Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File:                     zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier:          5YDkJF8gbLkbcmOA/rGwUpvEzK1qrgR2BqVU6oK9S50=
Subject key identifier:   01:BE:F5:63:BE:06:4F:58:DB:3C:46:B9:EC:2D:89:B2:3A:B4:23:17
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       0196458DB2254FBDABB92341E1A90792FEAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number:          1617
Signing time:             Thu 17 Apr 2025 21:00:36 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:36 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:36 +0000
Files and hashes:         1: 5n_YcLg3YQQNFYTwhU5huai3ZJI.roa (hash: 9mpciFsp3Kugx6pov8E04ElUzgFox7xfMS6pjLwC4Qg=)
                          2: 7EwFuJf9nnQnzPh2D1JxltiEKYo.roa (hash: EwJeqB+Hyr9+lTeyi/kkdkbvr/H81d6CccG0b+7FFDI=)
                          3: ECT8clfNxElQsbNgWf5MSMBQJBw.roa (hash: OHKduQ+nBMz5yKr3Tz8KQLq2T4SUqaXm2BJrDDuQUCc=)
                          4: Eg5cB0gFbZt-mtb2g5DlnYfptYU.roa (hash: N8GnHFT4fRhNM3nodSxCZOH18KkVNRyweY1llmfoJHs=)
                          5: GCq3OcvhsVssgyhwVftlmv2qS0g.roa (hash: amGc7yYYdNqbzEM6/ZudOs3K3qKn0m9v09EM2kwWv7M=)
                          6: It_f8Sf2FfhB_S0DbfQKa-2JOPY.roa (hash: QAc5gHOaQXt39S4LjrikuPGmP8en9wsKvBleiEYuYHU=)
                          7: JnUDLpnSNZdUPTciH_SImfiQNPg.roa (hash: phKmDfTKEa4M5M2wLFu2WomQfhRDPt24TZJyLDqWijI=)
                          8: Jr0vftJR3CjRVz6-o4pf0gt3nug.roa (hash: +mzEEh0eCpPswQBbLT86K9qsx3oFcbJzNBm/K0viybI=)
                          9: KCCAvsdFABptcdWkmYzNnQ9RL6E.roa (hash: DSZuLAxhdSWLE0DFN+BFigCnq9IYv1dV5jCeoEQh9rg=)
                          10: SeBDGoUZsUtOUZx02IQlwMJ27mU.roa (hash: c6tFykgM8su9GyncwABr6lgk4O/lhzLOVTR6XdjeoGk=)
                          11: dlMgTA37PYjMj29gw-38SqdkU3Y.roa (hash: 1Uz3Ku2WqM/b08F/1HFeZ9d7LLkvQOmfAokOdqGf3nA=)
                          12: eHOgLTcKFTQCb9pEoV1RpO9Ob6A.roa (hash: RcgTIJu/NwqSqC/vmr9OYFdwRt2Fz/3jLy3D9rjl+1A=)
                          13: gRGDjjLT48vk7uk37lX43qmpguM.roa (hash: r1CGQBpwekmoJBDyj4suW0g94HtAtdOyi9owjr8gV84=)
                          14: ob_RURKVUgsmITZALhVsa-qXolg.roa (hash: Fa1GGWTo+0NV3NehS4X6jfnbmrCwDIsz+qaYmi3m0FU=)
                          15: pYYheMngH9PrFAWYb7D0Rnwh3Rc.roa (hash: Kusa3kjA5UvOGnNhZkPG36CpyMnLT1XxrIsJiFszyIE=)
                          16: ro5M-dHEvoHU0Wp1W7KVNXTJRB0.roa (hash: XLpdig1yngTdqxo047wSxCKu12A/eL61KXVLCkHmUrU=)
                          17: tY_SBiXlNsyr5MWGvZwrQKokaZY.roa (hash: kjGrN/I53C88kyyVw+9gflWs7bJ3X6mbRrf1jGUgHG8=)
                          18: uBPI4Rs7rRPQGCWlNIMKuX7PU7k.roa (hash: jFkWBUBLmZ3TDstxedf2WQQANWt19wC/I1ODOLEnI/k=)
                          19: v4CBgLv9j2JeRIvOJQdKbNxvJTA.roa (hash: Ttid+kREmc6Upy79hRBO9XMBfRE+dqbNAYWtSZGV6ag=)
                          20: vS_G30kRmF5yTvVCZuLriQbTalI.roa (hash: jpLTyi2oD569vb7nR4qsqTlGyMLcUPoGbyflTszDmns=)
