Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          gGgAZgjv971ExgjI0LcxNymeEB3WZ3uMeBuigVIYsDU=
Subject key identifier:   19:9C:AA:0D:2A:A8:2A:E6:FA:28:43:D6:42:7D:22:71:24:07:EB:88
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       01973AD0A76196A8156639A8CC6421D44F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          04CA
Signing time:             Wed 04 Jun 2025 12:00:42 +0000
Manifest this update:     Wed 04 Jun 2025 12:00:42 +0000
Manifest next update:     Thu 05 Jun 2025 12:00:42 +0000
Files and hashes:         1: 7uqgpP9wFK8eGPAcoJ-sEDnAHd0.roa (hash: Xz+LC7Kd3zBVRX5yVg4o11ClYwI2C9PnbUjpiLfa0yU=)
                          2: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: kQkxa8RvAZeWcJAU306H2QaMEDIxgotleU3BVpEN1qw=)
                          3: G7iDQ4AJCfPlSLJm51qXvFLT34Q.roa (hash: ypV03h6J08o2WIBzZwFVWtQuB9T4WQvABamDXKjZwKk=)
                          4: HCOLyamTy_fy8T-t6CxYAk7SRPA.roa (hash: Hp5AjlrQzHZpllHKSBSY2o6OMHNShj/eKeyHUMPtCFI=)
                          5: HMxNgNFdF8dk4NZNgQEVD66pjCY.roa (hash: cLGIO41CcdK/y1Cm8zjj3K9e1WKl8lugUBmgrtQHqaI=)
                          6: HRwZymnXLOUIoxoUINYn4to6JUk.roa (hash: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=)
                          7: KZgShytB2Dg6qgF16xBAvAwz96A.roa (hash: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=)
                          8: LknrUTtAEec3_ePoSrQI9a24pv0.roa (hash: 5LCDVstZXT07n5MXzWJORGDSXvB8tmWgOiCs8Dsf9ig=)
                          9: LozgjGA37xFvEWDTYPM2lAwAduA.roa (hash: 8YO3hU1Ao5pQO7Cei7oHHsrN3p6eZUJVpQ+H7w2cew8=)
                          10: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (hash: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=)
                          11: OXV0-TxR9fTn7R31A0-Uw0G4ujo.roa (hash: 3WsJ+LJL05UI01VNuUtaF+j1jHQBCRtShSGIP5WWMP8=)
                          12: UGz5ST9xLeR326lNlIlQUU1TOM0.roa (hash: eBdiuMt/l6dkQCdthTlhmOdw9OFMh/UNcOXGzcvKrwo=)
                          13: WUIZNw-eLQQOt4EwITxJgmOZJT4.roa (hash: 0l3pBIn4i2Fvp84T8M3rRiheZfEabYEorNMSMQJub/8=)
                          14: aSJLBpImrYRI6Qksf9RRvtZ92p4.roa (hash: IwnT2ZkdlNjDPUGhSINR1ImeGfkRN8NOC8Rn8xX20LE=)
                          15: haThuVvZke29rpbqvF6n622h23M.roa (hash: e7PG4kR3fuIUuXElSVJhLTRYlZRUn4Xb9DDc4PsCu2M=)
                          16: hvyCjD-sr1w6tm5UxwSderd8UxE.roa (hash: yEejB8VN7eRKYdvOBcuTAVJxtwqqoPVaxdtPUz/eqYQ=)
                          17: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (hash: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=)
                          18: nMsRKGL1_JNonvFYOo8XapYWg_Y.roa (hash: 0zjtbl5thW5KK1yuV6e1gQ/H4BrleI2lexyiPXWKx+4=)
                          19: nOQG8M5trDQh4XjFetXQ5gl5hAk.roa (hash: jO9QLXj1bBC/jibhnilQOLleHuZugOPI3ebTy+5yP/A=)
                          20: q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa (hash: IOGkhvWvFOvN3iY+ALSxpXygSJS0I9J4sN93HYJBrcI=)
