Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File:                     zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier:          ERO7ct1uct88VNR69kDbrHQ+wYsuZjece9OiDspJbfw=
Subject key identifier:   DA:FC:1E:1E:1B:41:BD:42:16:4D:92:1F:A0:E1:B0:07:7C:59:0B:81
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer:       /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial:       01976C989F3D2A7F32B98F4DFA172D8D7E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number:          0C1E
Signing time:             Sat 14 Jun 2025 04:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:30 +0000
Files and hashes:         1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
                          2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: 8OuH4h24R5+S9zl4I+MG+SOkq/GNJkeBCGi5Hv7YQoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:9f:3d:2a:7f:32:b9:8f:4d:fa:17:2d:8d:7e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
        Validity
            Not Before: Jun 14 04:00:30 2025 GMT
            Not After : Jun 15 04:00:30 2025 GMT
        Subject: CN=dafc1e1e1b41bd42164d921fa0e1b0077c590b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:09:27:d1:d5:71:f5:57:d3:aa:bc:7b:99:
                    cb:e2:aa:6e:f9:0b:40:5f:17:01:d7:27:29:97:53:
                    b8:83:1f:ce:80:f4:ad:75:5a:27:88:2d:e3:a7:86:
                    9b:bf:69:d7:69:ea:28:49:fb:5d:50:1b:98:48:b6:
                    dc:95:0d:33:ef:a9:df:4b:8f:d8:ad:d8:79:3d:f8:
                    50:36:07:19:09:af:f4:37:7c:d0:36:a8:d6:89:75:
                    ff:e5:d5:98:2c:dc:32:2d:c7:3b:e5:68:e1:fc:35:
                    68:25:74:60:05:44:34:20:b1:ea:da:26:e3:98:8a:
                    db:ac:5a:15:1a:57:4a:2f:04:a8:a7:97:f2:ef:7e:
                    5f:60:2d:b5:e6:d9:a7:68:f3:6b:96:58:46:4c:54:
                    e9:f2:3b:66:10:07:ea:4f:8b:32:76:8d:99:f3:f4:
                    68:eb:8c:d4:57:01:09:06:79:3c:eb:79:05:3e:65:
                    90:ef:03:03:14:01:77:60:d3:3a:26:2c:54:28:3f:
                    c4:55:ea:df:0a:7d:ed:f9:9a:c8:56:df:99:2e:6f:
                    c5:f9:53:0c:a5:ce:c1:d2:12:0c:76:31:08:62:a3:
                    5a:b8:cc:ba:7f:d7:2b:18:42:db:8f:d6:c5:91:1c:
                    5b:c2:2e:99:72:af:82:f3:40:80:ca:fc:90:d3:51:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FC:1E:1E:1B:41:BD:42:16:4D:92:1F:A0:E1:B0:07:7C:59:0B:81
            X509v3 Authority Key Identifier:
                keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:9c:84:82:dc:57:da:62:5e:d7:6a:d5:11:87:2c:35:4d:9d:
         9b:ef:5e:82:b3:a4:5f:d2:11:9b:81:81:75:1a:a7:e6:12:67:
         c4:5b:01:8b:5f:50:d2:89:93:f8:25:2a:f2:ee:c5:51:bc:4d:
         bf:6f:a9:d7:ed:b8:37:63:02:e6:2f:cb:e0:1a:0e:f4:0c:0c:
         c6:5b:69:8a:4d:f4:01:b0:73:83:cc:7c:af:1d:4c:b2:aa:f5:
         10:0d:10:43:6e:4f:d8:bf:3f:24:5a:94:66:99:b3:20:2d:51:
         45:73:ab:6b:dc:cc:e7:4f:e9:e5:de:52:fc:7e:5b:01:fa:26:
         b2:a1:98:2a:f2:66:ca:18:3d:fb:1a:96:22:c2:49:27:62:f9:
         db:36:79:4b:28:57:7d:06:e0:20:d3:de:59:1f:97:72:a4:c1:
         df:01:0f:02:7c:da:9c:81:9d:1f:41:7d:c8:db:53:6b:4b:ce:
         72:8c:cf:0b:04:3b:95:8d:87:86:36:03:c2:7e:52:eb:6d:cc:
         1d:b9:04:dc:c2:8a:89:6c:23:b9:c3:22:82:19:60:b0:ba:42:
         df:da:6b:cc:18:51:03:a9:a7:12:60:76:ae:68:75:a2:14:28:
         54:ff:d4:b4:24:f0:e9:d5:89:91:5a:27:a5:08:77:4f:de:2b:
         fc:db:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:15 2025 by rpki-client