Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
File:                     Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft (raw, json)
Hash identifier:          Ef+w1vvd6NEFjA1bzxE5KeuFZ7FBLD6OtUeLNl46HFo=
Subject key identifier:   C5:80:A9:72:06:9C:D5:23:81:33:5A:16:E2:BD:83:E6:BB:82:84:0F
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Certificate issuer:       /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial:       01964E5A3268BB9F863AC4FBBC5ABFE7BA9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
Manifest number:          0364
Signing time:             Sat 19 Apr 2025 14:00:56 +0000
Manifest this update:     Sat 19 Apr 2025 14:00:56 +0000
Manifest next update:     Sun 20 Apr 2025 14:00:56 +0000
Files and hashes:         1: 48LNmY8hFlc6h6XBwv-1lHo_wLI.roa (hash: AjQp32iGlB+1GsI+lJrVk1grrv63+W6EBzEdzr6CEC4=)
                          2: 5y1ushKBRUTrOJNUvJiYmUnqiXI.roa (hash: Ci2ppd440+9qMZk/kpg4OojmAw8zTwyC7q8Nf/pbCIw=)
                          3: 9Pm_asa_Vw3u27gaBRD7i8TL9EU.roa (hash: fYuTOl+DQOrzI8q7otm9pbe4I7lAFHKgzfWFOB4BuJE=)
                          4: A0eQ6cpAYYEfE3-FwbvX2N7Vq24.roa (hash: lggmut1+AIhHUFw/pa+hugHmAOGvNZ/jcOZNrQeZgUk=)
                          5: CLpkAB9SkASnLi0bcVjlvibT8q0.roa (hash: h9ZbpSD1UKLYDhyFqL5vdv53fTWYJR5sayvIQP/wamo=)
                          6: DzbWdDNCGIO77N-Ogi-q-ujsrrc.roa (hash: JXy3wpgCmIL1KJ6V2fbPe71TEfjeAQIbVCR92SplqIo=)
                          7: IrBZbjh9bN6sX88jSCcr0jSDjf8.roa (hash: 4rxNfDiQKwVlFDVfgBPRO7cwVcJtlUjG/xAc+wH5P2Q=)
                          8: N1R0GyvHuTbb0-EH84-V2sEbngg.roa (hash: OtlluPp/GFk8dMowu4n/6CaWorYPCyKsdg3cuhnY21w=)
                          9: Q5H4zjpo_lAY91GBCyDIMdF8Mfg.roa (hash: FO79Zf3B72qIbj4WPSUFNr5+RJyVJutt77kTaj0j5mo=)
                          10: TltYSS4ISDYt9-KUDP1Vj6VxvVk.roa (hash: 8JcOjfOJJsU6570PaqojejoP0nfqEYH6Y+crJU4gz7E=)
                          11: Uz4A4t6Kq8A6iwrTP0NbckGeErM.roa (hash: QTVqmpZONM6esupsMvufy9vRDscEqFkzSQftaVkJdcs=)
                          12: VWObvOSvF1AXNIIRn3xBmcVBaCA.roa (hash: k2TM3+amiq1VQwMqtDCgTlWYgVGq94+g2GBovKDeCf0=)
                          13: Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl (hash: lYw08QW989EA7/IagndyhKlyv0V2iXMzbb7hKm0/QPo=)
                          14: Zh-8f0tKdwJJmTErbAZbBlAu2-k.roa (hash: Krjl31rGf1mkJQ9LvksqzyPEEMfTl0Ol/mUhHx32Z6c=)
                          15: aBAcpt-NbSIhhNI8k3la6pjGmxY.roa (hash: 0ilv4mAJqQfbxZ/Y/Pq8eng8iKkBka04TcFPP4OoCjs=)
                          16: bSQ2KJkghyGNH1xM4L0qwKLgqKc.roa (hash: ferYAqATun5kAev+OYfREU8H5PWvsH+O2JxdN9vsL3s=)
                          17: d6jjIfZpoU5dviCc8eI-CowvAk0.roa (hash: +Apm0894AkkpHXh4slVvz3Yax14eHhFmKvTjWItkY6I=)
                          18: g7tURuUH3V3-cIb4_m5S3L6NgF0.roa (hash: BdP19LBcCTIkuafGLyFvqTdagspaIFMT4g3LWhFA5BM=)
                          19: gN99sgkdxP_y9Hc-HJG5nWya_kQ.roa (hash: z6+iBWzj4bvqP41UlSpacoaDGuJaxTNbgxZSqBGtsI4=)
                          20: ga0KLDUpKphpd5uhD-u7xvCdgo8.roa (hash: iNvTkN67twKCRuI+xwjBz8piFCF9xnDfvAKVgLU20KI=)
                          21: hIsb24dWsZ8VsBWOEEjl3fdkCsE.roa (hash: A4XAyp6Fewl0t4Uxa5BTFhXjIGGvivyuEJQWo21WUn8=)
                          22: lN-t97gLRpuQiIuZBao3sqyhivU.roa (hash: +mDT0U1tA2WAtk/Z2ZEI8eZRiQJYovhUI82zz7zEdzc=)
