Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File:                     zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier:          IrV1OCDzNbHrUkTUIXcCoIovt9Nd0VpwpAhFpq6TzEo=
Subject key identifier:   46:2B:CB:EC:1E:C3:64:70:F2:44:10:B3:FF:77:4C:0A:2F:F8:10:EC
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer:       /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial:       01967EA1B5F07A7FDF801B73FD0D02FFABCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number:          04B9
Signing time:             Mon 28 Apr 2025 23:00:49 +0000
Manifest this update:     Mon 28 Apr 2025 23:00:49 +0000
Manifest next update:     Tue 29 Apr 2025 23:00:49 +0000
Files and hashes:         1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=)
                          2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: 1L45NlMC9z8b5IhHHJKnrS+dSWttdetOWDTcueAlX/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:a1:b5:f0:7a:7f:df:80:1b:73:fd:0d:02:ff:ab:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
        Validity
            Not Before: Apr 28 23:00:49 2025 GMT
            Not After : Apr 29 23:00:49 2025 GMT
        Subject: CN=462bcbec1ec36470f24410b3ff774c0a2ff810ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:a1:e4:e1:8b:fb:5a:3c:c2:16:b2:43:df:
                    d6:3a:67:19:49:d4:1a:6a:aa:02:cf:5f:37:8a:3b:
                    01:75:98:43:17:42:3c:89:4a:68:27:be:f3:8f:1f:
                    a8:12:78:76:38:27:c9:37:39:55:57:a4:f0:19:82:
                    5b:3c:f2:99:8b:a0:d9:f8:01:d4:b3:08:89:de:d5:
                    3d:bb:08:51:09:cc:33:73:5a:e6:23:02:2d:14:d0:
                    a4:0a:86:5a:59:49:f6:2f:01:52:a9:c4:51:ed:aa:
                    e5:86:5c:aa:f0:e1:0c:6b:c5:f6:27:4a:70:69:e9:
                    cc:c6:60:eb:57:7f:90:f5:dc:4d:71:cf:3d:96:a7:
                    57:5b:58:41:f3:b9:52:07:2c:89:b6:e6:d7:f7:b2:
                    04:23:06:7d:c8:b7:c9:6a:9d:eb:81:42:53:b0:1b:
                    62:04:09:7a:8e:fa:35:de:ef:01:55:0f:2e:8e:b0:
                    75:b7:24:ee:2c:c7:36:ac:27:d8:8f:6a:6b:22:a8:
                    cc:6b:5e:68:ee:39:1b:c4:1e:28:4a:ac:d2:6a:cf:
                    0c:05:93:99:da:20:42:41:cb:8c:d4:76:47:38:6f:
                    26:a0:6a:1d:a9:df:40:d4:24:7c:62:5b:c6:f3:ee:
                    37:f8:6b:d6:9d:81:2b:84:e1:88:cd:52:3a:8d:f7:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2B:CB:EC:1E:C3:64:70:F2:44:10:B3:FF:77:4C:0A:2F:F8:10:EC
            X509v3 Authority Key Identifier:
                keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:8a:1d:be:1e:dd:95:c0:40:66:7b:63:e8:14:fb:1b:47:
         7b:45:7d:01:1e:5e:85:a5:16:eb:bc:2b:94:6c:8b:3c:a3:6d:
         ad:62:48:74:93:2e:51:ba:0a:91:70:5f:ca:5e:a3:36:7b:11:
         04:85:45:b2:5a:fd:d7:f4:c9:af:af:3c:be:b4:8d:50:70:1a:
         5c:ee:3f:cb:48:37:d1:6e:2c:88:19:c1:d8:f1:6c:26:6d:54:
         db:dd:b4:07:a0:58:30:7b:8d:19:11:91:4c:87:fc:be:80:82:
         f2:52:5b:3e:ab:3d:e9:b3:4f:d5:f3:3e:cb:0e:f6:1d:3a:b2:
         e8:0a:e4:56:ed:08:c1:f7:ee:b4:9b:96:81:8e:31:17:17:74:
         a8:bd:eb:8e:66:25:c4:52:e0:41:1f:b0:e2:b9:03:56:cd:40:
         7e:3f:e7:ed:c1:e8:c6:67:be:67:8f:b8:0b:05:ed:77:0d:3d:
         57:24:38:98:bd:58:03:6c:ab:da:a6:2e:ef:10:d7:c8:53:8f:
         3e:3d:5b:8c:0f:12:b9:0b:41:ba:77:44:bd:bd:39:bd:c1:92:
         ac:5b:21:be:0c:92:ce:48:33:9f:1e:c0:ac:e5:1f:e9:4a:a4:
         59:f7:93:e5:b4:82:15:df:5e:2c:db:bd:ca:c0:61:7c:87:8f:
         04:5d:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:15:22 2025 by rpki-client