Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
File:                     Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft (raw, json)
Hash identifier:          trOVGXzvVJTVYxoEvvGtoOwAO7AxVhMVeAlQNWLN9c0=
Subject key identifier:   C9:40:CB:8C:4F:01:7C:C5:F2:1D:1C:90:54:7E:3C:B0:24:F8:5B:C1
Authority key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Certificate issuer:       /CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Certificate serial:       0196925F640CA2B944FC00D24104B9013CC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
Manifest number:          0BB3
Signing time:             Fri 02 May 2025 19:00:47 +0000
Manifest this update:     Fri 02 May 2025 19:00:47 +0000
Manifest next update:     Sat 03 May 2025 19:00:47 +0000
Files and hashes:         1: JwPrp9zPI8mSIbB_O0eMHGoYapY.roa (hash: IwCg2TuOsRRHQCPAN/Mgxb8cdQtIJjR9uHKISiCsG7Q=)
                          2: Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl (hash: xz88LgyJK7+QaZXAAtNsmcqWEJdcvVBWp+Apq11Ihe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:5f:64:0c:a2:b9:44:fc:00:d2:41:04:b9:01:3c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
        Validity
            Not Before: May  2 19:00:47 2025 GMT
            Not After : May  3 19:00:47 2025 GMT
        Subject: CN=c940cb8c4f017cc5f21d1c90547e3cb024f85bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0e:2f:78:86:09:9c:7b:2a:8f:36:4a:cf:b1:
                    8e:56:5d:c1:b6:45:10:61:44:9c:50:d2:02:bd:7c:
                    e3:ec:ac:52:c9:32:54:b6:be:b7:50:f8:22:ec:8a:
                    09:39:5c:26:9e:60:4e:df:1f:a7:77:6a:22:d0:66:
                    6d:32:fa:74:c0:62:d6:26:7f:9d:e8:b1:bc:14:3a:
                    8e:bf:a6:26:bd:aa:94:90:b9:47:3b:91:da:d8:60:
                    7e:bc:fe:a5:37:db:c6:a5:aa:8d:f5:15:64:60:66:
                    41:f9:32:a3:f5:23:81:aa:95:9b:cd:dd:2f:36:7d:
                    c3:48:60:fb:1a:b2:be:7d:23:70:7a:94:6d:55:a3:
                    53:d4:dd:98:11:89:66:f6:7f:7d:6f:fd:98:fc:38:
                    0a:04:0e:57:18:1d:a5:b1:9b:df:00:39:a1:21:37:
                    72:e9:88:97:cf:49:5c:ad:9b:49:ef:1a:27:ce:d4:
                    fb:52:3f:32:85:8d:9c:57:24:e0:06:33:37:88:d7:
                    f7:4a:67:1f:6f:c6:ad:e8:55:05:f1:0a:6b:85:fe:
                    47:7b:7e:86:17:4b:c8:6a:8d:80:10:fb:6f:97:72:
                    a6:24:22:0f:47:05:2c:d9:10:39:cc:f8:12:22:43:
                    4c:fd:8c:96:65:1f:f0:8e:53:cb:0c:ba:20:77:31:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:40:CB:8C:4F:01:7C:C5:F2:1D:1C:90:54:7E:3C:B0:24:F8:5B:C1
            X509v3 Authority Key Identifier:
                keyid:66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0b:80:a8:d3:65:9b:52:a0:24:84:1e:fa:ba:a8:ea:fa:e0:
         b0:17:5b:81:7e:58:14:a5:23:2b:45:43:ee:d5:5d:f3:88:92:
         b7:61:65:aa:92:8c:fa:d5:4f:c6:fa:0d:3e:32:30:91:7b:ac:
         2d:4c:6e:3f:28:9e:69:82:ca:87:c6:73:c3:33:2e:b7:9c:8a:
         4c:97:2e:71:93:68:f7:e3:e3:67:8d:7d:ad:5f:2c:96:80:84:
         97:8f:7a:0b:2d:28:58:48:01:b9:2a:e6:db:38:6e:8a:b5:58:
         8c:3a:ff:29:4b:60:7d:e0:92:7d:3f:49:17:a2:8b:26:5d:66:
         4a:19:b4:21:04:a6:4d:a0:3b:83:60:70:20:a7:6d:96:1e:d9:
         68:a7:7d:6b:71:65:4e:9c:59:e6:8e:c5:56:5a:9c:25:2c:70:
         02:4e:12:89:93:a0:3d:7a:2e:2d:07:06:33:68:2a:fc:0e:4d:
         07:84:06:38:32:bb:95:80:07:b7:78:cf:f6:53:38:22:a0:aa:
         a0:4a:1a:4f:f0:52:a2:70:bf:5e:48:a4:a2:1e:82:db:f2:aa:
         5f:57:93:69:9b:b3:d2:03:69:64:e0:2d:55:64:c1:3d:54:a8:
         f5:bc:bc:5d:e2:0e:60:58:8c:77:e6:f7:02:cc:67:1f:1b:d3:
         f1:02:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:38:57 2025 by rpki-client