Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File:                     ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier:          5fEDZD61d7GfdrrtBlYiWGUIlSb+mFBGmQJ1KqWju2c=
Subject key identifier:   21:87:20:29:07:C4:43:F3:0A:B8:AC:7B:13:2C:48:F1:1D:C2:59:3C
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer:       /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial:       019694165A7739E149BCACCABB49E40DF187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number:          0932
Signing time:             Sat 03 May 2025 03:00:15 +0000
Manifest this update:     Sat 03 May 2025 03:00:15 +0000
Manifest next update:     Sun 04 May 2025 03:00:15 +0000
Files and hashes:         1: BcdGko0r03EyM3V22SJp6LUI_jg.roa (hash: 98Brzs1QQHJfWLy5qsyBt5iEFr39Rl2gjaUb1gsQClI=)
                          2: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: I2KyRr7mgl5Izty17baI/EDOAQpQiz2yUhDylTObyxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 03:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:16:5a:77:39:e1:49:bc:ac:ca:bb:49:e4:0d:f1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
        Validity
            Not Before: May  3 03:00:15 2025 GMT
            Not After : May  4 03:00:15 2025 GMT
        Subject: CN=2187202907c443f30ab8ac7b132c48f11dc2593c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:df:7e:e7:37:63:f8:85:fa:03:35:9e:f5:54:
                    5b:69:14:26:49:c3:fc:b3:48:a6:25:90:71:5c:b8:
                    ee:cd:b6:1e:25:05:6d:cc:78:eb:35:fd:38:80:0b:
                    0c:95:91:09:6b:fd:29:cb:40:a1:72:a3:50:ba:b7:
                    20:b5:c0:38:54:67:b4:c8:cd:fb:eb:c6:91:a2:ec:
                    d7:4a:9a:87:3d:7c:f3:71:7c:cd:94:46:b4:c7:a2:
                    a2:ac:cc:44:52:ec:68:dc:bc:01:d2:e0:59:01:50:
                    f8:30:37:65:86:69:62:23:f5:9c:db:f1:d6:54:17:
                    08:39:31:38:a1:f9:9b:f1:3a:e5:d9:32:48:4b:d7:
                    ff:52:4a:41:e7:6a:55:09:c9:39:ae:aa:9a:70:08:
                    17:39:29:d1:ce:ec:f1:ee:39:96:79:2e:60:aa:02:
                    91:0a:ef:f4:2f:ef:d6:f1:f3:eb:03:fd:78:45:26:
                    f8:61:d5:9c:6d:88:dc:1e:b9:68:03:6b:b3:8a:e7:
                    9e:46:aa:e5:f3:34:ba:36:c9:f8:3f:ad:0e:7f:fd:
                    87:6f:18:95:8c:34:04:80:1a:af:17:f0:55:0a:0b:
                    ee:6d:85:40:40:22:7b:97:81:20:a3:70:d2:f7:ac:
                    c0:7c:5e:e0:4c:9b:fc:09:f1:0c:3a:ec:3c:92:bb:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:87:20:29:07:C4:43:F3:0A:B8:AC:7B:13:2C:48:F1:1D:C2:59:3C
            X509v3 Authority Key Identifier:
                keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:11:49:61:36:24:67:38:e3:37:4c:1d:d4:07:79:eb:d4:b5:
         90:cf:49:77:d0:ad:3c:ea:b0:65:4b:46:00:db:1c:03:3a:42:
         08:e8:49:59:13:b7:5d:6c:6d:a0:b3:b5:8c:20:98:89:0d:33:
         3f:1d:6f:8c:3e:db:13:1a:36:bb:75:09:5a:a6:18:85:ac:5a:
         9e:09:57:61:6a:ca:b1:05:b8:39:36:6b:a3:f0:75:df:00:39:
         cc:83:96:17:1c:50:e2:4a:cf:03:c8:4f:53:11:5f:00:a9:ac:
         38:4a:3a:93:64:b2:94:cc:05:67:4c:e5:94:93:e5:88:fb:31:
         16:2e:12:1c:88:a7:03:4c:76:74:4e:4e:89:7a:3b:70:f1:46:
         0b:80:2f:3e:54:cb:cf:54:a2:2b:a7:58:ee:6f:10:9f:52:c8:
         62:9c:2b:40:dc:70:de:36:33:5c:b9:b3:25:00:d1:e3:2c:15:
         23:05:c0:ef:c5:d7:80:9d:02:6a:8d:32:f1:4e:ef:93:09:be:
         28:42:09:9f:bb:bb:a8:9b:4e:1c:bf:e3:3c:dc:f6:95:37:1d:
         00:49:d1:ff:d5:06:cd:38:f7:61:24:39:2b:d0:d4:c1:f5:ba:
         73:82:99:08:bb:a9:9d:6c:4a:3f:52:89:6d:ea:82:79:f2:d1:
         39:c9:a7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:35:14 2025 by rpki-client