Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
File:                     zxNuAf-vhT27Klz8_l0bZ9IMILU.mft (raw, json)
Hash identifier:          ahqOdlRQGAn43H17TFIL4dxZTkJBf2J3PIu33mFXwgc=
Subject key identifier:   FD:61:DB:64:7B:C0:E5:BA:C5:3E:58:ED:CB:A2:7C:B3:58:21:8C:55
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Certificate issuer:       /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial:       01976FD1259392AF4A08AF521F9FBEF34A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
Manifest number:          101A
Signing time:             Sat 14 Jun 2025 19:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:06 +0000
Files and hashes:         1: OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa (hash: Adg8t51EAwBbzjl4kDJAi92mlZw1Om+k918pc8UAy2M=)
                          2: zxNuAf-vhT27Klz8_l0bZ9IMILU.crl (hash: 9hFfmgxeYJJcY2bQtTGbomzi3mmnaXw4mAiJd/JEEgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:25:93:92:af:4a:08:af:52:1f:9f:be:f3:4a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
        Validity
            Not Before: Jun 14 19:01:06 2025 GMT
            Not After : Jun 15 19:01:06 2025 GMT
        Subject: CN=fd61db647bc0e5bac53e58edcba27cb358218c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d8:f6:a5:0e:be:47:30:7c:da:1a:cf:d4:04:
                    99:f9:c8:42:61:d9:04:17:dd:ec:85:60:1d:93:d2:
                    5e:b6:f5:f8:b2:72:48:2e:ca:7a:75:0d:a6:e1:bf:
                    a0:b0:70:bf:ba:6f:37:7d:d9:d8:29:24:c6:2f:06:
                    96:df:a2:9a:c5:cb:11:56:18:6a:27:b8:69:c8:34:
                    63:f8:ae:c7:72:50:12:e5:c7:ee:ab:5c:2d:18:02:
                    62:90:9e:46:6f:47:1d:62:e5:f5:b9:d4:c8:dc:47:
                    38:f2:3a:59:84:1f:7d:d1:0c:20:66:95:74:eb:68:
                    7b:de:ce:41:9c:e9:40:7d:5d:e9:94:e2:bc:e3:60:
                    e3:77:b9:8d:eb:81:6a:bc:c7:dd:62:df:b8:84:df:
                    82:d0:7e:cf:cc:26:45:93:b5:69:d3:f1:37:bc:51:
                    23:26:f7:f7:c1:5a:01:45:b0:8e:c6:17:82:be:d5:
                    80:43:a3:a7:ab:22:8f:d6:ac:fc:8a:31:d6:16:8c:
                    9b:a0:44:ae:1f:51:0c:d6:c8:99:45:01:df:fc:fd:
                    48:18:5e:70:f7:82:24:c9:47:fe:66:a7:65:1b:fc:
                    bf:b2:d4:9b:e9:77:a2:26:0f:c2:3b:f4:df:f6:bb:
                    9b:7c:b9:8d:6f:55:52:32:b4:29:fa:d1:71:f4:17:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:61:DB:64:7B:C0:E5:BA:C5:3E:58:ED:CB:A2:7C:B3:58:21:8C:55
            X509v3 Authority Key Identifier:
                keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:18:c0:3d:09:12:d5:92:40:ae:8e:98:cb:e2:c6:44:de:89:
         dd:9e:e5:01:b0:22:85:07:94:c5:60:88:f8:51:5d:ea:f6:67:
         f7:a8:98:ce:08:75:43:05:41:3a:78:7c:8d:0c:3d:ff:02:d0:
         e6:45:35:e4:c9:b3:03:2f:8f:89:85:06:a8:9e:d0:2e:00:c3:
         2f:70:65:31:c5:5f:ef:56:77:81:31:8a:0c:88:8f:30:3f:0e:
         b2:ee:35:e6:87:cc:9b:4b:ea:a8:c8:59:31:6a:01:cb:d5:f5:
         1e:87:ae:d4:c7:e2:08:1b:ff:4b:04:df:19:32:28:d1:21:6d:
         83:3c:22:2d:a2:80:d0:b5:e1:2f:20:a2:d8:bd:bc:c8:3e:5b:
         76:9d:a6:35:25:77:66:ac:9e:c3:19:34:2d:29:4c:6d:f7:0e:
         06:38:ba:55:47:89:0a:6c:d4:6e:64:61:f5:4e:3f:b8:f1:b4:
         cd:1f:ec:0f:4d:2e:49:f6:af:ec:72:fd:1a:cf:ef:63:be:05:
         14:63:26:de:26:88:d7:c5:08:d1:12:78:9e:b1:76:91:9f:a2:
         d3:ff:d6:cc:0c:47:96:c5:fb:8d:49:51:ed:6e:98:a5:67:6f:
         b8:e9:13:eb:f4:bf:88:84:67:31:d6:ce:bd:e3:12:5f:06:9a:
         40:1f:3b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:14:47 2025 by rpki-client