Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
File:                     F5MB3Mf65PfOAeSYenfLgqM2q_8.mft (raw, json)
Hash identifier:          CZY6I+LHRJB6Bgrl9t7147vZttw9ERX2hYvXNB3056M=
Subject key identifier:   2B:E6:D6:5E:CC:06:89:24:7D:96:A8:62:70:1E:60:64:EF:B4:D2:CB
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Certificate issuer:       /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial:       01967A8D862902BF30C2ACF3C5BDE5BD1FC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
Manifest number:          1513
Signing time:             Mon 28 Apr 2025 04:00:17 +0000
Manifest this update:     Mon 28 Apr 2025 04:00:17 +0000
Manifest next update:     Tue 29 Apr 2025 04:00:17 +0000
Files and hashes:         1: 1-Y39Tfe6GiZJ3W9vN_BlEd6kBlc.roa (hash: apn2f97Dv4c5iyBIs02XeM7xNWUPUFTvtv/5kVJWl5E=)
                          2: 5hY0DjosoIfSaOxh5Ng3XkuAoWE.roa (hash: zlhYvo7Dd756ZyhVWxqlN4tDlyvI5VN1a9Hign3hS+8=)
                          3: 7A7LKn1o95EwmimmbWgqoklIVI0.roa (hash: BxZahgdbCLqm11e9NAIm5qcVZ6JaeYg01ekAjT/+ryA=)
                          4: 8Rf0japIE05N1Y5vujyR2Dd0trI.roa (hash: vcw9nl/fiRctjOwbBV/JrvSfRaMn3/hHGpzoyXDaC8w=)
                          5: BdwPPJJNXn-FSCXomapjXeZD9zs.roa (hash: TgcHeBuzrek9VSQCad/VCw8k4l19lhQEHsZDv6Sxid8=)
                          6: CmCZMVAUFYDrES4R1R0EnlAWPWU.roa (hash: SOwCciST5P31loSN+3o2tTo+KSkYf9jle8AlYvbZl+s=)
                          7: CvcLy-kMftRDnhFJ0e4Z3sTEHyY.roa (hash: Yet3DpNMZITYAum6tV6MuDT9XZJrmFWunKZqpCSSvYY=)
                          8: Dzjp0XUOyY6rldx3nm4f3UnI36E.roa (hash: 6kaFsU0I2rrHmyy/uDv2sBYFsyTxZyIZ3Q1YX+kOahQ=)
                          9: F5MB3Mf65PfOAeSYenfLgqM2q_8.crl (hash: YW/o9xG3K1s1wStHCTKoh7Gw95IjvO+baTP2YHCadJg=)
                          10: FM2576U9_cO6KlGBeG-VwuXYLoE.roa (hash: ABfseUXrmOLElVcMYHQHihGPr5p5Ib0P+JYnpJwSJdg=)
                          11: JsCAp1aFhoIjld1wkH8voBbNhr8.roa (hash: f9bEOIQTZBMNpm1Gt9qzl/E0E0zUfedi/SkPs4DZ8I8=)
                          12: KWD7a0MawJkOY6KvjbHNLlSuvEs.roa (hash: qmNFcYO8QPUS9sWwzinUFDYzi6mb2+i7tCjnCVK3kIw=)
                          13: QetUnHj3NyBy3BELD8-Xe-4Rw7U.roa (hash: /ncfGdoc/H6JYEaSn/PBOO+VMUl3/eKsR0IUffej0io=)
                          14: XlA1qfNQB0WYdkYaQ8Rvj1L2tb4.roa (hash: +4/ESRGuqWyL+/uODQWa3AjOUUB/k5+3UHyaNoG32/E=)
                          15: ZrTjnkyveLPrK0jTMWKKrihN2ow.roa (hash: 9Jyi49qBWk08J78Yv473h4V46VqPQ/HKB9I5PkE3ZOc=)
                          16: _0xzjWFSkzBLGLL_0JWnAmEsjDg.roa (hash: jnJ4LYTkpMfYjmbu6csGjYBdMnIp6t/TGOW8N7V0/jM=)
                          17: _WWxWL8Hn8pQ4epkeG1hkMzsULM.roa (hash: MsfVcxjNhCQJp9YqHylixAZChxNNKEXw3F+da8rjFfw=)
                          18: eshGAukJkuX-AE4GNhEXoHvgpDE.roa (hash: 7j5r7WqFUsTR5UqjVZvqFAE2NplYIRbJ/EoqmowNsP0=)
                          19: gHJucLDeNn72Z4YnTbDzcr70suE.roa (hash: X6NHV3AqWLuDzNFlvaXO3pKnS4ZKS+A8HYjFylVbHNQ=)
                          20: gJhRP993vA2Sp0o4Dg4qL2tfBcg.roa (hash: XddsBmTvT7ew4EphkpQIc8aDEqjL+V8Jd1KR6KWc3o0=)
                          21: hUZU9W5DHAMrH5EVf9n0v6F7Glg.roa (hash: EvZcqY0u0j8E3qud63Mfgc0SNbLfR+3aTCgDNKTv4/Y=)
