Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
File:                     g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json)
Hash identifier:          GeI/HzM7Gs3I22LkWI+iMPqEYxBImwnEWfdDszxLKY0=
Subject key identifier:   62:AF:E4:72:70:A0:5E:D2:34:E8:0F:BF:A5:DA:71:73:E9:12:54:98
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       019609E738EDE00D8F45A4424017E2535F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
Manifest number:          14EC
Signing time:             Sun 06 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 06 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 07 Apr 2025 07:01:10 +0000
Files and hashes:         1: 0RuxYCs-ZR77zbS2FKRWZztVK0Q.roa (hash: jSdqasNIGwiL/SkcUsG3UsldrYCjzkxpl4GYnjGAclY=)
                          2: 4jaGZdOEYrPblfps0YpbkEMcNKM.roa (hash: G6P2F/yQN3KTaexhThEC0j4hTEjLeDNZKdLyv/NC+3M=)
                          3: 4sVuDUHUhuqv4fotP4t5XZJrll4.roa (hash: ObxWj69OtudWkX1fVAGgmn9Z1mlrHpzlXmvK45aoIXM=)
                          4: 7GopD--APCfXYx9PjcNYgXNDy2A.roa (hash: KIrKeJz8KA76goRAIf/fblPP4cBUagZY3WoTBQ0WHf0=)
                          5: 9WKsimr4vOF_rpwncL6ruOF18YY.roa (hash: xH/VPFrvixhNlhTD8hrquKiIRK1N1S8LQ39X4kWgDbU=)
                          6: DXe2QCeg44oSwSjch2B9InQFKjo.roa (hash: K6OnR7hdUcOFhOpAS0quOhv9TOcSZTKYV24C7+i6Ykc=)
                          7: Dtu0FUQBTwq7nMetgTpNdxrJrUc.roa (hash: 2+O0fEd5VicZaDp5QDSOVxRQGaFMgRpvuxLyoCSaMdM=)
                          8: QP6HFrGNHPgiMzuluLrD65g0i-A.roa (hash: l99hGpVbTIt/+tvuvWJuKHSUe5o+u4epf35vOiEw4Vc=)
                          9: Rv0B6f_Ojij8hrpzf3DR30lnBYI.roa (hash: b/H/zEu0WFP2D/nRrX3BPfEmih42pvZKFxL8bEEPnXE=)
                          10: Zg9LMTVlLMAMzOgaRCOZsvbj5YY.roa (hash: 9YC0kyDqEXxaDbjw/WFc8btR+dLVmBtAW2yMy6GIxwY=)
                          11: ZgkKPqbv9uiQkq9_E4cqyYGcFls.roa (hash: m/krRcpOPe54FnCcamtSok5EA+fs9cArfGttZA4+K7A=)
                          12: bL6MKH62F5NiojNDkRLOm7t1V50.roa (hash: VYSTyygBbvuJ4ferc/WHT6RrnYr38adoWbgUflVODE4=)
                          13: e8sw3NSVdW7RuwBxKGlVO3o7vs4.roa (hash: vas7IbvKA+23Qxw1IFtJvSTpfV6psv5Y/rS0T6Oox/Y=)
                          14: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: OPlnOVcl4g8Ge9FhPle97M9jXs2y1MMaH17X0dlmJ8o=)
                          15: gY7BKIjwewKZZlWFSHLcdLr49NM.roa (hash: i0lchkykJ9yatPl5KViR8cy+o8YUx9lts6RmnA23id8=)
                          16: ndVpFTiV-032z1oLz_wixEvXGiw.roa (hash: /HnhEZMMk7Eh52x99XbC/u8H+8NvDyXM8aky5jw29mA=)
                          17: pyjq9eTJ16BICExepyy4hHdzJBY.roa (hash: 1qL3K1S3vi6SKpgKIPcn0F7XdPnvihL3lLBBWXETN6c=)
                          18: rvBoaYSrYkbtJTtOKbhTdATaFJM.roa (hash: LE4FJA/j7M053Yg4eAl5SJ9uM0sRd4GVsWhWeNGGUv0=)
