Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
File:                     T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json)
Hash identifier:          FPhzS+2OFM9afDP7dUpoehP75U9MLPvI5aVfCZBnJtA=
Subject key identifier:   77:98:7A:28:40:63:D1:A7:27:56:FD:B4:20:8C:63:34:01:18:AF:E7
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       01967266806186D5A5E0FC36AA2D553EB0EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
Manifest number:          15A4
Signing time:             Sat 26 Apr 2025 14:00:42 +0000
Manifest this update:     Sat 26 Apr 2025 14:00:42 +0000
Manifest next update:     Sun 27 Apr 2025 14:00:42 +0000
Files and hashes:         1: 1-L9qSgE09LkQG7Ea8EBDdDw4ino.roa (hash: L03XGEs9qhc6ohMjsbyVjgW+T6aNu0Or4uMNslNgGaI=)
                          2: 4iHcBGfl4oJ0jUkqbJpTpkjJRRA.roa (hash: 9gUiJ2PpTaXRBDYpcks5/ZTXgi/FI7Hpa6+iF/UooaM=)
                          3: 5GpN33ElR1lUI3r69WNur5XVlhs.roa (hash: Ag+FWXz8zur3U3WfkactLdqUhbzus2FhO2lgG9Wdyos=)
                          4: 72pbmlHoUDNNi9_U2U3igLv-Ejw.roa (hash: +n5e4ojLZqtJRZkCcqRft73mFkgQhj3CgkBkuxQfYWM=)
                          5: ApvhjKPqS54Ym0klIaNKAJ8kwfA.roa (hash: G7CMBZzYEWEowN0oeXl4yB4eRy4GZVwzz9Vsjln2SbY=)
                          6: Bl9_vWIpRsVo1QhxYcFKc0IqD6k.roa (hash: 1LM6MDYaE6Y/jo/PARMtexnN79ZdrRCB7ndwYT67l/g=)
                          7: D4fjlMdzoE531488p0OTA-8Nk-o.roa (hash: ZYvjH+ox9QqmVT8DocHf0I+vPA4vlzbkktR49hxKf8Q=)
                          8: KM_F04W97L4fGV6eB1EFGADXYBA.roa (hash: dZWwjg2hZJwYzS80M1Flty/faDlYaBPiOJ5OQ7mS6kc=)
                          9: LRsE8HjdoDuIOCHhNJWGn8Yh3Z4.roa (hash: x5/q1IzKRQsjqMHjgJuVRy8oArjf6h7TAw1i1N5j5cs=)
                          10: MsFmWJOoSFY3BCE49erYLm5IeF8.roa (hash: +ULhpY8+EhNOI9KNs3g5QfGlO9AZRphDDwBCNw26nt4=)
                          11: Mz8Xzjb4Em-bp16qe94uV9f2KSc.roa (hash: IgI2K3rzQ3JJ+QIwmVbORi3IMlNvAYMKIlRufn/wj8k=)
                          12: QOd_WFMEgwOyxqu-Xk2hZvgMcH8.roa (hash: uXkg5eescOxXc9nW3DCPgg8rcsXy8Kvy8S+sNh4PoXk=)
                          13: QsDL7x5oAgXjMeRoqEotR0YXQIw.roa (hash: z8q4Yda7b/Bhl+Mb3DcVE7Ved5TmFaoFf3dZxwrq/z8=)
                          14: RxbAg4EFxx_FKjDSty8_Ag5B0Wo.roa (hash: fyJVWs7abgQPirZqK6oCiRYQDMcFiF3X6qhzJ7XsPjw=)
                          15: T46eT9zSYH6URoM2Ax_k7Yqlvm0.roa (hash: p7kOptu0n/Z95hIwZVAQ4UU0Tcx07mXU3vGZb5npLhU=)
                          16: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: ZIl0WrmguclcpP3HUoteBgy0MigHnKMAmoKuONumFWg=)
                          17: TLLe4Fv1ZWKn7cU4s2eOqRGhW2A.roa (hash: LIvDYJiCNzHfZb5Qat96s04TPvC5BTwrmEMarvzgqYw=)
                          18: TP20cqgrRS62gq18eb59UXXXu_4.roa (hash: R3eXtiwBlk955gzJVNGvUpi8z8C3GRcoXeIJ9oVuG1Y=)
                          19: XDf-VYAuh-nDO2CMYXVIF4SuPC8.roa (hash: cl+9twv2D+eBNV8KlvTFCcF9tVblyskg3wu09JdTgSQ=)
                          20: YvEsta7UkUfJxn1JV9JHj6QzL1k.roa (hash: cVuuCBZsVwaCNI4FHR4twQLuwRlOFeF2gBPEHlJV5sI=)
                          21: ZTeJrV44cuelAuZVlfb9KznDqF8.roa (hash: fF8x7hlp4yott2TezNaaq/nLq2M2TgyvOaX91+gXVXU=)
                          22: cDexNbgz65SAnilI4jNQbU6GDQA.roa (hash: fm8UnKsXFZ8Kv7++bvjbjI+U2EMIi8pzLEAUXfPizog=)
                          23: cbLUFQPWDFBGgeTsBo59RiL6NGo.roa (hash: 3TCJxN5y669eIRDifXi9lQDad+lKQ5Y4Rq48mm7g5Zk=)
