Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File:                     Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier:          axVhKh3NfSYOJciT3kQIx1BphfILuarUTSPQlj5OC7o=
Subject key identifier:   D9:2E:DF:D5:D6:B6:EF:06:80:48:AC:8D:23:1E:56:7A:EE:2F:07:EC
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer:       /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial:       019786C6C924E7C9945501B7E3CA3AEEA0CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number:          1570
Signing time:             Thu 19 Jun 2025 06:01:03 +0000
Manifest this update:     Thu 19 Jun 2025 06:01:03 +0000
Manifest next update:     Fri 20 Jun 2025 06:01:03 +0000
Files and hashes:         1: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (hash: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=)
                          2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: XXn1dwL+wIUmgGrSHMdfkcaWeJaExVsjOi8U4H/VSLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:c6:c9:24:e7:c9:94:55:01:b7:e3:ca:3a:ee:a0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
        Validity
            Not Before: Jun 19 06:01:03 2025 GMT
            Not After : Jun 20 06:01:03 2025 GMT
        Subject: CN=d92edfd5d6b6ef068048ac8d231e567aee2f07ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:34:ad:72:31:72:16:f8:05:8e:d2:cd:10:6d:
                    82:a4:26:18:1a:71:2e:bc:c7:01:5a:dc:53:79:62:
                    c8:a1:ea:fd:41:4b:b8:0c:80:17:62:3b:95:0f:c0:
                    c7:83:5d:6a:3c:cb:2b:64:72:36:88:05:98:cd:15:
                    07:c8:bf:57:28:2e:38:4d:8a:58:dc:08:65:e1:64:
                    02:21:68:dd:32:3c:59:32:26:22:d5:b3:04:7f:5e:
                    fd:cb:57:51:97:83:45:0b:46:95:54:d7:91:b3:8b:
                    70:1d:ec:01:3a:2d:02:18:1d:e8:fa:6f:f1:be:0c:
                    95:87:f4:0c:38:14:45:75:8c:60:2c:18:cf:5c:f3:
                    a2:6a:26:89:96:3d:f5:b3:ce:57:49:77:8c:af:d3:
                    0b:be:53:ee:17:bf:9c:d6:31:5e:5e:b9:24:a4:72:
                    e3:c6:bd:25:88:58:c8:b0:ad:47:d8:0f:c2:69:b2:
                    91:d2:73:b2:7a:0c:a3:66:80:4c:66:0d:17:a9:f7:
                    33:fc:49:97:79:6b:44:d6:05:62:4f:14:d1:23:97:
                    ce:b8:2d:67:92:9b:7e:54:a2:51:7c:2d:7b:cb:b6:
                    fb:34:ba:ae:ca:9a:d6:fd:88:eb:87:6c:68:24:37:
                    b8:11:12:ac:44:02:83:74:d3:59:99:8c:7f:23:22:
                    e4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2E:DF:D5:D6:B6:EF:06:80:48:AC:8D:23:1E:56:7A:EE:2F:07:EC
            X509v3 Authority Key Identifier:
                keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:5f:e8:ff:97:8e:a6:f8:29:83:3a:b4:0e:cf:38:a8:09:38:
         d6:e7:e1:96:d7:7b:c0:4a:58:66:75:0b:5a:7d:bf:e3:85:ce:
         31:8b:24:b4:01:a3:f2:21:2d:a8:37:66:12:2e:83:60:87:19:
         fc:39:7c:ad:21:74:cf:cf:53:9d:39:22:09:1f:9e:eb:c0:7a:
         db:48:1f:33:e0:a0:7d:95:68:5c:c2:67:0e:b5:25:a0:b0:66:
         6d:8c:a5:f7:a4:f7:1e:6c:72:1d:ff:4a:55:58:4d:5b:66:b7:
         92:c6:3e:5a:79:ec:35:14:d6:a3:23:09:94:bf:79:a5:32:d3:
         65:4f:55:7a:13:79:ea:06:e4:de:4a:d6:5b:35:6b:3c:73:3b:
         0d:02:e7:2e:a9:3c:be:3f:0f:1f:02:2d:72:6b:2f:81:79:7f:
         12:cf:df:b3:bc:14:aa:20:10:83:51:41:c7:23:1a:da:8a:9e:
         36:f7:a2:a8:26:12:58:3e:1c:68:97:b4:27:c8:1d:a0:3c:fb:
         4e:8f:71:7f:f5:05:b0:85:f0:3b:00:cc:db:f8:a7:63:d3:65:
         8e:28:88:60:ff:8f:3b:b8:7d:9f:b7:7a:15:b3:04:17:d6:8f:
         f3:1f:dc:d6:77:5c:e2:b1:d2:0c:f0:dc:ea:09:6a:f4:ec:0c:
         47:65:84:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:25:56 2025 by rpki-client