Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File:                     Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier:          9+nMzruppyatITMkEKNeqnONAVsOWTe42Y33D2Fda8A=
Subject key identifier:   6A:63:72:38:DC:E4:B7:15:55:96:6D:BE:6D:88:38:FA:68:93:34:12
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer:       /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial:       0197741B150929B9B4A3A243F74DD3647D97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number:          0E6B
Signing time:             Sun 15 Jun 2025 15:00:21 +0000
Manifest this update:     Sun 15 Jun 2025 15:00:21 +0000
Manifest next update:     Mon 16 Jun 2025 15:00:21 +0000
Files and hashes:         1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: nIm3jR8jGSbkUJaSDXApbX9Lh+r8bKefYdaMxTmdx+0=)
                          2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:1b:15:09:29:b9:b4:a3:a2:43:f7:4d:d3:64:7d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
        Validity
            Not Before: Jun 15 15:00:21 2025 GMT
            Not After : Jun 16 15:00:21 2025 GMT
        Subject: CN=6a637238dce4b71555966dbe6d8838fa68933412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:0f:bd:a5:e7:a1:4f:c6:8a:dd:ac:af:ab:
                    da:b9:16:8c:8b:30:59:59:ae:80:8c:de:f3:47:f2:
                    48:c2:e7:1e:20:ed:ad:22:33:12:7b:33:ac:ad:0e:
                    04:dd:6b:8c:28:17:67:70:ef:0b:8b:d8:cf:f7:21:
                    42:c0:25:cf:a7:c4:76:b8:bf:3e:9d:90:19:2f:32:
                    5a:1d:ff:7c:f8:ab:6d:75:13:ce:4c:f5:8e:c7:b5:
                    d8:4c:34:0f:8e:ee:a0:b2:42:ab:8e:d1:84:18:55:
                    b2:42:cd:56:25:06:68:3c:1e:77:66:13:ee:20:a0:
                    5a:f8:19:d5:ec:a0:e0:a2:da:54:85:5d:fe:a3:34:
                    ff:7f:18:df:ff:ef:53:26:b1:70:6e:46:7d:ca:8f:
                    19:54:0e:5c:ed:5e:91:1b:dc:94:ba:31:5b:f3:40:
                    1c:d1:66:f1:69:e3:91:2b:b6:e1:73:cf:b8:f0:8b:
                    5b:d0:c4:9a:bb:c3:fe:5d:7c:71:84:86:a2:6a:40:
                    15:eb:8e:f7:83:36:09:30:d0:4c:8c:7e:b8:ca:0c:
                    fd:e1:e1:c7:dd:94:d7:e7:4f:00:27:26:c4:95:b2:
                    2e:2e:36:86:3c:d4:54:79:61:53:33:a8:4e:58:53:
                    eb:8c:46:2f:35:00:1e:ec:c5:66:1d:49:1c:2f:d5:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:63:72:38:DC:E4:B7:15:55:96:6D:BE:6D:88:38:FA:68:93:34:12
            X509v3 Authority Key Identifier:
                keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:53:37:77:b6:15:83:95:c3:5a:1c:db:f5:ae:eb:32:51:cb:
         a9:9f:ad:72:fc:e4:c3:ab:e7:11:48:76:4a:68:0d:ec:be:14:
         60:27:24:bb:61:9f:c6:45:29:04:5e:ad:50:c2:d6:0e:ba:ae:
         57:2f:75:62:3e:89:4b:0a:ec:91:0b:9e:01:69:ac:e6:01:88:
         a1:00:8b:03:c2:18:60:46:46:da:03:56:46:15:39:1a:e9:52:
         5a:e0:2d:79:3f:5f:59:6c:d8:1c:81:fa:fa:79:f1:f0:16:6e:
         4d:a7:13:c4:89:03:ea:4d:29:9a:61:25:f3:90:6b:cc:a7:83:
         a9:3b:4a:65:05:69:c6:59:ec:70:3d:1f:55:95:7d:b8:1e:61:
         bc:5e:20:93:97:f4:39:c5:26:87:fc:3b:e1:cf:81:9f:c3:70:
         6d:2f:fa:f4:33:31:78:27:76:7e:20:fc:8a:ed:d2:46:47:12:
         a3:46:60:9f:5f:99:ec:80:72:38:95:37:3a:06:4f:96:89:a2:
         3f:de:71:78:96:63:91:3a:49:e3:0d:5b:ce:cb:38:0e:59:1d:
         c3:fa:fe:6b:03:68:01:21:10:12:fd:9f:16:d8:29:2f:be:1e:
         89:c1:9a:90:e0:32:36:b4:14:e9:80:9a:a3:4d:bd:07:3c:f7:
         00:54:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:54:59 2025 by rpki-client