Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File:                     ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier:          sw0n0Cux23qO7RgVxoirXk9CxDPRdV6xK/cFVLvJhXw=
Subject key identifier:   DA:65:6B:7C:C9:10:6B:33:90:5E:44:50:2A:D1:D5:DD:21:2B:B7:7F
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer:       /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial:       0196741DB02B8228245598A2E1ECB73B1DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number:          0F4E
Signing time:             Sat 26 Apr 2025 22:00:24 +0000
Manifest this update:     Sat 26 Apr 2025 22:00:24 +0000
Manifest next update:     Sun 27 Apr 2025 22:00:24 +0000
Files and hashes:         1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: MBas6+Pc34znc/lJPUrtE9TvMafChgjm0QKDu/2krr4=)
                          2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:1d:b0:2b:82:28:24:55:98:a2:e1:ec:b7:3b:1d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
        Validity
            Not Before: Apr 26 22:00:24 2025 GMT
            Not After : Apr 27 22:00:24 2025 GMT
        Subject: CN=da656b7cc9106b33905e44502ad1d5dd212bb77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:45:8e:86:3e:27:1b:2a:73:a2:59:9b:df:a7:
                    ec:1c:3c:5b:07:1a:80:ed:e2:b2:77:68:36:e6:da:
                    32:44:89:11:d7:48:7a:21:b1:86:d4:78:6d:70:85:
                    56:63:32:fb:e9:02:b8:5e:53:81:c4:50:85:cf:1e:
                    2d:f3:5d:f0:9b:c5:d6:d5:27:e8:3a:61:82:e7:6d:
                    1c:18:f2:0b:4e:34:0a:bb:bf:7d:d9:41:a9:da:99:
                    07:90:77:df:28:45:7e:70:4a:5d:64:5b:f4:b0:f8:
                    d7:49:bc:0f:75:cf:74:32:c4:63:84:75:d3:95:08:
                    e9:4b:b5:be:a6:41:a8:96:d3:01:a7:81:fd:61:c1:
                    5d:7c:02:b6:7c:67:1b:aa:18:8f:7c:29:dd:2b:85:
                    57:bd:59:9a:53:3d:c2:44:1d:cf:09:b2:01:68:5b:
                    a7:b1:68:50:f8:37:40:ff:e9:d0:10:81:b7:b9:50:
                    b6:6e:fa:07:b0:96:b3:87:e2:1e:e3:8d:fd:fb:02:
                    6c:76:a3:74:82:32:42:41:d9:68:35:89:2f:f8:e4:
                    f5:ba:da:56:6c:91:c7:17:25:a3:1c:5e:b9:8b:6e:
                    5e:44:cc:b3:08:77:68:f2:8d:a7:5c:f9:b2:ac:62:
                    1f:04:f3:a6:bd:8a:ae:97:6a:4c:e6:b3:3c:04:1d:
                    11:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:65:6B:7C:C9:10:6B:33:90:5E:44:50:2A:D1:D5:DD:21:2B:B7:7F
            X509v3 Authority Key Identifier:
                keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:8f:22:04:01:03:21:84:7d:09:94:65:fb:98:9f:c9:c8:
         76:01:e9:b9:31:99:fa:07:e5:bb:e7:7e:ff:ba:ca:e2:51:39:
         74:08:ba:05:a1:8e:3c:56:48:48:d8:ff:1f:15:4c:e7:7d:a5:
         a8:2f:1d:69:e2:0a:b6:b8:6a:40:af:38:84:ae:00:f4:4e:cf:
         fe:40:38:60:93:56:8c:c1:40:46:05:9d:3e:eb:ff:9d:14:44:
         51:c9:41:c3:69:43:93:5a:cc:50:e7:14:7a:23:c7:7b:76:05:
         9b:c1:47:10:47:e2:cc:95:b7:89:39:81:ec:88:0a:59:ed:b8:
         f5:ba:20:0a:ea:59:0e:bc:16:08:5f:ac:4e:89:d1:82:2c:89:
         0a:23:24:7a:7e:cb:bd:18:a0:bb:75:38:7f:e9:f1:c1:f4:50:
         66:7c:25:48:32:b2:40:9d:d5:50:2b:b8:cc:f7:1d:4d:56:72:
         77:13:99:65:a9:83:a0:31:49:c0:23:5d:06:e1:ac:0d:12:31:
         ed:11:74:52:d7:8e:27:59:c6:f0:f3:e9:45:68:aa:69:ca:b4:
         d7:05:53:2f:01:e1:89:7e:ae:a3:a2:4d:1d:dd:7c:0b:15:27:
         66:be:ab:ff:9c:86:4f:c3:e3:6a:74:c7:67:3d:ea:b7:b7:36:
         d6:bc:56:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:56 2025 by rpki-client