Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
File:                     Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft (raw, json)
Hash identifier:          jPKHidEBkbcwCBumeCR0m/NLHRU0mqDGJOuRg95dzPE=
Subject key identifier:   2A:9C:C9:D5:E3:CD:FD:C4:45:5D:A3:1C:41:D5:F8:4D:A1:D0:1B:EA
Authority key identifier: 66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45
Certificate issuer:       /CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
Certificate serial:       019787A22B6B5ACB7059FB58FC7A94CFA084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
Manifest number:          0C32
Signing time:             Thu 19 Jun 2025 10:00:41 +0000
Manifest this update:     Thu 19 Jun 2025 10:00:41 +0000
Manifest next update:     Fri 20 Jun 2025 10:00:41 +0000
Files and hashes:         1: JwPrp9zPI8mSIbB_O0eMHGoYapY.roa (hash: IwCg2TuOsRRHQCPAN/Mgxb8cdQtIJjR9uHKISiCsG7Q=)
                          2: Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl (hash: mjAI3t2EgRnExeZHebGC8UCqislR6uKf+IRJ9Un1F1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 10:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:87:a2:2b:6b:5a:cb:70:59:fb:58:fc:7a:94:cf:a0:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665c39bfbc52e9693a4ddf2d56e1ca99f4537e45
        Validity
            Not Before: Jun 19 10:00:41 2025 GMT
            Not After : Jun 20 10:00:41 2025 GMT
        Subject: CN=2a9cc9d5e3cdfdc4455da31c41d5f84da1d01bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:3d:77:08:db:b6:08:b7:a8:11:4e:ae:bb:
                    b9:16:b7:36:71:5e:ee:c2:d2:85:4a:af:87:bd:8a:
                    27:60:9c:a3:65:48:e0:66:51:1c:b0:1c:32:64:cf:
                    5c:75:ca:a8:a0:6a:1d:67:9d:12:8f:3d:2c:45:89:
                    bb:e7:cd:d7:8e:c2:52:93:5a:a8:55:26:ce:d7:6d:
                    29:ee:ba:5c:d2:ce:77:e0:38:80:d9:11:da:cb:57:
                    19:f5:20:d9:db:92:19:ce:a2:b3:41:e7:86:e7:3b:
                    c9:4e:75:70:7e:89:07:9b:ba:8e:bf:6f:e1:b3:2f:
                    d7:27:59:2d:97:7c:5b:14:a1:33:85:65:4d:ec:2d:
                    53:81:6f:33:82:89:52:8b:0c:7f:91:23:b8:8f:aa:
                    75:72:90:80:a8:34:44:91:04:3d:d0:23:64:50:3f:
                    be:e9:d1:9c:25:ef:23:27:c8:37:51:64:07:45:7b:
                    ef:5f:fe:50:48:9f:9f:52:ea:a8:0d:4d:75:7b:76:
                    7d:fb:64:00:e0:e3:62:1a:27:d2:13:26:60:90:07:
                    3f:7a:7c:f3:6d:17:13:04:b0:36:7f:d4:9c:58:42:
                    30:b7:20:54:50:9a:dd:45:38:bc:1a:db:de:19:71:
                    c3:7f:a2:e5:bf:f2:19:96:1e:c8:25:ab:eb:18:b3:
                    38:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9C:C9:D5:E3:CD:FD:C4:45:5D:A3:1C:41:D5:F8:4D:A1:D0:1B:EA
            X509v3 Authority Key Identifier:
                keyid:66:5C:39:BF:BC:52:E9:69:3A:4D:DF:2D:56:E1:CA:99:F4:53:7E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0bea33-bb40-4bd1-9724-f64c70f4d445/1/Zlw5v7xS6Wk6Td8tVuHKmfRTfkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:2e:6f:b5:d2:07:31:92:20:87:05:12:47:3c:7e:bb:10:
         30:d8:52:9b:98:44:a3:88:c1:ae:47:e4:f4:8d:a0:e9:51:12:
         5d:1c:f4:00:cc:d2:50:8c:79:7b:bb:5d:f7:b7:bb:22:64:2e:
         4e:56:d1:1f:19:8b:f6:8e:4c:ad:ce:6c:da:5a:e1:0a:81:77:
         ef:0f:3c:3f:b3:13:92:c6:1f:71:82:2f:18:ac:6e:0c:4a:78:
         10:8f:fb:dc:6e:cd:2c:02:1d:27:57:ba:41:42:99:80:6f:e5:
         48:1f:25:31:b3:40:75:00:ea:30:57:3b:14:a2:44:94:a4:6e:
         b5:f1:4f:3d:69:2e:6e:35:3d:80:10:64:f1:21:91:de:35:f5:
         e3:c9:dc:b4:61:7a:1d:02:6e:29:93:38:ba:03:04:25:69:de:
         52:2b:43:64:ae:b9:95:ef:75:47:09:71:5f:e6:5e:90:80:5b:
         fb:3d:80:3c:01:d0:af:bc:d0:a4:89:29:03:19:5f:7a:51:b0:
         41:a0:87:74:f3:b1:40:6a:a8:b9:6b:22:ae:9a:2a:29:24:57:
         e2:c9:58:6b:b0:f6:23:bf:1d:e5:24:ee:3f:a0:00:17:bb:9b:
         ae:fd:57:36:53:4c:91:51:2f:99:32:b0:ce:fb:66:d7:d2:be:
         fa:ff:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:13:44 2025 by rpki-client