Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File:                     zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier:          PYgdBKscGikZj2ytUJsm10xOyvs15a7YCCL5EqEE2tM=
Subject key identifier:   01:5D:7E:C9:13:C9:A8:0C:B7:DB:38:C7:36:FD:09:50:51:A5:29:3E
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer:       /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial:       0196BD8106391FDD3BA0BD6AA7519F8B097E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number:          1534
Signing time:             Sun 11 May 2025 04:01:11 +0000
Manifest this update:     Sun 11 May 2025 04:01:11 +0000
Manifest next update:     Mon 12 May 2025 04:01:11 +0000
Files and hashes:         1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=)
                          2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: OQLqgVhw9nqYvDsxOFwDY8o0JkdQ6W7O933BgyQSD7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:81:06:39:1f:dd:3b:a0:bd:6a:a7:51:9f:8b:09:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
        Validity
            Not Before: May 11 04:01:11 2025 GMT
            Not After : May 12 04:01:11 2025 GMT
        Subject: CN=015d7ec913c9a80cb7db38c736fd095051a5293e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:5a:90:ea:ba:2e:9b:bb:28:b2:81:ec:a4:
                    a3:ec:78:2d:f0:9b:b6:ab:03:5b:10:83:43:fd:54:
                    9a:d2:c3:e6:be:5e:fe:0d:66:33:21:df:3c:a3:20:
                    2b:f0:f4:29:db:be:d6:34:b2:a8:33:5b:dc:0f:99:
                    69:31:dc:52:32:2e:ec:16:06:48:68:f6:3b:c6:8a:
                    06:59:83:ee:f0:59:43:04:ff:81:9b:e3:58:75:ce:
                    fe:d0:8c:a0:e8:c1:c2:75:02:04:de:41:ec:ba:50:
                    87:2b:9b:cc:7f:5d:47:2b:b3:6b:87:f0:4d:a8:0e:
                    8b:4e:7b:a4:6b:e1:0a:a8:e8:e4:f3:1a:cb:32:b8:
                    f4:32:b4:46:e3:12:c3:54:b7:2b:66:1d:42:7e:1e:
                    53:4f:0e:4b:ad:f6:ee:87:4a:38:5f:28:55:f4:19:
                    79:85:42:94:63:d3:7e:e4:38:0e:b4:c4:6c:e4:00:
                    5c:d7:80:94:eb:d5:cf:ac:8b:5a:22:63:e3:ca:b6:
                    6b:ee:74:36:5b:53:f1:d5:4e:ad:dd:00:2a:fc:cf:
                    6c:05:82:a6:75:0d:65:bf:8a:02:5c:72:86:3f:3c:
                    95:23:65:c2:69:f1:9e:09:7c:c3:93:b7:1a:9e:65:
                    63:16:eb:b0:c3:dc:e3:8e:f3:3e:03:c5:23:03:e1:
                    46:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5D:7E:C9:13:C9:A8:0C:B7:DB:38:C7:36:FD:09:50:51:A5:29:3E
            X509v3 Authority Key Identifier:
                keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:44:af:0a:f6:d7:b8:a9:a6:ff:b4:90:d3:6d:57:72:ff:18:
         55:03:4d:0b:d6:4e:7d:d3:5a:81:3d:29:b0:08:6f:25:07:16:
         ce:e5:d5:76:d8:59:07:26:6c:db:e1:f8:70:ae:92:3f:61:06:
         aa:d5:3a:4f:2f:af:b7:41:17:d1:5c:7a:32:70:ad:64:12:98:
         fc:e4:e9:1c:c5:c2:65:5c:61:a9:6e:a2:7a:82:4b:bf:f2:40:
         10:64:0f:cf:e4:e4:96:c8:ba:bb:a9:af:f5:ff:c3:1b:c5:ac:
         65:19:e1:21:7f:80:16:6a:13:4f:d9:d8:0f:78:f6:ae:cc:53:
         18:28:fc:f7:19:a7:6b:9c:88:f8:02:35:69:f3:f0:6e:ce:0c:
         39:e9:82:e2:1b:33:86:26:0b:96:36:2c:3a:9b:38:f0:5d:35:
         b8:cb:8c:72:ec:85:f9:ab:3d:e2:17:50:d4:0c:62:2b:ac:81:
         a3:5d:f0:08:7b:c0:4a:6e:67:58:e4:e1:9b:d3:81:1e:1b:a3:
         5c:7b:ca:19:19:3f:70:47:74:c4:d6:4e:c7:53:41:d5:14:15:
         a1:2f:df:f5:56:b6:0b:d1:be:cc:7f:80:06:ab:c4:d0:93:62:
         ae:72:68:6c:18:2a:3a:8f:63:84:32:97:08:fd:a5:13:95:b0:
         c8:4d:7b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:51:26 2025 by rpki-client