Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File:                     ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier:          h7liLMfq9TXIzDPmqbiDkFawYVOfrxN+rDnXXGCmdWQ=
Subject key identifier:   AB:AC:F1:63:D7:A7:55:BE:67:00:F9:9E:71:25:66:98:47:21:87:FC
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer:       /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial:       01969717AFF46BA3541E66D5F232573CFA67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number:          01A6
Signing time:             Sat 03 May 2025 17:00:33 +0000
Manifest this update:     Sat 03 May 2025 17:00:33 +0000
Manifest next update:     Sun 04 May 2025 17:00:33 +0000
Files and hashes:         1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=)
                          2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: 4/yEr0xn9VHCd+nO2Nkpke/afTKFovtuV7C9uMhE0zI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:97:17:af:f4:6b:a3:54:1e:66:d5:f2:32:57:3c:fa:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
        Validity
            Not Before: May  3 17:00:33 2025 GMT
            Not After : May  4 17:00:33 2025 GMT
        Subject: CN=abacf163d7a755be6700f99e71256698472187fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:db:fc:56:57:59:6b:b7:9d:ba:05:ba:47:f4:
                    1f:4f:ee:2a:05:fe:d8:a0:b5:5e:e8:2f:c0:01:f4:
                    7b:91:93:12:e1:8a:80:ce:89:d2:bf:5a:4b:28:3e:
                    72:8d:f1:26:6a:8c:f0:35:a5:74:f1:08:f2:b8:51:
                    f5:75:99:f7:eb:ff:cf:3d:ec:af:07:61:01:7b:a3:
                    68:f8:52:10:ee:97:83:0e:7b:57:cd:f9:20:54:30:
                    b7:07:27:7a:f4:c9:63:fb:02:9b:93:67:36:6b:8d:
                    6a:8d:54:5c:2d:99:eb:36:15:05:9e:a9:a0:9a:3e:
                    91:9a:66:79:a9:af:81:52:9a:30:e3:fd:41:c7:36:
                    bb:f5:6a:0a:5a:7f:d6:a3:b4:b3:2c:b1:af:96:bf:
                    9c:84:3a:2a:5c:86:b4:1c:40:11:e5:ca:5f:8e:7a:
                    01:d1:39:99:25:ae:e4:e2:b2:42:9d:af:d5:51:ef:
                    38:7a:fd:91:58:03:8e:ed:61:ce:a7:e0:24:70:b3:
                    67:96:cb:09:52:7b:1c:54:25:76:02:ac:bb:31:98:
                    36:57:b8:4e:cb:00:95:6c:89:75:ec:0c:4e:02:a6:
                    ab:e3:b2:57:b9:32:37:93:8f:7b:0d:0f:2c:b6:9c:
                    96:8b:0c:cb:78:c4:e4:e6:ac:eb:85:14:c0:19:d1:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AC:F1:63:D7:A7:55:BE:67:00:F9:9E:71:25:66:98:47:21:87:FC
            X509v3 Authority Key Identifier:
                keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:05:da:e6:b2:a8:96:16:90:d5:35:78:13:ec:f2:97:a8:85:
         bf:0a:00:0a:ae:1a:75:5e:27:04:24:f1:f1:5f:ab:1c:86:7e:
         8d:5d:94:ff:f0:fa:a8:c3:6a:86:96:91:ac:0d:1d:83:db:75:
         d4:5e:6b:f4:f5:57:70:a3:59:e9:e7:41:df:f5:4b:8e:a0:c7:
         7c:3e:97:a0:51:f7:f8:86:b9:d5:8d:51:7b:d9:1e:25:15:ad:
         13:00:17:92:6d:f5:25:3c:6b:22:e1:d0:35:9b:b5:c1:f5:e2:
         fd:ae:38:99:b7:8d:da:7f:a0:13:df:62:5d:28:ac:a5:30:85:
         d6:a7:76:a5:f0:df:68:9f:45:19:74:84:aa:e9:37:8c:26:4e:
         61:48:46:a2:98:a5:25:91:ba:23:e0:98:b3:d6:da:b0:c3:21:
         01:dc:70:d9:f9:b8:fb:72:bd:b8:d1:03:e7:c2:9d:58:ec:53:
         f0:25:d5:00:15:66:93:62:61:19:bb:64:b7:11:2f:87:44:6e:
         af:5e:02:82:c7:fd:81:42:a9:b1:01:43:36:38:59:f4:d1:e3:
         df:a4:08:96:f0:37:11:53:56:4d:00:2a:48:a7:16:57:a1:76:
         00:bd:12:86:ac:ec:76:34:33:fb:43:31:66:f6:bd:f3:da:9d:
         3a:13:91:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:00:55 2025 by rpki-client