Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
File:                     zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json)
Hash identifier:          LTro4cCozOKNYLiq8O8Ym/9X+qd5j7MhnkQ2++D39EQ=
Subject key identifier:   2F:97:DC:D8:C0:6B:DA:37:EC:D6:68:C5:6F:13:BB:B1:F6:A0:CD:4D
Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Certificate issuer:       /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Certificate serial:       01977A544D87551EABF1003C362293591C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
Manifest number:          A5
Signing time:             Mon 16 Jun 2025 20:00:34 +0000
Manifest this update:     Mon 16 Jun 2025 20:00:34 +0000
Manifest next update:     Tue 17 Jun 2025 20:00:34 +0000
Files and hashes:         1: SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa (hash: nQwkpZGomRtyEWqgatsYZovUvrMoig7TXoDGcNqHozM=)
                          2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: yJ1I0sisomtGByM8Elp3xun29a3a6FhqgCKcFqeZHr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:54:4d:87:55:1e:ab:f1:00:3c:36:22:93:59:1c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
        Validity
            Not Before: Jun 16 20:00:34 2025 GMT
            Not After : Jun 17 20:00:34 2025 GMT
        Subject: CN=2f97dcd8c06bda37ecd668c56f13bbb1f6a0cd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:4e:d0:36:3e:ee:7d:e0:44:5c:90:6c:db:
                    91:ce:33:20:13:78:c3:e4:6d:2e:60:29:d3:98:3e:
                    35:7c:3b:5c:68:6a:35:7d:73:2e:0d:d9:16:4c:f0:
                    a2:d6:c1:f3:49:b6:ee:fa:99:5f:6b:cc:a6:ce:15:
                    7d:a1:28:c6:9b:d0:50:15:6f:9a:fa:e9:5c:47:b0:
                    c3:06:b3:71:e5:b8:fd:3e:4d:d9:a0:bc:ef:e3:03:
                    89:47:01:3f:ff:e5:45:74:39:e2:89:11:b2:70:a6:
                    1c:b0:05:49:3d:6e:92:20:10:4b:c6:0a:04:80:3b:
                    a8:eb:6a:50:b1:05:c6:bd:42:ff:09:58:d2:f2:5e:
                    2e:f1:11:f2:27:a2:a6:c2:fb:b0:11:d1:d2:68:ef:
                    82:0e:ff:bb:3f:6a:aa:06:7c:be:11:bb:91:7b:f3:
                    cb:f4:15:5b:d9:77:63:59:b4:19:19:c4:29:2c:81:
                    45:e3:52:e2:fc:04:72:7b:42:3b:e9:d8:f4:68:44:
                    c6:96:00:b0:bd:c0:3f:2a:2e:e0:60:e5:65:c5:46:
                    6e:3f:b0:dc:65:7c:73:69:13:ac:37:75:e7:11:b1:
                    e7:68:3d:4a:ad:82:5d:8c:f1:6f:53:32:fb:98:3b:
                    0f:29:a6:fc:1a:01:91:ca:46:b8:c8:a1:6d:91:32:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:97:DC:D8:C0:6B:DA:37:EC:D6:68:C5:6F:13:BB:B1:F6:A0:CD:4D
            X509v3 Authority Key Identifier:
                keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:b7:5c:59:6e:24:93:ab:de:b5:71:41:29:42:cd:1c:42:
         b0:e5:c1:91:6d:be:c4:40:fe:1b:b0:f6:04:79:5c:77:9d:11:
         3b:33:2b:31:5c:5a:81:93:53:37:19:0b:64:a4:7a:11:ba:c2:
         93:5a:c9:ff:a0:13:74:fb:75:c4:0d:0b:85:54:34:7b:53:c7:
         c6:c4:e1:2b:f0:c8:89:30:e4:85:c8:11:05:22:c2:a1:db:b1:
         0d:a5:58:93:19:a9:44:7c:cb:5f:14:fd:6d:c2:1e:9e:2b:5a:
         46:3e:ab:a1:21:92:3c:d9:cd:ac:6d:4c:3f:4f:4a:75:71:6a:
         db:48:3b:f3:0d:2b:84:03:fe:99:bd:bf:d6:7f:79:55:e5:03:
         80:54:6e:a9:4a:5d:73:87:71:69:77:85:fb:99:29:1e:68:2a:
         3e:82:b8:cf:b9:23:57:69:42:f1:c7:08:be:55:db:10:15:47:
         70:fc:a2:5b:b7:00:39:1c:59:8c:bb:bb:93:a8:27:0e:6d:05:
         29:3d:f4:9f:d8:ad:6f:da:eb:dd:1d:03:c7:74:cc:e4:88:24:
         ff:06:4b:df:75:65:be:52:b8:63:96:e2:b0:b4:90:05:92:63:
         da:29:9c:31:de:71:b7:03:41:24:fd:ee:85:69:ff:ef:70:4d:
         22:df:73:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6VE2HVR6r8QA8NiKTWRx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlN2ZkZmY0ODBiYjkwZGQ4YjI2ZDI4MjMwOWFmMTYwNDU1
ZWNiMGIwHhcNMjUwNjE2MjAwMDM0WhcNMjUwNjE3MjAwMDM0WjAzMTEwLwYDVQQD
EygyZjk3ZGNkOGMwNmJkYTM3ZWNkNjY4YzU2ZjEzYmJiMWY2YTBjZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFBO0DY+7n3gRFyQbNuRzjMgE3jD
5G0uYCnTmD41fDtcaGo1fXMuDdkWTPCi1sHzSbbu+plfa8ymzhV9oSjGm9BQFW+a
+ulcR7DDBrNx5bj9Pk3ZoLzv4wOJRwE//+VFdDniiRGycKYcsAVJPW6SIBBLxgoE
gDuo62pQsQXGvUL/CVjS8l4u8RHyJ6KmwvuwEdHSaO+CDv+7P2qqBny+EbuRe/PL
9BVb2XdjWbQZGcQpLIFF41Li/ARye0I76dj0aETGlgCwvcA/Ki7gYOVlxUZuP7Dc
ZXxzaROsN3XnEbHnaD1KrYJdjPFvUzL7mDsPKab8GgGRyka4yKFtkTLYOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+X3NjAa9o37NZoxW8Tu7H2oM1NMB8GA1UdIwQY
MBaAFM5/3/SAu5DdiybSgjCa8WBFXssLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMt
ZTEyZDE2ZjQ0MTUzLzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMtZTEyZDE2ZjQ0MTUz
LzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC823XFlu
JJOr3rVxQSlCzRxCsOXBkW2+xED+G7D2BHlcd50ROzMrMVxagZNTNxkLZKR6EbrC
k1rJ/6ATdPt1xA0LhVQ0e1PHxsThK/DIiTDkhcgRBSLCoduxDaVYkxmpRHzLXxT9
bcIenitaRj6roSGSPNnNrG1MP09KdXFq20g78w0rhAP+mb2/1n95VeUDgFRuqUpd
c4dxaXeF+5kpHmgqPoK4z7kjV2lC8ccIvlXbEBVHcPyiW7cAORxZjLu7k6gnDm0F
KT30n9itb9rr3R0Dx3TM5Igk/wZL33VlvlK4Y5bisLSQBZJj2imcMd5xtwNBJP3u
hWn/73BNIt9zPQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:40:29 2025 by rpki-client