Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
File:                     j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft (raw, json)
Hash identifier:          lEWzwHwrxrU1886lSRlzIXZxY3W4O9ON9RVFAf0dEgw=
Subject key identifier:   2E:1F:C2:8F:3F:FC:2D:B9:4B:87:21:7A:43:61:AF:59:BB:FA:A4:B0
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Certificate issuer:       /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial:       01960A54CAABCFF7493DB1C3411013A3E026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
Manifest number:          105F
Signing time:             Sun 06 Apr 2025 09:00:51 +0000
Manifest this update:     Sun 06 Apr 2025 09:00:51 +0000
Manifest next update:     Mon 07 Apr 2025 09:00:51 +0000
Files and hashes:         1: 33CUfDLiP8hMW8-xKnh5gWXZm9w.roa (hash: Bh9+3b8fWDJobwnZ5uEge8oWIc5s9pLu/K/Qpm494l0=)
                          2: 37WDsJgS29ArcL4Cmhv4wwYMgFc.roa (hash: AXUUOGrTgb1EkHkLKG0Np5XXpArC+TW3abI6bwcRXy8=)
                          3: 4UeqOidVxXtllJBCXqccAPMB0L4.roa (hash: F4SRHUsUQrgLFfE9vd29L5EUyTp/MgFHpYK0szqzOSo=)
                          4: 8Pql3WWXWEFRERRDmVMGD4G9M-A.roa (hash: Ou+GeKB9aMm7s/S9nX0yfjyzbehhUnphSDoiUeT/MCo=)
                          5: 8sf3AriWeoOoKb2ZrL9ruFI5-yU.roa (hash: akXe86mXNL4F4xYmekk3EuMAOLAD/RcPwHK74zX/QY0=)
                          6: 9a6AdkqAs0vIWdMjgvg0SfIEVG8.roa (hash: 3MZg0XXsOYdVObhOBprmqJ/8u/fpWKxyx3HFfsb7hhc=)
                          7: AmHkvm73L7WuRs2OBkCuUN3ylao.roa (hash: mk6A7F32UtKijP2YOQDh8IbbK8Vw0IDJK2YgMl3UZWk=)
                          8: Gkj-_sNoI1_V4Aq0AR967JJ7iIA.roa (hash: D6alHFBw87PSRUedkFujLNRW9+yoaIFCiBA4D58vz5s=)
                          9: H9HhLY73Vk4PBLowFwmqq8qnEvs.roa (hash: yboN6O4NEwN/9jtzcqVhwL7Xp6BAuM4oUmdLAuSlRZc=)
                          10: TgV1xu8ntnem5zfBufPUC7kUDYk.roa (hash: viX/DxmV4FfM1xJLQLNfoeWsVndpgszxqhUN0jk4LmI=)
                          11: VuwmrfCYeX-5-G3EACirZwyCtzg.roa (hash: 1HbLhGjSO6WtBBMMxb8oy/0MhfWurHjl8dezIem0SBE=)
                          12: a_gWGAH_HkQq48s4xebSJs8e9SM.roa (hash: /PN+oDh7g+uIG4/Jaj9EAzn6xGtetecKxsI53eVsu+k=)
                          13: bwAG82vgu_-f3Xus3V_4NK2WQyQ.roa (hash: qly2qjfn5eyWDXm67Zp4c9WaqGquHK1Au5pP/Lwhj6U=)
                          14: fczn2jh4ajq3X4s1Mo_fsWXXm34.roa (hash: J5rtauXxpoCURr4ah9LdMnYQCXOtCScxCM8XbJ0ALGA=)
                          15: j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl (hash: +Bv7uYnInqY7CWjoegFk8xH88GTILxGOnQQgmWyG9BU=)
                          16: tUXcljwuTzZu2HFVE--E_B3XnQ4.roa (hash: Gfw3NzI90kBuKsp8o/a8mrst3zcJzAdSNtNsY8SwJUA=)
                          17: tgzOB-X3X9hQIl9WIvEW-sVk2TA.roa (hash: dct8dEsqnpkwRMNVp0z4oU64+Yxl27f7QQdtJgkmALY=)
