Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
File:                     GBAXciSJlrh9kIQMLSfWJUlFgXM.mft (raw, json)
Hash identifier:          oNgRv8xyXSIGoV88K4dCK8yOUzN9Lnz6JsuOK7tWbeI=
Subject key identifier:   A3:65:AD:82:76:03:79:59:92:B8:37:6E:27:4D:0C:AC:24:C9:62:30
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       01961658F56E604AD0ECF6B8BD0D419E9014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
Manifest number:          14DA
Signing time:             Tue 08 Apr 2025 17:00:50 +0000
Manifest this update:     Tue 08 Apr 2025 17:00:50 +0000
Manifest next update:     Wed 09 Apr 2025 17:00:50 +0000
Files and hashes:         1: 4B3_MshNOWnWjP1BmUx5GXRuYXQ.roa (hash: vtRq/5g0n/DkAaOADbPmajlUlRSvasZCKPeJT99ypTw=)
                          2: 6dChuohTDCDCdX4xGrGFs8noFQU.roa (hash: xhBX5O5lALmdJBG0Zdk5Gif2Y7IwFUtNAXlVBenOuI0=)
                          3: ADw5ULNp5csIlPVZQfXB8yIQYtU.roa (hash: q0MPcDmug9yHkrtSvpk3xWn1fbFk/3h4YL5GZCs73Bs=)
                          4: CSdBKAAdfW7cwun5izwk606xA6w.roa (hash: Ig/6bzx+3zQBa9AHiPdoQd7yxLAcSLLT7yZ9/s6Z7Bk=)
                          5: DnSfICIchmVdW2iyXXRSVkbbNyA.roa (hash: CQlhZD4v2Sq/Gi1DViDNA/f5nMO261J5bDYJyiWX0Hk=)
                          6: F05pDSdP6LoB0OP4bH1TiON5TDE.roa (hash: nXDcHsVqskZHQebgQIJgL/95s4mzZsJSrrip91rsqAc=)
                          7: GBAXciSJlrh9kIQMLSfWJUlFgXM.crl (hash: CR/2ylwd423qtnHx2twG1XpYDxKnLpKLzU7aWhbOCJQ=)
                          8: GxeOyVoZRKlhrsd07uGVymkqXOA.roa (hash: k5o3s2Qgx1UPo1xnCxcu1FDwfEFB39lUl4fyOvt51j8=)
                          9: RGD4J9Y6yTEHY1igLZ-uvYBnces.roa (hash: sduGng/1h4H+ay2Q9Sc4d8D+jCRUFIhG2cnDQt00BLw=)
                          10: XqxEdclaAmRMTPYp41kyOEXD204.roa (hash: x7+bdDrA7xSNj6ohIZwMCkTBUTfDvQ8QVy9Lwv8uwBM=)
                          11: _gpLxW0fzvb5DJJQd0bq0o_QET0.roa (hash: tD3Cm8lKrfj4EtGNAWAxKK6dJmhObO63VITMzdu4Eek=)
                          12: bzxRiVGDHiR68JnnZkEHcQSeEgc.roa (hash: CndFCZaOMfrjRLvio2IIWmDshTZnNq5iyASkAOmKcRo=)
                          13: dSSeeBpgxumBIOIgRUYKo-rlKWo.roa (hash: lmpXcJ+CKLXvZjyKRCwdgP6g8fKXZFHNIaapVhOrY50=)
                          14: gRtu0LUQ36KM73SlUMkc38__UYk.roa (hash: AwJs+C3iqzflDXpMLXTupa1Hnui98iLghZQTs3MlUEo=)
                          15: n3Zc51Cjh-GLrciptyieExQH7yk.roa (hash: 8kQMvULnSaX1bsQcxs0wqbkmZxrZsioKOXASv0afA+I=)
                          16: qgPjnbxNpbDqvwf_d4VSEhwjpVU.roa (hash: bNvXj9xQb3LIJevq5+1LF5QI+fNnOyWnvLuoU9F7vcY=)
                          17: rrUNWOAHpdHgyxxJieb0wNdGaqU.roa (hash: njmYuUZq0RHFa7IUQo8a41jl5mw6uDWyn1XW2onkIz4=)
                          18: sPQj7GNvWjjtxqZ62JF9H42DMMI.roa (hash: O8z6PYZ9T+hNLoZ+Aa1FEdADEMKWYr0nGcdPMi6X/6Q=)
                          19: uk0QbJL6mHzA4vNnpeck_tMVVvE.roa (hash: KnqK7jZ2ORVcjCRW4FQ21u1nxeBRFMMQY1XtgNLzOQQ=)
