Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
File:                     ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft (raw, json)
Hash identifier:          uOZF3Lw9HWG7Q7S+mPMLXNNTZKk5ECO4DRkwyjP4mLQ=
Subject key identifier:   43:47:94:9A:5E:D6:AF:FA:F2:62:EC:BA:2B:FD:18:93:DE:0B:DF:5A
Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
Certificate issuer:       /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Certificate serial:       01987607669B4C47A02DFD4821642C4F16C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
Manifest number:          0545
Signing time:             Mon 04 Aug 2025 17:00:53 +0000
Manifest this update:     Mon 04 Aug 2025 17:00:53 +0000
Manifest next update:     Tue 05 Aug 2025 17:00:53 +0000
Files and hashes:         1: ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl (hash: g+bZAfDDaWm+p7aNaTdZDOVZQCpT1ifOWUV6Kp2ELVY=)
                          2: omogO-53hv4pnqw4NQwPLhHBlGE.roa (hash: 32U7MfouOBRFQW9pXzlugwtn7uE6295TC/Ncm0R3ehw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:76:07:66:9b:4c:47:a0:2d:fd:48:21:64:2c:4f:16:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
        Validity
            Not Before: Aug  4 17:00:53 2025 GMT
            Not After : Aug  5 17:00:53 2025 GMT
        Subject: CN=4347949a5ed6affaf262ecba2bfd1893de0bdf5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:c0:e2:a9:13:85:51:7b:bb:d5:e9:ef:48:
                    85:85:66:01:a8:68:65:19:d8:8b:8f:01:7e:29:c6:
                    e9:9e:65:98:22:d3:a3:b1:08:74:5a:ff:2c:fe:e0:
                    46:c9:36:96:b0:23:d6:bb:6e:43:ff:47:1c:06:9f:
                    b0:f4:de:e9:40:98:67:77:67:42:a1:3d:9f:14:14:
                    f9:8c:11:ec:3d:c1:13:a7:1a:41:b5:78:12:0c:5f:
                    37:28:9f:77:48:35:6a:35:89:73:8b:fd:36:f8:29:
                    f5:41:30:e0:a6:26:85:33:be:ce:eb:1d:5d:a7:ad:
                    03:34:26:8d:a0:ce:6f:e6:ad:69:07:b5:b3:a8:b5:
                    e9:0e:b0:59:53:3b:83:d6:fc:e3:60:18:b4:85:81:
                    f5:e3:0c:b8:1a:3f:7b:58:32:59:6c:5e:60:c5:90:
                    50:ee:1c:72:07:d6:4f:04:9b:f8:b8:d1:72:4a:49:
                    1e:5e:cb:05:d4:91:9f:0c:80:ad:7b:f5:40:5b:56:
                    a3:1a:e1:2c:ee:70:50:5f:06:ee:b9:2a:22:29:4c:
                    82:26:8e:29:1f:1d:b6:88:ce:16:9f:07:d1:d5:6d:
                    d7:48:6c:ff:de:46:09:28:05:03:f6:20:ff:3e:af:
                    66:e4:c5:25:1b:cf:43:2a:82:04:0e:54:1d:d6:4f:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:47:94:9A:5E:D6:AF:FA:F2:62:EC:BA:2B:FD:18:93:DE:0B:DF:5A
            X509v3 Authority Key Identifier:
                keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:3a:6b:79:5f:ef:4f:38:aa:af:94:3b:50:53:5a:9d:90:69:
         c9:c4:38:82:b4:a4:3d:79:c5:d8:26:99:65:16:ef:6f:6d:9f:
         50:71:21:4c:cb:e4:96:87:67:44:fd:bc:45:5c:80:b6:48:6c:
         d8:1c:72:c9:bd:2d:8f:7d:6a:8d:31:e8:8d:bd:dc:ac:00:55:
         2d:b9:48:8f:84:65:d9:5b:7d:1f:45:2b:8f:7b:ca:31:19:57:
         5b:ae:4d:25:fa:07:0f:16:be:f0:58:3f:da:7f:e3:cd:29:f0:
         3d:3a:45:e5:57:a7:c5:f3:c0:22:cd:44:b7:db:4c:bb:44:b9:
         19:e2:7f:58:b4:a7:31:69:3f:11:b3:6b:9a:44:9a:49:58:d0:
         cb:5f:14:25:b1:34:c8:61:a4:26:a4:47:06:60:6a:24:11:01:
         05:d2:12:45:10:6b:50:0c:6c:9c:22:2c:6e:42:97:8c:bc:27:
         17:f0:08:66:3b:b5:c9:b1:32:17:f0:13:1f:c5:66:a9:f7:9c:
         7e:c6:1b:fc:6c:ed:e1:09:45:76:af:6b:76:31:f5:76:e8:f4:
         2a:07:56:23:0a:e1:38:f7:39:f1:69:a2:b2:2f:e7:24:dc:3a:
         f2:e3:4a:82:91:82:fc:ae:48:18:b2:f6:d5:4c:e7:48:40:7b:
         e6:21:d3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:42:50 2025 by rpki-client