                          18: xrtDAIk3vWJYXPnZVXMHaoJfbQs.roa (hash: u3EOwyWtPWjn//AFUgWdQ3LoVgi+BzUJpSJKyhN9AL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 09:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0a:54:ca:ab:cf:f7:49:3d:b1:c3:41:10:13:a3:e0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
        Validity
            Not Before: Apr  6 09:00:51 2025 GMT
            Not After : Apr  7 09:00:51 2025 GMT
        Subject: CN=2e1fc28f3ffc2db94b87217a4361af59bbfaa4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:20:20:be:aa:5e:89:5e:6a:0e:54:b2:ef:
                    30:ba:c1:d5:62:82:3d:27:00:ac:d1:12:56:e7:5e:
                    37:8e:a7:67:ab:f3:1d:70:cd:ef:30:df:53:c7:3b:
                    58:6e:31:40:ff:44:50:bf:be:34:d3:2d:fa:ba:9d:
                    4a:31:cc:0e:6e:5e:d3:7b:3d:43:8a:ee:e4:fb:2a:
                    4f:b4:1c:b6:23:bd:b5:a8:17:16:6c:5c:08:c8:af:
                    1f:67:53:64:8a:ee:43:86:cb:d2:b8:ca:40:d7:94:
                    14:3f:2d:20:cb:82:b0:7c:21:23:88:99:92:f0:0f:
                    f7:e8:f7:7e:99:56:f7:fd:4f:5f:65:53:5e:5f:01:
                    ee:e2:dc:16:5a:52:24:dc:4d:5e:f4:4c:72:72:36:
                    4b:67:a6:3e:76:79:3c:9e:e0:e6:7d:0c:dd:be:b1:
                    b3:78:7f:85:72:6c:d1:60:3b:6f:61:b2:24:2f:b6:
                    ce:f7:3a:09:32:71:ba:cf:43:be:39:f4:fc:3c:6e:
                    6c:91:9b:91:9d:d5:45:36:19:d3:9c:e3:7a:0f:a0:
                    25:53:4e:d2:39:fc:d3:3f:1f:98:dc:0f:11:9f:3d:
                    18:f0:e2:51:ce:d2:95:e6:42:b6:c9:f2:78:bc:af:
                    6c:66:a0:38:53:44:c2:49:06:77:d9:44:be:2f:10:
                    af:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1F:C2:8F:3F:FC:2D:B9:4B:87:21:7A:43:61:AF:59:BB:FA:A4:B0
            X509v3 Authority Key Identifier:
                keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fe:e6:39:96:aa:ca:d8:4a:58:e6:0b:28:55:e3:a5:4e:05:
         3c:26:58:dc:4d:d2:94:8d:8f:69:1a:cd:7f:cf:6c:aa:b6:84:
         7c:15:f6:09:89:6e:3d:db:19:15:cb:cd:9d:3e:74:b2:48:61:
         d1:1e:2c:72:7d:7e:fe:a7:ca:a7:e2:9d:5e:91:34:9c:2d:6c:
         5e:ce:98:35:d7:db:8c:cf:cd:a3:63:c4:e4:e9:29:4c:6d:22:
         20:5f:b2:25:9b:8e:2f:5a:84:11:3b:3a:20:d1:67:72:f5:55:
         a4:7a:ba:cb:b5:c2:b9:a2:f3:6b:4c:ee:92:72:88:c1:20:c9:
         51:52:27:95:20:2e:ad:b8:31:78:2e:5e:55:68:14:2e:b8:7d:
         ae:fe:da:3b:bf:44:70:50:4f:5d:8a:62:3b:8c:4f:83:db:33:
         a5:48:75:d8:47:35:76:9c:2e:0a:f8:ec:34:fd:37:8a:9a:e7:
         28:dc:6f:63:3e:e4:2f:a6:36:68:55:e5:d4:43:8e:da:48:62:
         3e:86:55:5e:d2:90:4f:92:b2:57:72:10:ad:dd:89:ef:ad:3a:
         08:ee:b7:62:93:3e:dc:03:87:44:6b:5d:13:29:45:bf:2f:bf:
         47:37:d8:d9:72:41:8a:d9:d6:d8:38:a0:86:94:78:b8:c9:5f:
         d7:e9:c6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:34 2025 by rpki-client