Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File:                     ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier:          wEoq5y8IkjZSxDPbmF0h2wIDtIGxcnvFHrpcEur3LXk=
Subject key identifier:   FB:49:80:FA:4F:23:8D:BD:E4:9B:C8:02:CF:9F:A8:ED:94:D8:03:D6
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer:       /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial:       019672D412D951EE645A9A833C2626C0B481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number:          150F
Signing time:             Sat 26 Apr 2025 16:00:23 +0000
Manifest this update:     Sat 26 Apr 2025 16:00:23 +0000
Manifest next update:     Sun 27 Apr 2025 16:00:23 +0000
Files and hashes:         1: UzlLJhfSrUNJLRR4VAmgrw8pzGo.roa (hash: 1t/jTZ5arlnYBIzjgbN6ZRsvi2Rgri7ens1cAuZZLW4=)
                          2: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: /sq+7z+jQrupzrC1GTMbD0STzRJTF7Vq6WN5PtBdbw0=)
                          3: hMmPM9uQjSpja4bSUK9zc_akA0w.roa (hash: hrlNP/K4kHD/OY4z6+CaOp00xjs5GduVuaQsaUliKXM=)
                          4: kXDtSEP8wehej7ozup3ULNF_kxE.roa (hash: pFGVv12QjKqbl/zBNnLTn7joQ5O/ICyXPOVOcqhZ97Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:d4:12:d9:51:ee:64:5a:9a:83:3c:26:26:c0:b4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
        Validity
            Not Before: Apr 26 16:00:23 2025 GMT
            Not After : Apr 27 16:00:23 2025 GMT
        Subject: CN=fb4980fa4f238dbde49bc802cf9fa8ed94d803d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:b2:1a:fe:23:18:c3:76:e1:0e:06:2a:60:
                    a6:98:bb:60:46:d2:8e:c3:d6:af:a6:e4:33:69:55:
                    67:3d:8b:94:01:83:d5:1c:8a:4e:dd:9f:c9:00:07:
                    14:a3:e9:25:3e:da:b4:ce:45:62:47:35:0a:22:63:
                    f8:2b:df:92:a7:23:b6:a5:ba:13:26:72:bf:24:7b:
                    b2:bb:00:56:a2:e9:c0:a4:b3:ab:6c:84:18:6e:6c:
                    3b:c3:e3:a0:10:c5:db:bc:fe:aa:13:ee:60:a8:7c:
                    a9:0a:cd:54:27:51:90:20:71:8b:35:49:db:9b:37:
                    9f:80:99:a1:97:f1:9e:25:7d:26:a1:a2:5b:97:cc:
                    40:d3:c3:4b:9d:e4:02:56:1d:3d:c1:a9:d4:d2:9d:
                    25:8a:64:07:c8:60:92:62:60:9d:b2:6d:83:c6:2d:
                    d5:50:7c:b0:ee:d7:6d:b1:5f:b7:dd:a2:d3:1f:82:
                    48:d0:51:e3:30:0b:ab:22:82:17:1a:67:cc:a1:d9:
                    3c:35:9f:f1:04:c1:1e:60:55:a0:83:e1:2e:60:d7:
                    20:a5:43:da:e4:6f:26:ce:50:2b:9f:ff:44:55:dd:
                    0c:9e:d7:7e:94:4e:b2:b7:45:ba:4c:31:d6:7f:82:
                    90:18:6e:77:99:78:11:3c:b1:98:53:d2:b8:0c:03:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:49:80:FA:4F:23:8D:BD:E4:9B:C8:02:CF:9F:A8:ED:94:D8:03:D6
            X509v3 Authority Key Identifier:
                keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:19:89:82:54:d8:a4:01:50:13:02:41:ad:06:74:f1:10:
         10:1f:38:12:8f:6d:d7:96:c3:56:74:f3:0b:27:4e:e7:c3:4c:
         56:e0:29:0e:0e:7f:71:32:84:12:b1:c8:1f:7e:7a:54:ae:2e:
         98:44:6f:53:f5:45:d1:9f:96:0c:2d:45:3b:95:5d:96:03:25:
         05:cb:b7:cc:6f:44:8b:82:ac:08:1d:d9:fc:20:3b:03:3e:37:
         f1:42:4b:bc:34:15:6f:d6:08:86:af:ba:ad:86:b2:6d:9f:8e:
         3c:bc:07:12:da:ff:e5:1c:f6:3d:1f:49:45:00:95:58:01:d1:
         f6:c1:db:cb:75:94:8f:84:c9:f2:78:61:b6:5e:a7:e5:df:cb:
         b0:75:a3:e7:21:dd:96:01:e7:8f:2c:15:88:e5:11:9e:15:55:
         c3:f6:19:f0:65:53:e3:95:f6:1e:b7:6f:50:12:75:10:03:f3:
         82:63:11:2a:d3:c1:57:2a:98:60:83:d9:96:38:d1:f9:6f:ae:
         7d:01:73:59:68:c8:93:32:38:92:e9:97:60:aa:4c:f8:16:aa:
         12:ec:e6:9c:42:84:9d:a4:bc:7a:68:fa:9a:15:08:43:bf:95:
         ab:d1:5a:4d:2d:c7:70:1f:63:32:23:c2:29:d6:29:9a:37:40:
         79:b6:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:09:22 2025 by rpki-client