Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File:                     zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier:          JNqM3DbVxZZKm42De3E64M2DwMMgrJE/z4ONTE56Ix4=
Subject key identifier:   35:BE:6F:9E:E1:4A:BF:DD:C3:B5:52:2B:61:B1:EC:5D:E3:5E:DB:DD
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer:       /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial:       01976CCF8917F99A64A3AFA97E663C846312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 05:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:29 +0000
Files and hashes:         1: 3UV0tf4TpPvOJSDiaLYyYXtXVvM.roa (hash: 91M1HXlX3TdwneLYlb0DmYCeKKtHfStsh7Dj5kd2gPQ=)
                          2: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (hash: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=)
                          3: lmY3OHV06iQ2okHJC_xew_5c0LY.roa (hash: VAAXf3sc2kIcjjslDb0B8KOFlo5MNyl0zFRFKzuk/g0=)
                          4: r_1BD4QIwyD4kFSgnJUFtmINdFo.roa (hash: analV2m8+Aw9Y/v6KpT1JDqGOt2ZN0tCbqPYX5Hv+/c=)
                          5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: n7GkENfDifvC1Ahfzg4kupuhx0J7Ux6I2QCS7QjIStc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:89:17:f9:9a:64:a3:af:a9:7e:66:3c:84:63:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
        Validity
            Not Before: Jun 14 05:00:29 2025 GMT
            Not After : Jun 15 05:00:29 2025 GMT
        Subject: CN=35be6f9ee14abfddc3b5522b61b1ec5de35edbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:a5:5a:56:a6:09:d9:78:58:58:8f:c8:36:
                    47:92:dd:f1:03:c7:83:be:82:09:8c:03:ef:c0:cc:
                    25:34:2b:8f:8f:11:94:cf:86:3e:11:7a:f5:82:58:
                    d4:4d:ee:84:b2:0d:6e:fe:f9:65:8e:d9:e8:2f:44:
                    2a:a2:0d:19:74:ed:6b:5e:24:43:33:c9:0b:fc:64:
                    e7:ef:c4:d0:83:d7:08:ca:7d:ea:00:9c:28:55:1f:
                    e3:4c:b9:8e:cd:e3:53:3f:f8:33:55:4a:c0:de:bb:
                    ec:86:9e:84:78:c4:3a:30:0a:8f:76:e9:09:56:23:
                    80:15:86:31:31:a3:35:6d:d5:1b:ab:15:b1:83:88:
                    56:60:fc:bb:78:a7:6b:a3:b8:a9:c6:0d:c1:d5:1f:
                    5c:eb:3d:4d:5e:ed:8f:76:2f:bd:13:97:31:df:d5:
                    1f:17:6e:13:73:5a:20:84:aa:78:5e:d0:87:9e:b2:
                    97:48:01:70:a4:6c:69:e9:5b:ea:af:d4:c7:ce:73:
                    95:9f:fb:b6:ff:c5:e1:a9:22:d7:bc:11:e5:44:04:
                    e7:dc:df:44:38:d3:fc:83:39:bc:d2:34:6e:cf:be:
                    25:6e:33:47:5d:4c:0d:97:fb:04:93:b6:9e:68:ed:
                    54:ce:95:a3:25:63:ee:10:29:73:11:ca:cc:7f:c9:
                    51:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BE:6F:9E:E1:4A:BF:DD:C3:B5:52:2B:61:B1:EC:5D:E3:5E:DB:DD
            X509v3 Authority Key Identifier:
                keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8e:e6:06:08:f4:b8:99:09:4d:03:e5:b7:7d:24:c3:7e:9a:
         48:64:cf:a9:88:da:d4:51:0f:87:f3:fd:a7:c4:27:05:0b:5d:
         9c:6a:4e:60:e6:ef:8a:33:9b:07:fb:14:55:0f:49:34:8a:ff:
         8b:96:79:f9:b2:c8:02:de:a4:3c:47:04:8d:24:1c:52:9c:3b:
         00:6d:db:ac:20:f3:61:69:3c:61:bc:34:c6:18:a0:1f:91:f9:
         cf:bc:95:cf:3c:82:c8:4a:04:97:e5:e8:5d:5a:b9:c5:0a:47:
         96:76:12:01:57:ae:72:ee:4c:45:fa:41:ea:ff:28:35:e5:f4:
         ae:64:49:a0:cb:aa:a9:c0:38:cd:db:85:29:30:6a:1d:91:fe:
         46:29:cc:2e:92:c0:cb:75:ba:5e:ae:77:da:9c:92:6e:76:20:
         11:67:22:57:aa:19:bf:ef:f8:2a:ed:ae:a6:05:ab:e5:f4:f4:
         f6:ac:69:e4:90:08:63:a5:e4:d8:9f:eb:b6:e2:28:a4:63:11:
         22:38:15:cb:f5:33:43:7e:79:41:58:65:e5:bf:bc:59:01:72:
         9c:24:6b:75:8e:96:5a:67:60:15:6e:dc:e1:cb:57:87:f7:0a:
         19:57:de:dc:c7:1a:1a:95:d6:ae:5b:c2:22:34:ee:84:ec:ec:
         f8:45:47:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:24:44 2025 by rpki-client