Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          pyKs2qQFCxGE37GbKO4OpfZg6J73pla1+koNMH5L1Uo=
Subject key identifier:   B6:2E:B8:4E:1D:45:C8:7F:08:88:4A:88:3B:F8:67:5F:1E:F7:FF:DA
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       01967341DA022D3B92EA6ADD4D8E8A19BA3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          0E01
Signing time:             Sat 26 Apr 2025 18:00:17 +0000
Manifest this update:     Sat 26 Apr 2025 18:00:17 +0000
Manifest next update:     Sun 27 Apr 2025 18:00:17 +0000
Files and hashes:         1: 0-YPkmULAfXnz-x8O4HjpPXrRgc.roa (hash: 4hkO4QjkvJDhiXFvv5DxoiJEgtCK4O1iDNeqMzaTU3Y=)
                          2: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=)
                          3: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=)
                          4: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=)
                          5: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (hash: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=)
                          6: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=)
                          7: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=)
                          8: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: iBqZrRy66A4Dn2KjFORj97O714mo5jQW9IwyGgioCUE=)
                          9: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=)
                          10: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=)
                          11: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=)
                          12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=)
                          13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=)
                          14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=)
                          15: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=)
                          16: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=)
                          17: c_BvljorzCC91xKN9SXmWQ8PZtY.roa (hash: tm7MMwTrRhcL2zqzjy3kf+lPaC41oVQy/y652O4EMmQ=)
                          18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=)
                          19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=)
                          20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=)
                          21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=)
                          22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=)
                          23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=)
                          24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=)
                          25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=)
                          26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=)
                          27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:41:da:02:2d:3b:92:ea:6a:dd:4d:8e:8a:19:ba:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Apr 26 18:00:17 2025 GMT
            Not After : Apr 27 18:00:17 2025 GMT
        Subject: CN=b62eb84e1d45c87f08884a883bf8675f1ef7ffda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cc:e4:74:41:48:56:c3:d3:ad:ea:cf:b7:46:
                    03:18:e6:57:2d:22:af:0e:2e:27:33:55:c7:f1:28:
                    b9:1f:df:46:30:f3:a7:d2:3e:22:b2:38:75:76:65:
                    97:b3:f9:49:3b:14:f4:c9:1e:af:49:ee:9b:b0:23:
                    e7:4d:50:c0:01:62:99:a1:fe:c3:a7:11:e9:06:c1:
                    f4:e0:41:9c:1b:c7:c2:b6:f8:61:c5:39:f7:43:f0:
                    fe:72:73:a0:3d:60:24:3c:c9:9e:3b:c9:a0:c9:81:
                    57:35:58:84:d1:b6:06:6a:09:74:d3:79:31:40:ea:
                    30:39:25:22:a8:e8:be:e7:6a:fa:3e:1f:6a:45:c6:
                    89:62:30:e8:cb:d2:2b:89:0f:c1:26:70:77:13:a7:
                    04:f5:09:ff:68:57:ff:d3:45:20:35:58:7a:06:18:
                    41:4f:2e:bd:4d:dc:a2:89:67:27:de:f5:c4:ff:14:
                    1b:6b:35:be:d6:99:aa:2d:9a:4d:2e:b4:ac:96:83:
                    a1:12:c2:4e:2f:9c:89:89:c1:9d:b0:55:9d:80:c6:
                    e5:f9:e4:fa:32:92:ec:a3:05:70:14:04:19:5f:b2:
                    19:f7:cc:55:7f:28:2e:d2:af:22:6f:8f:ca:b4:9a:
                    db:96:c8:63:b2:cc:1c:d7:20:c7:8a:5e:f3:04:13:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2E:B8:4E:1D:45:C8:7F:08:88:4A:88:3B:F8:67:5F:1E:F7:FF:DA
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:33:e9:b4:3d:63:25:4f:43:61:01:06:6c:ca:a3:01:54:52:
         2c:31:ca:e3:d9:62:6b:bf:0e:d8:aa:7f:af:92:6f:7f:e4:80:
         10:47:77:fd:1c:7c:bd:ac:69:80:f7:35:d9:51:90:e1:fb:60:
         9f:38:f4:b8:07:dc:92:a6:13:ce:71:93:61:80:be:32:6d:31:
         42:2e:84:41:51:d1:9c:55:10:14:75:56:28:b6:75:f4:88:08:
         98:16:71:e8:3d:9c:dc:d4:34:0d:e8:ed:40:28:d5:53:2e:4e:
         e1:74:4b:49:8f:ec:46:f7:3e:18:6c:75:f6:be:0b:4e:65:99:
         a2:a4:42:67:e8:5a:eb:9c:2f:1b:0e:3c:21:9c:0d:6c:09:e0:
         c8:a4:ed:e9:67:75:b8:10:a4:7d:e1:51:12:ae:b8:56:e6:f0:
         0b:b8:55:5b:5e:15:fc:87:ce:b5:5d:59:11:80:e1:5d:05:50:
         63:0c:30:ee:2c:b8:83:45:5b:e1:ec:54:ff:ee:e4:7f:e0:da:
         b1:0f:9b:f5:47:d4:76:11:49:e6:2c:52:35:8f:21:bf:c9:18:
         6f:b0:6b:29:de:eb:46:24:a6:c4:a3:02:f9:86:53:3b:0e:fa:
         74:14:ca:4e:9d:8e:94:93:68:d4:14:0c:e1:ce:db:e5:20:3a:
         64:71:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:34 2025 by rpki-client