Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
File:                     ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft (raw, json)
Hash identifier:          BLlPLTRyeymRMZN/BeSMPWKkSQE5/S4k/SnQkAmzoxs=
Subject key identifier:   59:AE:92:11:DE:AE:60:2D:CE:18:A9:96:83:A7:1E:93:FB:A3:24:A5
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Certificate issuer:       /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial:       0196790D337932ADAFC30539D4F38C6802EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
Manifest number:          1511
Signing time:             Sun 27 Apr 2025 21:00:30 +0000
Manifest this update:     Sun 27 Apr 2025 21:00:30 +0000
Manifest next update:     Mon 28 Apr 2025 21:00:30 +0000
Files and hashes:         1: 6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa (hash: E8YKQ+7oKbQVBsilOuJbTsXN0BQkzpHb4tN03LRQOhY=)
                          2: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl (hash: p5IzbO1wp2XQ0Gc9t0NZHKb81Img9E1fHVkd7Qc9ots=)
                          3: jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa (hash: VJTPRYmj0bLLGoSUyYkDz754dQcYj27q2IKg/a+56Gg=)
                          4: rWTg50lIWr4eBCYZpN1g2rEsvwA.roa (hash: h6askj3XUZ9cNfHdvd89Te7uFDoO162bWotdGeS5FPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:0d:33:79:32:ad:af:c3:05:39:d4:f3:8c:68:02:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
        Validity
            Not Before: Apr 27 21:00:30 2025 GMT
            Not After : Apr 28 21:00:30 2025 GMT
        Subject: CN=59ae9211deae602dce18a99683a71e93fba324a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:59:ae:a8:15:ef:e8:77:42:17:92:d3:30:99:
                    13:ce:48:71:bf:b4:54:6a:8c:a5:10:23:ea:c5:21:
                    fd:81:54:eb:47:eb:3e:4b:ab:df:4e:46:e7:a4:f1:
                    f7:45:b1:fe:6f:f1:cb:38:fe:05:38:62:01:b3:cd:
                    5b:48:ff:47:10:10:95:05:59:05:6e:0b:67:bd:7d:
                    b7:6f:e3:8e:60:4d:5b:f9:f7:4e:8b:8c:43:6e:6c:
                    14:f7:34:7a:fb:f4:5e:46:c0:6d:81:42:6d:75:9e:
                    77:23:75:bb:de:07:b6:29:9b:97:ad:33:45:f7:a6:
                    b9:00:47:d4:ce:e0:7d:72:a5:58:aa:11:bd:c9:2f:
                    d6:03:45:7b:0c:3e:05:a3:10:70:3f:e1:35:0c:a0:
                    a2:00:e7:fa:f1:c1:c4:3e:6f:39:b9:0c:2e:38:65:
                    24:ad:41:37:e2:c1:ec:34:a1:01:39:03:19:50:fa:
                    f1:2c:1c:11:ac:ae:2f:39:84:7e:23:5b:4d:b7:a1:
                    cd:60:7d:34:62:cf:dd:f2:26:ad:46:d8:45:3c:4f:
                    58:a5:56:a8:1d:ea:ae:24:58:4c:db:1e:11:9c:ef:
                    d4:38:ab:38:a6:e8:3f:20:be:4f:a9:b3:ef:24:27:
                    b4:3f:b2:95:08:08:68:01:b4:f7:53:bd:52:8d:8c:
                    ec:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AE:92:11:DE:AE:60:2D:CE:18:A9:96:83:A7:1E:93:FB:A3:24:A5
            X509v3 Authority Key Identifier:
                keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:58:f2:33:36:99:24:d3:1a:be:71:d8:7d:20:77:10:21:59:
         6e:c1:00:ba:ad:f4:fb:8c:d0:2a:da:50:20:26:41:6f:9f:25:
         be:2c:d7:b8:e1:41:5d:99:4b:11:a9:91:91:f4:15:7c:a8:de:
         f1:3f:1a:ef:da:38:fd:c2:8f:05:c7:a4:2a:59:cd:e5:45:2b:
         b4:ba:47:3f:43:2e:0f:44:69:3d:9e:85:e8:47:09:3c:11:8c:
         bf:f2:0f:1d:6e:ca:b0:d9:98:d0:b6:99:b3:24:74:ff:1c:a7:
         79:f8:90:3f:75:bb:98:1e:cb:2e:b8:b7:73:f6:11:80:3d:27:
         0c:8e:7f:1f:ed:0c:a8:2e:81:1b:67:94:51:1d:0e:2c:3c:ee:
         14:33:ed:ad:2d:59:35:56:7b:08:35:00:92:3f:80:b1:05:23:
         d7:73:cf:99:30:a0:df:29:95:55:64:0f:d2:99:b0:f1:b8:1a:
         bf:70:45:4b:ce:72:e3:35:b7:3d:6c:fe:47:78:0f:bd:43:3a:
         3c:43:78:bf:3c:d2:9b:55:65:cc:51:8c:de:f1:c8:6c:f7:95:
         67:de:bd:f0:56:76:3c:8d:3d:ba:d7:88:08:32:8e:ce:3c:30:
         11:04:fc:2f:f6:f6:8d:62:7a:11:9c:1a:71:f2:21:10:31:61:
         b2:2b:d0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:25:18 2025 by rpki-client