Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File:                     zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier:          8qJ+gsCfTgVkjuDWsnlI7UbZXzuKPyR/7UK5AnoZb/8=
Subject key identifier:   63:0B:9D:89:20:6E:D4:20:2F:8E:58:E7:FA:5E:DC:3B:57:93:6B:A8
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer:       /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial:       01977D8C882854111552A9E1978A93284032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number:          1597
Signing time:             Tue 17 Jun 2025 11:00:51 +0000
Manifest this update:     Tue 17 Jun 2025 11:00:51 +0000
Manifest next update:     Wed 18 Jun 2025 11:00:51 +0000
Files and hashes:         1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
                          2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: lsVUMNmF/fywc2on2LqE0pVbCqZZv/wOl9zpFVlFMBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:8c:88:28:54:11:15:52:a9:e1:97:8a:93:28:40:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
        Validity
            Not Before: Jun 17 11:00:51 2025 GMT
            Not After : Jun 18 11:00:51 2025 GMT
        Subject: CN=630b9d89206ed4202f8e58e7fa5edc3b57936ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1f:49:8e:36:8c:f3:d7:5a:f2:03:5c:14:56:
                    58:1d:bd:0c:45:7a:15:3d:41:95:00:ab:27:56:04:
                    58:bb:f9:59:f3:70:1f:86:38:27:24:5a:d3:42:4c:
                    74:14:c3:e0:99:8f:ba:1a:21:ca:77:4f:fd:22:ad:
                    f3:67:e8:a7:20:42:19:ea:48:33:a8:04:1b:cd:44:
                    d8:4d:e0:19:29:fb:05:48:09:87:19:23:1f:da:3c:
                    ac:6b:b9:d9:ad:f4:0f:db:fa:a5:bc:ca:f4:36:c5:
                    53:81:e2:83:56:f0:a1:5b:75:37:d2:e4:94:4d:61:
                    17:6a:b0:a2:1a:95:21:8c:77:2a:8e:ca:ab:1e:86:
                    37:25:68:d7:b1:ef:9f:c6:3f:2f:ba:88:1e:1d:8d:
                    8d:05:d8:47:7a:80:0c:df:2e:aa:12:87:8e:50:46:
                    54:bf:9b:f3:86:2e:4a:36:70:61:2b:54:b3:e7:2b:
                    96:7c:f0:ae:f6:24:89:db:2e:2d:80:62:ac:87:c5:
                    db:5a:f0:9a:97:4a:8b:8c:b3:af:df:88:eb:9d:ca:
                    53:75:66:56:e7:f1:da:70:da:24:10:f2:a1:7a:01:
                    41:c1:9d:29:eb:87:c2:95:e9:fa:9f:c0:26:53:18:
                    09:72:82:ef:89:48:47:a1:78:e5:f3:ad:64:b0:8f:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0B:9D:89:20:6E:D4:20:2F:8E:58:E7:FA:5E:DC:3B:57:93:6B:A8
            X509v3 Authority Key Identifier:
                keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:db:bb:60:e1:a8:1d:a6:91:62:b9:25:b1:1f:18:e3:47:26:
         6c:4a:31:70:c4:f2:bf:a9:fd:19:a1:95:2e:6d:79:53:07:f4:
         81:a5:7f:54:2a:8f:ab:79:12:67:61:d9:f0:68:68:b0:49:c9:
         e7:83:79:9e:01:63:84:70:73:e2:e9:8b:7e:6f:a1:bf:71:16:
         d5:e5:cb:65:8e:a4:60:16:4a:75:f2:f7:2c:2f:27:65:bb:29:
         88:4e:70:bf:c2:b0:b4:57:d1:27:d3:ee:d1:3c:11:e7:78:af:
         16:10:ea:f2:ec:09:88:8a:e4:21:db:b1:74:5e:e6:65:62:11:
         42:55:25:7e:ad:f8:c0:a8:1d:54:43:e7:77:6d:04:96:0a:b4:
         d1:bd:2e:bb:42:bf:fc:9c:f7:e4:4e:fc:d9:42:22:97:36:1d:
         03:96:09:bd:e0:77:26:c1:6f:fc:8a:ee:f2:78:f2:d9:e5:dc:
         1f:96:c1:03:af:28:ed:b0:47:30:2f:6f:23:1d:82:cb:84:1e:
         a3:96:b6:5c:e8:c1:6f:29:5b:c6:4d:62:b5:78:f1:64:1a:15:
         4d:34:e2:24:d4:6e:47:ff:67:a0:02:9c:39:a4:77:af:a7:49:
         fa:7a:64:6b:85:12:64:36:0c:75:7c:ac:bd:bd:65:26:de:8b:
         1b:b4:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:31:22 2025 by rpki-client