Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File:                     ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier:          3BK96onr/uy+FJO/miIN2Xs1LCCLjNwm7czNQGaC14g=
Subject key identifier:   09:19:23:60:31:36:60:D5:D2:82:64:15:2C:6A:33:1C:FF:F0:15:7E
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer:       /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial:       0197801F41388DEE1D02026332BF17AC69EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number:          04D4
Signing time:             Tue 17 Jun 2025 23:00:21 +0000
Manifest this update:     Tue 17 Jun 2025 23:00:21 +0000
Manifest next update:     Wed 18 Jun 2025 23:00:21 +0000
Files and hashes:         1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: dH0Fh529fKd8NNV7hOiw3IybyEbKH7v7aQ/Q3KPz9tg=)
                          2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:1f:41:38:8d:ee:1d:02:02:63:32:bf:17:ac:69:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66689087e787990916878db20d555684c22cd9d5
        Validity
            Not Before: Jun 17 23:00:21 2025 GMT
            Not After : Jun 18 23:00:21 2025 GMT
        Subject: CN=09192360313660d5d28264152c6a331cfff0157e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:bf:cd:be:2f:c9:16:81:b6:76:62:9d:5b:
                    11:c3:7d:49:fd:58:fd:64:4f:2f:b0:00:92:86:25:
                    11:25:b0:b9:73:3b:1f:a2:42:de:15:92:7b:b3:77:
                    4e:b3:c7:b2:60:71:cc:6d:37:03:da:2c:f3:8d:8a:
                    9a:ff:45:a6:42:06:b5:3f:a0:70:7c:99:ec:06:d3:
                    29:4d:9d:69:ec:1b:ab:b4:47:14:fc:37:bf:fc:58:
                    5d:72:bd:23:05:58:b5:53:6b:ca:b9:57:98:46:e6:
                    d7:00:71:50:4c:3e:b5:3f:39:2b:1f:ea:d3:d8:e8:
                    3d:6e:43:ff:19:5b:1e:45:f1:e2:f7:32:7a:d6:7e:
                    e1:da:1b:3a:0a:bf:2b:be:57:55:00:50:a0:f8:0e:
                    39:2a:f7:51:28:ff:9c:fb:3a:cd:8a:b5:3a:f6:de:
                    72:38:6a:31:50:19:2e:d6:96:b8:13:76:04:0b:4e:
                    dc:cd:bb:94:f7:3e:10:c6:dc:cb:b1:ad:7e:46:7b:
                    56:73:28:72:09:d4:01:9c:8a:71:40:b7:ea:a2:b3:
                    36:82:db:af:21:04:69:1a:8a:93:cd:ce:a8:af:e8:
                    82:73:6d:61:29:49:19:07:a0:5f:5e:15:4f:31:16:
                    f9:15:95:d3:c2:23:f2:2f:94:21:a3:ae:85:75:47:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:19:23:60:31:36:60:D5:D2:82:64:15:2C:6A:33:1C:FF:F0:15:7E
            X509v3 Authority Key Identifier:
                keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:55:7f:0b:60:7d:0d:b6:ae:c8:20:42:6a:60:c1:06:05:60:
         5f:57:bb:4b:b3:6c:dd:27:22:52:d8:bd:68:35:89:cf:51:bc:
         eb:95:2d:78:c7:fc:f4:28:bc:7d:45:d8:4c:38:68:1c:1c:0d:
         e3:0f:55:a4:1e:78:05:f0:8d:d6:e5:14:04:66:72:5f:a4:d1:
         10:78:a8:8f:87:e4:03:b1:a0:6d:2d:7f:d9:aa:c7:42:58:ef:
         43:b7:f4:2b:01:e2:ba:4d:be:d1:84:61:53:3c:f2:fd:5f:e6:
         13:a3:2b:c1:9f:a8:b5:cb:9d:ab:fb:7f:5f:bb:ac:c2:f7:0c:
         a2:53:2c:26:af:eb:7b:d0:c4:1e:1a:df:62:2d:a2:0f:15:4f:
         c6:f2:1c:52:dc:c4:5e:23:6c:ec:34:b3:22:48:cf:55:af:49:
         59:13:79:05:17:3b:26:cc:51:b9:d8:a3:e3:3b:a5:6d:3b:c1:
         08:e2:aa:d5:2e:d5:7e:8c:8e:2a:b0:3f:da:2a:4e:1d:47:7c:
         1d:c2:29:63:94:46:b9:1b:7b:c2:7e:fd:18:b9:26:71:31:51:
         85:e8:16:65:85:67:0f:b1:5a:5f:c3:54:aa:23:d5:66:1f:60:
         3a:04:26:b9:75:32:af:89:6b:e5:c8:1e:c5:cc:ff:f5:ef:82:
         e6:f7:1a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:36:38 2025 by rpki-client