                          21: yxb4qAopfVWx9tbVX2D9X8-NDPo.roa (hash: SCjFOGOJpyW+e/90L6KJ17UwdzCSiXn/XxCg01egwec=)
                          22: z5USRWL1xokOYfBSwUf22d4RSgs.roa (hash: +k9eJkOqlZwo2Ca8utkijZ5ya8drgkfsi12poSw6dDo=)
                          23: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: NEvaCN5UaQ5PCxTBSD8QbRd8q27n+fhMDl2A+EDUFDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:b2:25:4f:bd:ab:b9:23:41:e1:a9:07:92:fe:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Apr 17 21:00:36 2025 GMT
            Not After : Apr 18 21:00:36 2025 GMT
        Subject: CN=01bef563be064f58db3c46b9ec2d89b23ab42317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:f1:c7:06:b8:8f:9f:fd:4e:53:7c:29:cc:
                    0c:49:f5:d1:d9:db:20:c3:27:68:35:e7:12:87:69:
                    72:35:78:33:bd:fa:c0:2f:30:62:c9:2a:0e:50:1a:
                    7d:b8:d6:73:5d:25:06:18:4f:5e:a8:2d:34:40:cb:
                    ce:fb:a5:13:a9:02:c2:59:b3:eb:dc:a7:82:a5:2e:
                    c7:83:d2:f5:64:0b:b0:a5:5f:98:1b:8f:d6:31:c5:
                    0d:d5:0a:12:1d:74:ed:1e:5e:9f:fd:ca:33:33:78:
                    1a:43:e5:e7:ed:0a:14:3d:62:6b:23:56:6e:ce:dd:
                    cc:ce:3c:06:5f:e4:d9:64:69:2a:53:0f:19:77:20:
                    65:d6:85:6c:4f:88:59:1f:1e:b7:49:0e:59:e0:c2:
                    8b:fa:e9:a5:7c:e4:53:a3:dc:68:2d:08:27:48:37:
                    52:68:2a:e2:59:9f:bd:6c:cd:cb:31:3e:66:d9:3e:
                    8f:ef:11:c6:bd:18:90:bd:bc:6a:ba:41:90:04:59:
                    e6:93:aa:e4:ee:24:5c:16:74:de:78:a2:bb:49:0a:
                    bb:de:35:56:42:d9:0a:8e:fb:78:45:c5:7c:90:4d:
                    59:31:a1:01:01:54:16:40:14:32:51:22:bb:f9:da:
                    8d:58:19:bd:5b:04:cc:f4:96:18:c1:6a:a9:f6:c0:
                    1a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:F5:63:BE:06:4F:58:DB:3C:46:B9:EC:2D:89:B2:3A:B4:23:17
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:04:aa:0f:5d:6e:25:2c:24:bc:8f:43:e2:ca:48:18:e2:53:
         31:e2:80:2d:57:18:6e:96:39:69:59:7b:49:f6:b9:1d:49:78:
         89:db:3e:a4:4b:ab:bc:50:88:01:69:cf:5b:4e:cf:4f:9c:59:
         97:b0:1b:ee:6b:26:54:59:ba:ba:fa:38:27:b7:eb:44:ae:de:
         8c:c4:9d:56:54:6f:79:f6:fc:0a:00:6e:6b:f2:a8:ea:a1:44:
         56:2e:93:d2:e2:15:60:d0:d3:78:0d:d0:97:d1:43:30:1a:5a:
         2c:28:a7:4e:38:15:a9:6b:a5:67:5b:90:c7:1b:19:15:72:2e:
         04:b8:ec:11:8a:0c:1b:b6:04:0d:ad:09:ea:2d:ac:2c:4c:f9:
         4c:b5:1a:67:39:c5:22:ed:02:9b:03:87:f2:c5:b8:14:f2:e3:
         1c:30:5f:55:9a:07:f1:19:d3:b5:44:87:2c:b3:cd:16:8d:86:
         a7:03:ee:41:cb:82:ad:3f:84:e9:13:98:ee:8e:f2:38:27:8f:
         80:12:00:eb:82:c8:60:74:dd:1d:73:1d:35:d5:7e:67:ca:75:
         03:e0:14:6a:b5:65:77:39:6c:1f:7d:e1:30:e3:30:d7:77:01:
         3c:00:08:f7:7d:d0:2b:a2:77:3a:21:ef:41:22:8d:99:3d:e3:
         0e:32:40:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:43:40 2025 by rpki-client