Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File:                     Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier:          MiwWY5XH1n3F7nFxeh37MPDAsp3pcfzNWhc+jaUE8r0=
Subject key identifier:   4B:4E:AD:8E:DB:0D:5D:ED:BE:6D:54:C9:34:06:24:9C:12:33:8A:D2
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer:       /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial:       01969115E0697839516288CE7AA4ED829839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number:          B3
Signing time:             Fri 02 May 2025 13:00:52 +0000
Manifest this update:     Fri 02 May 2025 13:00:52 +0000
Manifest next update:     Sat 03 May 2025 13:00:52 +0000
Files and hashes:         1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=)
                          2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: ZNkMSGtLx7krL626j/MLNpUnPXsosxuRAcrxCeZgVdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:15:e0:69:78:39:51:62:88:ce:7a:a4:ed:82:98:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
        Validity
            Not Before: May  2 13:00:52 2025 GMT
            Not After : May  3 13:00:52 2025 GMT
        Subject: CN=4b4ead8edb0d5dedbe6d54c93406249c12338ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:db:97:ff:ee:ba:6f:22:8d:bb:41:ce:17:
                    9c:12:00:90:1d:9d:c5:2b:1e:7e:1e:ef:1a:76:1a:
                    38:aa:ed:53:9a:c4:be:70:88:00:d1:c4:e9:fd:a4:
                    56:da:96:9c:25:39:ea:9a:c3:b1:ef:ea:db:28:3e:
                    b3:44:b2:d2:c2:37:05:c3:6a:61:45:44:4c:c4:c6:
                    44:0a:14:ba:15:5b:e6:87:51:84:be:ea:97:3e:33:
                    cf:24:78:4c:99:bb:2b:cc:93:e2:93:7a:46:06:01:
                    e3:5d:7a:9e:ce:88:be:cd:6c:ee:9c:d1:7f:f1:91:
                    4e:ee:95:3d:5f:61:bf:e1:b2:54:7f:64:06:94:33:
                    df:54:15:30:f6:74:7d:f4:29:dc:a9:25:ea:c7:8c:
                    d2:9c:65:0f:97:52:1f:ea:77:ab:e1:0a:5e:9d:28:
                    5c:bf:24:15:d5:85:d0:66:43:e8:36:4e:6e:3a:69:
                    b4:5c:ea:5c:ac:9d:5b:86:73:b5:00:f6:a2:6c:b2:
                    68:bc:e1:48:30:13:b0:2d:ee:1f:cf:15:6d:51:a9:
                    26:5a:ba:ce:05:23:53:a9:f5:29:31:50:b4:65:98:
                    d9:c5:67:df:a6:eb:50:ad:af:3b:70:99:a6:2a:ce:
                    92:a3:21:16:91:69:4b:a5:c8:fe:42:43:5c:28:6d:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4E:AD:8E:DB:0D:5D:ED:BE:6D:54:C9:34:06:24:9C:12:33:8A:D2
            X509v3 Authority Key Identifier:
                keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:16:72:2c:a3:95:f8:2e:14:56:17:1a:2c:ce:53:3c:7d:
         97:3a:30:36:77:fe:6e:7d:30:c7:a1:71:cc:49:72:fe:7e:31:
         00:8d:b5:d8:80:55:c4:6a:37:73:cc:1a:61:c5:28:79:f2:9a:
         54:55:82:42:f9:65:5e:2b:3f:6d:c0:8c:5b:98:82:09:79:b1:
         09:64:be:93:56:49:f5:08:cd:d5:6d:eb:51:60:1c:07:98:4d:
         1b:72:ee:57:3a:e7:b8:93:27:f4:05:75:d7:f6:32:c5:23:2d:
         04:e1:e3:9e:af:ba:a7:94:86:70:92:5a:a2:98:63:ae:41:a2:
         45:7f:d7:73:9b:6b:6f:73:29:bc:02:ee:af:78:de:ba:7d:4c:
         28:05:2d:8a:a4:45:fc:1d:06:c9:07:c6:f1:98:ed:4e:c9:8b:
         a6:ce:4d:ec:b3:5e:ca:0c:e6:33:b0:b2:ce:8a:69:d6:9f:f7:
         40:bd:ee:5e:44:c8:92:c1:34:80:02:10:51:d0:1c:83:4e:ca:
         cf:6c:65:12:86:10:53:3f:05:96:c3:4a:8e:99:14:db:d2:1d:
         17:df:b3:b0:4e:9b:35:3d:5b:d3:ef:86:cc:ee:02:5a:3c:32:
         3a:b9:33:d6:10:75:51:d4:f3:2a:a7:e6:90:36:17:e9:7f:8c:
         3e:9b:01:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:27:47 2025 by rpki-client