Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File:                     4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier:          qUtQBFm8WyybTdNmIcKMBTsbDawBk4gGdOoP6Py7bGs=
Subject key identifier:   1A:FE:3A:F7:8C:5C:7D:3C:2B:36:D5:E7:6E:2C:11:43:22:0A:B3:88
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       01967153D7A86667D4F59217F27D4A43663B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number:          1539
Signing time:             Sat 26 Apr 2025 09:00:42 +0000
Manifest this update:     Sat 26 Apr 2025 09:00:42 +0000
Manifest next update:     Sun 27 Apr 2025 09:00:42 +0000
Files and hashes:         1: 0KdA-TINfwbcsy0ASHR6hmtOfao.roa (hash: tWh0DQpeSJNfueuOKNNCoMmtgbTb+2BL6hJcpZqkvhs=)
                          2: 1-fKXBjqiTeM90rh_YcnHRZImMf4.roa (hash: XviyK9gZCSyNGe87uM1BJ71gLbA2w08qEYd7JArw4Hs=)
                          3: 21b6ntDP_41WHw4JgmJy5QMFjgw.roa (hash: OyGhDdjF1Bm2rSEG2L631phdq3gbyPG0iQYpMEVeFPo=)
                          4: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: qkIgAobS3/80ITaBvx19puZXscTKO8SrvIytc4v2jFg=)
                          5: 6bKmElTtCrApAY9rRgCE9VG2_VI.roa (hash: jkL7mJyzNc2SlG01Dl3hctC0mLi0oOg8Cg2cItdFmp8=)
                          6: 7p384sXqxwddixUy_mYYBxF3awU.roa (hash: shaUQH6DkAjCcH24QCvbbVnJZikn1zAyihmMsgzPJcI=)
                          7: 9tAlrFt3BNMHldCpxQwWxRWTL28.roa (hash: AIcGQ00F00sy/YugmjOKtTlrin+Y6m1qVlh/Z2kZ+RM=)
                          8: EswWK13u7UJf1Xm-aJ2Imfit29g.roa (hash: /9v79+ATF8QEQ4eYOKWEhH/1P4aQ0PCUgp7hFThavBs=)
                          9: Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa (hash: 1XCrVW6+X9DVjbzilln6lF+f4s4n32v5jZAfIBU7Z40=)
                          10: G-l8_nIjGXR2g3ie6C0b-DsumJM.roa (hash: qSX4dXaWMvoaO0z2I0BRCaHWI2LO9UgLxYp55tHYyDI=)
                          11: NZS2Ipchg2nhjy9FYCa-tr7edgc.roa (hash: J91+10sEZiq3a/L3jz4R1QTQGfsCXE1VL5KiBPRPpK8=)
                          12: Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa (hash: F0xmcjBp6hsmjep+VgSkib2PdKQQGRbjWEcgD1QBtbM=)
                          13: Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa (hash: gYB3OVnzjXyPr9Qm/lycd3gdpJQ/+Cl0X5zNJIEQ9rQ=)
                          14: Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa (hash: 48l45O6og6BZyLVhyyu0j9BEA4j1BgnxIO+JWZUTc30=)
                          15: WXqBRwyxEDgQK5OlFrSMIaFpyVU.roa (hash: IpP8TaM5Wwj7+VayyaCIeA2tv6VLqBIorB1uda3TPMs=)
                          16: XSbgubujJJ9FZpTPfifgq3AkiU8.roa (hash: QttXfkZolFdSxkPkwsYt6vSDl8DXa766XeZMDQS4Mtw=)
                          17: clZIrkLG6qMnhbwEIW_pAKHru3U.roa (hash: h9NEDzPBspMO8P2mwx1nUeUnaVh8FCZbKTMitP3Kq70=)
                          18: dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa (hash: onCp8InwxVqnOmHcxw1M4XVSgwg1eg4cDcncJgrt2EU=)
                          19: dp8pvQa4vbHOUBRQq7A88UhSl18.roa (hash: 3Lmekz/0Q0BYHatiLmy2hW/4qKq+J2XWsl9s9mwNmF0=)
