Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
File:                     H0c4OJyzuZjsT6bUJy-N15n7xKk.mft (raw, json)
Hash identifier:          M3oMR6NIoFvePjQw1GpzMK+/lW2gJNvtWQ57QaOKI5o=
Subject key identifier:   53:BF:98:F0:51:61:19:2F:3F:C4:14:C6:74:63:A6:9E:BA:E4:D9:2F
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       0196718AA5B25E999C1B9F1E6D188D68EF9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
Manifest number:          1275
Signing time:             Sat 26 Apr 2025 10:00:33 +0000
Manifest this update:     Sat 26 Apr 2025 10:00:33 +0000
Manifest next update:     Sun 27 Apr 2025 10:00:33 +0000
Files and hashes:         1: 1-6x9jHZ3cw39179HQd4O3fAvnpk.roa (hash: PgXhvVg0YUToc07oyC3isPahNyz6852StHcO0CF7qN8=)
                          2: 1nUEd9XAFqDWEykKA06-e3Jht8E.roa (hash: FjXuDY1LWSoerVvC1COnQH7k++3mS52vkkMLizNO12Q=)
                          3: 2pdvmZCHvau2bejs7kiQ6VYT8aY.roa (hash: sxVxk1VG9jbnXlYRRTgFy8naU2+NPtqmSzhI8JvCk0Q=)
                          4: 7jhea4Z45q_-w6Bw5hm9Ljo6jd0.roa (hash: 0432QcgMFkJ7sn27j+nTeHIZYZPsrtQmgOnk9+WOg5s=)
                          5: E2kHiMdYodrnFH2KHA9US6yByGg.roa (hash: 4gqy0Z2gsQk+minstyMsiIr4y+M4uI9pxsNNqBMzDmE=)
                          6: H0c4OJyzuZjsT6bUJy-N15n7xKk.crl (hash: EYRjozKLp65f70shNrFcXx/T+mMccjf68Oy1FbTMXn8=)
                          7: H46sB790XpHEnYv4TqNMx8liI5A.roa (hash: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=)
                          8: LIpJLbylGhFRNKd4Vb6i8k36YRg.roa (hash: Uma+Nee5Et6Up+tXMeUjv4OVtrZCCxIFiku3HIhbB/4=)
                          9: ORp5S2gwOdo1fvVCheux3Z-tEqE.roa (hash: 6QCXpLzMvGC+j67Cjb2lewZSHVD5p64YnzlA/zGClIY=)
                          10: PLU8wqNdMXnL9v3tJJzISiKB10E.roa (hash: VqGtKJSXmrM4NojpQ2fDKWSLpkBqvw8V5Igvg7IZsCo=)
                          11: RNEGyKfylX6Y800rWZPCCJc50_A.roa (hash: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=)
                          12: VZ4v5Zl_fSWlCJddoFWAprfwDEQ.roa (hash: HSIRCE/846JiI6ro7JECbGIyt/cQkLU+ZkGrpS5afGk=)
                          13: WZBLvv9OFIzqKVar5Stt9tIoe6c.roa (hash: eDDz9g857ZbC4qMPJ/+ARLyYUZhWBgiSlQKhk+w4u2c=)
                          14: YGMe0KWo_m6eJ0gMSerQxd_mK7o.roa (hash: TX2OaT/Kq4swweS2SKxtiDq7F1NZ0dIzMpi6TRLh/ZA=)
                          15: dpNKQ2Sgz6QIHDbXymZzkoop83E.roa (hash: VrlYMgpMUbMGcZ9vFi+tBzjsUYnk4uGqxHrElmnVkpU=)
                          16: gDccJCyvv-XSleOWBZa0j1v0ILc.roa (hash: CO5e5TItEhwMis3LPrh0yYWspCPoVfBb8vdm/rXIFt8=)
                          17: gfqVNhzGNxb7VDFrcNLUrtDXd5o.roa (hash: Krtgp6Kar2XuUAEtscbGlUw/+BkCTJxFBL71vdsXlls=)
                          18: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (hash: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=)
                          19: sTCjVSTmDshI0UQ4XJFDWyeTvEw.roa (hash: kRON3o29OnRVzY/uFJzsoCpOZD9O1rSV9QBQnyCi9Nk=)
                          20: w9RX6MaAp0BwQCPK8hrZIWWzFm4.roa (hash: 6rxWErjQqbL7+OcI7QwVV76+tY/f2tbAGsAv/hz0KnE=)
                          21: z10me3-6yqryER4MpvIKiLcjNws.roa (hash: PjRl12NyPSpVNtUWuutmb/VXRvozChTacSvxqPRianU=)
                          22: zd8S8_RgIECBQgNFopt3gQi-4JA.roa (hash: 1PRRid9DTRPe3oTZKlt84NqobBLMXq/tvroFe+HAuOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:8a:a5:b2:5e:99:9c:1b:9f:1e:6d:18:8d:68:ef:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Apr 26 10:00:33 2025 GMT
            Not After : Apr 27 10:00:33 2025 GMT
