Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
File:                     V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft (raw, json)
Hash identifier:          hVDK6VOQrTwIGcIkJ122dCFgrQKmJ5hhokoc9WLRV8s=
Subject key identifier:   90:65:BA:FA:A5:7A:85:D6:14:9A:51:92:14:FF:E5:B0:2B:89:7D:23
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Certificate issuer:       /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial:       019688EE070181376655AD1D0D672B9250EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
Manifest number:          04D7
Signing time:             Wed 30 Apr 2025 23:00:22 +0000
Manifest this update:     Wed 30 Apr 2025 23:00:22 +0000
Manifest next update:     Thu 01 May 2025 23:00:22 +0000
Files and hashes:         1: 1-mdVAsmWSwnu47gZ-8q53R0gQ3g.roa (hash: sY0eiu7hdjYEcs+vPLPq8MzuIT52Q5Es7I7pLLIxMVw=)
                          2: 1iNqSGLBurdVBRXSj9jkGbrkAYg.roa (hash: I52bbOoIJFwXUk3tZr6SbiTpSM/ybqgeCNsRlccE3vw=)
                          3: 34v70e-AuL53x6XeHVfYUbbbFF0.roa (hash: NNmZSE1+eD+eECq8uaXsw/X0n6p3Qe7qeIsePK/4Fig=)
                          4: 3RlASXJFq8-CFsitxm3031VufpM.roa (hash: SEsjbRHRxzK/k9UKyWx2Xdj+vQNsC9NbcKuSGMVnHCA=)
                          5: 4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa (hash: uj1CpTYiuNEnoBSr8Niym7afjHD/7ENr6+d1VZIXhys=)
                          6: A_elPY7zPzPBy98o20Zvw2Pf34s.roa (hash: 7IEfyja20k0JOW6h30shZ5sYEGCCL8982cOL8o5c1oE=)
                          7: C8MALQ3xkGfkN_0TZ1lfJy1qQKM.roa (hash: S7D2tsxsn0RnqJ7sQ6FxgdwdfSo0OHAlSY5LSei19mc=)
                          8: D96EcvLqQ8mg6gUpgeSUDuWzoII.roa (hash: 47dUj7Yx8C1/dz36m92H2I2YJQ2HstfZCg46ryE4YRE=)
                          9: IBubaaq1KjiQKUwUaYMKhoS5vGY.roa (hash: waPQP0MZ40/qIka7y4UCztuunDgDVp7g/9u2t0hcwRE=)
                          10: MMhAInQYtdpemgLxLkVb7UapM2Q.roa (hash: RsvGtg1Oh/rT4G0MJhnLc79JCFUU1eA/yV9wUhFZTFo=)
                          11: V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl (hash: 1l/37dt7zFFGKSxo4JArAtztynay4+mWdUNLol6H3aM=)
                          12: Z3XKrGVp2Xl9zGxjlW3GuCf1-HU.roa (hash: PGeDPFeIQjFBRjCURjcgvm8bWjQIdMceaR1t9c7i9A4=)
                          13: ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa (hash: UXYn8r3aaYF24M8BGs9jgK62IwYmPfR4KIUePwkGsBs=)
                          14: ZlueNo25GUvLqjkuVCFwyElg2rQ.roa (hash: aj/CGKLCRPUdD2tIc7FHrJFT9sJCeOPsSAxO2ThHbg0=)
                          15: bVTj9GlhWonuaW4I9cjegUl8Y0k.roa (hash: I+YpInZ6hhq3JvCTpsODfdn3dONvUDWi4McBY8idMDA=)
                          16: jY6rzV24DSHBqF83mDHyDcxT9_Y.roa (hash: awVGf7u9AukzChaDLKH/KdOFbhrkdA+Lgwe8PkUBz8c=)
                          17: ocuE4fXKrDYrpQocYLXuAkcw4qs.roa (hash: Nydk7rHdYX2vee746eKrRwtJaLs0LWeYf6W299bGydA=)
                          18: pSiHzZ6NNZSWDrxpjGd3n4aNM88.roa (hash: de9D5UdKP4SSxcQu2P7Wa7gGHaS0oc0Mu69Uzk4RR9Y=)
                          19: qagToqYwWoVNWzUu9qXg7Hb8iO0.roa (hash: NjTbRCsZpXfIxlTNVasjWSDHJx+yddX5ww6d4YwOJF4=)
                          20: tbTmb1wIkJcjOTrxUE98Gt6Tr68.roa (hash: 9h+1BxgCsdJlPqcdrM6DVHk3XBGU8ObSrJfDgfcbyEU=)
