Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File:                     zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier:          NuuQceTkYMzAyHNCY/z5CndwklS8EY1EakAbRju9agM=
Subject key identifier:   9E:0A:D1:D6:16:DD:32:62:5E:13:C5:A4:D1:BC:21:77:15:13:2C:AC
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer:       /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial:       01977F7AAE5BD45D2FEC34A73967DFC3AB9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number:          050A
Signing time:             Tue 17 Jun 2025 20:00:35 +0000
Manifest this update:     Tue 17 Jun 2025 20:00:35 +0000
Manifest next update:     Wed 18 Jun 2025 20:00:35 +0000
Files and hashes:         1: FnA6f4DOd265nGzqUSApRurvL20.roa (hash: CKai/Ita+qQk4qWCNkCUXx6BxPFuVd8UKoy7z8Mf368=)
                          2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: MO1WX5isf+sLzkR8O0YLcQOuzBgQc9XSLGtpDxZ+r3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:7a:ae:5b:d4:5d:2f:ec:34:a7:39:67:df:c3:ab:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
        Validity
            Not Before: Jun 17 20:00:35 2025 GMT
            Not After : Jun 18 20:00:35 2025 GMT
        Subject: CN=9e0ad1d616dd32625e13c5a4d1bc217715132cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:13:82:ab:2a:a0:e5:f1:32:a8:95:cf:ba:
                    fb:11:be:2d:d0:16:ce:a2:f8:35:dc:fd:53:a9:08:
                    34:f7:f1:88:d9:77:1e:89:13:bd:dd:a6:95:1d:87:
                    9c:45:a2:49:a4:ad:96:d3:82:05:cc:6e:c9:c2:27:
                    2d:92:44:e5:a9:05:21:06:82:1c:8d:97:79:9f:7c:
                    0a:9e:28:39:f6:c8:c5:1f:b8:4c:57:c2:1d:93:e8:
                    eb:8f:4e:cc:6b:5b:da:a1:27:56:d4:8a:7a:39:3f:
                    39:33:8f:76:f3:75:c5:ec:2f:a4:ea:f5:2d:f7:c6:
                    db:94:60:1f:1e:4c:d0:f6:4c:0e:d6:f7:df:a8:17:
                    7c:63:b9:1c:11:46:f6:61:11:bc:eb:5d:8a:b7:14:
                    00:14:3b:da:58:9d:98:33:5b:54:d1:66:c0:37:31:
                    bb:e6:63:84:6b:9a:11:e5:c9:7c:6c:4a:13:b8:93:
                    fc:7e:92:cc:f1:20:40:ea:84:02:00:58:ab:c6:18:
                    b0:83:0c:11:02:9c:4b:1e:d4:8e:1f:86:b6:31:08:
                    b6:65:b7:f3:8b:1c:99:76:c0:03:aa:2f:47:d0:62:
                    a7:8f:35:35:e9:3a:5a:ff:df:a3:d9:be:c7:31:02:
                    20:b3:02:84:c5:9b:09:49:dc:10:cb:ee:7d:6b:7c:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0A:D1:D6:16:DD:32:62:5E:13:C5:A4:D1:BC:21:77:15:13:2C:AC
            X509v3 Authority Key Identifier:
                keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:87:7f:ab:45:b2:7e:6e:3a:b2:9c:7f:e5:58:da:06:b9:e5:
         79:c1:71:8f:c2:fc:3e:55:95:e7:af:12:69:87:80:0a:93:d1:
         89:18:d5:14:78:7a:fc:b9:c7:9e:62:bb:8c:43:3a:bb:ea:0b:
         5d:e5:f1:06:c6:1b:d7:e0:64:13:dd:26:07:bc:c1:1d:75:dd:
         60:de:2a:13:02:cd:14:65:ef:39:4c:53:20:14:9f:08:a1:fa:
         da:2f:1b:c8:58:ef:90:71:25:37:e4:7a:d1:4f:22:dd:23:a6:
         3d:f0:db:ee:c1:67:7c:a6:a3:5a:73:0c:8d:c2:36:c0:29:a5:
         06:2e:04:0a:ac:56:66:4a:10:0c:be:df:a6:f1:e4:71:ae:0a:
         ee:72:c7:9d:c9:b8:8f:3d:7a:bb:bb:b2:0c:6f:7d:50:13:45:
         c2:47:28:77:6d:c4:cf:88:13:38:cb:73:ce:ac:5f:24:3f:e5:
         28:db:45:41:24:a5:9b:4a:e7:08:cb:f0:9e:92:20:d2:b2:08:
         e4:5e:81:0c:fa:d2:94:85:7c:1f:7f:74:59:3f:5b:66:fb:0b:
         a9:c9:b6:2d:6f:72:aa:6b:af:70:f7:02:77:72:07:be:21:f1:
         03:b2:16:86:12:0a:85:7e:27:e3:ae:9b:a9:ab:35:40:04:0e:
         2c:04:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:10:22 2025 by rpki-client