Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
File:                     Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json)
Hash identifier:          MBiYjEYm3IHrgs+fpxQ7VSX3FIDD2vjCXNYhOj1v8uw=
Subject key identifier:   DD:E2:08:1F:79:31:88:E1:21:23:04:43:2C:08:12:69:9D:C7:81:E2
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Certificate issuer:       /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial:       01967A56B4424A23F8998ED5ED35BB8887CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
Manifest number:          1235
Signing time:             Mon 28 Apr 2025 03:00:24 +0000
Manifest this update:     Mon 28 Apr 2025 03:00:24 +0000
Manifest next update:     Tue 29 Apr 2025 03:00:24 +0000
Files and hashes:         1: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=)
                          2: 3vr6MmTJusXLHnoomZaTFzf2R_Y.roa (hash: wwVRXCGEVqcIpkBMKuCLGQDGcvT246U/Ud4fDza9yz4=)
                          3: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=)
                          4: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=)
                          5: Q4p-qYS2sgvt0GJ7uYJPvsOIkIg.roa (hash: j/H5JWeQ0CkSOjcFdGwjX75ybxoyKIcMgX/vQel3jRk=)
                          6: Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa (hash: K94v285TvMOOo7AcPioAGeK/gkVuCpfkO4FQfselq2s=)
                          7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: MqmbkWQRrJKJr2dTyuiOScM95d728EpY3zdK6TQYfJM=)
                          8: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=)
                          9: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=)
                          10: lOoV_awaoXNj1bfhx0bx4WIBK_o.roa (hash: Oj6EJtwaCyCNiMtSUcVlupYUT3Tc0ATPehxbzKeY1zw=)
                          11: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:56:b4:42:4a:23:f8:99:8e:d5:ed:35:bb:88:87:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
        Validity
            Not Before: Apr 28 03:00:24 2025 GMT
            Not After : Apr 29 03:00:24 2025 GMT
        Subject: CN=dde2081f793188e1212304432c0812699dc781e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:f7:22:76:e0:80:51:01:c2:a6:ab:a7:44:
                    42:a0:76:6d:4a:7e:27:8a:92:c9:45:5e:cd:df:56:
                    fa:95:5a:fb:a5:c9:e2:57:69:d1:b7:3f:84:b2:73:
                    fc:75:1d:4c:ab:05:f7:07:49:a7:c2:32:5c:13:42:
                    95:db:9f:8f:03:a7:6c:83:a1:33:68:82:6d:7a:c7:
                    aa:90:40:ae:9a:01:42:da:f1:2b:4b:3d:69:b7:97:
                    4d:7e:30:89:09:32:84:05:77:b8:01:c8:2c:9b:c7:
                    40:d3:f4:39:4b:f7:18:6a:ee:7a:4d:e3:e4:9b:d8:
                    14:13:05:a8:6d:46:29:ea:a1:9b:f6:51:1f:7d:7d:
                    4b:e2:12:ab:a0:74:08:0d:46:12:24:a7:48:2f:79:
                    e2:dd:83:e3:cf:7a:47:35:41:cb:d5:f9:6e:fb:f3:
                    43:86:47:2d:0a:9a:5d:ff:e0:4c:80:ab:c7:a1:3d:
                    8c:9a:50:c8:ee:68:06:8a:92:a9:fb:f1:51:fc:5c:
                    74:37:f6:06:ef:66:e5:a6:97:63:59:3e:f7:1c:d5:
                    79:35:5d:37:ec:d9:53:1d:65:31:af:ad:00:8d:c3:
                    9d:9f:eb:99:50:cb:e6:ea:dc:33:21:d9:11:cc:ac:
                    42:56:11:80:67:39:4b:f0:29:9f:3e:4f:a0:d8:8b:
                    76:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E2:08:1F:79:31:88:E1:21:23:04:43:2C:08:12:69:9D:C7:81:E2
            X509v3 Authority Key Identifier:
                keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:09:ca:b9:dc:d5:65:ee:de:76:9c:5a:c8:31:ff:58:f6:ab:
         47:0b:db:88:10:2c:30:5c:eb:d8:8e:83:7e:31:a8:c5:42:ae:
         1d:60:4b:f6:9f:63:2c:4c:55:4f:5a:5a:52:a7:ee:08:a9:74:
         ef:b9:dd:06:aa:3f:f2:3d:12:c2:0d:df:44:ec:4f:19:8f:eb:
         52:b1:5d:47:d2:b1:cd:4f:96:4e:43:00:d2:9f:48:2c:4b:c1:
         a4:11:d1:97:0d:3d:c5:a3:86:5f:4a:1e:ab:f6:f6:51:39:76:
         51:b7:04:85:08:fc:61:25:64:dc:15:f9:8d:6b:76:56:d6:a6:
         a0:da:d2:4c:f2:19:6f:dc:88:cb:31:bc:4e:ba:5b:db:59:c8:
         0b:49:bf:a8:3c:d0:d6:0c:2e:a5:9b:56:06:2a:3e:b5:9d:69:
         3d:f8:c8:96:1c:cb:bc:2d:d8:62:9a:47:e5:c7:49:88:5c:10:
         87:dc:d8:91:59:48:11:69:64:a7:9e:1e:e5:1c:8e:54:e6:a9:
         8c:dd:b5:98:34:72:5c:7d:d7:03:5d:95:52:81:45:22:ea:34:
         e3:60:01:a9:e7:c6:35:23:0e:a8:1f:f7:d4:96:39:45:b3:a6:
         14:c2:99:f4:17:52:4b:57:ef:95:e2:41:05:22:1c:4d:76:a1:
         15:8b:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:35:19 2025 by rpki-client