Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
File:                     Zpauprq3nEj13e5KRr9Ktk2GMWA.mft (raw, json)
Hash identifier:          JtS0hOyRWZSRzWtDbusubYOKS+5hR/jYzP4UE8egEQU=
Subject key identifier:   02:1B:A5:7A:28:12:1B:A4:5C:2F:56:61:C3:91:55:95:2E:1E:E2:5B
Authority key identifier: 66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60
Certificate issuer:       /CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
Certificate serial:       0196888030D839AD711A259A47FB1CD89D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
Manifest number:          1525
Signing time:             Wed 30 Apr 2025 21:00:24 +0000
Manifest this update:     Wed 30 Apr 2025 21:00:24 +0000
Manifest next update:     Thu 01 May 2025 21:00:24 +0000
Files and hashes:         1: 7xOVAQAhGxaXhRVB4CbcZXKNaLc.roa (hash: k+U35adZwDUqbZfONZN9YxBvYnb8OmgnqwbSFhlvMsw=)
                          2: Ss4p2Wi9YLUTVxVEOHNi-gD-YLo.roa (hash: IbN6B6NWFefTjZbMVpJkmbwj8ZHivUrVhvuHXNdd+oQ=)
                          3: Zpauprq3nEj13e5KRr9Ktk2GMWA.crl (hash: CDy22lg7Av4/d3wjni7u6uPFphaYs06o5kgKjePiCfQ=)
                          4: jFXSmkjEC26c8mxhOetY3rp2Ccc.roa (hash: olcLB40Oa+I2BCFt/Z0AGNONx90qq/xMtLVV5Y1vQVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:80:30:d8:39:ad:71:1a:25:9a:47:fb:1c:d8:9d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6696aea6bab79c48f5ddee4a46bf4ab64d863160
        Validity
            Not Before: Apr 30 21:00:24 2025 GMT
            Not After : May  1 21:00:24 2025 GMT
        Subject: CN=021ba57a28121ba45c2f5661c39155952e1ee25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:91:d0:72:c5:b9:73:00:0c:d3:56:b6:b1:
                    d2:2d:13:29:68:43:d0:9d:20:c0:cd:cf:f2:f2:c5:
                    76:7a:50:79:dc:32:42:77:dd:4e:da:93:40:65:8d:
                    df:0b:c1:5b:31:0e:81:d7:b8:17:d8:7c:2a:83:9d:
                    ac:99:7f:54:04:b9:94:74:9d:20:1e:05:36:4a:18:
                    56:f9:18:41:33:41:83:e9:2a:24:79:09:02:82:d7:
                    e2:b4:3c:ec:3c:25:e9:09:b5:a1:08:4b:85:14:50:
                    ed:43:5b:f5:c7:d4:7b:fa:b3:62:83:08:e4:30:ff:
                    6d:a2:b2:6c:aa:23:7c:70:5d:e1:a7:ab:d3:0f:a4:
                    c0:9c:16:1c:5f:dc:d9:26:07:be:1e:41:9f:22:b7:
                    2c:4b:6b:8f:7c:7f:d0:2b:ce:1c:fc:31:6f:12:40:
                    98:b7:bc:b2:2f:aa:c5:6b:70:58:fc:dd:eb:54:d5:
                    20:d9:08:59:84:58:59:7b:68:73:70:f9:c1:3a:75:
                    06:25:3e:8b:5c:4d:4e:13:13:e4:25:26:39:b8:0d:
                    3a:d5:37:c1:63:33:52:2b:43:98:ba:a4:0a:38:e8:
                    93:1f:bf:2a:ac:16:89:b0:52:c3:82:11:82:93:39:
                    f2:b4:47:06:72:f4:e2:c7:dd:46:57:de:64:0c:65:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1B:A5:7A:28:12:1B:A4:5C:2F:56:61:C3:91:55:95:2E:1E:E2:5B
            X509v3 Authority Key Identifier:
                keyid:66:96:AE:A6:BA:B7:9C:48:F5:DD:EE:4A:46:BF:4A:B6:4D:86:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpauprq3nEj13e5KRr9Ktk2GMWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/452c2b-f2cf-4a92-a1cd-f0198c6c2474/1/Zpauprq3nEj13e5KRr9Ktk2GMWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:74:6b:e5:1e:be:fc:c4:b8:62:88:4c:31:34:74:5e:2a:1a:
         42:56:48:92:7c:3c:60:d6:dc:02:a0:b8:b6:92:b4:bb:1f:dd:
         91:ae:6b:85:23:78:40:6e:1a:09:5a:16:23:20:e3:2a:c3:79:
         f5:8a:44:5e:72:be:20:b5:61:91:ad:0e:ee:24:72:39:1e:5e:
         7b:d7:d9:4f:b2:d3:e9:15:7b:56:9b:08:25:9c:10:7a:3e:0f:
         76:3d:a3:b2:06:07:1e:5d:47:13:7a:d5:58:99:5c:a7:70:2f:
         eb:9b:ed:84:8b:4c:50:7b:bf:c8:03:37:77:85:03:ad:c7:b1:
         84:e6:db:6f:6e:5f:9d:18:c8:b0:42:92:4e:15:ea:10:bc:1b:
         fe:b2:e6:95:44:15:08:cc:45:0b:5b:d7:4d:0c:c1:2c:f3:06:
         dc:9b:51:26:12:13:53:18:4f:8c:1f:9c:4a:45:03:a5:5e:4a:
         c4:68:c5:41:03:28:a0:b6:40:68:a0:b1:a5:74:44:8f:62:c9:
         ec:42:f5:fe:a8:67:1c:bf:ac:eb:09:7e:2a:16:0f:d0:42:4b:
         af:1e:86:13:fb:15:2d:b0:16:12:b3:b8:44:db:b4:c5:17:9c:
         82:74:a5:90:c5:2b:5b:42:54:1e:40:36:bc:d7:f5:f3:2c:8a:
         5b:ae:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:04 2025 by rpki-client