Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          lDPnYiPFRGUdYEB6dB3m5dSlqa/ViiXHxRz6Gebxsg8=
Subject key identifier:   FA:C2:E3:C3:7C:58:7A:96:E8:20:A3:32:55:C4:13:94:97:35:3F:59
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       0196711CE3B5C87681B404F78873416D8649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          0B95
Signing time:             Sat 26 Apr 2025 08:00:40 +0000
Manifest this update:     Sat 26 Apr 2025 08:00:40 +0000
Manifest next update:     Sun 27 Apr 2025 08:00:40 +0000
Files and hashes:         1: 1-wsV16Pa0xWRAOyYC4wXz0FU-Fs.roa (hash: TzGwJUxJ82lA4OSZNDwixbLuAmbsTPrEruD2CDlomPY=)
                          2: 2aQqDTm5zlV5nkl-HDTiGWYa4f4.roa (hash: dSXs0Hfpg6D4y1kWWm5ZVlT7bVFCSLrM10J9Zb+iDG4=)
                          3: 2dufQoC5Jb0ve5IYehtGosKqu7Y.roa (hash: fBd1JLy+BQuX/FeJIoa6E39ivAOuTftwa/xPQ5dGjI8=)
                          4: 40cJKp1GS5dbr7SdP3Zbev6JmeY.roa (hash: 61/ko+8N7a8c9CNpATaxhZcxgPcvxlUKKJ8fzALh25Q=)
                          5: 5ti7bWWeuzgJf0KBwaFhK0N9KRo.roa (hash: EtFUfmsrngVXtCd/OFRb3dSYVWsGdEV54+GYkoeqeqQ=)
                          6: 6WF0N3ANEOh5V4LZtgZNOBJ_xJE.roa (hash: GN3SfJqnfgCIXJsZSKWnxtWzFusuFwzLCL2yxaySHOE=)
                          7: 9vfmUm9RByccnOb6XlV_ph-gPk4.roa (hash: LNn9kutR9BeTRKC/HK+uI/57S0lDbgwp5ZsR1e9YOBA=)
                          8: ChTwEJfY2RBJdsthLA8bTIXLsMA.roa (hash: cbosWqvMh54uvMvIlbou9+97Kpv9HxDR4iW8IXMGlK4=)
                          9: D2VMcyIfr7yJdFbbcvoWjUO3S5s.roa (hash: K6Mxc/3ipJmNEVKu8JpF4VYRsMp9O46DxAh+DI8e7Mg=)
                          10: DEDTAWSErjGHjVNeqxftVsgs8C4.roa (hash: VWkVJFt6LABue5shuRK4aAz/i+X+zOBxzF8svsKfKqk=)
                          11: Emm6nRm_ICEiezFVE6yUTG4tNAA.roa (hash: UvVT8bhFqQY2pkkDUxeeKXgnbxEXcnpDfTAVw/qLy9E=)
                          12: FYOTsLSpnQiXR1FyDbri9gafV38.roa (hash: eOnZOf7HpKncaRMTP6C1fKEmoFib9YbwOdPz9tWkiyg=)
                          13: HsAGBt_sORyEs8q-L-wNL0I4iI4.roa (hash: Z8l5TcU5Zcs2nKvrn4aNMg1x2Wss+b16c+BtivSp12M=)
                          14: J1_y8fLGSHC7YJBAA-aTumPpr_Y.roa (hash: i3J50Np/01x2WUAt2PLnQ1zNl7WfqyflGulsmM8CDUI=)
                          15: QRp-gzzsA0-rdx3b1dqncsRjGiA.roa (hash: ZsibpDYXxDl+Q+7fuaklr+d71b4p1KiMoCEp2QmvReI=)
                          16: U2PFthxJ7F2mSel2S5VEsWL5cds.roa (hash: VnmR6rK0a23jDw7iX8IiRVNjnkuvKH5yp7AMU/VwSYg=)
                          17: WwzGCJOe3hbTfhcSkQhUYKtZpeE.roa (hash: N5+NjpSgFrSWD7tKqV1MkWrWHc7PnpCzbGHVT1s/vl8=)
                          18: XEHexB-8pofq2gE930syfOe_AV8.roa (hash: gGKEhmbWN9gbDgql+5XbrGE8jaiHHd+CNMLRrD7i0vs=)
                          19: Yt3qNyUt06SrZT5AApDBitGbHGU.roa (hash: Km20h2W4I4tgIcq/F3vLRcoaeePSpTMlIN8YOSOAX2Y=)
                          20: YuzK84yE-VeaDfqQ6O3J9o15Kv0.roa (hash: EVKp3DpwGwk3zHFDB6I7C6vUQecOQerB/cDYFjxLfg8=)
                          21: aPENAwPWD9_6y24HMW9xEd5C_Ks.roa (hash: o45OJu1Z+D6ZpzE4mC3JFl7eVOetvW4JHfD6F7fpBWE=)
                          22: alg23em52u81qKf3TWMm9rQtp00.crl (hash: mXLYdDBPPKio0aIsn0UHi7UO+WJKVzk+X3f3BVmmnpA=)
                          23: dH-Fn-bLvIKl5MJZyueaEaNmc38.roa (hash: O5K6pdvBkQ5WVS21x7yQFg9X7BzDm0nUsONeB+D/2mc=)
                          24: eGDtP2QEnUAkQBFVgFoKhO3sxWc.roa (hash: FrppCVzjWf0RGrTLLO4uwCbbCzE9ofdGKinEGM8+zy4=)
                          25: eW2feC_fvyD5GGty5cazOwICcpo.roa (hash: R4Yghz9xM4g2VYCIzVlGHbT7YScIOZ0Rujda+9fP7v0=)
