Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
File:                     V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft (raw, json)
Hash identifier:          a7sgEDhhxdvKZxfpfZJx2tNyxvJiiUx4pj7dMOy8y6s=
Subject key identifier:   F4:E1:69:F8:48:37:D6:F6:36:E0:C7:DA:5F:FF:05:C5:AE:B3:24:1A
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Certificate issuer:       /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial:       019782B2A94D58A498D6D62244A9268022B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
Manifest number:          0561
Signing time:             Wed 18 Jun 2025 11:00:36 +0000
Manifest this update:     Wed 18 Jun 2025 11:00:36 +0000
Manifest next update:     Thu 19 Jun 2025 11:00:36 +0000
Files and hashes:         1: 1-HZF_Uc44gjh1TQR1U1OYZDHjCk.roa (hash: NuB8apKKsTUzor9NX4p/x2mqEfbsbGqLyBZkaxZdT4k=)
                          2: 1iNqSGLBurdVBRXSj9jkGbrkAYg.roa (hash: I52bbOoIJFwXUk3tZr6SbiTpSM/ybqgeCNsRlccE3vw=)
                          3: 4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa (hash: uj1CpTYiuNEnoBSr8Niym7afjHD/7ENr6+d1VZIXhys=)
                          4: A_elPY7zPzPBy98o20Zvw2Pf34s.roa (hash: 7IEfyja20k0JOW6h30shZ5sYEGCCL8982cOL8o5c1oE=)
                          5: BwN6kYxqgkO3DLOda39xIN312Tg.roa (hash: LjSvlMUTCNkTz474Nf1Brme5doNRxTInUYmorlMrcUE=)
                          6: CS4l_id3Je0z4XeIOUJDEbc0r1E.roa (hash: rmNUVxx5iMwI7gyHQJjeN+M8yPfccTNkB2emgtgmWcU=)
                          7: D96EcvLqQ8mg6gUpgeSUDuWzoII.roa (hash: 47dUj7Yx8C1/dz36m92H2I2YJQ2HstfZCg46ryE4YRE=)
                          8: IBubaaq1KjiQKUwUaYMKhoS5vGY.roa (hash: waPQP0MZ40/qIka7y4UCztuunDgDVp7g/9u2t0hcwRE=)
                          9: IMteYrUcQwC4fikiMPLPlQJ2AU4.roa (hash: bauml31a2/VODfRGvD1moLeSONLOTRLu5AwxRUjBimk=)
                          10: JdKnKUQgNB1Yy4H43wgibSXzdRM.roa (hash: 0S9u0egNlHyLf2o6FRzE/P+MVQvfJ9RMnLrJgBIcmds=)
                          11: MMhAInQYtdpemgLxLkVb7UapM2Q.roa (hash: RsvGtg1Oh/rT4G0MJhnLc79JCFUU1eA/yV9wUhFZTFo=)
                          12: V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl (hash: UkkZwOrUANBaeif09LA1Dodfks7bhaxE7dqBbYynQZg=)
                          13: Z3XKrGVp2Xl9zGxjlW3GuCf1-HU.roa (hash: PGeDPFeIQjFBRjCURjcgvm8bWjQIdMceaR1t9c7i9A4=)
                          14: ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa (hash: UXYn8r3aaYF24M8BGs9jgK62IwYmPfR4KIUePwkGsBs=)
                          15: ZlueNo25GUvLqjkuVCFwyElg2rQ.roa (hash: aj/CGKLCRPUdD2tIc7FHrJFT9sJCeOPsSAxO2ThHbg0=)
                          16: bVTj9GlhWonuaW4I9cjegUl8Y0k.roa (hash: I+YpInZ6hhq3JvCTpsODfdn3dONvUDWi4McBY8idMDA=)
                          17: cz3J00GDAGDueWXPe_xRj5cFv2I.roa (hash: tKJWzH526DBUObRoMJUkTrA5LepSTXjFOeoKdlWF3YM=)
                          18: h8RVLRIjE4nUfJG7xmDMoxSWYdw.roa (hash: uOV3Dck8wLOYY+g9AGWYofIBGQ03hiRB3+yD9l5hJLQ=)
                          19: ocuE4fXKrDYrpQocYLXuAkcw4qs.roa (hash: Nydk7rHdYX2vee746eKrRwtJaLs0LWeYf6W299bGydA=)
                          20: pSiHzZ6NNZSWDrxpjGd3n4aNM88.roa (hash: de9D5UdKP4SSxcQu2P7Wa7gGHaS0oc0Mu69Uzk4RR9Y=)
                          21: qagToqYwWoVNWzUu9qXg7Hb8iO0.roa (hash: NjTbRCsZpXfIxlTNVasjWSDHJx+yddX5ww6d4YwOJF4=)
