Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
File:                     ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft (raw, json)
Hash identifier:          mboX/rXdLLLup5Dg1E1DO7lyEe31TbsTH0vU/DXDGCA=
Subject key identifier:   FB:E8:7B:B4:BE:52:2D:77:79:9E:D7:0A:52:BC:D0:6F:9A:7F:C0:1F
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Certificate issuer:       /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial:       01967FB425E99C35995ACDFCF5BA81894500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
Manifest number:          0804
Signing time:             Tue 29 Apr 2025 04:00:34 +0000
Manifest this update:     Tue 29 Apr 2025 04:00:34 +0000
Manifest next update:     Wed 30 Apr 2025 04:00:34 +0000
Files and hashes:         1: GGIWecpIopyHoGkyMoac3XO9YI4.roa (hash: 9Tukemon/VB7WwBPqptslNoQ4E03a3N7Hs7ZGYVz5y8=)
                          2: UGEidt7A5RBgDSJN2enYLor_7Sw.roa (hash: Ot0TYYvqctoOalqMeGcLH0JJ7jIcv187XU8D5PJV2GY=)
                          3: WeH1uxp75rjp5W_GQe18JodpK4o.roa (hash: xjiTwzkOeZheUihJ91WYcjALmLBafImc62K2WwGV4f4=)
                          4: ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl (hash: hIQ4ZpKLKpIFbtOW6MJh72E+TrZLse3X4mEZtO0R8do=)
                          5: xgHz664AQPMntc1cKGqX8uLPb68.roa (hash: L7AjuBiSLP8pLMyCXeeg/SoD465XYb8TiAmRmmGuBX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:25:e9:9c:35:99:5a:cd:fc:f5:ba:81:89:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
        Validity
            Not Before: Apr 29 04:00:34 2025 GMT
            Not After : Apr 30 04:00:34 2025 GMT
        Subject: CN=fbe87bb4be522d77799ed70a52bcd06f9a7fc01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:a4:2e:5f:c2:1e:22:87:e1:00:fc:4d:29:
                    f7:04:b9:e7:37:4b:54:4b:54:95:3e:c1:5d:20:60:
                    9c:40:12:b1:8b:23:bc:c9:5b:45:28:14:25:76:b6:
                    f1:4f:eb:4e:07:61:8c:32:b3:39:0f:ba:ee:c8:fb:
                    fb:3b:50:32:a1:3a:f9:d9:3d:59:66:22:d6:85:da:
                    8e:6e:7c:ea:1d:73:32:80:48:16:ee:73:44:96:08:
                    c6:6b:17:1e:eb:99:01:71:cd:ad:2c:28:8c:b0:48:
                    80:26:1a:4f:96:0b:03:6e:4c:05:5a:5e:c4:d7:66:
                    d2:a5:16:8d:e2:85:0a:17:77:36:f1:a0:59:26:08:
                    d6:dd:bc:b4:1b:b0:b9:22:36:6a:2f:fe:62:f9:a5:
                    45:6c:20:d1:bc:75:8d:a9:29:83:3f:3d:80:05:84:
                    a2:7d:57:b8:53:4f:19:82:11:d6:a2:64:d2:8e:5b:
                    e8:ef:8a:40:f2:d0:e6:b0:98:42:e8:56:ed:7f:a2:
                    64:47:56:7c:4e:66:d1:29:a7:40:a3:8f:97:5e:57:
                    4a:4e:35:56:8d:c7:08:01:2f:06:89:3e:6e:ef:07:
                    35:cb:15:68:fd:6c:15:a2:97:90:ee:c1:82:b6:87:
                    96:7a:da:f9:53:c6:1c:bc:8a:7c:96:f7:8d:28:47:
                    0b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E8:7B:B4:BE:52:2D:77:79:9E:D7:0A:52:BC:D0:6F:9A:7F:C0:1F
            X509v3 Authority Key Identifier:
                keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c9:71:a1:d3:8b:2f:f0:4d:d6:43:20:c8:49:7c:2e:a2:d1:
         1a:c5:bd:82:9c:07:12:a6:54:0a:06:53:20:0e:9b:1d:cc:3e:
         ef:aa:9e:6b:88:9e:45:d7:18:f4:ca:0f:6f:57:46:15:0d:62:
         47:aa:b7:6f:0a:d2:b2:c1:09:c9:c5:a8:bf:13:1e:7f:a7:54:
         1d:bc:3f:40:42:2f:ff:fe:c6:bf:2f:c0:e3:36:38:f6:d4:db:
         30:e2:b3:37:8e:9a:fa:3a:e2:be:1c:93:95:a7:59:3e:3e:28:
         99:ae:89:ae:74:e2:41:98:48:19:47:a7:e3:6e:76:61:a7:a0:
         ce:2a:51:ef:eb:fb:13:df:df:ec:3a:5f:01:34:82:2a:7e:9e:
         71:d5:d2:e4:c0:18:95:d5:29:68:73:4f:eb:99:f2:ae:e5:83:
         a4:15:03:1c:94:12:c6:ab:d0:15:77:1f:28:2c:98:18:80:f9:
         b1:6b:46:0d:9a:83:7e:3b:47:0d:98:09:80:b8:b4:98:00:e9:
         e9:dc:5d:71:54:27:d8:46:d4:78:ad:78:62:78:55:c3:85:84:
         b0:16:70:89:84:25:73:78:3f:f0:e0:76:ea:5e:79:97:1b:db:
         24:17:9d:7e:11:ee:c1:ad:4b:2b:58:d2:99:3f:4f:c9:f7:c2:
         f4:13:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:46 2025 by rpki-client