Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File:                     ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier:          Kw6XYEe9qQ3Fwa2F+wYv+BBArMOQ0Fi44arVgPUASdo=
Subject key identifier:   AA:58:B5:07:E8:BB:24:45:AF:14:91:51:8E:5C:C6:5C:DE:84:1F:A0
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer:       /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial:       01976EF539F61FC03C7017D2EA9E8B5BBDFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number:          13E0
Signing time:             Sat 14 Jun 2025 15:00:54 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:54 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:54 +0000
Files and hashes:         1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=)
                          2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: x0/vcve0nw5zNx6no296iF2gifyGQ5VZQs2R10F0yFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:39:f6:1f:c0:3c:70:17:d2:ea:9e:8b:5b:bd:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
        Validity
            Not Before: Jun 14 15:00:54 2025 GMT
            Not After : Jun 15 15:00:54 2025 GMT
        Subject: CN=aa58b507e8bb2445af1491518e5cc65cde841fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f2:6f:19:b6:c6:85:0b:3c:8d:41:ee:32:bd:
                    38:a6:c8:9e:e6:8a:83:ba:d9:00:d1:d6:13:8b:32:
                    9f:77:5b:c4:78:91:88:8a:79:72:a8:4c:55:3b:94:
                    22:9e:fd:c0:4f:1f:2a:8c:81:00:b0:30:1b:fb:59:
                    4d:02:9b:0e:11:da:fb:03:41:fd:7c:75:2c:cc:85:
                    47:ee:18:8a:29:f5:a1:e6:75:ff:9a:a1:c0:65:7d:
                    8d:06:14:55:a0:89:46:c8:92:ff:d5:5a:ec:55:ce:
                    cd:2d:9e:a0:e3:07:fb:65:71:5b:09:80:a8:45:93:
                    aa:96:98:b8:31:5d:be:2a:bc:9a:37:af:c3:d8:24:
                    ff:80:be:6f:c7:e7:a7:c7:42:0e:4b:75:9d:71:fd:
                    a4:f2:66:e5:77:33:d2:60:bb:78:d1:7b:4c:67:50:
                    37:85:63:37:c6:12:68:f5:08:07:19:e8:fb:83:39:
                    0d:64:46:65:de:84:dc:10:0d:90:29:aa:c2:4e:55:
                    ef:2a:83:aa:80:2c:9f:63:d5:b3:8f:0b:c8:ea:15:
                    16:2a:27:66:f6:08:d5:8c:41:a3:0e:67:52:cc:23:
                    d0:73:91:a2:30:a2:64:02:c1:b6:c1:c8:a1:39:b8:
                    ae:61:4f:14:6b:64:44:7f:38:d3:cc:bc:67:00:f9:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:58:B5:07:E8:BB:24:45:AF:14:91:51:8E:5C:C6:5C:DE:84:1F:A0
            X509v3 Authority Key Identifier:
                keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:60:69:f4:5b:cf:db:83:97:06:82:7d:b0:ac:b9:96:db:7d:
         0d:f5:8e:4e:b2:ea:40:16:32:e0:2e:a4:ff:bc:69:35:f9:a7:
         25:e3:bd:d0:d6:fd:4c:38:93:3f:ca:97:3c:3b:84:62:66:63:
         dc:29:ee:c6:d4:3c:79:67:b2:67:58:1f:89:6b:32:9b:b6:7c:
         c7:da:41:35:30:75:8d:c6:24:cf:49:aa:0b:89:f5:ce:c1:73:
         06:d0:79:85:24:1f:05:d1:0f:8b:bd:36:cc:c8:17:b6:89:3e:
         4b:9c:5c:18:d2:80:37:06:01:01:7e:55:3a:42:cc:17:43:43:
         35:f5:d8:8a:97:c1:73:3c:d6:3c:78:1d:67:26:fd:49:5c:15:
         65:5b:9a:70:4f:df:58:f9:21:63:43:ae:8e:00:75:06:b4:e3:
         01:bb:63:3e:c1:7a:3c:58:b2:30:99:88:9f:70:87:b6:6a:fe:
         5a:66:45:0a:6a:55:37:1a:11:61:c2:58:ca:cf:39:03:1b:b2:
         70:2a:a7:26:eb:07:99:bc:c9:b5:87:b9:14:01:a6:a7:34:6d:
         52:ed:f6:52:fd:bf:e3:9c:64:97:12:c6:d1:8a:3e:27:92:b3:
         af:0f:0a:c4:d1:db:63:05:9f:51:43:c5:31:37:13:f7:fb:71:
         fb:91:c0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:15:54 2025 by rpki-client