Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File:                     ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier:          4X8LiB3t6nSLNt33IHW1yXBkTnqLpaSSXu8duJ3yQC8=
Subject key identifier:   AE:72:1B:D9:01:76:94:3D:4A:4E:64:73:C4:04:2B:C7:A0:D7:10:EB
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer:       /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial:       019671C1BB8A53A631CC98782BDD555381CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number:          150E
Signing time:             Sat 26 Apr 2025 11:00:43 +0000
Manifest this update:     Sat 26 Apr 2025 11:00:43 +0000
Manifest next update:     Sun 27 Apr 2025 11:00:43 +0000
Files and hashes:         1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: sMZ5Vm2w77pIIDLkK+SwGRSKrgWLz+P3nHhUk1i1Cu8=)
                          2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=)
                          3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=)
                          4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:c1:bb:8a:53:a6:31:cc:98:78:2b:dd:55:53:81:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
        Validity
            Not Before: Apr 26 11:00:43 2025 GMT
            Not After : Apr 27 11:00:43 2025 GMT
        Subject: CN=ae721bd90176943d4a4e6473c4042bc7a0d710eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8a:44:85:79:84:16:9e:f9:7c:5b:f9:49:94:
                    dd:aa:5f:c0:00:90:13:ed:3f:f1:29:90:76:70:19:
                    e0:c5:a7:94:af:28:2e:b0:31:5c:7b:75:81:aa:1b:
                    f3:3e:da:b4:89:53:8c:ec:74:f5:4e:cd:f2:f2:d7:
                    e2:35:2b:40:26:e2:cb:58:41:b2:3d:14:fb:ec:41:
                    20:8d:cf:ba:ac:a9:23:6c:92:d6:0b:62:3f:d2:90:
                    96:07:30:97:c5:96:83:ab:2a:6c:73:c0:8f:20:3c:
                    d4:61:eb:60:d2:95:3b:03:a0:7e:76:cb:9b:74:75:
                    fe:7d:e1:fb:e0:c4:f2:f9:3d:87:89:14:63:54:40:
                    d6:bc:21:a6:63:16:66:c2:ac:c8:17:40:a2:b8:77:
                    a3:23:3e:53:2f:c1:b8:43:b2:1d:c1:0c:3a:69:ba:
                    cd:32:96:d4:c8:14:43:b9:72:ff:fb:10:fe:70:6c:
                    c5:65:6d:32:5b:98:11:ab:a3:b8:02:ba:1d:b4:a3:
                    20:30:ae:12:80:94:77:9d:93:3f:f0:cb:43:cd:79:
                    06:9c:38:9e:3c:68:4a:e8:f1:3f:99:c8:b9:39:8d:
                    a7:f8:18:da:3f:8e:4f:e3:f7:28:83:fc:6e:8e:39:
                    a5:34:3a:08:c3:f3:78:c6:d3:b9:48:90:13:86:d3:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:72:1B:D9:01:76:94:3D:4A:4E:64:73:C4:04:2B:C7:A0:D7:10:EB
            X509v3 Authority Key Identifier:
                keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7c:b8:0c:20:2b:d0:52:14:6b:64:06:a9:73:79:dd:48:ea:
         5a:2d:8a:23:8c:c1:31:ab:6c:d7:a4:77:8b:64:ff:7e:d0:de:
         37:ef:ec:ef:94:23:5a:66:72:86:05:40:59:f6:8f:69:19:c5:
         32:e7:6b:80:df:6b:76:9e:4f:36:5c:bd:35:88:25:d0:7c:4e:
         2d:66:17:7a:00:fe:04:6f:aa:87:a5:02:70:52:53:d6:28:1e:
         e4:58:ce:63:c4:5f:5e:e0:01:89:2a:ba:1d:55:74:38:5c:68:
         05:95:4b:be:a8:2e:49:75:83:b7:2d:35:98:91:46:80:97:61:
         c4:60:60:18:9b:e0:41:8a:93:c6:ac:97:a6:99:aa:ad:68:3a:
         da:57:d5:29:f3:de:6e:91:a2:94:7d:07:2d:09:82:97:47:69:
         44:4a:76:cd:60:93:d4:9e:73:0d:a4:91:d9:4a:b6:fe:a3:9d:
         13:c3:14:d2:8a:40:17:57:73:3d:c2:a6:1d:76:45:9c:22:f8:
         dc:71:04:66:32:2c:25:a3:5f:ef:d6:3b:c9:4a:05:97:b1:0d:
         16:0f:ec:a4:7b:3a:bf:cb:91:2d:22:64:3a:9d:a6:80:f7:bb:
         08:f4:bc:9c:fb:a0:81:db:4b:d3:5e:7d:36:8c:35:c1:69:13:
         e3:a1:12:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:10:24 2025 by rpki-client