Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
File:                     ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json)
Hash identifier:          xMc7IDIVSi1K2vOY3JizMjqKBy5UtilLUaVk85H9its=
Subject key identifier:   9B:4A:08:5A:11:3E:41:C8:EA:BB:94:A9:DF:C8:1F:A8:98:09:AA:6F
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Certificate issuer:       /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial:       01976BBD82BFE1BC98F39CEBF7D94D3D837A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
Manifest number:          06FB
Signing time:             Sat 14 Jun 2025 00:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 00:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 00:01:11 +0000
Files and hashes:         1: 61Gq7F9HDY76tR6eiEQWqVAvCDc.roa (hash: UnYiE/hrC17fToVR4tEZHFP7UPTNmsiE/lDxvNs6zSU=)
                          2: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: 5OwnbrWTKF4P0yM0Jh9AnDcxxcBu+VksFeix+aXkoDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:82:bf:e1:bc:98:f3:9c:eb:f7:d9:4d:3d:83:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
        Validity
            Not Before: Jun 14 00:01:11 2025 GMT
            Not After : Jun 15 00:01:11 2025 GMT
        Subject: CN=9b4a085a113e41c8eabb94a9dfc81fa89809aa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:36:c9:44:a2:11:79:bc:34:b4:3f:4c:ad:
                    be:1f:4f:78:fe:d3:bf:e7:20:5a:cb:02:23:3b:7f:
                    94:70:5b:b5:7b:74:f6:3b:a0:78:ee:60:cd:51:ff:
                    a8:5f:93:49:6e:1b:3e:2d:ff:aa:c7:0d:2e:59:de:
                    bd:57:5f:f2:3b:a5:18:2a:23:0b:e7:9a:6b:43:3b:
                    11:85:5e:3f:41:54:ba:2f:15:80:f2:57:2f:a3:f8:
                    4e:6f:44:31:a6:f7:ff:16:7a:c2:bc:c5:76:28:8c:
                    8f:27:e1:68:06:71:74:c1:08:f9:9e:d1:59:5c:2b:
                    1f:89:f1:8a:41:df:b4:c9:f5:c5:db:16:2b:d7:27:
                    f3:1c:bb:ae:89:0b:71:f4:e9:59:58:e0:33:53:86:
                    7b:4f:3d:a0:04:c2:60:a1:f1:68:60:3b:44:8b:4f:
                    1e:12:9e:4d:66:a4:96:06:84:2d:e2:b5:0c:cd:65:
                    df:d7:c5:9c:6b:6b:d0:c4:33:be:6f:8f:71:c7:4a:
                    35:f4:4d:89:00:07:fb:77:6f:87:36:bb:70:b5:43:
                    95:e8:a4:98:b5:1b:8f:dc:33:b4:3b:cb:01:e4:db:
                    68:fb:91:1e:c3:c9:f7:2c:77:3f:a9:cc:1c:89:7e:
                    fa:65:ee:89:f6:b2:4a:a9:7c:06:10:b2:bd:4a:cd:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:08:5A:11:3E:41:C8:EA:BB:94:A9:DF:C8:1F:A8:98:09:AA:6F
            X509v3 Authority Key Identifier:
                keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:81:eb:bc:2c:ed:72:aa:e6:92:7d:43:57:ad:ec:43:2e:66:
         67:4b:4e:1f:e3:83:ed:af:9a:cd:af:72:14:0d:73:91:f2:43:
         a7:41:6f:a3:0c:b5:4a:a6:f7:49:a2:3d:18:e4:ae:71:11:24:
         30:b9:3b:31:a6:1c:94:36:8a:42:53:a6:8c:f2:b9:d6:da:4c:
         9f:3c:91:ee:b0:da:9c:07:06:67:fe:f3:3f:d1:e9:19:a6:f0:
         85:d9:d2:a9:b7:96:ef:ba:11:c1:2a:26:81:56:ba:f1:7a:e0:
         51:a9:7c:ca:8e:f9:28:3f:ee:c8:80:bb:0d:9a:ff:f9:77:f0:
         01:dc:ae:48:83:f3:d4:c5:c2:ad:96:00:84:98:ed:18:03:48:
         31:9d:9b:d5:e2:0d:b9:91:9c:a3:fd:19:29:64:d8:92:bb:e1:
         e2:a5:0e:b8:b9:1b:af:c5:75:55:62:98:14:81:85:79:46:4e:
         41:fc:8e:7a:1e:4d:02:f6:67:38:39:cf:43:3c:60:6f:d6:11:
         09:66:fe:a9:5d:2b:06:55:ad:25:7c:51:5f:d3:14:fb:e1:0a:
         a3:8d:67:98:ca:53:16:f4:be:18:5d:14:d8:8a:40:87:97:3b:
         0a:72:99:2d:fa:35:44:69:5f:be:54:5f:75:30:f6:8a:c3:97:
         de:2d:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:07:21 2025 by rpki-client