Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
File:                     Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft (raw, json)
Hash identifier:          jdZYXg3+AtzBoaOnOoa4bvLlC/a618e32PDwqwZAjZw=
Subject key identifier:   F2:3F:B1:CB:CE:3A:17:D6:42:E9:69:8A:9A:C0:D9:99:04:7E:2A:55
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Certificate issuer:       /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial:       0196748BA0D92AC2CC6EF3089B3A297BF1C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
Manifest number:          1232
Signing time:             Sun 27 Apr 2025 00:00:29 +0000
Manifest this update:     Sun 27 Apr 2025 00:00:29 +0000
Manifest next update:     Mon 28 Apr 2025 00:00:29 +0000
Files and hashes:         1: 2hV2Eva-Yq0Tj6R_zRma3IFAz5U.roa (hash: xaAXokmFBA+GIkC2gCBEPvYGMsKwjG9cFEwuB3Zkoqw=)
                          2: 3vr6MmTJusXLHnoomZaTFzf2R_Y.roa (hash: wwVRXCGEVqcIpkBMKuCLGQDGcvT246U/Ud4fDza9yz4=)
                          3: CnW3qR_oIITaOQij9dhtcxmI3Ew.roa (hash: c6jiCaV7kJAiM633jZnJHCKNng9Erj/W/XlTBj+QRpY=)
                          4: DHALUAN5tK6vdZdATqkw-W3Rehs.roa (hash: 7l9RAeo7N/jmnp2dP2Muv9E6xCL1r9O+gLOg/k2Fq2s=)
                          5: Q4p-qYS2sgvt0GJ7uYJPvsOIkIg.roa (hash: j/H5JWeQ0CkSOjcFdGwjX75ybxoyKIcMgX/vQel3jRk=)
                          6: Tt5lRvCR59EmvIm9nWpxifL8PvQ.roa (hash: K94v285TvMOOo7AcPioAGeK/gkVuCpfkO4FQfselq2s=)
                          7: Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl (hash: 6nvzaIoX1lkcD569Nuai/Tv7mIZX5xFWL7xsdKhn1VE=)
                          8: k7Uhxcf1dLyLbabkMZGt9dayq9s.roa (hash: gFVryfVaKzHzs9H28hxg6aO05RnxqjKmSXgUNR+b4kg=)
                          9: kIbghkBOfoXjY46mtdWaD6ECFzI.roa (hash: 0pGxzPrydHhKJZ3AyBjYXBgg0KwtH0VaWuahmKMYYJY=)
                          10: lOoV_awaoXNj1bfhx0bx4WIBK_o.roa (hash: Oj6EJtwaCyCNiMtSUcVlupYUT3Tc0ATPehxbzKeY1zw=)
                          11: n-1P-bnNMbfHyYOOBdFHAhTQeeU.roa (hash: VCctCwWgn1+jYqEkjhICyTVDTXkxSrSucpTbDGLkOEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8b:a0:d9:2a:c2:cc:6e:f3:08:9b:3a:29:7b:f1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
        Validity
            Not Before: Apr 27 00:00:29 2025 GMT
            Not After : Apr 28 00:00:29 2025 GMT
        Subject: CN=f23fb1cbce3a17d642e9698a9ac0d999047e2a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:a5:95:86:35:c1:f6:a6:e5:7c:ec:64:95:
                    67:c6:38:79:55:3d:36:92:1a:80:54:4c:21:b1:1d:
                    26:32:43:dc:8c:d5:35:54:06:77:5b:95:2e:6b:37:
                    10:8e:f6:40:74:51:92:83:61:2b:ef:23:14:70:8b:
                    1c:2f:52:bc:e6:31:28:c9:5b:51:0a:a1:54:86:4e:
                    d1:7f:53:53:1b:85:2b:f1:37:35:d2:9f:29:57:c1:
                    c3:88:a3:61:eb:2a:d9:3e:16:98:1d:ce:84:f3:4f:
                    ce:0d:cc:c6:66:81:d9:e6:3c:db:56:e1:72:d8:c5:
                    6d:eb:8f:b5:7a:0d:9f:e8:95:05:f8:c6:cc:4f:31:
                    f0:82:5e:70:ec:6e:0e:37:08:72:5c:c9:85:01:96:
                    c1:e9:6b:f5:c9:90:e5:02:d2:6f:4f:8d:a7:25:1c:
                    f1:2a:e3:f3:cd:bf:27:fd:f3:4d:c7:da:40:95:a2:
                    ed:f5:69:bd:5c:bf:7a:79:2f:e9:7c:63:cf:ec:1e:
                    86:61:46:5d:67:d1:18:5a:ca:8f:e3:5c:d1:e6:3f:
                    88:36:02:95:f2:d7:38:da:b8:10:e7:ea:66:d2:23:
                    96:b4:0b:cc:87:03:48:d0:62:1a:61:81:55:a7:64:
                    1c:e7:a7:9e:9b:46:97:fe:75:ec:b8:1b:e9:6d:36:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3F:B1:CB:CE:3A:17:D6:42:E9:69:8A:9A:C0:D9:99:04:7E:2A:55
            X509v3 Authority Key Identifier:
                keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:78:26:0c:b4:52:8e:b8:0b:1a:d6:9b:0d:32:e5:90:13:40:
         52:e1:56:b0:71:eb:c7:a3:19:f2:b1:dc:be:0c:1e:d2:16:23:
         a0:98:e2:50:c8:e3:06:c6:e0:43:85:b0:13:4f:b0:47:b6:a4:
         ea:4c:db:5b:f9:1b:e1:b2:e5:2c:d7:9f:c8:32:8b:ea:e7:12:
         83:bd:b7:de:4b:4a:6e:d4:68:ff:ac:a5:c0:23:ee:1a:8b:72:
         1c:6f:96:14:39:5b:ab:9a:50:e9:d0:78:5b:25:3c:4e:b2:62:
         6c:cb:60:19:ce:02:20:12:1e:c1:22:6b:75:7a:96:32:36:66:
         95:30:ec:44:3b:0c:7f:ec:2f:8f:fe:18:90:31:a1:aa:34:ac:
         cf:2c:25:e7:8c:b9:96:fa:de:f7:fb:6d:7e:10:d5:f6:36:c6:
         b5:dc:ee:64:e9:30:c3:18:c4:15:34:17:9f:a6:66:a7:b8:9f:
         44:3c:6e:3b:54:0e:42:49:ae:fd:0a:1d:fa:e5:10:8c:3d:71:
         3d:28:df:e0:e6:e4:ff:ed:38:c0:9b:e1:b9:a4:7f:97:3f:bf:
         1d:17:8e:62:d1:a2:f9:4d:e4:4d:e1:94:bb:be:d0:aa:a0:8c:
         6b:60:72:92:42:74:a1:20:80:be:88:e0:38:6e:fe:45:eb:2b:
         f4:46:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:46:17 2025 by rpki-client