Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
File:                     zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft (raw, json)
Hash identifier:          2QctCoiMvuhSEOS9Tx/AKShbb0r8coSvB4+aBkr0yCs=
Subject key identifier:   84:14:99:43:C5:9B:3C:2F:F8:C9:26:D1:A8:60:D1:C5:BD:77:05:8E
Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F
Certificate issuer:       /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
Certificate serial:       019688802A2319B61D928551DFE57603C850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
Manifest number:          1521
Signing time:             Wed 30 Apr 2025 21:00:22 +0000
Manifest this update:     Wed 30 Apr 2025 21:00:22 +0000
Manifest next update:     Thu 01 May 2025 21:00:22 +0000
Files and hashes:         1: 35bIez4DE4f8IctL5QEgdASB-4Y.roa (hash: TCPS2vFGt9j3BHs+mf2M0eQppw/ELA+Rm7h4Oyv00F8=)
                          2: zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl (hash: 4jhY9iCLrhOvH0JNMuY/afm/qGk8gElAWVXzaij0czk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:80:2a:23:19:b6:1d:92:85:51:df:e5:76:03:c8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f
        Validity
            Not Before: Apr 30 21:00:22 2025 GMT
            Not After : May  1 21:00:22 2025 GMT
        Subject: CN=84149943c59b3c2ff8c926d1a860d1c5bd77058e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:48:00:f3:ee:b4:3b:96:f6:4d:8a:ab:61:
                    bf:04:00:6d:33:af:0d:6f:13:3c:a7:bb:c6:ca:56:
                    64:d6:1d:9f:44:c2:d1:20:94:ca:0e:d9:a4:67:cf:
                    10:22:6a:be:30:a9:44:4f:1c:8f:fe:48:0c:8d:2e:
                    8c:48:f9:63:82:80:de:29:4b:e2:78:01:de:ad:05:
                    27:52:f7:43:4d:f0:3c:53:18:42:c0:ea:4d:bf:dd:
                    a7:c0:d2:11:05:68:cd:84:5a:c1:3d:8b:05:e6:45:
                    6b:da:29:26:de:63:57:9a:1c:b7:ac:30:18:19:15:
                    a0:c8:3a:0d:84:c8:f7:e0:97:c2:64:d5:74:37:3f:
                    3a:06:1e:69:91:0a:78:20:94:20:a0:fa:30:e9:14:
                    a1:f1:11:aa:2e:17:d4:5e:7b:77:4d:3f:49:bd:7c:
                    50:e3:0d:5c:9c:63:1b:72:d9:a6:d3:8a:96:4c:62:
                    0d:2d:40:a6:ed:ca:bf:23:4a:4e:65:67:0a:91:7c:
                    83:d2:40:47:f7:35:85:f1:82:44:0b:af:66:36:cc:
                    1e:46:72:25:93:97:c3:0c:1d:0a:18:cf:44:83:d4:
                    36:9d:88:4a:9c:9b:e7:f5:51:1e:8a:3e:c5:ed:1d:
                    e1:2f:cf:33:0d:7a:f2:f7:9e:f6:00:82:22:6e:e4:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:14:99:43:C5:9B:3C:2F:F8:C9:26:D1:A8:60:D1:C5:BD:77:05:8E
            X509v3 Authority Key Identifier:
                keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6b:14:c8:99:96:61:8a:af:fe:ea:07:22:df:b1:a2:e3:a1:
         b4:36:9f:be:a2:cb:24:b9:21:a0:63:33:12:1b:a1:9b:df:ba:
         5d:63:83:98:f6:f5:e1:a1:86:ba:23:d8:07:75:45:44:27:98:
         13:ee:06:08:49:b1:11:66:33:ed:28:29:06:b2:dc:95:52:e6:
         46:87:68:89:76:26:95:ec:fd:49:6c:86:7d:ba:4f:01:0a:ab:
         27:86:ef:94:10:86:ba:13:7c:df:56:19:22:80:02:bf:7e:c6:
         5b:b4:52:ba:fe:92:26:04:a5:6c:41:8d:c0:fb:70:5b:d9:e5:
         07:c7:e0:55:af:fe:c9:76:38:95:2b:cb:19:f1:a4:41:10:94:
         fc:1a:69:02:ef:a2:18:3e:f3:d3:58:b6:36:c5:58:0a:0a:09:
         7c:f2:dd:3c:05:a4:46:1f:20:ec:72:48:1a:94:37:5a:3f:83:
         9c:1f:b9:b8:9f:77:c6:64:57:69:0a:e0:1d:7c:5c:a1:4f:01:
         41:1b:dc:48:a8:74:d4:b9:30:29:ff:95:53:4b:31:d7:f5:2e:
         30:3d:29:6f:bf:af:33:8e:3e:a9:df:c2:f8:d3:0d:d8:d6:d9:
         1f:f7:07:c4:b5:71:07:1e:b5:10:f0:64:d8:a0:57:a8:55:6a:
         91:c6:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:24:11 2025 by rpki-client