                          23: mKJqEI739B0iTvnzxCUb3biwris.roa (hash: sVTE7upEY8n0C5ZmEcrRs0tBB0vSxTNtRhmRlRax7Jo=)
                          24: moFeQYBq3L6hVxZoK5HTTm_wjqM.roa (hash: lqMyHVwzlYhJsvnvLBA8lnllD924kEn2qCOMamSzJiw=)
                          25: pCE1baMGsmwCYXSEoEEcUwBkH8o.roa (hash: GsYlVdD3sX0x5By8y8crNFzjEYXJ2ZK0i/TeckVJ2AY=)
                          26: tQlk1mJ3Q57dUylH0cWwEXNsNO4.roa (hash: 88L8h3QT3LZj5nAWKf1psRrxbrTm+VcpE0c7xWTV8YA=)
                          27: wjjnppJ7-HKX51cklBGQrtzsilQ.roa (hash: 8AAaNfNvMGxOsnnO/hlvM1Sj4iPPxzZv5pf/HzW9AIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:5a:32:68:bb:9f:86:3a:c4:fb:bc:5a:bf:e7:ba:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
        Validity
            Not Before: Apr 19 14:00:56 2025 GMT
            Not After : Apr 20 14:00:56 2025 GMT
        Subject: CN=c580a972069cd52381335a16e2bd83e6bb82840f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:ec:4b:90:b6:e8:5d:6f:c5:bc:c2:4f:76:
                    4e:82:8a:9f:ef:20:2f:94:ad:d6:ab:a8:ed:bf:04:
                    59:1b:af:2d:6b:3b:85:d1:98:e8:cb:f9:a7:45:88:
                    e0:0f:38:1a:87:87:7c:69:ba:c8:0c:98:eb:eb:31:
                    dd:cd:c4:ea:18:fb:14:34:4e:44:30:0d:c5:ea:fc:
                    ca:81:1e:32:71:6e:42:88:db:3c:12:6b:fb:85:81:
                    c3:c7:77:68:50:03:0f:37:93:d2:0a:6c:5f:5d:15:
                    d1:30:68:5e:fd:d2:2d:a3:67:ae:64:11:a5:bd:5e:
                    e2:8d:84:d3:23:5e:07:1c:12:3e:c8:26:85:34:98:
                    fa:70:53:b6:27:61:1c:80:14:04:4e:36:ed:b5:9c:
                    e9:40:66:08:af:b4:a1:43:d5:f5:71:f6:16:03:18:
                    98:e0:e1:20:8a:1d:97:0a:01:a4:91:b7:94:c6:48:
                    a7:cf:c6:43:d9:a5:c9:ff:16:71:29:fc:d9:c3:e4:
                    d7:91:69:fe:13:e9:72:e0:e0:31:73:e0:33:d8:43:
                    a3:c4:51:35:6d:33:66:46:ce:a2:74:3a:08:be:be:
                    58:d1:b6:3f:b9:e7:50:c4:2b:ba:46:41:16:fd:5b:
                    60:ff:4c:f4:2a:eb:c9:5d:69:23:4f:83:62:f2:8c:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:80:A9:72:06:9C:D5:23:81:33:5A:16:E2:BD:83:E6:BB:82:84:0F
            X509v3 Authority Key Identifier:
                keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:83:bc:0a:82:fa:9b:a3:06:80:26:d4:81:78:c9:bf:dd:33:
         16:5b:ac:f4:e4:dd:bf:f6:ed:e2:47:b4:7a:b6:3c:4c:29:20:
         56:16:3b:05:ca:7a:82:da:7f:45:b4:86:ed:99:86:63:58:8c:
         70:03:5b:54:8a:a4:05:7a:a8:3f:94:fa:f2:a4:7d:66:d8:b4:
         7f:c7:c8:15:82:8c:cf:1c:bd:e9:33:d0:e4:a9:0b:87:bc:9d:
         45:c8:21:d2:0e:9d:a0:95:64:47:1e:d1:3e:ea:ab:bd:61:ec:
         54:fb:df:10:05:8e:25:b8:23:1e:71:96:eb:4f:43:7c:92:24:
         34:2b:72:f2:99:68:3d:b1:be:10:fb:d5:38:bf:69:bb:04:7f:
         27:96:8a:3f:8f:cc:90:11:39:34:05:11:df:ba:db:e7:0e:e6:
         7c:7e:5b:2a:4a:f7:ae:40:a5:16:f7:0f:5d:87:ca:84:59:0c:
         b6:a1:f2:ef:46:d2:af:16:3f:7c:03:46:15:b8:88:89:3f:1f:
         11:c6:ce:c0:bc:f2:90:d5:fa:c4:3f:d8:27:24:22:40:f9:9e:
         7e:ad:91:b4:e2:b9:b7:3c:54:9f:8e:a3:82:26:f6:08:d9:4c:
         2d:9a:dc:41:f9:31:65:9d:09:93:b6:3c:f1:50:15:f3:de:55:
         ca:bb:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:24 2025 by rpki-client