Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
File:                     F5MB3Mf65PfOAeSYenfLgqM2q_8.mft (raw, json)
Hash identifier:          xa346RtQJEilqXDOT2GgBPnSG9pkDpVVtIFB1NzLnf8=
Subject key identifier:   7D:AA:A9:EB:37:A6:96:8D:0B:C7:88:12:A9:C3:33:E8:F7:6C:20:63
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Certificate issuer:       /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial:       01963EAFEF3E431E795D3BAEFB2946CFAA0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
Manifest number:          14F4
Signing time:             Wed 16 Apr 2025 13:00:39 +0000
Manifest this update:     Wed 16 Apr 2025 13:00:39 +0000
Manifest next update:     Thu 17 Apr 2025 13:00:39 +0000
Files and hashes:         1: 1-Y39Tfe6GiZJ3W9vN_BlEd6kBlc.roa (hash: apn2f97Dv4c5iyBIs02XeM7xNWUPUFTvtv/5kVJWl5E=)
                          2: 5hY0DjosoIfSaOxh5Ng3XkuAoWE.roa (hash: zlhYvo7Dd756ZyhVWxqlN4tDlyvI5VN1a9Hign3hS+8=)
                          3: 7A7LKn1o95EwmimmbWgqoklIVI0.roa (hash: BxZahgdbCLqm11e9NAIm5qcVZ6JaeYg01ekAjT/+ryA=)
                          4: 8Rf0japIE05N1Y5vujyR2Dd0trI.roa (hash: vcw9nl/fiRctjOwbBV/JrvSfRaMn3/hHGpzoyXDaC8w=)
                          5: BdwPPJJNXn-FSCXomapjXeZD9zs.roa (hash: TgcHeBuzrek9VSQCad/VCw8k4l19lhQEHsZDv6Sxid8=)
                          6: CmCZMVAUFYDrES4R1R0EnlAWPWU.roa (hash: SOwCciST5P31loSN+3o2tTo+KSkYf9jle8AlYvbZl+s=)
                          7: CvcLy-kMftRDnhFJ0e4Z3sTEHyY.roa (hash: Yet3DpNMZITYAum6tV6MuDT9XZJrmFWunKZqpCSSvYY=)
                          8: Dzjp0XUOyY6rldx3nm4f3UnI36E.roa (hash: 6kaFsU0I2rrHmyy/uDv2sBYFsyTxZyIZ3Q1YX+kOahQ=)
                          9: F5MB3Mf65PfOAeSYenfLgqM2q_8.crl (hash: J6uJr3W28LyIh84J6mi5B1F2RbtciHG6pThHBr21fRE=)
                          10: FM2576U9_cO6KlGBeG-VwuXYLoE.roa (hash: ABfseUXrmOLElVcMYHQHihGPr5p5Ib0P+JYnpJwSJdg=)
                          11: JsCAp1aFhoIjld1wkH8voBbNhr8.roa (hash: f9bEOIQTZBMNpm1Gt9qzl/E0E0zUfedi/SkPs4DZ8I8=)
                          12: KWD7a0MawJkOY6KvjbHNLlSuvEs.roa (hash: qmNFcYO8QPUS9sWwzinUFDYzi6mb2+i7tCjnCVK3kIw=)
                          13: QetUnHj3NyBy3BELD8-Xe-4Rw7U.roa (hash: /ncfGdoc/H6JYEaSn/PBOO+VMUl3/eKsR0IUffej0io=)
                          14: XlA1qfNQB0WYdkYaQ8Rvj1L2tb4.roa (hash: +4/ESRGuqWyL+/uODQWa3AjOUUB/k5+3UHyaNoG32/E=)
                          15: ZrTjnkyveLPrK0jTMWKKrihN2ow.roa (hash: 9Jyi49qBWk08J78Yv473h4V46VqPQ/HKB9I5PkE3ZOc=)
                          16: _0xzjWFSkzBLGLL_0JWnAmEsjDg.roa (hash: jnJ4LYTkpMfYjmbu6csGjYBdMnIp6t/TGOW8N7V0/jM=)
