Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File:                     zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier:          NwGCwaC1qhdrNTKtg7BzsfxY+Ns9bDkQ+8Q9PRlAYVE=
Subject key identifier:   16:BC:AB:16:AA:14:04:95:47:0B:03:7D:48:B9:E1:E2:67:97:71:34
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer:       /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial:       019773AE098F12A23429B220BD2564EF0A61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number:          013D
Signing time:             Sun 15 Jun 2025 13:01:14 +0000
Manifest this update:     Sun 15 Jun 2025 13:01:14 +0000
Manifest next update:     Mon 16 Jun 2025 13:01:14 +0000
Files and hashes:         1: O_wHUsAPrNDflBZDUMtdY6xsx-Y.roa (hash: ARirtfJZlvrV6Gh7ZW/gDyQsG60JpK7a/eIqEIlcaSo=)
                          2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: VAKKiLO+M77sqwTHqgss5Sg2YsXnqg/iqa/VpXOjNGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:ae:09:8f:12:a2:34:29:b2:20:bd:25:64:ef:0a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
        Validity
            Not Before: Jun 15 13:01:14 2025 GMT
            Not After : Jun 16 13:01:14 2025 GMT
        Subject: CN=16bcab16aa140495470b037d48b9e1e267977134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:08:8d:5e:10:8a:a3:1c:4d:72:1c:b1:b1:de:
                    00:0a:79:d0:2f:b1:29:1b:f4:a3:ff:c2:5a:a4:fa:
                    b3:00:78:10:63:fd:7c:f4:01:b9:22:b2:a4:46:27:
                    50:8e:54:84:63:5b:cc:6f:42:ae:49:ba:cc:12:4f:
                    da:c2:a5:f5:37:79:cb:35:9f:d7:a1:2f:69:0f:6d:
                    a4:94:7d:16:dd:28:51:35:99:88:ac:b3:31:ee:c2:
                    68:87:63:ad:a8:7e:2d:9a:bf:f1:aa:8f:b4:c0:f1:
                    1c:3c:03:22:83:a8:5d:56:da:2a:bb:8b:23:1e:60:
                    4e:4d:71:b6:51:c0:32:86:17:7f:a7:c4:8a:57:7a:
                    a4:6b:8e:42:90:61:78:ad:29:60:92:de:fc:89:03:
                    98:2f:b1:24:fd:6b:6d:25:f7:bc:a3:b3:f8:75:06:
                    d1:6a:d5:05:0a:75:70:c0:cb:ab:30:4e:55:e8:ae:
                    a7:b9:08:93:6a:6d:31:4d:db:53:24:7a:4a:9c:24:
                    41:23:bc:37:9e:d0:e0:82:95:3e:d5:a6:49:a0:9b:
                    02:24:f9:74:fb:b3:ae:c8:35:69:3c:b5:a1:7d:56:
                    da:86:80:16:2a:f5:d0:d9:f5:bf:28:70:41:19:f3:
                    eb:07:39:db:21:53:45:e1:03:4a:83:57:04:4d:e7:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BC:AB:16:AA:14:04:95:47:0B:03:7D:48:B9:E1:E2:67:97:71:34
            X509v3 Authority Key Identifier:
                keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:6e:b9:82:cf:cb:5e:78:1a:1b:c3:22:02:b2:71:43:c7:20:
         41:0c:3d:53:ac:75:f8:c3:78:c3:4d:3e:bb:0b:42:41:70:ad:
         3e:a5:20:8a:ee:be:00:72:7b:42:23:2a:e3:d5:59:39:37:2e:
         89:91:a4:76:b3:e9:a9:49:ea:8c:f2:d5:7f:de:96:f7:7d:12:
         5f:52:07:39:bd:90:08:e3:63:86:44:b7:09:90:d9:d2:84:01:
         d8:52:85:67:94:1e:bb:cf:89:96:50:71:db:84:27:b1:e4:66:
         de:22:8a:60:e8:4c:79:03:e6:34:16:9c:96:f3:12:e6:7e:21:
         1b:3a:43:be:c8:8e:8e:c6:3b:3c:93:35:a2:03:31:ef:96:f7:
         2b:ee:e7:4e:4a:7a:23:c2:15:c3:8b:40:40:18:74:28:8a:4f:
         99:52:6a:9e:a6:a5:bb:b2:39:ce:86:d2:fe:2c:c7:b9:80:20:
         fa:aa:3f:67:c1:51:1b:05:7b:bf:83:6b:ff:b7:0e:c1:46:cf:
         db:18:d7:a5:db:54:ca:86:a0:46:48:90:b7:2f:21:4f:84:6c:
         34:e5:9d:d1:8f:56:83:aa:32:04:75:b5:47:81:95:f1:0c:7b:
         86:43:25:59:e6:a3:32:f8:9e:69:68:47:ed:b3:4f:f9:74:25:
         1f:43:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:08:31 2025 by rpki-client