                          20: kQOaGpW4jD-8xGlNbkC3aZmZ2oA.roa (hash: nAfr6WTUGifpmHx8/uBqTFl3/GkMakZU6HzPC4BRKRc=)
                          21: nqNpqxiiesheCCeqK53xQj3S098.roa (hash: 2DtLb2ES6JjRgW8bn+Qbl4U1xhy1QrUbg+jAVJ9BH7A=)
                          22: qg9H3rvWINznh7UPHplQbVY73BM.roa (hash: Nx2IWHCLZcluhgcIHU0CznQVLHn9XdJ3ef9jXTt3p68=)
                          23: uMSALwCFCjHgfXY8GtxojOClYFk.roa (hash: kBut8kDkT5GFXnvjVfuze1IARhQ7/X9J0rwdlLP0FyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:53:d7:a8:66:67:d4:f5:92:17:f2:7d:4a:43:66:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Apr 26 09:00:42 2025 GMT
            Not After : Apr 27 09:00:42 2025 GMT
        Subject: CN=1afe3af78c5c7d3c2b36d5e76e2c1143220ab388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:9a:14:2d:73:19:46:8e:82:34:90:4a:c4:
                    3d:9a:3c:e6:9e:1d:d8:fc:7c:44:71:ec:a2:83:a6:
                    98:21:73:f8:96:4c:2d:8a:46:f9:01:91:d1:58:b5:
                    51:37:74:ac:5d:fd:38:8a:cd:44:b4:69:a4:29:df:
                    ed:24:ac:39:d0:30:88:af:21:a0:46:18:25:f1:58:
                    94:53:40:bd:52:90:25:99:71:29:fc:f9:65:73:c3:
                    a2:2c:37:56:10:99:90:5f:ac:34:84:37:e0:2e:c9:
                    6a:a7:9f:8a:72:6f:68:e5:1c:2f:3e:42:1e:c3:e2:
                    43:87:10:e2:41:a2:ed:80:44:cc:68:b6:1d:1a:0d:
                    0a:30:08:4f:93:4c:62:b1:c7:93:b2:27:eb:42:2c:
                    c4:3d:df:f5:58:26:30:e2:5c:c6:fb:07:53:fd:31:
                    f0:e8:f1:41:a1:1b:d2:d4:48:74:bd:5b:03:f6:f9:
                    c6:97:13:26:08:3e:42:e5:b7:d0:92:39:3d:fb:ba:
                    78:a4:0d:3b:be:5c:8f:49:ad:fa:3d:dc:f3:31:25:
                    95:f7:4a:7a:07:ea:65:a2:db:f5:48:63:2b:01:c2:
                    02:f6:8d:eb:81:1f:10:ef:15:05:ad:26:d3:8a:b1:
                    15:3b:7d:0a:eb:e6:e2:50:f7:7e:2c:ae:eb:c4:6e:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FE:3A:F7:8C:5C:7D:3C:2B:36:D5:E7:6E:2C:11:43:22:0A:B3:88
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c1:81:4b:69:b8:82:9a:56:31:eb:d2:c2:b6:90:cd:77:f5:
         25:a8:7a:45:56:20:6c:c0:3d:de:27:d6:63:55:50:ea:e4:e6:
         d7:69:8a:9d:8b:46:d6:83:39:25:a8:0b:0a:17:87:36:7d:e2:
         0d:52:00:e5:5c:d4:f0:b0:66:98:df:f7:3c:ba:ab:57:2b:10:
         ef:de:6c:f2:d4:fa:a4:34:c8:44:80:be:cb:16:dc:42:f4:7d:
         39:67:3a:ff:9f:f1:8d:c8:e4:44:f8:c6:12:b8:5f:08:67:f8:
         91:d5:09:d0:61:f4:ee:09:b4:6f:08:4c:41:c8:29:66:14:ba:
         a6:56:5e:26:fc:47:f8:ba:81:a1:0a:c0:af:b0:f8:8d:24:4d:
         60:92:71:7c:d7:0e:e5:a3:85:16:55:27:74:7d:b6:f2:20:f7:
         ac:77:b7:ce:20:e1:c1:03:d4:eb:02:35:d6:57:a2:b6:61:6b:
         5e:49:1b:36:16:48:f7:ff:e9:69:d0:5e:de:46:11:28:46:97:
         5a:89:ce:3b:bb:eb:29:75:10:41:38:38:79:43:56:d3:9d:10:
         1c:00:c7:09:91:3c:50:03:cf:7f:2f:02:bc:a4:6d:08:d0:b6:
         c9:51:ef:24:8a:c0:c3:0a:1a:9c:f8:12:36:49:a5:7d:05:e0:
         2c:5f:f1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:04:18 2025 by rpki-client