Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File:                     zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier:          kKf2VUD256yh5zU59ywiHFJlwhYwF9C9PswqhgNVKEM=
Subject key identifier:   3B:C4:3D:06:5F:8F:0C:4C:77:23:7A:82:2E:AD:3A:0E:B9:A4:4B:77
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer:       /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial:       019770077FC437B7CF9E75918687D1B2F2F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number:          0536
Signing time:             Sat 14 Jun 2025 20:00:29 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:29 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:29 +0000
Files and hashes:         1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=)
                          2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: JQ5X59mnFod04bYZIm/sn7Ge5ug7cdA0zlOk/uXdz/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:7f:c4:37:b7:cf:9e:75:91:86:87:d1:b2:f2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
        Validity
            Not Before: Jun 14 20:00:29 2025 GMT
            Not After : Jun 15 20:00:29 2025 GMT
        Subject: CN=3bc43d065f8f0c4c77237a822ead3a0eb9a44b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:a9:92:f7:35:c0:3d:3c:29:c8:16:7b:ab:
                    f4:87:7c:18:5f:8c:68:3c:b6:24:82:48:46:24:dc:
                    d7:78:40:0d:7e:cb:d6:b0:07:3a:63:a5:0a:ef:55:
                    ca:80:f2:ce:d6:99:ff:bc:d5:38:60:14:75:c5:79:
                    0b:8c:b2:9b:6a:20:59:0c:34:34:f1:e7:d4:fd:0c:
                    f1:2d:14:8c:a7:34:52:2f:f6:f5:96:d3:cc:f2:08:
                    5d:47:c4:a2:4b:bc:24:ec:b0:2f:50:5a:e6:f3:70:
                    0d:92:7c:b3:d5:a2:23:2e:76:6c:fc:3b:51:5a:aa:
                    7c:26:91:15:6f:2f:ca:f7:d7:f3:e1:6f:41:1a:fd:
                    8f:e1:37:ea:7c:e4:29:db:f7:0e:f5:ae:a6:43:9a:
                    1e:88:bb:55:70:cf:89:1e:0d:d7:d2:6b:98:ae:9e:
                    81:e4:ee:cd:78:85:4b:38:63:3a:0b:c2:c6:86:0e:
                    ac:0c:60:ce:39:5d:d4:ae:3c:3a:52:9e:64:26:a9:
                    7d:88:2d:cf:a1:ac:6f:68:97:6e:fa:55:a3:ee:62:
                    7d:b1:6f:0c:b2:59:56:0c:0f:21:ed:8a:43:f0:3f:
                    60:9f:87:e8:be:89:af:49:45:05:26:20:4f:f5:51:
                    79:9b:59:49:36:cc:af:c0:d6:10:17:62:a5:7f:20:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C4:3D:06:5F:8F:0C:4C:77:23:7A:82:2E:AD:3A:0E:B9:A4:4B:77
            X509v3 Authority Key Identifier:
                keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:e5:05:fd:bd:bc:82:99:57:26:7a:1b:7b:b3:5c:33:67:
         29:5f:7a:41:5c:f0:16:a0:66:21:3e:33:3f:5c:f4:81:3f:2d:
         94:56:83:9c:e2:67:c0:7d:33:f7:90:ac:6b:96:19:9f:0c:8c:
         d1:6a:21:9e:a1:14:71:c2:a4:96:02:38:52:ad:42:a4:c3:66:
         87:fe:2b:69:2f:82:16:05:46:5d:4d:0d:90:a7:aa:cc:05:6b:
         a8:27:80:58:8f:a4:0b:ac:06:e2:92:de:40:bd:c9:f2:e8:18:
         12:14:b4:14:b4:ad:47:b2:cc:f9:03:b5:0d:9f:4b:de:f8:23:
         ae:f2:10:61:71:77:db:ca:3c:a8:b8:ac:bc:b7:b0:de:31:92:
         60:1e:64:16:a6:6c:38:ab:8b:eb:73:f1:25:c9:60:0e:7a:21:
         72:61:1f:e5:9c:22:86:15:27:18:e1:69:6f:b6:ae:74:b8:9a:
         0d:61:c4:71:e6:57:76:ef:19:c6:7d:b6:47:dc:0a:f7:f8:c7:
         01:b5:2f:d7:0c:80:da:ed:07:2d:77:ba:ac:a0:54:0c:9d:50:
         b0:40:ec:75:d1:58:9b:b3:35:08:82:3b:82:fb:c5:03:b9:41:
         31:81:0d:41:a8:7e:fc:f3:e4:9b:7c:82:3d:94:b4:a5:41:13:
         12:77:59:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:07:42 2025 by rpki-client