Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
File:                     DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json)
Hash identifier:          vR7OMYMG6/XmpDk7QEvWW1pd+cA8a8Bx3nCTwkUeRGw=
Subject key identifier:   59:8F:D9:8C:54:96:B0:37:1A:DE:1D:F9:1B:D4:29:CD:82:A7:FF:61
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Certificate issuer:       /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial:       0196824748FBDC0EB7AAFA58EF6A5194D76B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
Manifest number:          1324
Signing time:             Tue 29 Apr 2025 16:00:31 +0000
Manifest this update:     Tue 29 Apr 2025 16:00:31 +0000
Manifest next update:     Wed 30 Apr 2025 16:00:31 +0000
Files and hashes:         1: 0hFTuA6AYFpULfZQK-DJnDN4HTE.roa (hash: ZWH8sUTXV7vc3XiT9tGW1AKcmChi4TaSnZLt2D9dIPY=)
                          2: 4pZKRfe5fiQn8NCnSgtBMxH4nA0.roa (hash: /bv/y4DWJzT7cXKu9PqjPnO5JeXnj7ypys8X05kZhms=)
                          3: 5w999aY5B-VWAa6ftaNr618pG0E.roa (hash: 8wN96xy8ODTe8QO5TfcB2rXR54h3xrngHGhngMKpn4Q=)
                          4: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: kQ40DB7QhcchiUtJNJOOD5NnGwLSJE0Zw9P8MqWV5eY=)
                          5: G-4MkLr94NS2-9Ku0UWb3AXttl4.roa (hash: MJLnkHzwVcSrOTlOpvURHWaKDFPtD/OsJDcwH0W+j0Q=)
                          6: GvjwQJC9DdP7_qbPkN-koM22ONc.roa (hash: V1Pprk+ac1UgNd3D2gH6NUqG9FbJK9dkkFlOqw7KkJ0=)
                          7: ObT--BjZ0RTC9v8KUfNAXJErkK4.roa (hash: PUggAjXL6p26e7O1E2dQJLLZhDJNB05tG3qARPuO6Zs=)
                          8: R-yr__D8H7MP9PScPKEilF73LO0.roa (hash: nvt4z74nDeI7TVi+pk9xj2FnIVd/rCnmLiaN7owjvJE=)
                          9: Yz2WA4YrokT5MNylkkePaMrbf2o.roa (hash: ziXl9mNJzbObSVi2cK+BC9zmxuWzXdJmKO6shLQNMdA=)
                          10: Z9UpHL_4Svka-a2SFk7JpuCGULM.roa (hash: Mw47jGUhULfkUmOv6fe3wFOJXdnrID0cVeUzfPq9e04=)
                          11: _mbTkWs_huXNRXoAZz6RgcHa1ac.roa (hash: Gtnl2zq6+nya1Z5zQfHNFtNMNJ5L0SVArl4/D3Vch3Q=)
                          12: aVCML_0qfO6OM-B-v0Xw0SaCLis.roa (hash: gzLeZf6vO+ZM/QBYI1anl4lUtsGtfB7flnqVi3ieG9w=)
                          13: decwyQByL9jlEF-fUB7pfHoFmgQ.roa (hash: 5O1HhNbTc555c6OiBZaMXaTg/2tAkc4lpEKBesV7WOU=)
                          14: eBLjgP6QOLHPEHfrPD5twygIeZU.roa (hash: JBGkxKIicuoXximDsbTGL6FHqL8hJgTiNa9S88568yo=)
                          15: f9ZO97gOWJUut8XaLFuUGxsZrIY.roa (hash: 6tq23TLuISKAQugLOcVCTXKPxD4H8WtHoGjZUKQXbNY=)
                          16: k6cDiCt-ewxpqeRmfJzrjmZcNYs.roa (hash: F25einM6r2JI8uo+fB3CIsLXrVN1axCT87o7iIgCFmA=)
                          17: zzJiEA9OQiotmK-6chwppb9bfAg.roa (hash: phH+Eq45ta+fXEQo1+NZ8G1rEF6YkHPFggEaaMcPisI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:47:48:fb:dc:0e:b7:aa:fa:58:ef:6a:51:94:d7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
        Validity
            Not Before: Apr 29 16:00:31 2025 GMT
            Not After : Apr 30 16:00:31 2025 GMT
        Subject: CN=598fd98c5496b0371ade1df91bd429cd82a7ff61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:f5:f1:2b:a2:9a:ae:44:85:4b:39:52:1d:
                    04:ce:8b:5b:da:5d:ac:dc:ad:7e:2c:a1:24:c6:4e:
                    07:24:6b:03:9a:8d:7f:cf:5e:66:6a:be:d1:85:85:
                    68:e2:92:aa:f9:b8:fa:7c:89:24:c0:7e:a1:0e:94:
