Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
File:                     V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft (raw, json)
Hash identifier:          LThvVog9ti+10B+ZSnyFeJEZTIY6cxV/djlfVatqzYI=
Subject key identifier:   D1:8A:79:A7:78:AA:62:14:C8:27:D8:10:F8:63:D0:36:CC:58:F4:B5
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Certificate issuer:       /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial:       01973E3FABA33688BB1C5D3F28F29654609A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
Manifest number:          0539
Signing time:             Thu 05 Jun 2025 04:00:49 +0000
Manifest this update:     Thu 05 Jun 2025 04:00:49 +0000
Manifest next update:     Fri 06 Jun 2025 04:00:49 +0000
Files and hashes:         1: 1iNqSGLBurdVBRXSj9jkGbrkAYg.roa (hash: I52bbOoIJFwXUk3tZr6SbiTpSM/ybqgeCNsRlccE3vw=)
                          2: 34v70e-AuL53x6XeHVfYUbbbFF0.roa (hash: NNmZSE1+eD+eECq8uaXsw/X0n6p3Qe7qeIsePK/4Fig=)
                          3: 4GgC7G0Y3-KU8Y6p_psPEMXREfc.roa (hash: uj1CpTYiuNEnoBSr8Niym7afjHD/7ENr6+d1VZIXhys=)
                          4: A_elPY7zPzPBy98o20Zvw2Pf34s.roa (hash: 7IEfyja20k0JOW6h30shZ5sYEGCCL8982cOL8o5c1oE=)
                          5: D96EcvLqQ8mg6gUpgeSUDuWzoII.roa (hash: 47dUj7Yx8C1/dz36m92H2I2YJQ2HstfZCg46ryE4YRE=)
                          6: IBubaaq1KjiQKUwUaYMKhoS5vGY.roa (hash: waPQP0MZ40/qIka7y4UCztuunDgDVp7g/9u2t0hcwRE=)
                          7: JdKnKUQgNB1Yy4H43wgibSXzdRM.roa (hash: 0S9u0egNlHyLf2o6FRzE/P+MVQvfJ9RMnLrJgBIcmds=)
                          8: KcYlnGP6yIvrKOMRqD7oEqxDvGw.roa (hash: VQ4PtIkFLjPYEens6AN4AiFyTZP+DZxBHxkVPHw5znI=)
                          9: MMhAInQYtdpemgLxLkVb7UapM2Q.roa (hash: RsvGtg1Oh/rT4G0MJhnLc79JCFUU1eA/yV9wUhFZTFo=)
                          10: V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl (hash: 5+sJT1FksJdBEDwA/MfNslTMHfhkeIsRwdS8G/TQjEU=)
                          11: Z3XKrGVp2Xl9zGxjlW3GuCf1-HU.roa (hash: PGeDPFeIQjFBRjCURjcgvm8bWjQIdMceaR1t9c7i9A4=)
                          12: ZDmxVTbbtdcBn_6_T8Wia39t3S0.roa (hash: UXYn8r3aaYF24M8BGs9jgK62IwYmPfR4KIUePwkGsBs=)
                          13: ZlueNo25GUvLqjkuVCFwyElg2rQ.roa (hash: aj/CGKLCRPUdD2tIc7FHrJFT9sJCeOPsSAxO2ThHbg0=)
                          14: bVTj9GlhWonuaW4I9cjegUl8Y0k.roa (hash: I+YpInZ6hhq3JvCTpsODfdn3dONvUDWi4McBY8idMDA=)
                          15: gSGRoN7lvoMDtUNt0jcpcSmiWHg.roa (hash: /BQVNijohfoISuxNIF9VgsSRiI5OM9wzxV0/LzdcubI=)
                          16: ocuE4fXKrDYrpQocYLXuAkcw4qs.roa (hash: Nydk7rHdYX2vee746eKrRwtJaLs0LWeYf6W299bGydA=)
                          17: pSiHzZ6NNZSWDrxpjGd3n4aNM88.roa (hash: de9D5UdKP4SSxcQu2P7Wa7gGHaS0oc0Mu69Uzk4RR9Y=)
                          18: qagToqYwWoVNWzUu9qXg7Hb8iO0.roa (hash: NjTbRCsZpXfIxlTNVasjWSDHJx+yddX5ww6d4YwOJF4=)
                          19: tbTmb1wIkJcjOTrxUE98Gt6Tr68.roa (hash: 9h+1BxgCsdJlPqcdrM6DVHk3XBGU8ObSrJfDgfcbyEU=)
                          20: uEa4VCZILMCQRsys6WvXG83b7YM.roa (hash: O5aMlB/YmCcBFoGT+J12Tptzaa4UmyfnNDq0vC5SG6c=)