                          22: hie0hXnIuAB4pedG0JZEzMyt0LI.roa (hash: gK4aKsvtB8FfBrgpZluMQ5b2y78leeRFaQAGGnAPFIo=)
                          23: iYA_2X6usQ-6YdR8PggDt72LFWo.roa (hash: cU7w4mp5wZ9b5vYC2DRlLeH7emv6re8WBMB//kfRpeA=)
                          24: kFARCoMgCMuyc0Id-ilQ8NRgEfU.roa (hash: RNNZrUNA+CZKPf9RkgYbSIfAuTpPWf45VRn5TZAQ/g0=)
                          25: uRbDK03eXvXuybDY6ySDPk2j8jw.roa (hash: B7oHGHMZn6dcANuLv7P1ig3TcmZcB2OnwrCmsBplg3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:8d:86:29:02:bf:30:c2:ac:f3:c5:bd:e5:bd:1f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
        Validity
            Not Before: Apr 28 04:00:17 2025 GMT
            Not After : Apr 29 04:00:17 2025 GMT
        Subject: CN=2be6d65ecc0689247d96a862701e6064efb4d2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:e5:45:74:e8:dc:a3:f6:c2:81:38:4b:68:
                    12:99:cd:b8:cf:22:58:a7:29:9e:a4:2e:d4:66:59:
                    9c:13:f8:a7:92:83:ec:06:fb:d9:53:ed:16:89:e5:
                    9e:a4:6a:84:0f:f6:91:0b:34:33:27:c5:7b:46:a3:
                    f7:7e:91:1f:ba:55:10:a7:54:f9:22:77:c6:c2:be:
                    de:8d:06:15:56:09:78:1d:65:f9:ac:e9:27:95:89:
                    80:a0:e8:9a:06:27:d6:f4:51:2f:c3:46:9a:4e:33:
                    a5:79:87:29:ef:03:8f:82:00:7b:21:0c:f9:73:3d:
                    d3:b7:fb:34:e7:76:40:8b:66:d4:e3:42:bc:db:7b:
                    e1:36:e8:c8:79:23:b1:8f:c0:54:b4:5a:99:9f:91:
                    a8:2e:aa:05:51:b1:a6:c1:46:44:a6:fd:a5:01:63:
                    b6:47:fe:01:bd:0e:8d:3c:4b:0c:d2:27:a5:96:63:
                    6a:5d:5f:d9:d7:89:eb:89:03:b5:46:78:14:98:b1:
                    b1:ab:b9:ac:06:08:93:57:71:b8:71:ca:ac:ec:80:
                    ef:5b:a9:34:ad:b2:e9:9a:db:55:8c:ba:28:75:c8:
                    0e:6a:a8:20:cd:d8:4e:e3:04:88:e7:1f:04:1e:36:
                    c8:72:ea:1e:ac:cb:66:68:f8:95:6f:47:c7:62:9d:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E6:D6:5E:CC:06:89:24:7D:96:A8:62:70:1E:60:64:EF:B4:D2:CB
            X509v3 Authority Key Identifier:
                keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:85:e2:b2:25:6a:ae:7a:fd:dd:c1:72:ea:e6:d3:1a:a7:3c:
         7e:40:1a:af:d1:a5:a4:65:34:37:b1:00:70:b4:0e:a2:a4:96:
         b4:f9:47:75:4f:4c:f7:aa:80:95:da:1d:df:75:43:d7:ff:35:
         a7:cd:7c:0f:ce:ac:9c:09:c5:31:99:63:71:6c:e1:d6:ff:a9:
         dd:f9:da:cd:93:ed:e0:ee:69:2a:6e:e6:5c:37:41:13:0b:09:
         d1:b2:fe:ca:95:6a:0e:c4:3e:86:1f:54:49:62:49:50:d9:7b:
         2c:1c:54:a1:33:48:5f:e3:b5:82:ad:60:cb:4f:21:83:52:4d:
         71:b2:33:24:0c:5d:16:b6:cf:ee:5e:3b:62:4a:98:40:46:3a:
         ae:e2:3d:36:72:0c:b4:d5:cb:40:4d:68:fe:d9:ef:cb:f1:2e:
         7f:fc:8b:69:20:2d:be:a9:57:49:5e:d1:96:1d:f0:44:19:bb:
         e8:58:f3:2d:14:cc:9b:94:dc:a3:da:08:5b:23:bd:f1:61:33:
         7b:7e:71:79:ab:13:16:a0:32:a5:25:11:28:d6:04:87:a8:31:
         7a:42:27:31:a1:94:1c:6b:1d:6a:c1:d1:43:68:de:40:09:fc:
         0b:4c:fd:51:36:0d:eb:65:a4:87:05:56:0c:29:38:e6:d7:47:
         0b:bc:95:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:19 2025 by rpki-client