                          20: xWvxYFAZyAYuQbuw5LcBYmpTVhE.roa (hash: jF6nMrItYL3p1nixedbqVRkj6MMqr/ktH4rh4D+Amos=)
                          21: zBB80tlDlWdUGM0XNThH3proqVk.roa (hash: Hpnc7kBqdnVZtObcZbR6l/FES2WWxBkwCVz3pFbI3rM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 13:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:16:58:f5:6e:60:4a:d0:ec:f6:b8:bd:0d:41:9e:90:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Apr  8 17:00:50 2025 GMT
            Not After : Apr  9 17:00:50 2025 GMT
        Subject: CN=a365ad827603795992b8376e274d0cac24c96230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:29:93:e4:88:1f:fd:55:a1:67:c2:34:30:
                    c7:3e:27:b1:91:b5:4f:e8:2d:87:a3:bf:74:f7:79:
                    38:43:22:40:8c:78:c3:d1:0b:b7:2c:f3:59:4c:df:
                    20:f8:46:98:3a:a3:f9:28:41:9f:57:59:b6:98:59:
                    ed:41:c7:1c:81:58:8e:69:20:71:85:d6:4a:e7:7b:
                    64:cd:24:ae:de:11:4f:8c:21:88:89:7b:42:39:fc:
                    38:1b:07:a5:06:06:93:54:40:9c:1a:1b:61:f8:f6:
                    29:66:6d:5a:7f:5e:7d:00:63:6e:b8:f7:f7:29:53:
                    c7:1c:6d:d3:c1:f2:46:70:f1:80:0a:e0:7f:6d:f6:
                    27:18:3c:d9:64:8d:0c:51:e5:21:46:7d:fc:bb:b9:
                    9f:ba:46:15:6a:eb:f8:c2:ef:6e:81:86:50:92:49:
                    ad:ca:fd:5b:cb:cb:20:42:84:30:47:07:4b:8a:bd:
                    7b:1c:77:5d:bd:90:e0:21:50:fa:17:d6:01:a5:8c:
                    e1:a1:01:0a:a2:e8:c6:06:5e:31:47:d4:61:9e:54:
                    c5:d3:44:80:5e:cd:05:45:07:36:e3:27:de:89:41:
                    a7:f2:53:02:cb:7d:a7:52:9b:7e:f6:b0:1c:8f:44:
                    39:3e:bb:57:46:16:5b:79:c6:bf:d6:b9:ed:76:68:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:65:AD:82:76:03:79:59:92:B8:37:6E:27:4D:0C:AC:24:C9:62:30
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:46:72:1e:8d:d8:74:e0:ad:6d:96:6d:58:a2:9f:ff:44:58:
         54:3c:bc:06:00:b9:f9:65:38:86:0d:c4:a1:e3:39:43:63:71:
         7a:17:6a:19:3c:06:83:61:58:66:9a:d1:20:44:55:2b:41:39:
         7e:77:fd:a1:a3:9c:da:04:4d:2d:b1:70:73:7a:b1:64:d4:53:
         48:77:89:da:12:c2:c3:31:b6:6e:1a:76:f2:15:ec:5a:0f:0a:
         fb:06:ea:b6:c6:f6:0c:ae:7d:f1:b8:87:97:e5:a9:f7:7a:45:
         1b:59:25:be:ae:66:01:84:e7:c2:fa:45:d5:56:56:c6:27:74:
         e1:dd:68:b3:ff:36:e5:c3:de:15:d0:d7:e1:38:ab:07:27:f1:
         60:99:cb:86:4f:a8:8f:78:5e:f6:b4:86:7d:36:84:6b:e6:64:
         e6:5b:fa:f7:89:c9:7e:47:dd:58:3c:fe:c2:85:4e:c6:0f:90:
         95:36:f6:fc:a0:30:60:95:e9:30:64:f4:56:ab:a0:8c:43:f5:
         3f:f9:43:56:f0:9f:6f:cd:c8:05:99:0f:29:31:d9:d3:ee:09:
         c5:5d:db:35:5d:43:04:d4:b3:0a:6a:a3:ca:b1:6f:11:f8:03:
         5c:c3:02:20:c5:14:4f:72:96:cf:93:65:6c:f9:a0:e7:55:f6:
         a7:94:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:12:46 2025 by rpki-client