:75:e5:fe:52:f5:2d:
                    e8:4e:be:32:15:6c:8e:8e:2d:e8:47:2d:ca:cd:6b:
                    09:a9:e6:a9:6f:d3:d3:9f:d2:a1:df:9a:cc:10:34:
                    d5:65:bf:1d:42:55:d8:ea:6f:a9:50:bd:8b:ff:24:
                    76:d2:9b:7d:fd:34:e8:f7:35:fe:1c:4b:98:2a:7a:
                    32:ea:eb:8f:c0:63:3c:69:9b:f4:e1:ab:c0:ea:18:
                    8c:26:81:c7:60:fb:92:6e:bb:10:9f:c0:66:97:af:
                    0b:cc:24:2b:9e:6c:b5:a4:8e:fd:d3:0e:6c:11:98:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C3:67:61:97:94:AF:03:A2:15:85:D6:88:5C:85:7E:4A:CF:66:A9
            X509v3 Authority Key Identifier:
                keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b9:b3:41:8d:66:1d:64:9c:82:87:4f:b1:5c:56:6d:1c:08:
         86:01:c8:08:01:e1:ca:2f:f9:7e:40:5b:c4:72:d4:6c:40:50:
         ab:6a:cd:86:ca:bc:5b:2f:87:91:f2:19:3c:87:ab:af:34:f3:
         86:a2:af:57:97:ae:55:94:d5:b3:4e:6c:04:9d:56:ff:59:d8:
         df:07:13:14:7a:61:8c:2a:1f:8b:8c:d4:ad:5c:8c:67:b9:7c:
         18:d3:90:5c:60:39:80:b1:f7:ae:8c:74:d4:1f:ff:2c:59:55:
         ad:92:22:1e:2a:be:00:23:db:bc:04:0d:87:99:2e:75:d5:98:
         ee:2e:56:0c:e1:d5:2a:41:1f:5a:d4:12:d3:8c:cd:43:1e:98:
         38:1a:07:80:c6:4f:56:67:67:00:2f:e9:10:ee:ef:c3:51:9c:
         63:bb:41:ee:04:81:57:d5:33:d7:b2:f8:e6:b0:f9:8a:d1:4f:
         d4:db:0c:57:27:17:96:5b:99:35:34:76:74:d2:c3:7a:b2:cc:
         7e:7a:7f:22:5a:81:7c:13:89:93:86:c7:71:75:11:07:83:88:
         7e:39:74:27:77:4c:4c:4e:4b:88:59:27:ab:60:b4:02:01:f2:
         0f:f5:c4:b5:8b:93:b2:51:ea:f1:a0:bd:5d:b4:52:f2:70:74:
         bc:e2:d6:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxwexQKwlrgAmN6iytbWCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjUwNDI2MTEwMDU2WhcNMjUwNDI3MTEwMDU2WjAzMTEwLwYDVQQD
EygwYWMzNjc2MTk3OTRhZjAzYTIxNTg1ZDY4ODVjODU3ZTRhY2Y2NmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzs8dHKstItUrDUSJ8EAyWKsMcJT
K+3k8+xedYYCaUWp/JzVAyRBFIYAL545UcP2SCo2iEN+qWC9OK8fGcmSzojfpsTD
nZrqkwPYQzyzAoatLQJO2/ZvfdRICz3bmbIhOeWz2rGOf6YQoBn18XoRv6VI640e
3d0y3IPgCrFijJomFDFoltxtpxFNS8x2//115f5S9S3oTr4yFWyOji3oRy3KzWsJ
qeapb9PTn9Kh35rMEDTVZb8dQlXY6m+pUL2L/yR20pt9/TTo9zX+HEuYKnoy6uuP
wGM8aZv04avA6hiMJoHHYPuSbrsQn8Bml68LzCQrnmy1pI790w5sEZgkRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArDZ2GXlK8DohWF1ohchX5Kz2apMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLmzQY1m
HWScgodPsVxWbRwIhgHICAHhyi/5fkBbxHLUbEBQq2rNhsq8Wy+HkfIZPIerrzTz
hqKvV5euVZTVs05sBJ1W/1nY3wcTFHphjCofi4zUrVyMZ7l8GNOQXGA5gLH3rox0
1B//LFlVrZIiHiq+ACPbvAQNh5kuddWY7i5WDOHVKkEfWtQS04zNQx6YOBoHgMZP
VmdnAC/pEO7vw1GcY7tB7gSBV9Uz17L45rD5itFP1NsMVycXlluZNTR2dNLDerLM
fnp/IlqBfBOJk4bHcXURB4OIfjl0J3dMTE5LiFknq2C0AgHyD/XEtYuTslHq8aC9
XbRS8nB0vOLWnQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:21:11 2025 by rpki-client