Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File:                     z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier:          /l2VSrtvd2AMKYxEfgNFtJ+KplbnEP9aB/HF5WIuTI8=
Subject key identifier:   B4:9F:CA:3C:86:B8:C8:0E:E6:E2:00:AE:22:11:24:45:F5:40:DD:2C
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer:       /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial:       0197782ECF8FEF2A282C2E2D59F99AEE1855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number:          0494
Signing time:             Mon 16 Jun 2025 10:00:23 +0000
Manifest this update:     Mon 16 Jun 2025 10:00:23 +0000
Manifest next update:     Tue 17 Jun 2025 10:00:23 +0000
Files and hashes:         1: tPR9H_DIj2ZRBOQ92V0Cq0cgME0.roa (hash: 04OzE6roqkiLsdkvUp90YsNXVC5oCpySc5tEOrXmoM8=)
                          2: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: amVUzM35AFxiCdbIJao4oVr7Sm272gGABT/TUxJXp9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:2e:cf:8f:ef:2a:28:2c:2e:2d:59:f9:9a:ee:18:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
        Validity
            Not Before: Jun 16 10:00:23 2025 GMT
            Not After : Jun 17 10:00:23 2025 GMT
        Subject: CN=b49fca3c86b8c80ee6e200ae22112445f540dd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:16:0f:ff:dc:08:01:83:c0:0d:13:b7:d1:8f:
                    f9:4c:92:63:bc:1e:96:99:d9:a8:23:39:29:e8:41:
                    72:82:b6:ab:51:dd:5b:a2:a7:96:fd:da:90:84:d6:
                    4d:08:10:93:09:4d:27:c4:bf:6e:16:fd:81:c5:95:
                    59:e0:4c:cb:90:53:f3:47:8d:30:2d:2f:6d:bb:bb:
                    ff:0a:36:9e:0e:fe:86:74:2b:39:84:48:d6:37:c5:
                    fb:17:a6:58:8b:a8:16:77:c4:d6:6f:6b:04:d6:59:
                    30:ee:96:c8:f6:27:13:0a:21:7c:57:56:09:70:4b:
                    58:97:b2:c3:89:7d:65:fc:25:44:10:45:76:ed:7f:
                    41:0a:4a:81:7f:ff:a4:b5:93:86:84:38:44:be:87:
                    7e:4e:a1:82:8c:c4:d9:93:90:64:35:a2:10:b7:47:
                    58:c1:40:f8:5e:e2:41:26:f5:56:33:ca:29:f5:c5:
                    69:b9:4b:cb:8e:2d:5a:0a:41:6f:da:7a:c8:51:bc:
                    6b:32:d0:19:47:a3:2e:62:62:af:f3:f5:ad:4f:26:
                    d0:e0:78:f0:35:a6:fa:22:3f:be:5d:04:3c:40:93:
                    9b:a0:84:76:56:55:30:32:a9:25:9d:3b:08:1c:81:
                    e4:69:86:df:a1:f0:65:6b:32:b3:fb:68:27:3d:87:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9F:CA:3C:86:B8:C8:0E:E6:E2:00:AE:22:11:24:45:F5:40:DD:2C
            X509v3 Authority Key Identifier:
                keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5a:6b:d7:00:f9:d7:85:ce:50:0f:b7:fd:c4:2b:fb:92:0e:
         d6:e6:14:e2:1f:64:f5:ce:91:4a:cc:af:0c:4d:d9:5f:13:9f:
         ef:e4:93:d1:c1:42:31:9c:a4:55:e0:4c:5e:83:87:86:e5:16:
         27:cb:b3:80:6d:c4:32:43:32:52:47:38:5c:f0:4d:ca:11:22:
         b1:13:c0:e6:4f:22:fb:55:10:cd:8d:6d:38:cb:54:fb:8b:9a:
         6b:08:6e:fb:0d:e1:d2:42:1b:9f:b5:cd:d5:4b:4d:2d:3f:31:
         6f:ae:7f:41:3f:bc:a1:9a:51:ed:40:5e:f4:55:9d:0d:ab:cd:
         7f:91:32:50:bf:d5:a1:c9:21:2b:dd:ae:21:4a:bb:ca:a4:fb:
         2f:cd:35:05:64:74:8f:18:d3:6d:2a:91:9e:9d:0d:f4:c2:60:
         7a:35:3e:f0:2a:63:13:45:af:37:b5:dd:aa:1d:52:0d:f2:31:
         ec:fb:91:b9:cb:da:a9:8e:20:01:01:27:65:cb:2a:da:be:38:
         a7:b4:e3:3f:b0:ca:08:60:eb:68:25:5a:75:fb:ed:27:b3:26:
         ca:39:19:fd:05:35:cb:86:55:9c:50:4a:4b:f8:a3:ff:6f:72:
         65:3b:31:8f:5e:dd:ee:5d:f8:83:3b:d7:60:4f:7d:c8:0b:95:
         fc:5c:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:28:22 2025 by rpki-client