Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
File:                     rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft (raw, json)
Hash identifier:          Vrg9laCLtuE7QO1ej+mjKsL8QZnEbGJvT9gTEWAisuA=
Subject key identifier:   C8:5B:FF:A9:CE:73:18:8D:63:1F:12:D0:0D:58:D8:FF:D9:32:81:1F
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       019686FFE454D206EA82E1BC9B32CE46CE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
Manifest number:          1536
Signing time:             Wed 30 Apr 2025 14:00:39 +0000
Manifest this update:     Wed 30 Apr 2025 14:00:39 +0000
Manifest next update:     Thu 01 May 2025 14:00:39 +0000
Files and hashes:         1: 18oxWhArE0RhfvzLv5hZQE6tik8.roa (hash: PaOcC02WGlDWNTRr4QEBVY28nvkxbfJiDXU25ZKRrIU=)
                          2: 1mXcyLzjkRbf9Hznb8JyWzO3osQ.roa (hash: f2wNSKamLqv1NifvdMo7pGYLH63iUBhW6JiyWXjIzX4=)
                          3: 39MxobbrpAQOtON-sui4Ceno-cQ.roa (hash: N9pxd/h1OsCWGB0hBqC8JheO5FgETKpxzAleviuHpyk=)
                          4: 5XvdTcJxyA4Pm4_pq9JEbtFKUUI.roa (hash: GwuUh1bHH+3sFVWj2a9pfKD+XUZ4KqBl4+B6GijU6Ls=)
                          5: 8EfEozKqpY8nxCV4dZXUuFzfoow.roa (hash: bwxpPe2HJWBsUFjWRtljBQTPJIWrn11kpNRYlpt6r2A=)
                          6: B9R7j-0-BgaCSy3boeQLonLKm0k.roa (hash: WH3s6YayhFNQdUbUDmK2H25xLVDh9LZv/S7MHi6F+EQ=)
                          7: Enyvkgn3RUCa04cDVJ-gdeliV1A.roa (hash: xQ9p3txs6GWKUFjqyIWju/DikEtLj3Iuh86XLpBOnSQ=)
                          8: HPL5SSm-juGYaMS6oE3ZODqLcNQ.roa (hash: FXftbE3hkNwaKhmnG5qdVD3or4AxJTzdSUUIBPayFjE=)
                          9: HjFRJwOWDqBnApxaTtF0TpsbyYQ.roa (hash: OJbfZZsxLOCgQrK35DXHBmPs1yNnWYKSyp7qwV6yc2A=)
                          10: IEpIdrCrgoruzvNRphWAKjLFvck.roa (hash: 1hcuHiArqaJrsWO8fxvod3HELsUVIN5XphYvjL0kx6I=)
                          11: PYVxYCtWGVed2qDgQ_L-BlmjTnw.roa (hash: Qb4Nh1JQYnf3fOpN9QhZn8yVWXFe+8nLnjlfqNnZckY=)
                          12: Pr96fu6AKoC9ocgKy4gmk6FiiQ8.roa (hash: oICV/Rv8Fz6p+4kh6JDj/CQGRipc30QQX+8qXRhhMHw=)
                          13: SD_VRQTvMC7vuyqV_wFD-fKVUsY.roa (hash: mBhitXOwr6QfmoyB84HxFE/38Mo9fz7gg9e1zxivAvQ=)
                          14: VaCnyWX6jU1U7x4phZq4UQ3hGtE.roa (hash: HSskmvZRBur17htQDGL9L7zkIxXiCpAQFXJXh8sPXXw=)
                          15: XZes0nTuYVnyyfrFPRRjs8Jx51Y.roa (hash: 0BBkRTYLYp0bNpkG9KKvJ443VFVkJBIrpGAocXr8JCM=)
                          16: YtuOvUFMVo09mKrknt-ojMdPYWM.roa (hash: T3A2RIZNQBMqUeBCZdKs7FFJQLtQse8C79U49VQid+I=)
                          17: _7kpaS2UowFnBiDzlZIsC6T4jPU.roa (hash: Uap1nQF5HIXbd/fuDO9f3i3zi5VRkj05CB6xiL5G0NM=)
                          18: ej3Rsdg7iZ6dO_YprWJoHaQvuKI.roa (hash: hvD3zqBlyrs1GGJZ6xBTzfTDwo6icPaxgxmp7ExKh8c=)
                          19: fhdkzDTpIIzXI7UR-RRqfn8yYK8.roa (hash: 5G8k94mJ+piuCkdBnO5V9g3FiuOM9TQAN0h6Zu9iGPI=)
                          20: iSVHW1QIe7YgLfhsMRsWXDdHgaE.roa (hash: xfy4rZ1pJspjyIzKFNFqMhcKLJ7Q1syk5sZcIn8SuS8=)
                          21: ibQxcJ8BcsDznHwW8cvvdWCtIaQ.roa (hash: pIty12QAvgK/GvUKpxuo60iKFff8hEDBVoxlkVE06EU=)
                          22: ksJUh4hG5S_P4p1TTcqh_SUbIjY.roa (hash: mTM6a+O+0K+OAJZ6HZM/A5EVh+VOa0DKYpPbMPy3aoU=)
                          23: nlW2BhzbrhZqQt_kjdeJrjsFzqg.roa (hash: isLx6NhOWvsktPKmSuP99hPtTj1m+Qrqe7ue+9WegW8=)
