Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          a4NxtACPz6xzJV3U+8EYzFGPs/NfeISrPuhYvnIzWMA=
Subject key identifier:   C8:AC:3E:AB:6F:1C:0B:8D:D7:02:8E:7B:6F:43:93:06:D0:1C:BC:5A
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       01967341F3395BAE794C26D9468A7C1D835E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          1565
Signing time:             Sat 26 Apr 2025 18:00:24 +0000
Manifest this update:     Sat 26 Apr 2025 18:00:24 +0000
Manifest next update:     Sun 27 Apr 2025 18:00:24 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=)
                          15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=)
                          20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: FGsCgt6myo+yBy8wHlyAFRXZrlumMcGRR2MsP7Wlql0=)
                          21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=)
                          26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:41:f3:39:5b:ae:79:4c:26:d9:46:8a:7c:1d:83:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Apr 26 18:00:24 2025 GMT
            Not After : Apr 27 18:00:24 2025 GMT
        Subject: CN=c8ac3eab6f1c0b8dd7028e7b6f439306d01cbc5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:87:e9:3b:88:27:ef:e3:56:52:35:4e:3a:97:
                    c4:0c:8b:c3:2e:00:5b:9f:28:63:86:58:aa:b0:70:
                    a9:77:85:a0:e1:50:c2:1f:dc:ca:fc:e8:36:2a:31:
                    99:e8:3f:8d:ed:32:c7:51:7c:f3:78:9c:f1:25:fb:
                    af:7a:7f:64:03:ee:18:f4:3f:bb:23:20:1e:2f:8d:
                    96:85:b1:c5:ef:5d:b2:6b:6e:b1:33:19:e8:59:7a:
                    58:c4:6f:3a:6b:b7:92:c2:ed:38:87:eb:31:fd:36:
                    49:fb:5b:09:b5:71:78:e8:6f:5c:eb:5f:e6:45:2c:
                    8a:fa:60:77:6e:5b:07:40:b7:f3:0f:a5:da:de:26:
                    de:b7:e0:d3:2d:5b:0f:1a:a3:55:48:0c:fd:27:4b:
                    7a:ec:dc:9b:cd:9e:77:e0:86:af:6a:74:6a:96:1e:
                    0b:35:4a:0b:26:f4:2a:f5:d2:65:13:0a:d7:9b:a5:
                    fe:db:cb:9b:d6:40:63:e7:72:47:99:14:dc:c2:9d:
                    4d:99:dd:88:0e:eb:de:38:4a:60:9f:64:c4:a3:b0:
                    ff:7a:5d:4f:16:8e:8b:86:3b:da:ca:38:f2:5c:10:
                    fb:fe:f7:b3:8f:c2:60:bd:8e:0f:bb:34:ea:a2:87:
                    5c:2e:b6:4c:10:39:98:8f:b5:cd:05:3e:2b:16:63:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AC:3E:AB:6F:1C:0B:8D:D7:02:8E:7B:6F:43:93:06:D0:1C:BC:5A
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:37:5e:b0:52:f4:fc:d2:d9:6b:46:50:2c:6f:85:14:70:
         2e:bc:7f:18:8c:65:d6:26:b3:69:a0:22:5f:f3:df:97:14:d6:
         3a:00:de:11:a8:b8:9e:b9:5f:29:c2:e3:53:f7:37:d3:3b:68:
         5d:e4:23:ed:ce:5b:f6:e0:09:3e:6f:b6:b7:9e:7f:d8:dc:df:
         c0:39:3f:03:29:37:9a:40:4e:ca:63:33:92:3c:b8:cd:2d:c7:
         a3:aa:c6:fb:ff:1d:4d:2a:a7:e4:4b:1c:b3:01:11:53:6a:84:
         01:b6:61:43:2f:d5:be:c9:5e:2c:7c:a3:7f:d0:81:aa:93:11:
         e7:6c:f7:9c:6e:74:53:56:29:78:f6:b4:8c:6a:54:ae:2d:0e:
         61:20:f7:6e:a4:25:81:7f:9e:ec:b3:4f:6c:30:b2:b6:15:8e:
         03:93:bb:77:ed:24:61:cc:f3:0a:92:54:c0:65:06:80:b7:78:
         0e:43:83:00:1b:05:1d:9f:2a:50:47:0f:28:52:95:e4:38:11:
         b1:44:df:75:af:aa:ac:3f:dc:54:48:a5:b6:3f:33:f1:99:3d:
         89:22:f0:8c:51:36:60:d5:6c:cf:42:92:76:37:c5:d6:ce:71:
         a0:81:21:31:51:4a:79:b2:e5:b5:3a:3e:85:4e:d0:36:ef:76:
         8c:d5:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:17:08 2025 by rpki-client