Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
File:                     Z1Zd_fZrIS4XodmKf14rCzJkza4.mft (raw, json)
Hash identifier:          PQSwTIhHZi1NlkB38v9pblLlkew9cviqz63GyaQXg1Y=
Subject key identifier:   9A:89:47:1B:11:9B:27:57:EE:A9:97:74:3B:59:E7:B5:4F:18:60:6A
Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
Certificate issuer:       /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Certificate serial:       01976D3D67C2E2B4609F302790362E9F2EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 07:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:30 +0000
Files and hashes:         1: Z1Zd_fZrIS4XodmKf14rCzJkza4.crl (hash: e4yv0bSPUpS1ShrWb3FvgkQo6ZnX+Z++9Tx3QxGFmrE=)
                          2: edLAr30NQ2j1eS2szlFoVf6cZ6k.roa (hash: YX6gw5+qXpVJdrJ3QtQM0C2faqlrGQ4u2zGhs6Hy6CI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:67:c2:e2:b4:60:9f:30:27:90:36:2e:9f:2e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
        Validity
            Not Before: Jun 14 07:00:30 2025 GMT
            Not After : Jun 15 07:00:30 2025 GMT
        Subject: CN=9a89471b119b2757eea997743b59e7b54f18606a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:c3:41:cf:bf:05:1b:a3:2f:68:ca:72:43:
                    e4:37:52:72:a0:7a:cc:c4:eb:3a:02:12:02:9b:fa:
                    85:e6:34:39:62:8e:67:7a:d2:c9:16:36:df:a4:df:
                    a4:96:99:51:b1:67:8a:15:f9:05:cd:5f:69:17:39:
                    fc:3e:25:ba:13:74:83:dc:ff:9d:eb:4e:55:58:da:
                    71:7e:83:3b:9a:86:eb:66:d5:f4:14:4c:0f:36:9e:
                    84:4d:e2:64:d0:32:29:e1:b2:5c:fe:c5:2f:70:12:
                    e2:f3:89:82:da:4e:d2:d2:0c:b6:c6:90:13:f5:30:
                    1a:c3:2d:8d:b1:65:ac:1b:f8:91:ac:28:22:a9:3c:
                    4f:36:eb:e6:7c:54:b1:70:96:58:51:e4:50:1e:83:
                    57:c9:c5:2d:8a:10:b2:ff:c5:89:51:ed:30:7f:7f:
                    ea:3a:28:96:17:2b:4f:09:3c:9f:b2:78:ae:7c:66:
                    94:81:50:9e:8b:b1:eb:55:eb:43:a5:aa:e6:14:da:
                    dd:dd:c5:c6:3c:3f:8e:c5:33:be:b4:f6:a6:fc:b0:
                    d5:1a:7d:1d:9c:57:28:1e:43:40:d6:c1:81:32:f1:
                    62:79:5d:88:1a:7c:1a:7d:15:a0:ad:da:bc:f6:dc:
                    31:6f:98:d9:78:78:68:92:da:7c:e3:63:c7:c2:62:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:89:47:1B:11:9B:27:57:EE:A9:97:74:3B:59:E7:B5:4F:18:60:6A
            X509v3 Authority Key Identifier:
                keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:26:e9:df:1d:27:f6:99:18:3b:11:ed:1c:54:3c:c2:73:06:
         7f:59:9d:6c:c6:80:a6:7d:71:6f:be:33:7c:30:5b:d2:4b:b7:
         40:43:f2:aa:a6:4f:65:c3:3e:08:55:42:b9:6b:63:c4:9c:87:
         d2:44:d3:97:23:9c:fd:94:31:33:cc:00:85:a3:cf:24:91:d2:
         18:23:16:ca:c9:86:c0:76:3d:b9:7b:28:78:7d:02:9a:d6:2f:
         f4:75:73:f1:ee:1a:4e:8f:4f:44:fa:fc:b4:f6:4e:a5:57:e4:
         f0:3a:69:37:33:4a:e7:be:6a:66:a3:03:79:d2:fe:47:b6:4c:
         5a:d1:b7:e8:91:dd:11:6c:29:b2:7e:1b:67:71:64:d8:62:a7:
         d3:fa:e8:5b:fb:ca:de:e4:09:67:cf:dd:b4:db:4c:7e:5f:01:
         d0:a5:dc:92:1b:4b:84:f9:93:dc:c6:87:82:81:3e:32:27:ea:
         90:2c:60:67:36:3c:50:14:23:a9:c4:71:dd:fd:ea:65:8b:a1:
         ab:0b:91:ed:4a:46:d5:be:59:bf:3f:98:24:38:74:56:96:61:
         4c:99:eb:92:95:eb:5d:4e:d4:44:15:cf:82:50:88:cf:04:b5:
         e3:40:02:ab:7f:6b:0f:d6:00:73:31:85:04:9f:77:33:7e:cf:
         be:1d:9e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:21 2025 by rpki-client