                    ec:3f:99:8b:ec:7e:40:f2:bd:2b:08:48:0b:3f:7e:
                    f5:d2:d9:86:f6:9f:99:9b:f0:22:bf:f6:f2:bb:15:
                    dc:9d:5f:a5:2b:7a:56:dd:24:4b:3d:ee:ab:08:04:
                    5e:8d:71:39:c4:32:5c:cf:77:59:48:c5:16:35:4f:
                    8d:48:4e:93:8d:c7:5a:64:13:f3:23:b8:aa:4e:6e:
                    ef:a5:33:28:90:36:43:c6:49:53:89:9a:fa:52:8a:
                    ab:c8:75:dc:e8:c9:bf:4b:ab:15:73:26:42:84:4c:
                    f7:a9:0d:e8:b2:4c:c8:33:6f:57:e7:c7:cf:bd:c5:
                    77:0a:f6:51:93:f1:2f:c5:93:42:28:dc:3a:9a:60:
                    4c:65:cf:43:81:2a:8b:69:89:d5:ad:a9:14:78:5a:
                    53:0c:7f:ea:49:82:3d:27:9b:be:bd:45:8b:05:e0:
                    b5:9d:20:80:fe:86:82:54:4d:00:1a:bd:9d:77:b1:
                    cd:82:63:ac:e4:4e:1e:8f:d9:bc:9e:c0:e7:a6:29:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8F:D9:8C:54:96:B0:37:1A:DE:1D:F9:1B:D4:29:CD:82:A7:FF:61
            X509v3 Authority Key Identifier:
                keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a9:43:99:73:a4:d6:4f:77:d9:76:45:09:77:32:47:01:d6:
         e6:b3:33:32:80:cc:a5:d5:1a:58:82:f2:68:59:31:ec:74:40:
         68:5a:a6:e8:03:f3:61:ce:17:4c:2b:12:51:92:b5:7e:e1:a6:
         14:26:4b:a5:57:53:92:6d:1d:c9:96:42:6f:5a:c7:c5:8e:9d:
         c2:66:e7:55:ee:f6:d7:4f:69:da:0f:7c:2f:a6:23:a2:5e:da:
         85:de:32:8e:58:f4:fb:77:a5:6c:c3:8a:85:db:e6:39:d7:7a:
         20:18:14:9e:9f:cd:7d:04:81:7f:13:c2:7b:26:d6:e2:72:0b:
         b9:db:ee:57:ca:b2:50:4e:d1:37:0d:21:72:20:3d:81:95:56:
         1c:37:5e:9b:b0:1f:fc:4f:1c:f0:54:18:9e:f1:63:bd:65:c3:
         73:37:93:36:d1:ff:58:0f:0d:c2:29:46:f2:96:ce:3b:f1:73:
         7d:17:93:c8:9e:f1:a4:f8:7c:c3:3c:63:03:8d:b3:24:94:0d:
         a6:1f:4f:a6:a4:9f:61:1e:0c:77:22:a7:83:6d:4e:63:60:63:
         94:e1:84:54:9f:a7:87:27:86:d8:19:50:ae:64:f1:35:7f:23:
         48:02:1d:62:57:4b:0d:90:57:01:8d:fa:69:d0:e7:f3:18:70:
         67:50:26:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCR0j73A63qvpY72pRlNdrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0
NGY0NDQwHhcNMjUwNDI5MTYwMDMxWhcNMjUwNDMwMTYwMDMxWjAzMTEwLwYDVQQD
Eyg1OThmZDk4YzU0OTZiMDM3MWFkZTFkZjkxYmQ0MjljZDgyYTdmZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBX18Suimq5EhUs5Uh0Ezotb2l2s
3K1+LKEkxk4HJGsDmo1/z15mar7RhYVo4pKq+bj6fIkkwH6hDpTsP5mL7H5A8r0r
CEgLP3710tmG9p+Zm/Aiv/byuxXcnV+lK3pW3SRLPe6rCARejXE5xDJcz3dZSMUW
NU+NSE6TjcdaZBPzI7iqTm7vpTMokDZDxklTiZr6UoqryHXc6Mm/S6sVcyZChEz3
qQ3oskzIM29X58fPvcV3CvZRk/EvxZNCKNw6mmBMZc9DgSqLaYnVrakUeFpTDH/q
SYI9J5u+vUWLBeC1nSCA/oaCVE0AGr2dd7HNgmOs5E4ej9m8nsDnpilR6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmP2YxUlrA3Gt4d+RvUKc2Cp/9hMB8GA1UdIwQY
MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt
ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1
LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKalDmXOk
1k932XZFCXcyRwHW5rMzMoDMpdUaWILyaFkx7HRAaFqm6APzYc4XTCsSUZK1fuGm
FCZLpVdTkm0dyZZCb1rHxY6dwmbnVe72109p2g98L6Yjol7ahd4yjlj0+3elbMOK
hdvmOdd6IBgUnp/NfQSBfxPCeybW4nILudvuV8qyUE7RNw0hciA9gZVWHDdem7Af
/E8c8FQYnvFjvWXDczeTNtH/WA8NwilG8pbOO/FzfReTyJ7xpPh8wzxjA42zJJQN
ph9PpqSfYR4MdyKng21OY2BjlOGEVJ+nhyeG2BlQrmTxNX8jSAIdYldLDZBXAY36
adDn8xhwZ1AmOw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:56:36 2025 by rpki-client