                          24: clX0YNiQqxrLh5KRIQ1WDmi_sYg.roa (hash: lHdAtOJZ05TKI2DoNumHZCY0VkGmTIkvqW26oGZ3P+8=)
                          25: dPUv0UiEsSl2wmwWh7WXiVW0oUY.roa (hash: QsY9itLfjJ5WmB+KPuW0ZbZL+FhYgpcBDGOifX3R4vk=)
                          26: jCiHPK3wNyuRtDEUwZHSN0KDuO4.roa (hash: Qj7y4x7BMyHXAR38SpBo01o4/+J3Z9RBCroeA9exmWw=)
                          27: l2HpuvC6f9fVbGRIU_YgYBjx4vw.roa (hash: Kdrvt9fByjaGxTJ7co7gZehnEAPmEhpF7v2Q4ea8KVE=)
                          28: lPrZs3D91Gt-m6B9Dr3LWvP3o94.roa (hash: fhopXrhhREaGMI2tIGmpG5P4JKsz7B7bhwx1BvlGmtQ=)
                          29: rtmJ15QCyMu37KZSjTEhWQ0zmek.roa (hash: Lz0OEHkJQ5eiVEeDAp2VWfKoDiv6W8z6xoQRzfJhjuk=)
                          30: xmPrjXwgzAc4bi6Op-k92DP0zYQ.roa (hash: Yg07yPbPmPxhkY2QOReSXpIrXS2cz6DJVyYuiKyL6xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:66:80:61:86:d5:a5:e0:fc:36:aa:2d:55:3e:b0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Apr 26 14:00:42 2025 GMT
            Not After : Apr 27 14:00:42 2025 GMT
        Subject: CN=77987a284063d1a72756fdb4208c63340118afe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:a0:9a:ca:5b:29:59:cb:c1:57:30:b5:2d:
                    9a:98:e1:9d:fa:c6:20:f8:8e:47:79:9b:96:1e:f9:
                    74:8b:8a:8a:d9:1c:92:a2:59:93:61:60:2c:b0:a7:
                    f3:e1:bf:64:b6:79:8c:82:38:d8:7f:0a:cc:e1:63:
                    29:2d:4d:db:93:05:b0:41:ae:4b:c5:42:e0:be:fa:
                    c6:72:48:40:fd:08:06:a8:83:59:8b:06:11:ab:dc:
                    13:8b:93:1d:b1:11:56:6d:b0:0c:01:fa:08:a4:39:
                    56:9e:5d:24:1d:af:a1:ca:b6:55:9e:32:1e:b7:93:
                    e8:8b:81:e5:fe:79:a5:26:7b:35:05:cd:0e:df:9f:
                    05:51:7c:d5:7d:78:00:04:7c:27:49:54:e8:87:3f:
                    ba:2d:d1:90:c3:89:cb:e1:9d:92:43:35:96:db:c5:
                    d2:40:25:0b:40:a7:10:0d:20:1e:54:49:9d:9b:79:
                    eb:9e:6d:59:b5:71:1c:01:3e:4f:39:7b:94:91:7e:
                    76:a3:07:4f:1e:b8:61:e5:43:40:c7:5a:8b:08:fc:
                    be:b9:a2:aa:31:dd:58:41:42:06:d5:9f:f0:26:f9:
                    9d:cb:7e:e5:70:74:46:3a:89:67:38:8f:f4:c6:6d:
                    72:a7:b3:b2:93:df:66:5d:24:ab:b7:53:50:f6:61:
                    69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:98:7A:28:40:63:D1:A7:27:56:FD:B4:20:8C:63:34:01:18:AF:E7
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:64:c1:24:2d:a2:e2:47:3d:13:a4:b8:7a:7e:05:1f:87:8a:
         0a:b5:cf:9b:e9:98:7d:10:8c:fd:cd:b3:f5:f7:3f:47:5d:f9:
         df:73:10:23:aa:f1:d7:4d:ae:4f:ec:14:40:07:3c:df:15:be:
         71:b8:ab:f5:a1:01:47:6a:5d:d2:99:6a:bd:fd:6c:14:08:b9:
         c5:c9:0e:13:d2:7c:36:8e:9c:e8:cb:38:85:ca:c8:36:e8:8d:
         a2:b3:b9:37:ae:9e:89:81:40:8c:19:f7:73:98:7c:a3:ac:cb:
         a3:99:b9:38:21:72:22:8b:09:e9:e2:7c:5b:34:1a:26:cc:94:
         45:b9:e1:25:79:41:fb:a5:c2:4f:d7:63:b2:c5:81:c7:0b:97:
         d1:7b:0e:8f:46:77:40:9f:bf:3e:e1:49:b5:4c:b2:68:83:5b:
         be:17:37:87:07:15:0c:6a:05:2d:51:33:12:66:32:27:3c:c9:
         94:3d:cf:05:11:d2:4a:54:ca:a3:1e:8f:d6:02:9a:83:08:16:
         eb:71:a8:ee:e5:2d:e0:47:11:15:ce:52:87:eb:33:9c:d8:63:
         8b:0b:f9:05:34:cb:b5:71:b0:5b:dc:be:db:47:c9:3b:f9:bb:
         c8:c5:51:6c:d4:63:a7:7a:bf:38:8b:28:32:ae:72:07:d2:f3:
         71:15:9b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:49:11 2025 by rpki-client