Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
File:                     ZdqE27TGoS08m44ht3MEVooD21A.mft (raw, json)
Hash identifier:          6amVFWkF1PWr5Wy5WMd7VcIou8kOjl9sYIAJEVpaaAk=
Subject key identifier:   52:62:7C:98:19:3F:C5:87:17:F0:8F:9A:A9:6C:99:59:09:2D:78:54
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Certificate issuer:       /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial:       01976960C9AF614CED9C448DE4300B4B0242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
Manifest number:          1592
Signing time:             Fri 13 Jun 2025 13:00:40 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:40 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:40 +0000
Files and hashes:         1: ZdqE27TGoS08m44ht3MEVooD21A.crl (hash: yFWjsGjCG+wlqXqgRLwG/wNnQcaOs7App0PF4AEGmU8=)
                          2: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (hash: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:c9:af:61:4c:ed:9c:44:8d:e4:30:0b:4b:02:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
        Validity
            Not Before: Jun 13 13:00:40 2025 GMT
            Not After : Jun 14 13:00:40 2025 GMT
        Subject: CN=52627c98193fc58717f08f9aa96c9959092d7854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:b4:a8:8e:73:3f:60:2e:b4:8a:b7:3c:bb:
                    a1:d8:8a:a8:3e:03:20:4d:64:6b:0d:45:22:52:a5:
                    16:7a:7d:db:19:91:81:a2:2e:77:b9:7a:e9:50:82:
                    f0:1b:03:34:d9:e9:46:7a:f7:b3:f7:44:11:49:f8:
                    f7:fb:f4:eb:a4:fa:5f:b7:27:db:fe:4c:b2:1a:c2:
                    99:82:1a:6f:b3:b3:d2:c1:46:76:52:66:47:df:21:
                    b5:1f:99:fc:a4:5a:65:a8:fb:ac:66:fe:ab:6d:6d:
                    59:61:30:57:f8:44:08:e5:b3:c2:0c:06:08:cb:24:
                    c7:27:d2:c7:36:b5:80:03:4c:5f:f6:76:72:16:71:
                    93:f1:20:ac:e5:92:45:84:48:18:cc:98:b4:2f:cd:
                    d4:a6:3a:03:7c:36:12:08:40:fd:6c:de:d8:80:01:
                    9a:49:06:7f:96:ff:d5:84:2e:d4:74:64:87:27:56:
                    a5:55:75:2b:0f:be:3d:22:27:72:9d:63:49:44:8c:
                    da:e8:9f:e9:77:c6:e5:56:b9:47:75:fa:5a:64:2a:
                    95:14:49:62:63:63:af:f6:bd:2b:05:fc:5c:82:f0:
                    83:ef:67:28:f3:c9:3e:78:1c:2b:01:ce:63:d5:60:
                    2a:cf:ed:ec:cf:df:df:1e:f3:59:45:69:66:71:69:
                    8a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:62:7C:98:19:3F:C5:87:17:F0:8F:9A:A9:6C:99:59:09:2D:78:54
            X509v3 Authority Key Identifier:
                keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ba:f2:88:b7:85:e8:2d:44:a0:99:52:9c:11:5f:e9:48:aa:
         99:d9:54:38:8c:74:17:59:e0:72:b1:8d:6e:95:d8:b4:4f:20:
         99:33:c8:fa:e2:6f:57:4e:7e:83:eb:e9:6d:4b:53:6d:29:f7:
         7c:5a:ba:10:f7:20:1c:fc:30:6c:1c:60:d3:21:d4:11:4b:bd:
         99:22:db:46:18:0f:6c:63:d5:e0:7f:20:0a:31:db:91:a9:26:
         76:81:2a:3f:c7:5c:48:e4:c9:29:fd:18:39:ea:6f:f0:52:90:
         9d:88:c0:6c:13:03:6f:c8:ad:5f:c2:b2:02:05:fa:ce:76:6b:
         89:08:53:e3:4a:1d:d6:8e:2d:fe:b1:ac:f6:89:02:58:27:c6:
         e7:87:e4:93:09:75:b3:48:ba:9e:6f:43:84:2f:bb:01:ee:0a:
         8a:8d:9e:5d:ee:a1:27:0b:18:bc:22:a5:09:16:c8:86:71:d9:
         73:2f:54:32:38:e4:b2:3a:1e:ea:37:b6:bb:bb:eb:cb:6e:68:
         85:c0:72:84:a2:6e:dd:38:83:b6:bb:bd:96:7c:47:4d:53:aa:
         15:60:4f:64:1e:93:43:ce:2e:39:db:bd:c4:db:73:c6:0d:f7:
         82:ba:84:6a:a6:4b:b5:ad:6c:6d:64:0b:a0:8a:c5:4a:ee:60:
         62:74:dc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:37:44 2025 by rpki-client