Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
File:                     _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json)
Hash identifier:          uwdRbUFli2uVpk2k9Yt3cUAeJAalrN/2Yhr/VdEbjVo=
Subject key identifier:   06:1B:5D:7C:4C:94:94:5F:29:7F:8B:DB:AB:08:DF:6C:9B:8B:84:18
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Certificate issuer:       /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial:       019673B034114420F98CE0C40F598338D55F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
Manifest number:          154F
Signing time:             Sat 26 Apr 2025 20:00:49 +0000
Manifest this update:     Sat 26 Apr 2025 20:00:49 +0000
Manifest next update:     Sun 27 Apr 2025 20:00:49 +0000
Files and hashes:         1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=)
                          2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=)
                          3: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=)
                          4: 8JVDAVLNFauwqQaVfnt2Vbf7qyM.roa (hash: v8PEoTepb8SY5IPZDmMyByiGGEsM8VZnFBHuEpMHhf8=)
                          5: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=)
                          6: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=)
                          7: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=)
                          8: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=)
                          9: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=)
                          10: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=)
                          11: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=)
                          12: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=)
                          13: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=)
                          14: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=)
                          15: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=)
                          16: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: Jc+HWWuxWOnghLk4aL0QOvssWz54peGSaCBDbrvOLhM=)
                          17: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=)
                          18: bloAk3yeA7RnUogV_JT9EWIP-hM.roa (hash: 2fE3VucaSZiB1/IjzEIuOiCkE2iec+1KGKY3worRZJI=)
                          19: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=)
                          20: cvTzrIYooEqCYZcTeeMvVkAMxYo.roa (hash: NG5lHzxF9cCWRX9QDdwGDjbgn25GA3c/1BtMGNNx+qk=)
                          21: iUM8bJHwQ48CpEg1dQgbuZoF2F8.roa (hash: FAU/hqJaw9dZlVsB9TPc90NTrKoL6yNGJeYIXg92yTQ=)
                          22: mphDesgjK6Onr5y6IZPMTWlrP-U.roa (hash: ilbmBxOIagqo/tPLQF0wDgYFEpCdkEK/5ye43lns6Ks=)
                          23: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=)
                          24: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=)
                          25: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=)
                          26: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=)
                          27: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:b0:34:11:44:20:f9:8c:e0:c4:0f:59:83:38:d5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
        Validity
            Not Before: Apr 26 20:00:49 2025 GMT
            Not After : Apr 27 20:00:49 2025 GMT
        Subject: CN=061b5d7c4c94945f297f8bdbab08df6c9b8b8418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:15:33:45:d6:6d:ec:84:ff:16:f8:67:15:
                    e2:83:5b:9d:f9:75:3d:79:d2:fa:ae:a8:61:85:64:
                    11:6c:9c:38:a3:9d:c7:dc:fc:56:bf:9e:28:90:f9:
                    a6:9c:56:6b:ed:e2:2e:bc:53:21:95:1b:90:b9:38:
                    91:ca:03:1b:fe:3a:8b:17:de:f8:55:4f:52:31:a9:
                    be:6d:ea:64:6c:6f:2a:f9:e8:71:71:54:f6:79:3c:
                    f1:2b:6a:b8:7c:ad:44:65:f3:55:94:51:a4:1d:fc:
                    14:7f:2e:16:42:39:7a:e8:ee:4a:33:9a:47:a1:6f:
                    8a:43:be:d7:c5:cf:0d:2f:ec:42:3b:54:69:67:4f:
                    fc:26:21:bf:07:fc:ed:9e:45:74:ef:d6:34:d9:29:
                    97:4d:27:3a:fe:0b:03:70:dd:78:ff:87:82:36:72:
                    98:a0:75:f3:fb:05:b2:12:73:cd:40:7a:38:b8:fa:
                    5b:dd:ce:be:26:c9:af:50:51:b5:21:0b:41:f6:f3:
                    c3:03:08:d7:e5:e1:c3:9a:81:0e:36:3e:4c:6e:fb:
                    0b:0c:c5:86:46:64:e4:8b:29:50:24:cb:96:26:84:
                    44:1e:ac:25:5a:5e:9d:26:24:46:38:f7:b7:1d:15:
                    fa:8a:2f:8f:bf:70:6f:4b:28:ac:1f:de:1c:49:2a:
                    e9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1B:5D:7C:4C:94:94:5F:29:7F:8B:DB:AB:08:DF:6C:9B:8B:84:18
            X509v3 Authority Key Identifier:
                keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:a8:1a:06:bb:f9:40:4a:48:8f:ca:43:ab:79:65:db:f8:90:
         94:e5:46:eb:18:d2:96:87:36:6b:c0:0b:04:88:97:4e:26:23:
         cd:51:aa:11:60:ff:e7:16:b4:b2:27:7b:44:e3:90:10:71:dc:
         5a:19:2b:63:ef:34:bb:22:36:07:b5:35:ee:09:09:43:e5:57:
         55:71:99:cf:48:5e:13:26:3c:b9:f5:85:06:56:d2:ab:81:7d:
         40:21:ca:01:67:41:a8:b5:db:3d:e8:34:18:07:7c:d5:b7:02:
         cf:0f:a7:83:90:7c:54:dd:b9:9e:d3:6f:34:ae:8e:74:fc:75:
         19:da:93:70:e2:0a:0e:d0:44:60:65:ac:5c:b4:69:84:e3:43:
         5e:5f:3b:e3:46:53:d6:57:d2:68:0e:15:3c:ae:50:f0:49:29:
         c9:d4:33:ca:ca:58:ef:cb:bd:6b:38:ee:08:e2:f5:d7:12:18:
         21:a5:f9:ef:45:18:44:d3:9a:a9:03:0c:5c:8b:83:a0:a3:fe:
         43:4c:87:c0:45:5f:99:54:c2:7b:a5:07:ed:40:61:3d:17:2c:
         69:9f:70:06:2f:6e:70:b2:76:25:16:03:99:98:e6:b9:4f:18:
         90:a5:93:6b:f1:7e:49:99:5b:6e:1e:b9:51:da:f6:09:1d:49:
         65:0d:37:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:16:37 2025 by rpki-client