                          21: uUxZil2b159003xfkfWtUQreHkQ.roa (hash: J/52Jbvu/goI1MIOwJZWmsnYU2my4DOGAr8T0IS/l48=)
                          22: vgsTODUN4DNu4XsvZWX7_dDziEU.roa (hash: OpvsJv1O2mE0888WpNjBckKl+Q9vODkDoyJf989gi1w=)
                          23: xzuQISkcD-LDwaStk5Po8cHtiJw.roa (hash: MTlh23S7S0fGqADN5d5jEOMtMCQeo6fF2QEVS5QqY6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3a:d0:a7:61:96:a8:15:66:39:a8:cc:64:21:d4:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Jun  4 12:00:42 2025 GMT
            Not After : Jun  5 12:00:42 2025 GMT
        Subject: CN=199caa0d2aa82ae6fa2843d6427d22712407eb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f2:c0:66:7a:9d:0b:17:13:03:cd:da:93:11:
                    89:1b:1c:5b:cc:81:64:94:09:45:f2:bf:60:a1:63:
                    9e:9a:44:6b:80:54:ae:19:b7:51:6e:e2:7e:66:bd:
                    53:81:f1:ab:bc:4b:ad:d0:bd:7a:5d:0d:0b:0a:4e:
                    f0:aa:59:26:ac:e0:ca:1e:34:af:be:05:81:7a:89:
                    ad:09:ce:93:fd:bd:e7:0f:07:af:45:31:58:76:43:
                    55:2f:b4:e9:7b:27:6c:0c:72:26:e8:f8:46:3c:20:
                    f8:51:95:a3:ca:d0:3a:9c:1d:60:c2:8e:54:88:da:
                    4b:3c:0c:af:fb:58:3d:50:bf:41:12:e9:41:b8:32:
                    46:05:49:f3:df:90:33:bf:78:73:40:1c:4e:43:ff:
                    d6:96:68:01:44:31:f7:31:ab:56:99:ec:bc:40:a1:
                    61:94:57:0e:dc:cd:c3:47:8e:16:64:08:1a:4e:f6:
                    c4:c8:3f:93:24:0f:78:d8:a6:71:0d:7c:41:2f:7c:
                    04:f0:5f:d1:dc:ab:9b:20:f3:c0:93:7d:12:f0:9c:
                    2a:01:90:6f:4a:c8:63:da:27:54:20:53:1a:f5:8f:
                    7b:0b:ee:48:20:fa:83:bc:e8:21:bf:fa:f9:1f:d3:
                    1e:88:f2:e9:49:3e:45:bf:fa:29:39:98:29:18:b6:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9C:AA:0D:2A:A8:2A:E6:FA:28:43:D6:42:7D:22:71:24:07:EB:88
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:f0:df:fc:52:da:89:08:c5:a1:50:4b:63:d2:15:4b:75:
         69:21:a2:a1:8e:bc:5b:52:76:2e:bc:73:f3:6e:e0:58:84:90:
         14:a6:5f:89:ec:21:51:09:20:a7:ed:8f:85:eb:72:1d:f3:3e:
         b6:1c:ef:ae:a3:e1:f1:70:4a:8c:44:7a:a9:25:44:77:94:ec:
         aa:5e:7b:d2:a1:c8:82:73:ab:07:7b:6d:09:18:92:4c:8e:78:
         21:2b:55:63:ec:69:b3:e0:cd:9c:71:d8:3a:e5:d4:16:4b:6e:
         71:a8:23:32:6e:31:03:be:3d:c4:be:a1:7b:68:05:fa:af:2b:
         42:41:74:f0:27:a9:51:3c:b9:de:77:57:99:61:3e:fa:67:cc:
         f5:00:82:7d:a6:bf:b4:f8:e2:8b:96:ab:87:ec:c6:7d:70:7c:
         c7:3f:47:41:74:f6:25:cd:b4:90:67:0b:b9:61:65:9d:ff:46:
         aa:37:14:16:0a:4b:ec:94:85:ab:bc:b8:a4:db:2c:5a:15:7d:
         dc:42:e1:3b:2d:8d:4d:1a:8a:c7:7b:c4:36:ac:2c:1d:9b:d4:
         f9:f6:3e:f6:26:d5:38:5b:89:99:4f:2c:26:60:ec:c7:4a:b4:
         1f:4c:11:fa:c8:af:79:a3:6d:db:0e:68:38:4c:03:86:f5:ce:
         3c:e1:39:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 23:05:21 2025 by rpki-client