                          22: tbTmb1wIkJcjOTrxUE98Gt6Tr68.roa (hash: 9h+1BxgCsdJlPqcdrM6DVHk3XBGU8ObSrJfDgfcbyEU=)
                          23: uEa4VCZILMCQRsys6WvXG83b7YM.roa (hash: O5aMlB/YmCcBFoGT+J12Tptzaa4UmyfnNDq0vC5SG6c=)
                          24: w1iF5CiJeCHkszCW3U2fF3iWHfg.roa (hash: jSF2bgkChfkaiNUq0c9ACAnTtaiP8CKGbBiy1Ib+MAc=)
                          25: y6XbwTdraju7epdQsvZSGSFiGc8.roa (hash: 3bnMpjdHVAigcUzJ74ejz+TADuNILoqgQcIoOR7ifkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:b2:a9:4d:58:a4:98:d6:d6:22:44:a9:26:80:22:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
        Validity
            Not Before: Jun 18 11:00:36 2025 GMT
            Not After : Jun 19 11:00:36 2025 GMT
        Subject: CN=f4e169f84837d6f636e0c7da5fff05c5aeb3241a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:8e:88:93:b0:64:b3:21:31:b4:02:fc:12:
                    2b:89:1c:4c:fa:54:1f:23:4d:bb:af:2a:00:40:89:
                    3e:48:87:a4:13:59:ac:11:3b:27:d7:2b:fd:43:17:
                    7a:6b:f6:7b:ac:b1:30:44:a9:3a:87:e5:2b:6e:1b:
                    88:63:46:00:a3:ab:8b:e3:d9:f7:56:6c:98:d4:f7:
                    5b:4e:bc:ae:b4:69:a4:27:1a:56:e1:4c:50:b8:aa:
                    56:a5:96:74:4b:9a:58:cf:9e:72:96:29:0b:e0:5e:
                    60:01:00:de:c4:54:45:70:71:d5:99:16:78:4a:3f:
                    61:7f:5a:26:d9:bc:74:de:13:c6:93:28:4e:3e:e9:
                    4a:1b:b6:3a:a3:bf:3c:76:44:a7:c2:44:55:73:9c:
                    46:ee:4c:87:74:01:fa:0d:37:f7:a4:3f:54:bc:c5:
                    b1:32:fe:5a:7f:ed:16:5a:93:5b:b8:90:58:5f:c3:
                    ce:1e:68:b7:1b:d4:99:96:09:1b:09:98:27:3e:a8:
                    e7:a6:cf:a6:ad:1e:8c:7f:91:36:c9:d3:a1:6b:0c:
                    59:00:8b:88:96:41:31:e3:cf:c2:86:35:58:fa:5f:
                    53:ef:57:04:bb:9a:9b:87:40:a3:84:02:66:09:be:
                    d4:5b:6b:92:ce:3e:d0:33:7e:17:14:ad:f7:f3:33:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E1:69:F8:48:37:D6:F6:36:E0:C7:DA:5F:FF:05:C5:AE:B3:24:1A
            X509v3 Authority Key Identifier:
                keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c4:41:66:5e:c5:64:61:b5:29:68:34:b5:70:93:7d:7a:ee:
         fa:cb:16:31:4a:03:f2:db:f7:5a:cc:af:46:63:f0:82:86:cf:
         8c:fe:d4:c1:b5:c3:88:84:28:d4:51:b7:ce:59:04:32:b8:ce:
         0d:d2:6a:0a:3c:5b:be:96:f9:0c:5e:9b:65:98:16:be:47:05:
         3c:61:b3:dd:cb:33:b6:bc:a6:fd:a8:cf:81:55:6a:29:d1:e8:
         08:0f:04:4c:40:51:ba:a4:98:ae:e9:3b:8f:5a:b5:6a:68:da:
         eb:43:36:f6:53:74:42:cf:e2:3e:5a:c6:2b:11:2b:3c:89:98:
         04:f8:99:a6:a2:b3:1f:10:b1:bb:c3:89:d8:a6:f8:eb:fd:12:
         4d:ee:c5:3d:fc:bb:92:1d:f4:c1:27:30:c8:96:cc:c9:55:e9:
         80:8d:24:95:48:cb:ee:da:8c:9d:28:96:11:83:e1:4f:cd:c6:
         f0:94:ac:fc:8b:5e:d8:d6:4e:ea:d7:67:19:95:4f:fe:ef:12:
         2f:c4:b9:3a:6b:d7:a3:7c:8a:d0:a3:9b:0d:98:db:84:b1:f2:
         a8:42:84:af:64:38:18:23:60:90:1d:38:0b:08:a1:cd:0b:79:
         d3:20:6e:9b:88:8e:2a:09:67:c6:50:cf:27:c2:e8:21:e9:a4:
         b7:87:42:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:29:14 2025 by rpki-client