Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File:                     _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier:          BJbRAp82EPBWbHeP+UproVrqab9qCaKPzQcygagP/B0=
Subject key identifier:   67:F4:90:67:7B:5C:0B:8D:4F:F1:6D:AE:AA:83:AD:81:A8:AF:3D:9C
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer:       /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial:       01976960DE4CB10E49FC0C382EF42935BC62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number:          151F
Signing time:             Fri 13 Jun 2025 13:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:45 +0000
Files and hashes:         1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=)
                          2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: pt9NmdPsxtwpNYhxM9lPktwleOqjRAhmD1GTUVKWAd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:de:4c:b1:0e:49:fc:0c:38:2e:f4:29:35:bc:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
        Validity
            Not Before: Jun 13 13:00:45 2025 GMT
            Not After : Jun 14 13:00:45 2025 GMT
        Subject: CN=67f490677b5c0b8d4ff16daeaa83ad81a8af3d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:b5:4b:1e:e3:3e:9b:a3:d8:50:ae:ba:0f:
                    fd:b9:5b:5a:da:5a:47:25:b8:ca:c5:81:55:85:22:
                    3f:14:56:63:04:97:1c:96:41:98:d7:b5:04:58:14:
                    e2:35:4e:cd:17:2f:01:8f:78:98:a4:41:02:c8:93:
                    fd:11:5b:a2:cc:5c:55:9f:e0:9f:c2:ff:fd:d1:23:
                    67:7b:12:b4:24:fe:84:12:d8:2b:0e:3c:9b:17:60:
                    57:cb:23:5a:d8:e0:cd:96:a1:78:a7:cc:1c:22:da:
                    8b:ae:e7:bd:d2:04:6a:5a:80:f5:55:5f:fc:a3:59:
                    5f:53:ed:9e:78:b8:01:05:e3:81:71:cf:2f:05:36:
                    4d:a8:f0:57:04:14:13:c0:0e:78:9d:00:44:02:f8:
                    bf:b5:64:11:1e:36:36:4b:9e:b0:11:e9:1c:ff:c4:
                    79:47:d2:05:2c:6c:18:28:1d:aa:de:1a:b0:66:7d:
                    fd:24:c9:50:85:a4:a4:41:af:45:fa:fa:8b:e9:80:
                    0a:cc:d7:ba:d3:4f:6d:fd:4d:0d:96:44:b8:1a:90:
                    56:1d:05:bd:cc:68:ec:58:a1:6d:4e:3e:6e:07:e2:
                    16:42:41:c8:1e:21:6c:d3:8c:0c:95:f9:a6:a1:cd:
                    2d:88:41:ad:c0:b6:ce:a2:9c:1e:fd:1c:6a:4b:92:
                    48:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F4:90:67:7B:5C:0B:8D:4F:F1:6D:AE:AA:83:AD:81:A8:AF:3D:9C
            X509v3 Authority Key Identifier:
                keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:6f:93:36:4d:d3:99:1d:54:8f:72:f7:e4:80:e8:48:d9:
         a7:8d:23:9c:5f:48:44:fc:59:4c:b2:c9:60:c4:bb:10:0c:c0:
         73:84:71:30:40:7f:52:d9:b2:31:a2:0d:7a:c2:f7:04:71:49:
         7f:e5:b4:93:06:69:e1:c5:e3:b4:97:ec:af:32:16:64:e4:b6:
         19:6d:6f:63:9b:46:da:6a:51:58:e8:cf:dc:3b:20:33:a3:7d:
         e0:3d:eb:44:57:dd:79:4c:d5:51:6e:81:eb:1d:00:6c:b0:56:
         45:8e:a5:88:f2:98:0d:a1:86:f3:e8:1b:11:2a:eb:82:0d:db:
         dc:2f:b3:23:5f:b5:e0:72:23:0c:f3:c2:72:43:11:15:59:da:
         e2:88:d0:bf:5a:dc:97:06:12:23:82:1e:e5:36:f9:e2:39:2e:
         05:2d:9a:99:02:94:a3:e1:3e:11:b3:3e:f8:e2:c3:41:bc:0a:
         67:6b:91:b9:63:19:af:16:5c:8e:65:f7:d5:97:14:17:75:fc:
         ee:cd:a5:26:db:1a:3f:05:09:4b:88:aa:b8:52:17:da:97:4c:
         60:5f:e6:44:c5:58:a7:af:6e:ee:77:1e:b4:f6:e3:9b:44:6c:
         91:69:a7:ca:1d:45:05:bf:fd:fb:8c:ef:b0:8f:7e:9e:6a:c0:
         74:cc:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:56 2025 by rpki-client