        Subject: CN=53bf98f05161192f3fc414c67463a69ebae4d92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:a8:2f:5c:68:9b:70:7c:02:07:fc:93:77:
                    ed:ef:ff:2d:57:cc:30:36:60:28:65:9e:f9:8e:41:
                    72:4e:06:8a:88:71:48:76:ff:46:9b:92:54:f3:d7:
                    a1:28:ac:49:32:d8:6d:98:a1:c6:ac:f5:45:a9:aa:
                    85:7f:0d:fc:1a:6a:67:74:5f:59:08:47:26:89:b4:
                    25:c3:e8:60:b4:9a:6f:38:fa:bd:c8:6d:07:19:0d:
                    ca:17:b6:a8:c8:b7:bf:8e:34:a9:12:61:86:bd:3a:
                    08:ad:88:a1:b5:f1:fe:95:69:fd:bd:2f:2a:24:e6:
                    88:ed:fe:44:c0:5a:fe:bd:d3:bd:12:d3:aa:18:a6:
                    45:e3:af:ea:20:e4:b5:1b:dd:76:b4:61:5d:95:47:
                    9e:b4:93:1c:c3:c9:bd:4f:f6:65:13:88:ea:8d:87:
                    00:af:db:52:22:4e:4d:14:a4:8d:8a:95:33:67:1a:
                    ba:fe:ab:d0:a6:8b:e1:cf:ae:a9:56:7b:5e:ec:c0:
                    e5:7d:73:70:94:15:b2:75:a9:2e:90:a0:df:4e:ab:
                    16:b8:d0:f0:d4:b7:4b:53:93:86:c7:ed:a9:2b:23:
                    b4:17:6a:6d:42:7e:43:5f:60:f7:bb:fe:9b:a8:90:
                    7f:d7:8a:08:96:75:2a:53:01:7a:b2:c8:7e:60:d9:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BF:98:F0:51:61:19:2F:3F:C4:14:C6:74:63:A6:9E:BA:E4:D9:2F
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:80:f8:ce:4b:b2:87:4b:21:e8:7d:66:b1:59:38:1c:c4:62:
         ff:c2:83:ec:b4:a8:ad:d1:92:f9:eb:8a:aa:1f:a9:10:e3:aa:
         09:38:d7:7a:2a:df:7b:e0:f7:91:1f:83:f9:40:74:28:8b:69:
         e9:d7:03:84:27:1c:1c:3d:14:8b:78:cb:3f:aa:c7:1a:49:ab:
         c7:ad:56:5a:ea:4a:97:54:0b:14:b9:26:cf:72:7e:bc:ef:6b:
         66:46:9e:30:74:59:a0:46:6a:90:b7:46:43:e6:9f:65:14:33:
         07:c4:8a:bd:bd:f7:34:1d:70:d4:22:7d:55:ff:13:f2:a7:59:
         07:08:a6:5b:f3:6b:02:f2:79:49:52:4e:13:91:5d:81:bf:f9:
         8a:4c:11:11:d8:64:e7:c6:90:90:64:ba:d9:78:4a:86:69:b3:
         73:01:a1:5e:c2:c0:ce:ff:27:ce:1b:6c:90:d5:6f:71:cc:e8:
         51:55:47:9f:83:84:61:ca:5a:5b:b3:b6:2b:8a:b9:fd:d8:94:
         2b:ff:3f:f7:b2:c3:03:c4:36:05:d8:a4:1b:c8:41:c6:f0:76:
         81:de:73:f4:97:11:ad:ce:d3:ff:5a:e1:4d:cc:e6:54:dd:73:
         a1:a1:c3:94:4d:4d:62:a1:00:9c:a6:cb:48:4c:94:96:e8:60:
         51:96:57:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxiqWyXpmcG58ebRiNaO+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjUwNDI2MTAwMDMzWhcNMjUwNDI3MTAwMDMzWjAzMTEwLwYDVQQD
Eyg1M2JmOThmMDUxNjExOTJmM2ZjNDE0YzY3NDYzYTY5ZWJhZTRkOTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tOoL1xom3B8Agf8k3ft7/8tV8ww
NmAoZZ75jkFyTgaKiHFIdv9Gm5JU89ehKKxJMthtmKHGrPVFqaqFfw38GmpndF9Z
CEcmibQlw+hgtJpvOPq9yG0HGQ3KF7aoyLe/jjSpEmGGvToIrYihtfH+lWn9vS8q
JOaI7f5EwFr+vdO9EtOqGKZF46/qIOS1G912tGFdlUeetJMcw8m9T/ZlE4jqjYcA
r9tSIk5NFKSNipUzZxq6/qvQpovhz66pVnte7MDlfXNwlBWydakukKDfTqsWuNDw
1LdLU5OGx+2pKyO0F2ptQn5DX2D3u/6bqJB/14oIlnUqUwF6ssh+YNn0qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFO/mPBRYRkvP8QUxnRjpp665NkvMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYD4zkuy
h0sh6H1msVk4HMRi/8KD7LSordGS+euKqh+pEOOqCTjXeirfe+D3kR+D+UB0KItp
6dcDhCccHD0Ui3jLP6rHGkmrx61WWupKl1QLFLkmz3J+vO9rZkaeMHRZoEZqkLdG
Q+afZRQzB8SKvb33NB1w1CJ9Vf8T8qdZBwimW/NrAvJ5SVJOE5Fdgb/5ikwREdhk
58aQkGS62XhKhmmzcwGhXsLAzv8nzhtskNVvcczoUVVHn4OEYcpaW7O2K4q5/diU
K/8/97LDA8Q2BdikG8hBxvB2gd5z9JcRrc7T/1rhTczmVN1zoaHDlE1NYqEAnKbL
SEyUluhgUZZXDw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:26:33 2025 by rpki-client