                          21: uEa4VCZILMCQRsys6WvXG83b7YM.roa (hash: O5aMlB/YmCcBFoGT+J12Tptzaa4UmyfnNDq0vC5SG6c=)
                          22: w1iF5CiJeCHkszCW3U2fF3iWHfg.roa (hash: jSF2bgkChfkaiNUq0c9ACAnTtaiP8CKGbBiy1Ib+MAc=)
                          23: y6XbwTdraju7epdQsvZSGSFiGc8.roa (hash: 3bnMpjdHVAigcUzJ74ejz+TADuNILoqgQcIoOR7ifkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:ee:07:01:81:37:66:55:ad:1d:0d:67:2b:92:50:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
        Validity
            Not Before: Apr 30 23:00:22 2025 GMT
            Not After : May  1 23:00:22 2025 GMT
        Subject: CN=9065bafaa57a85d6149a519214ffe5b02b897d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:ca:15:4b:61:1c:68:33:0e:b4:54:aa:f1:
                    4d:2e:65:26:86:5f:15:57:0e:ed:5b:86:d1:b7:6d:
                    70:f1:ea:24:8a:04:a7:47:2b:19:41:e5:21:c3:c0:
                    fa:41:e2:d7:fa:a0:79:44:2c:16:fa:24:92:9d:03:
                    27:88:5c:d3:f2:fe:b2:07:43:9d:11:ca:4a:0f:47:
                    0c:6d:ae:b3:b8:d1:41:2a:cd:e8:8b:4e:23:97:63:
                    53:09:9c:fa:9f:c1:1b:2b:ff:30:79:74:25:bf:81:
                    09:5c:de:f5:a5:a2:9d:71:70:08:e3:8c:87:da:86:
                    ed:be:42:e5:2d:4a:83:0d:e6:14:9b:e9:88:c9:e7:
                    72:60:54:58:bc:5c:77:b4:1f:87:7b:17:67:c4:a2:
                    f9:ac:78:e8:9c:69:fe:24:27:a6:1b:f3:ec:f9:52:
                    a5:25:f2:21:a7:38:a9:bd:5d:41:69:56:b9:99:c0:
                    dd:42:86:93:2d:7f:71:95:39:dc:aa:ad:8c:c5:f0:
                    2a:44:45:76:38:b9:da:9e:ba:56:9f:c3:fc:d1:e1:
                    ff:5e:5a:d7:22:60:76:1b:ac:21:4d:22:06:c5:54:
                    05:60:9c:03:f5:36:8c:ee:81:cc:2e:dc:1d:16:19:
                    8d:4c:40:79:3c:f6:ae:56:b7:cf:e2:78:11:c4:0b:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:65:BA:FA:A5:7A:85:D6:14:9A:51:92:14:FF:E5:B0:2B:89:7D:23
            X509v3 Authority Key Identifier:
                keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b9:8a:d0:ab:9a:ce:d1:e4:b1:8e:df:72:95:1c:61:0d:c2:
         70:4e:73:ff:18:05:5f:ec:34:60:6a:47:11:94:d2:26:fd:d5:
         f1:97:e2:04:02:7c:b0:40:72:83:77:ba:5d:ff:ca:94:40:b2:
         2a:aa:b3:5f:7f:0a:e2:ce:62:57:34:ab:e0:cf:a5:2b:b9:3f:
         bd:3e:a4:af:78:87:ff:d2:fc:18:33:98:12:13:1e:d0:86:76:
         ac:02:aa:3c:98:1e:e2:29:c0:83:32:6c:2c:39:8f:a1:3f:00:
         40:73:0b:77:15:d2:81:e0:5f:26:2b:41:b1:0c:b0:81:87:0d:
         82:78:47:00:d5:e5:b8:de:d6:de:19:b8:c8:7e:d7:17:1f:a3:
         b8:65:c8:f7:8c:55:a0:65:dd:23:bb:55:69:46:18:67:0d:14:
         b2:d2:62:29:d2:da:6f:59:5a:c7:50:a8:c1:21:00:39:9c:28:
         15:c8:f0:83:a8:98:62:f9:ad:f4:af:df:3b:39:71:67:80:b5:
         f4:cb:b2:16:f1:29:51:3e:68:ff:ee:68:a5:5f:79:6e:60:f5:
         8c:7f:5e:11:fe:62:4b:f3:e4:91:18:78:0a:4d:31:36:52:63:
         5e:70:b1:24:e7:b7:c4:82:3f:d2:f7:dd:99:60:7c:46:93:44:
         87:aa:32:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:03:13 2025 by rpki-client