                          17: _WWxWL8Hn8pQ4epkeG1hkMzsULM.roa (hash: MsfVcxjNhCQJp9YqHylixAZChxNNKEXw3F+da8rjFfw=)
                          18: eshGAukJkuX-AE4GNhEXoHvgpDE.roa (hash: 7j5r7WqFUsTR5UqjVZvqFAE2NplYIRbJ/EoqmowNsP0=)
                          19: gHJucLDeNn72Z4YnTbDzcr70suE.roa (hash: X6NHV3AqWLuDzNFlvaXO3pKnS4ZKS+A8HYjFylVbHNQ=)
                          20: gJhRP993vA2Sp0o4Dg4qL2tfBcg.roa (hash: XddsBmTvT7ew4EphkpQIc8aDEqjL+V8Jd1KR6KWc3o0=)
                          21: hUZU9W5DHAMrH5EVf9n0v6F7Glg.roa (hash: EvZcqY0u0j8E3qud63Mfgc0SNbLfR+3aTCgDNKTv4/Y=)
                          22: hie0hXnIuAB4pedG0JZEzMyt0LI.roa (hash: gK4aKsvtB8FfBrgpZluMQ5b2y78leeRFaQAGGnAPFIo=)
                          23: iYA_2X6usQ-6YdR8PggDt72LFWo.roa (hash: cU7w4mp5wZ9b5vYC2DRlLeH7emv6re8WBMB//kfRpeA=)
                          24: kFARCoMgCMuyc0Id-ilQ8NRgEfU.roa (hash: RNNZrUNA+CZKPf9RkgYbSIfAuTpPWf45VRn5TZAQ/g0=)
                          25: uRbDK03eXvXuybDY6ySDPk2j8jw.roa (hash: B7oHGHMZn6dcANuLv7P1ig3TcmZcB2OnwrCmsBplg3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:af:ef:3e:43:1e:79:5d:3b:ae:fb:29:46:cf:aa:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
        Validity
            Not Before: Apr 16 13:00:39 2025 GMT
            Not After : Apr 17 13:00:39 2025 GMT
        Subject: CN=7daaa9eb37a6968d0bc78812a9c333e8f76c2063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ac:5c:0a:3e:3a:f8:20:96:a6:ac:0f:7a:de:
                    c6:b2:79:f8:6c:28:97:73:48:8c:ac:a4:87:19:d4:
                    33:59:ba:e2:41:e5:41:fb:62:a1:3f:f7:a4:92:55:
                    ae:3c:60:fb:26:af:d3:66:99:27:31:92:a8:64:cd:
                    06:e9:9a:7c:02:55:20:cc:57:5f:72:be:67:94:e1:
                    f1:16:b7:5c:ac:0a:61:53:c9:c9:17:69:d3:0e:cb:
                    c9:40:c5:5b:e1:75:d4:a2:a8:08:ee:5d:0a:01:c6:
                    8a:10:41:b9:4c:3f:a8:23:a4:bd:48:b9:fd:75:ba:
                    cd:79:4e:9d:2e:f4:ca:9c:3a:54:b3:7e:30:3f:44:
                    c4:f4:0f:dc:b1:ae:d8:77:28:86:03:bb:fe:20:f0:
                    52:49:83:2b:7e:f5:ba:87:4f:77:93:77:a8:6b:b7:
                    a8:8f:c1:92:08:7b:55:5d:72:70:a6:e1:27:30:93:
                    3c:b8:8a:d8:b7:31:6c:b6:97:9a:5a:91:4f:d5:55:
                    9a:86:68:73:51:05:56:8d:ef:f5:46:d8:c0:30:0d:
                    12:57:09:80:de:90:87:25:9c:ba:ee:ca:09:8a:c5:
                    a0:57:7d:87:f2:4e:4f:60:b6:85:1d:86:9d:bb:a8:
