Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File:                     Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier:          nF6WTxDMD28TkApVjfGo4cvIF64vWFvg5wxZ7VLgwVA=
Subject key identifier:   DF:8B:0F:4B:12:D0:DA:00:E7:97:4D:BA:16:C2:0F:8C:89:C0:EA:AB
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer:       /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial:       0196789F5E5D5504A8EDF3308B7C13C1CBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number:          0C06
Signing time:             Sun 27 Apr 2025 19:00:32 +0000
Manifest this update:     Sun 27 Apr 2025 19:00:32 +0000
Manifest next update:     Mon 28 Apr 2025 19:00:32 +0000
Files and hashes:         1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
                          2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
                          3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: 0fWj/elzvPcinERq/1hJJWcZyrWxrlBjJDM9jsrcXa8=)
                          4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:9f:5e:5d:55:04:a8:ed:f3:30:8b:7c:13:c1:cb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
        Validity
            Not Before: Apr 27 19:00:32 2025 GMT
            Not After : Apr 28 19:00:32 2025 GMT
        Subject: CN=df8b0f4b12d0da00e7974dba16c20f8c89c0eaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:15:b5:c1:55:11:eb:99:1e:85:ef:3b:36:
                    02:37:a4:8e:59:79:57:bc:eb:bf:6b:bf:49:45:08:
                    e6:0c:db:5f:c3:2a:65:2e:40:f1:18:37:0f:5f:5e:
                    19:15:6e:a8:71:3a:c0:75:5a:1a:d6:4b:46:13:21:
                    65:1d:97:8d:9d:87:c3:d0:06:4f:c5:8b:af:16:e3:
                    c1:8e:d6:3f:3d:d8:7f:a8:e5:40:13:cb:f7:88:69:
                    df:4f:2a:22:78:2f:be:f3:ad:e3:6d:3b:b5:fb:df:
                    f5:b4:3d:78:ea:bc:b2:23:d2:00:ac:5c:e0:d2:df:
                    ca:15:e0:de:87:cc:a3:c2:c4:9e:c8:ae:7a:1a:90:
                    53:f7:9c:ca:dc:a8:bc:cc:6c:22:5c:22:15:1a:95:
                    24:90:f7:c4:7b:cd:07:62:d1:6f:6f:c9:c5:86:26:
                    99:83:80:a9:d1:c0:8c:bf:27:ad:1c:9d:98:7f:ea:
                    7a:79:f1:1b:f8:1b:1e:de:03:f6:0a:8e:f3:ef:17:
                    be:85:1d:66:66:0a:21:20:bf:ba:1b:98:61:56:39:
                    3d:f8:6b:e7:10:3d:ad:f6:7e:ee:14:d6:55:b3:30:
                    f5:c5:a4:46:7d:b9:73:6a:34:0b:12:2d:48:15:dd:
                    2e:4f:8c:db:d1:a8:da:bf:b1:43:d6:c3:7a:20:62:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8B:0F:4B:12:D0:DA:00:E7:97:4D:BA:16:C2:0F:8C:89:C0:EA:AB
            X509v3 Authority Key Identifier:
                keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:f2:96:c2:ee:78:30:c3:69:81:e1:d2:7b:8d:4a:61:6b:
         73:f6:74:fe:d0:b9:c8:03:6f:f4:df:cf:62:40:78:95:49:99:
         d8:d2:71:cb:fb:39:c4:97:a3:d8:76:b4:c6:b5:3c:89:27:5b:
         eb:e9:0f:c8:0a:be:f7:d9:4c:cb:31:5b:18:b1:1a:c9:66:22:
         19:33:a4:08:27:dd:95:82:9a:49:ed:d4:cb:e8:ec:4e:b1:f5:
         4f:e8:75:05:e6:75:5a:c3:cc:6c:4c:98:c5:14:22:e9:29:e6:
         cf:90:49:43:c2:00:6d:43:8a:5d:26:01:09:22:78:40:22:d3:
         1d:0d:14:34:52:8f:f8:3e:fd:5b:dc:b0:00:fb:92:9b:0b:85:
         5a:41:82:9b:0c:be:ca:55:72:21:28:21:12:83:1f:3f:38:3f:
         eb:50:f1:1e:ec:ff:e0:03:5d:2e:7a:0d:9a:16:a1:c8:2b:3c:
         4c:9a:ba:0c:4a:aa:9b:2f:fc:6c:6a:af:70:98:e6:9a:f5:c5:
         d5:68:26:5e:75:2a:32:22:db:65:5a:fd:2d:96:49:4f:48:d3:
         94:7a:49:e1:24:f1:af:5b:ea:f9:1b:4d:b3:78:b5:03:d8:0d:
         70:d4:d2:fc:95:f5:da:22:a9:14:51:61:b0:0e:96:53:47:ec:
         c2:d5:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:25:36 2025 by rpki-client