Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File:                     zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier:          je167t1cDByvqo1NEKh8LC/x6U1pc1coko3Lx5xwXmA=
Subject key identifier:   03:9C:91:80:5B:43:BA:78:7A:92:26:14:EB:8E:A8:9F:B5:0C:D5:16
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer:       /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial:       019683FEE966CC48DB160AB9449C3836B5BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number:          1516
Signing time:             Wed 30 Apr 2025 00:00:43 +0000
Manifest this update:     Wed 30 Apr 2025 00:00:43 +0000
Manifest next update:     Thu 01 May 2025 00:00:43 +0000
Files and hashes:         1: uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa (hash: HgH2Bf6YxOfhcnv4hc8+KBaYB6o6R1j3iFpA4UR/vJs=)
                          2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: ECMfOtcTSGbdJ8mH1Juk+dqF1keLKDTQgCyn77kXQ8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:fe:e9:66:cc:48:db:16:0a:b9:44:9c:38:36:b5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
        Validity
            Not Before: Apr 30 00:00:43 2025 GMT
            Not After : May  1 00:00:43 2025 GMT
        Subject: CN=039c91805b43ba787a922614eb8ea89fb50cd516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:34:31:7b:02:10:60:b4:f0:fd:9a:f1:c5:
                    7b:a1:2c:5e:01:a5:56:46:9d:b2:41:59:fe:50:4e:
                    6f:7c:e0:6c:68:8c:95:ea:f1:74:27:95:53:88:9e:
                    60:1b:ea:7d:6b:1e:fc:fb:b3:64:53:ff:bf:7f:d4:
                    2d:20:ae:ac:03:9d:0d:35:51:69:b8:3d:3b:c7:c7:
                    77:de:34:9e:a1:5e:38:36:8b:f4:31:6c:49:d4:ba:
                    92:cc:a1:bb:23:28:bd:93:60:93:23:b1:a6:ae:99:
                    34:93:71:2f:ff:47:9a:b6:17:bf:26:c2:e0:eb:52:
                    ec:20:7c:45:55:83:6c:26:b0:dd:6c:3a:1d:00:52:
                    e9:44:2f:5c:5b:ef:42:9b:df:f0:02:77:b2:25:d7:
                    f6:80:f5:0a:e2:83:08:00:54:c5:0e:7b:12:b7:ec:
                    90:84:11:a3:d8:0d:50:39:23:35:5a:8a:83:64:9b:
                    79:48:8a:ba:24:7e:2e:1d:8a:a0:0f:53:0e:f4:af:
                    7d:b9:2e:dd:36:24:25:97:0e:48:73:a8:c8:55:39:
                    58:7d:71:84:f1:37:70:16:b7:ed:43:74:bc:9e:e1:
                    18:51:fe:20:a0:73:2f:06:9b:f6:ec:b1:aa:16:e3:
                    47:89:af:73:9e:d8:6f:f3:c2:74:35:75:ab:03:2c:
                    f3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9C:91:80:5B:43:BA:78:7A:92:26:14:EB:8E:A8:9F:B5:0C:D5:16
            X509v3 Authority Key Identifier:
                keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:64:91:34:84:1e:4b:5b:ff:bf:03:19:10:6a:62:be:3f:89:
         fc:9b:72:65:87:4b:a3:22:c6:db:e5:39:f2:fa:57:1b:fd:0b:
         58:2f:6b:6b:3b:0a:b8:b6:88:9c:c3:b1:29:86:c8:e9:3c:45:
         17:60:22:dd:e7:5e:2b:e0:92:fa:5e:12:f7:36:95:40:a7:d4:
         ae:57:16:d4:f3:72:d0:03:c7:98:f7:18:30:fb:52:c9:80:f1:
         6e:7d:8c:af:4b:25:51:59:17:8a:a4:ad:96:4e:76:43:fe:d8:
         41:05:e5:36:ef:8d:63:70:68:f7:a2:83:1f:1b:64:ec:ab:7c:
         83:d9:22:5c:7c:af:85:8b:39:fb:60:e2:23:9a:ab:17:b5:ec:
         56:cb:eb:74:dc:04:90:e3:e3:c4:8f:69:20:da:97:96:f4:35:
         0b:c1:80:0d:dc:db:a3:9b:31:36:73:27:00:b6:32:95:0b:ca:
         17:24:5b:42:b2:db:91:ac:1a:eb:76:08:98:b5:f9:d6:45:01:
         9c:b9:40:14:11:a1:58:c0:d5:9b:21:a6:79:9b:24:31:82:c5:
         f7:e2:81:dc:46:f4:4f:5b:6b:1b:a2:38:4b:ec:0f:2a:c8:99:
         57:62:03:f3:d5:96:cd:25:13:39:55:30:3b:af:21:ef:10:a9:
         5d:38:4a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:26:07 2025 by rpki-client