                    65:58:06:38:60:80:35:b0:14:e0:97:28:38:1e:0e:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AA:A9:EB:37:A6:96:8D:0B:C7:88:12:A9:C3:33:E8:F7:6C:20:63
            X509v3 Authority Key Identifier:
                keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:ee:b6:90:08:ce:69:03:f6:6e:fd:38:5d:f0:74:dd:9b:
         66:96:8f:2d:4c:70:51:a7:9e:39:61:f1:83:4c:93:f7:ad:c5:
         72:e6:86:1a:e6:72:a8:92:e0:53:71:17:40:ef:18:06:8c:48:
         a8:c3:44:42:b1:d5:38:af:ce:01:98:f1:e6:20:e7:ae:7a:27:
         b5:77:aa:27:78:4e:c4:50:a9:50:5b:55:11:05:01:e5:b2:32:
         02:48:0b:0f:45:93:98:95:29:74:7c:0b:3b:85:2e:8f:ec:ec:
         0b:a5:bf:8c:d4:b2:84:47:23:96:95:a2:28:45:7d:64:af:4a:
         a3:53:20:3a:04:01:ac:7d:15:57:80:a9:85:aa:ca:ff:f7:55:
         57:57:b7:24:93:7a:77:37:47:27:16:14:39:62:40:14:5f:7b:
         ff:7f:48:4f:43:c4:10:8e:f9:55:39:8d:4b:05:0d:98:29:f0:
         1b:a6:71:1e:ff:a8:92:7e:38:8d:28:3a:d8:3e:36:9d:c1:84:
         f7:29:91:d0:eb:5b:10:ca:7d:ae:fa:c9:39:87:f1:58:8a:6b:
         87:fa:b8:51:bf:02:c8:38:bb:4b:d9:f3:c8:9c:4d:39:14:8a:
         0f:d7:4c:2a:09:6d:b1:e4:94:29:d6:6d:a6:57:b9:c5:af:61:
         2a:10:1c:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+r+8+Qx55XTuu+ylGz6oLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz
NmFiZmYwHhcNMjUwNDE2MTMwMDM5WhcNMjUwNDE3MTMwMDM5WjAzMTEwLwYDVQQD
Eyg3ZGFhYTllYjM3YTY5NjhkMGJjNzg4MTJhOWMzMzNlOGY3NmMyMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6xcCj46+CCWpqwPet7Gsnn4bCiX
c0iMrKSHGdQzWbriQeVB+2KhP/ekklWuPGD7Jq/TZpknMZKoZM0G6Zp8AlUgzFdf
cr5nlOHxFrdcrAphU8nJF2nTDsvJQMVb4XXUoqgI7l0KAcaKEEG5TD+oI6S9SLn9
dbrNeU6dLvTKnDpUs34wP0TE9A/csa7YdyiGA7v+IPBSSYMrfvW6h093k3eoa7eo
j8GSCHtVXXJwpuEnMJM8uIrYtzFstpeaWpFP1VWahmhzUQVWje/1RtjAMA0SVwmA
3pCHJZy67soJisWgV32H8k5PYLaFHYadu6hlWAY4YIA1sBTglyg4Hg6GRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2qqes3ppaNC8eIEqnDM+j3bCBjMB8GA1UdIwQY
MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt
YWZmOTJjMTZkOGUzLzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz
LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+futpAI
zmkD9m79OF3wdN2bZpaPLUxwUaeeOWHxg0yT963FcuaGGuZyqJLgU3EXQO8YBoxI
qMNEQrHVOK/OAZjx5iDnrnontXeqJ3hOxFCpUFtVEQUB5bIyAkgLD0WTmJUpdHwL
O4Uuj+zsC6W/jNSyhEcjlpWiKEV9ZK9Ko1MgOgQBrH0VV4CpharK//dVV1e3JJN6
dzdHJxYUOWJAFF97/39IT0PEEI75VTmNSwUNmCnwG6ZxHv+okn44jSg62D42ncGE
9ymR0OtbEMp9rvrJOYfxWIprh/q4Ub8CyDi7S9nzyJxNORSKD9dMKgltseSUKdZt
ple5xa9hKhAcFw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:22:04 2025 by rpki-client