                          24: qOS_JmGuMGS8fdW8_vGeP4voZoo.roa (hash: ca3WETCPA0LrmORjC53qRgeSLIMYuLN7rkeUg99gFg4=)
                          25: rmopece1hPnDrxGUQXbePfbuW3g.roa (hash: LzehuaAVFk7vmeksMGf8ccgZKNu8yikV/yTbs25QbhI=)
                          26: rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl (hash: jIqbZbQ6NU5Ykwf33NgH4oDsO+J+wRWSvwNkoPApqMQ=)
                          27: t3r2cSXLI7fMZi5tra_aZAQyFak.roa (hash: v065bTN3/ayGHNsmj2ZNOgQk8b4xLfobBPDbQcgY5/Q=)
                          28: x05F2Z9Ii5NfBHcv5t9U3DVcvc4.roa (hash: TCunqfbRifiNySN7ycYsI0OCZSixtWJdHstGs7qYQWo=)
                          29: z0zrbZGTZ0iqKhgiO4o-T6JBleI.roa (hash: ToFqBI4XuElIAABZ+J4JnW1Geuu40xhhzkV2D52WyP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:86:ff:e4:54:d2:06:ea:82:e1:bc:9b:32:ce:46:ce:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Apr 30 14:00:39 2025 GMT
            Not After : May  1 14:00:39 2025 GMT
        Subject: CN=c85bffa9ce73188d631f12d00d58d8ffd932811f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:22:97:43:b8:1b:68:e2:cc:91:d7:1a:16:
                    d7:f0:96:87:c7:d3:21:0d:49:49:30:c6:1d:57:dc:
                    6e:a0:6f:96:cc:ca:b3:ec:c5:78:f6:07:72:e4:71:
                    59:96:bd:99:7e:de:69:e2:32:4f:dc:c4:04:2e:02:
                    e8:fb:7d:45:49:3c:98:03:38:7b:8b:cf:a8:08:3b:
                    80:a0:81:c1:d8:5b:04:59:21:ef:b9:75:f8:60:2f:
                    45:d2:d4:6d:80:19:a5:b3:79:ba:43:c4:f5:bf:10:
                    6f:03:45:2d:14:74:11:36:bd:03:6b:62:1e:0e:82:
                    8b:b4:c5:e6:9f:d3:4d:bc:17:60:49:b3:ea:9a:1b:
                    85:80:6f:c5:4a:86:ab:54:49:dd:ee:86:39:e9:9c:
                    db:a6:f9:b2:dc:fc:03:b9:b7:89:ed:a8:03:90:23:
                    5f:bf:8c:09:e7:28:c4:e4:42:4e:54:d0:2c:2d:fe:
                    06:53:bb:7e:8a:4b:33:c7:f3:59:f6:7b:5b:82:a0:
                    65:f2:4d:18:dc:bf:52:85:4f:e1:d4:21:da:37:9c:
                    ce:92:e4:fd:a0:d4:6d:9a:bb:75:cd:8b:d7:31:4e:
                    63:0f:cd:aa:81:8d:b0:bd:73:96:30:8f:e6:67:c5:
                    7a:42:36:f2:4a:6e:16:0b:bc:c7:19:ae:ea:68:3d:
                    91:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5B:FF:A9:CE:73:18:8D:63:1F:12:D0:0D:58:D8:FF:D9:32:81:1F
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:95:63:5a:d1:22:06:79:64:fb:77:f8:15:38:95:38:44:
         d2:34:92:e5:98:7f:94:e2:9f:75:9f:87:2f:66:a9:b0:f5:64:
         86:1f:f8:c7:29:ff:9b:e4:78:f6:d0:a7:6d:34:85:f6:ff:0b:
         07:6e:cc:c8:22:ba:0c:8b:8c:59:9d:6a:86:b0:45:60:16:59:
         16:46:18:f1:8e:31:92:78:9d:39:3f:19:4c:12:12:ee:0d:8d:
         53:88:4d:f1:45:d7:48:b3:68:a1:07:8f:10:64:f1:67:08:4b:
         9c:32:a7:d3:95:5f:57:5a:3c:ce:8c:9f:0b:69:14:81:cb:d0:
         26:39:16:e1:21:13:91:85:8e:03:47:f8:66:fe:95:be:65:6a:
         ee:5d:2f:54:f7:65:fd:44:4a:46:b8:e4:6f:58:55:91:f2:66:
         03:12:f8:ab:8e:15:2f:66:18:1c:4b:57:15:1a:60:e9:2b:dd:
         55:cd:5c:2f:e8:4e:0e:9b:81:b0:9e:a9:c3:31:31:b2:55:07:
         e8:10:b1:72:26:2b:6a:9c:c7:91:df:2f:2e:fb:ba:b6:a2:3e:
         4b:1c:de:48:22:9b:02:01:1a:b2:df:fc:59:32:d9:6a:4a:ae:
         3c:4d:00:ac:2b:bf:75:30:93:54:9e:3b:d2:07:20:2f:d8:8f:
         d1:fb:49:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:13:43 2025 by rpki-client