                          21: w1iF5CiJeCHkszCW3U2fF3iWHfg.roa (hash: jSF2bgkChfkaiNUq0c9ACAnTtaiP8CKGbBiy1Ib+MAc=)
                          22: y6XbwTdraju7epdQsvZSGSFiGc8.roa (hash: 3bnMpjdHVAigcUzJ74ejz+TADuNILoqgQcIoOR7ifkM=)
                          23: yUZQqLzjNzgnRFOJHcGgHPrA6YI.roa (hash: 7vNRp7CtdZI4nv8gy/5Xkn0efzS1leki/YZwRLcZP1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3e:3f:ab:a3:36:88:bb:1c:5d:3f:28:f2:96:54:60:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
        Validity
            Not Before: Jun  5 04:00:49 2025 GMT
            Not After : Jun  6 04:00:49 2025 GMT
        Subject: CN=d18a79a778aa6214c827d810f863d036cc58f4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:1d:8d:2c:6e:72:32:3f:be:1d:33:48:3b:
                    8f:ec:3d:c0:3b:e3:3a:ab:fc:db:f6:3b:0b:c4:59:
                    dd:50:c3:58:33:b2:eb:77:7a:1b:24:fe:38:33:f1:
                    be:47:35:d3:d8:39:bf:9d:8a:fe:e6:8f:38:7b:f2:
                    24:d1:2c:1b:8a:c4:9c:19:21:b8:f4:e4:31:2e:ab:
                    cf:23:0a:76:8b:91:5a:de:84:be:06:f0:04:fd:93:
                    74:fc:99:5d:96:01:70:03:26:a3:6b:76:ff:82:cd:
                    35:b9:a6:4f:cf:72:7b:be:59:85:10:75:d4:65:7c:
                    9a:ee:cf:69:db:7f:0e:49:94:95:28:22:9c:dc:e7:
                    2d:d6:ac:af:35:b4:40:04:40:80:6b:0e:da:3f:48:
                    e6:17:57:70:81:d1:39:d3:ec:3d:3a:e7:56:ba:89:
                    44:dc:8a:cf:7e:10:68:65:d1:95:65:37:6d:4e:d0:
                    e9:55:b8:27:2c:82:73:82:e3:12:33:c7:e2:11:79:
                    38:48:a5:74:53:d7:21:1e:01:d9:50:ed:26:70:94:
                    e4:01:b8:16:9e:0f:ff:9f:c4:be:7a:e5:73:6e:6d:
                    23:df:a2:9c:fc:2e:52:81:ee:f2:62:49:1c:ec:fa:
                    3b:74:e9:9d:d2:80:11:c3:5a:6a:b3:a6:2a:d8:f9:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:79:A7:78:AA:62:14:C8:27:D8:10:F8:63:D0:36:CC:58:F4:B5
            X509v3 Authority Key Identifier:
                keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:65:a6:1b:d4:ab:92:5f:1f:10:f5:3f:4b:cc:0f:7a:cc:48:
         7a:c9:d8:dc:77:2c:71:24:38:9b:f4:ba:14:24:cd:ba:c3:0e:
         9a:3c:b4:d4:dd:c7:ec:d7:6a:f4:f8:83:ee:f3:51:ef:38:0a:
         61:11:4c:9e:99:9b:de:30:55:b0:19:91:1e:3f:a9:94:b0:57:
         8b:b3:9c:c6:53:e3:01:64:e8:4b:dc:a8:22:d5:13:09:e6:71:
         6d:f1:a5:f1:61:31:c8:14:37:71:55:2e:ae:dd:4f:26:79:10:
         5e:07:72:27:2d:14:50:a5:a6:03:0d:1d:62:15:7d:52:8b:c5:
         61:9c:d7:ae:b3:3f:18:02:1c:c3:96:ee:38:25:3f:f9:31:bb:
         bf:5b:0e:fa:bc:e8:73:59:2d:24:49:8c:9c:b5:79:02:87:8a:
         1f:fa:15:40:3e:1b:81:f1:b6:8b:e4:2d:c4:56:8e:a5:27:a4:
         02:ba:95:51:68:19:ce:71:de:af:2b:b7:c6:fd:f1:c2:67:c2:
         ae:f3:0e:1f:7a:e1:c2:ef:f4:93:23:e3:0f:10:30:4b:91:b1:
         ad:5e:db:2a:d1:da:2f:9b:0d:37:93:10:1d:b9:8f:af:94:32:
         7f:83:fb:e5:21:9e:1e:4e:29:90:c6:ad:b7:5e:9b:8f:db:ed:
         bf:c9:44:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 07:23:47 2025 by rpki-client