Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
File:                     Zdxu-msTax5F4h5DToWaKS0uXhQ.mft (raw, json)
Hash identifier:          RqOp1TjZ0drP10eFKpxJHR3kRVtd0OZAHt0CN/DSfNs=
Subject key identifier:   C8:7C:2B:AE:27:2D:B4:5D:F2:C1:53:0B:66:93:9F:04:23:F5:E9:58
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Certificate issuer:       /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial:       01976997AC04636117B3C9744E324108D506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
Manifest number:          0D4F
Signing time:             Fri 13 Jun 2025 14:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 14:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 14:00:37 +0000
Files and hashes:         1: Zdxu-msTax5F4h5DToWaKS0uXhQ.crl (hash: ZIBR1cCmfSVz8gSn+SnlP34ja9a2FmQ2HTy1QTU0id4=)
                          2: lAxCqPMpI5f-sYorlBydxXXqa9k.roa (hash: VxF2LCupWm60GiRA2vF36Uh4A+3bCicud61D9T91IIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:97:ac:04:63:61:17:b3:c9:74:4e:32:41:08:d5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
        Validity
            Not Before: Jun 13 14:00:37 2025 GMT
            Not After : Jun 14 14:00:37 2025 GMT
        Subject: CN=c87c2bae272db45df2c1530b66939f0423f5e958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d6:2e:82:98:fb:26:7f:29:46:24:ec:34:c7:
                    1d:ae:08:25:2a:e0:3b:0e:32:8f:e4:9b:ae:f5:f8:
                    01:0f:85:0b:5f:91:7e:bb:51:aa:13:14:6d:84:86:
                    6f:9f:26:81:d4:24:8e:17:f4:df:35:c2:b3:91:6a:
                    05:b2:01:bc:ad:a0:a8:a5:c6:31:56:04:28:76:3b:
                    fb:91:31:ca:c2:25:f1:92:23:81:a6:83:47:6b:af:
                    79:72:59:67:b6:4b:5e:bc:48:6e:79:03:9e:39:6b:
                    0c:7e:37:9b:56:fc:15:fd:f7:35:a9:d7:14:5c:1b:
                    ef:8a:4f:4d:c3:bd:1f:96:73:ac:ce:51:a1:e9:c6:
                    45:f8:5e:48:bb:a8:ba:99:c5:8e:f1:cf:bf:c3:a4:
                    71:29:19:c3:c7:61:62:99:41:2c:2c:e8:7c:34:67:
                    c9:0c:d4:23:41:b6:3f:8b:75:62:a9:dd:69:9e:d7:
                    26:16:28:07:e3:cc:e8:35:a2:3e:21:e8:4b:d3:94:
                    38:5a:8f:66:fe:fa:21:fb:35:56:88:aa:0f:69:a5:
                    33:8a:68:de:b9:30:ff:95:74:94:c4:13:b1:ac:f2:
                    34:58:b9:82:2a:31:07:d8:b2:11:c7:34:a8:21:2f:
                    e1:bc:b9:e8:ce:d8:d4:a7:f0:39:d3:d2:30:4d:b3:
                    d4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7C:2B:AE:27:2D:B4:5D:F2:C1:53:0B:66:93:9F:04:23:F5:E9:58
            X509v3 Authority Key Identifier:
                keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ae:ac:2a:fb:6b:7a:19:0b:93:74:54:2e:2d:2c:c6:06:1e:
         d1:e4:ab:29:69:46:63:97:21:ba:28:c1:b3:94:14:c5:2e:4c:
         2b:8c:66:9e:22:c4:e9:76:a3:b9:dc:68:f9:95:f5:eb:76:b9:
         c7:46:f3:b9:d5:ec:58:f4:87:38:38:8e:e0:b9:3b:1e:ce:9e:
         4e:56:1a:93:4c:d3:7a:24:fa:ee:1d:10:76:ce:1a:be:e8:6b:
         d3:89:8b:74:5c:16:05:b0:74:a6:ad:05:37:c9:1a:8d:a4:6d:
         ff:44:69:5f:3d:9a:19:de:ca:5b:fb:db:21:10:b8:1a:99:15:
         72:dd:fa:ec:f8:d9:f1:bc:76:c7:ca:92:e6:26:c5:a8:a3:18:
         23:0c:a7:29:63:15:3c:2d:97:e3:6f:16:e3:d7:97:04:86:6a:
         c2:ae:34:bb:9f:ad:34:72:00:67:e4:da:12:57:7d:a0:49:62:
         dd:8b:19:98:5c:89:e4:75:47:ab:f0:48:53:b9:c8:87:5e:b8:
         28:fc:af:bb:46:a8:05:0e:de:af:7f:b3:b0:66:73:e7:69:85:
         3b:ee:41:ce:50:f0:0a:8e:90:37:d8:3a:2d:8a:07:a9:b4:09:
         9b:00:44:e9:d8:d8:bd:ba:af:4c:a7:14:46:f3:73:05:23:00:
         83:07:f7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:43:25 2025 by rpki-client