                          26: ic4T4ZdY7ACOz5tnRsbMFj4cn_A.roa (hash: 4VUp3SMe9rs+Z7Hbxzz7UGL7lgkBSmttJcCWABv87SU=)
                          27: lILAw3tMqkc78s59-phvitnFCEU.roa (hash: lLZBlgRbNSYZHWCAtBFaDzH6Ay8YF4H4rNnl21MLxLM=)
                          28: r1SbFbB8EZVgwwF50O6B6Bo1-2Y.roa (hash: 8jVIVb6+hzs3g8LbDo9uK4ZsOD57ErA+DvNo82vP0Mo=)
                          29: tdrOV3y46CrlF70UMGPfRoCn2j8.roa (hash: nIA0fLDpgoUGtNCZuxY6Jfjz2U/gZnlLBrv5XztTHEI=)
                          30: tk0w4MkHYzW6M8d0CyA-rbesoRM.roa (hash: eJJn7mXrNJ9k2vCBgWMXyfzpMGFm9QvIqLDFWI01uig=)
                          31: uSldu0-A3d7ktHLOGE3dm-cK6VA.roa (hash: O7LPBot8oWUSlFYdTabCBBKi4WGD9LTK9pqdyPBhyAk=)
                          32: wXM31OjkciEAlpEMjaTgfWzjXFg.roa (hash: 8xtREta2zMiUqhNWY7P3R7XpgYZpRP5WhwRQaDvmQ1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:1c:e3:b5:c8:76:81:b4:04:f7:88:73:41:6d:86:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Apr 26 08:00:40 2025 GMT
            Not After : Apr 27 08:00:40 2025 GMT
        Subject: CN=fac2e3c37c587a96e820a33255c4139497353f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:1c:8e:e2:59:9e:1e:b1:a6:d4:ab:1e:31:
                    c5:5e:61:64:1f:66:22:f6:eb:56:25:19:ad:28:ff:
                    e6:1b:60:d6:f2:25:8d:90:6c:56:a7:83:31:12:03:
                    45:db:12:e3:f4:8a:b9:a6:3b:24:46:27:18:7e:f9:
                    52:e9:28:67:47:9b:99:96:dd:c4:10:54:94:5d:96:
                    7b:1e:a0:3c:c4:49:1a:5b:67:5c:d9:d7:b0:ab:fc:
                    fa:d8:62:48:2e:81:bf:e0:ed:ee:45:44:df:ff:8c:
                    7e:ce:f2:f7:92:71:b2:1c:86:b9:22:77:c0:64:b2:
                    d7:bf:21:cc:93:82:80:94:67:7a:57:f8:86:3e:ce:
                    d9:8e:6e:4d:5f:22:d0:a1:73:de:38:1c:bc:b4:6e:
                    30:f7:21:de:c4:fa:58:c4:0d:bd:05:6c:95:a5:fc:
                    27:03:65:69:44:d8:ef:5a:56:42:63:1e:a4:5b:fa:
                    6d:3f:a3:b3:8e:5f:d2:7d:38:69:3c:c9:96:29:57:
                    37:5e:3b:31:b1:c5:a7:ab:95:69:a9:d4:a4:91:e3:
                    67:16:f8:09:98:62:64:4b:94:1b:c5:92:35:61:28:
                    96:eb:84:35:7a:d9:47:7f:c6:a9:3e:2d:5b:ba:ca:
                    8f:b6:50:f2:eb:56:ce:c6:62:37:f7:73:17:68:0d:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C2:E3:C3:7C:58:7A:96:E8:20:A3:32:55:C4:13:94:97:35:3F:59
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:16:c7:4c:e7:9a:f2:e8:ab:f7:5b:03:23:56:2d:ab:39:09:
         34:f2:25:68:aa:99:a6:c9:47:61:02:93:7c:89:9e:97:53:5d:
         ed:01:b5:9a:e6:83:94:cb:0d:d5:d7:e4:02:9a:42:19:73:2a:
         f5:7a:6f:f6:73:36:64:f0:ca:87:72:c6:a8:3f:ba:68:93:ec:
         18:2e:b4:9e:5b:32:72:fb:2a:74:f6:dd:d0:86:dc:61:a3:69:
         8a:82:e3:77:75:21:91:7d:8e:26:c9:53:f4:d0:fb:36:e0:ef:
         05:76:f8:7a:84:94:87:a9:13:d7:7b:5b:b7:6e:40:3a:00:4f:
         f5:bc:a5:b1:96:f8:e4:56:c7:ed:86:02:60:55:61:fd:77:c3:
         8a:38:f6:ee:49:66:c4:11:be:ba:99:0f:a0:03:2f:09:20:be:
         55:c5:9a:f0:6c:81:48:2c:7d:ed:d9:28:3e:b1:b3:a7:a3:b3:
         26:39:30:c7:08:a1:5b:ba:eb:16:3b:49:39:8c:e1:54:cf:b3:
         a0:42:29:c6:3e:8d:07:44:a6:f9:9d:8f:41:b1:20:57:56:7f:
         98:0e:d8:a2:66:2c:97:ff:ec:05:6e:20:c2:63:23:96:ac:55:
         6e:40:c6:8c:91:c7:ff:f8:c5:0c:ab:6f:88:f8:34:96:84:e7:
         a5:7f:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:21:26 2025 by rpki-client