Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
File:                     ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft (raw, json)
Hash identifier:          xDjxEJkTYfi1ISdoYEmPwE3duOwN7WnBQLswZKzIJl8=
Subject key identifier:   94:9D:B4:74:BC:DC:2C:A4:39:14:FA:13:00:A9:1F:F0:FC:8A:39:17
Authority key identifier: 64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5
Certificate issuer:       /CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
Certificate serial:       0197688545198D0D843E65B50400D0EC48ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
Manifest number:          0245
Signing time:             Fri 13 Jun 2025 09:00:53 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:53 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:53 +0000
Files and hashes:         1: 7221QtQkpZ5fYG5uSqjd2485FGI.roa (hash: qWfFUUJnuvb44KA8Ta3mXVGgM6VvJjf6ZydNkx5R4C0=)
                          2: ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl (hash: i6k6aTPFd5S7HXKULG5n7iMGtQgsKSIBLisENXzsU/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:45:19:8d:0d:84:3e:65:b5:04:00:d0:ec:48:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64bb22f822db7451fe1e2196cac63c5647fb1ad5
        Validity
            Not Before: Jun 13 09:00:53 2025 GMT
            Not After : Jun 14 09:00:53 2025 GMT
        Subject: CN=949db474bcdc2ca43914fa1300a91ff0fc8a3917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:56:d3:b0:e7:f0:1a:03:45:99:bd:bb:62:
                    41:1f:51:45:ab:98:5e:fd:09:24:a3:1f:6a:b3:be:
                    5e:d0:ce:08:c6:2d:0d:00:82:36:a3:d0:4f:ef:c6:
                    45:3d:dd:f6:10:67:a2:c0:ea:62:1c:e5:40:d6:e5:
                    71:a3:d9:20:25:ef:f1:c0:49:7b:0a:71:3b:5d:d1:
                    4d:1e:4b:08:f3:aa:6b:d0:25:cb:90:ae:55:e0:0f:
                    19:91:ee:54:8f:62:a1:d8:c9:52:f6:72:c4:18:36:
                    40:53:43:53:6c:f9:d5:1e:1a:17:da:ae:7e:5a:92:
                    d3:3c:1e:db:2f:a4:5a:b7:82:5d:b1:b4:a7:99:75:
                    f3:5a:19:58:0f:44:5f:52:e9:78:d2:0b:94:83:07:
                    d7:c5:eb:ec:cb:99:9c:49:2e:43:71:4e:17:2f:c8:
                    ed:94:8a:7a:35:f7:d1:10:27:59:df:15:14:9a:29:
                    32:54:ae:d4:af:11:65:50:64:a2:5e:8e:22:e1:ab:
                    ac:8a:d9:cf:bd:f1:8b:22:ef:38:29:84:0a:6f:9d:
                    60:5b:3d:dd:ae:dd:1a:4e:a4:3c:4c:e8:01:58:12:
                    af:54:ee:78:84:75:2c:24:ee:1f:fd:c3:f1:7a:36:
                    da:96:cf:8d:09:b6:bb:41:2e:ec:2a:0f:d2:f6:b2:
                    16:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9D:B4:74:BC:DC:2C:A4:39:14:FA:13:00:A9:1F:F0:FC:8A:39:17
            X509v3 Authority Key Identifier:
                keyid:64:BB:22:F8:22:DB:74:51:FE:1E:21:96:CA:C6:3C:56:47:FB:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e813d4-4126-4ca1-90d6-45d05a4b1d99/1/ZLsi-CLbdFH-HiGWysY8Vkf7GtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e0:35:79:3e:25:f1:ee:8e:b4:84:21:32:46:9b:dc:a3:ec:
         91:fc:29:55:6b:6c:99:45:2c:3a:a6:89:3c:46:4d:5a:7f:07:
         99:55:4e:b6:f5:7e:89:12:eb:2c:87:a3:8a:80:d8:4e:c9:98:
         af:c2:f7:d0:9d:65:69:7e:2f:23:9b:67:f4:ea:25:74:b1:b6:
         96:05:f8:73:dd:c5:18:22:93:13:c1:09:8a:a1:6e:30:9c:08:
         8f:96:7e:27:24:64:ec:bb:3c:cf:93:78:09:ce:cb:56:52:63:
         f8:bc:6d:2f:8d:a1:6d:6c:aa:d5:47:d4:49:a5:54:c8:d0:54:
         10:79:8e:68:08:84:1f:48:d3:d6:4d:0e:0e:4a:4e:ee:d9:f6:
         d6:a9:d3:ea:1c:4b:8a:93:f5:06:f4:a4:f2:e3:02:2c:0d:e8:
         88:76:2c:d5:c4:0c:9c:bc:c9:aa:99:ec:f2:9d:7e:c2:90:15:
         b4:d9:71:93:5a:0c:87:06:06:66:1f:b6:5f:83:12:e2:c6:eb:
         56:3c:1d:ed:77:20:38:8e:1a:04:66:00:95:50:36:cf:e9:da:
         30:0d:58:f6:9d:6b:c6:75:2a:c7:3d:c7:48:96:d7:e3:d7:6a:
         05:09:c2:ef:2a:ea:f0:6c:c3:8a:bf:7c:37:f6:97:b9:31:1e:
         4a:45:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:33 2025 by rpki-client