                          19: z4wc-XAByuKg9_4TbtczZujvcTM.roa (hash: k/l1khmraEpcZ2ZtOkT01pmuwNGz8qHwS9DZWQhB7Ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 07:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:09:e7:38:ed:e0:0d:8f:45:a4:42:40:17:e2:53:5f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Apr  6 07:01:10 2025 GMT
            Not After : Apr  7 07:01:10 2025 GMT
        Subject: CN=62afe47270a05ed234e80fbfa5da7173e9125498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:a6:45:c1:57:62:fe:26:2c:69:b4:4d:29:
                    b2:c9:d6:03:58:a4:1e:03:e0:d4:ce:22:4c:af:80:
                    01:a6:ee:08:a2:40:80:38:d6:13:c2:19:c8:c0:98:
                    22:21:af:f0:15:23:89:93:80:03:64:58:bb:a4:34:
                    72:18:97:35:46:08:c8:3f:c3:16:16:c5:c0:1a:fb:
                    05:75:f6:02:15:57:fc:f8:c4:11:47:60:41:fe:a4:
                    f5:dc:b2:bb:39:3c:e6:1e:e9:d9:64:66:f9:9f:9b:
                    10:03:ab:c6:ed:84:f3:8e:88:cc:29:79:9a:44:33:
                    c1:22:f6:9a:06:cc:2c:4b:4b:a4:72:c3:7d:56:a3:
                    17:4c:35:be:e9:d0:33:2a:c7:08:26:d4:ad:15:6d:
                    4d:c1:cd:d9:af:de:3b:23:35:61:30:91:8b:48:3b:
                    af:64:c4:c4:5b:3e:f3:8e:e9:65:de:b2:45:29:71:
                    e0:3d:4a:36:54:ac:2f:72:1f:4c:87:f5:4a:fa:85:
                    ff:d3:ac:dc:56:c6:c7:9e:17:1f:88:b0:a3:1c:1b:
                    94:6d:e2:44:de:cb:06:15:73:7a:b2:ab:b2:11:11:
                    69:5f:5e:db:01:cf:68:81:28:af:96:da:00:77:9e:
                    4b:72:25:66:b6:1a:c6:0f:b6:4d:e4:fc:d2:75:ab:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AF:E4:72:70:A0:5E:D2:34:E8:0F:BF:A5:DA:71:73:E9:12:54:98
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:7c:1c:41:cd:e7:76:24:26:42:41:b1:ea:be:e6:8b:fb:
         e3:fa:bc:22:60:85:c1:0d:d2:0b:27:83:31:59:41:db:60:49:
         9c:e7:c2:a8:2f:18:81:11:05:28:bf:b3:ec:5e:43:3f:0b:e6:
         0e:fc:ba:3a:2c:d3:32:4a:bd:0b:7d:00:df:6e:16:6c:38:55:
         b2:33:8b:4a:bd:36:e4:84:d3:b2:0b:8b:55:65:df:51:03:08:
         6a:66:7c:07:14:f4:91:3d:46:bb:a9:5c:40:ca:65:c9:45:0a:
         05:a0:42:94:96:33:8a:46:91:b6:f2:fa:03:18:19:4b:b7:0f:
         70:32:65:4d:aa:a6:7f:d3:91:6a:f3:9c:d8:d9:86:15:2d:2e:
         90:5a:17:77:cc:70:34:4d:df:1f:6d:e5:2f:fa:f2:d1:c3:72:
         3e:94:5d:51:60:ed:16:95:3e:f7:f1:e0:f1:fc:10:43:93:c4:
         b4:e5:a6:63:71:9f:dd:33:7d:ab:59:bc:26:6d:4e:fd:59:4e:
         ae:66:a0:6f:4e:0e:66:4f:a9:9f:5f:d1:80:05:58:f6:2d:e6:
         6b:b9:0c:c7:c0:69:fa:78:a0:97:39:0c:b4:b5:ad:75:cd:51:
         dd:97:94:a4:e3:75:b2:d0:49:78:3f:a8:b8:fb:39:b9:d2:8b:
         8b:f0:00:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:26 2025 by rpki-client