Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          kv1xJ8kUrRefTe5LrxkoeZGljEM9UNfDrkcEBysMiug=
Subject key identifier:   F4:7B:46:10:DF:70:50:15:45:16:CA:AE:48:58:A4:B1:88:65:11:FD
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       019768F31D3D6F92347B3A8353693F3B7AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          0E16
Signing time:             Fri 13 Jun 2025 11:00:52 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:52 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:52 +0000
Files and hashes:         1: 9WT5lvrUTbcRS85JMSDk2uyrP5g.roa (hash: SuEzhNB8Z7i6RNSDwq8VVK9RN7Pd1DtyYQCtgqjgF5k=)
                          2: MUzH6xsh7lBrmnntCvAf96p9dnc.roa (hash: EiKpNpruJXWiN5MyW+0u9tVMVSJplWcWZqVPZo/F/5E=)
                          3: NHMobz5RYRVit9LoY3zWGAN_HOc.roa (hash: tGGn1zlHUoMNuDm6FPTyGRaUtT/oaeGBSOiswtnEYQU=)
                          4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: GR1fQlSKaVQJ5La+zexteWGFBvy4eEXI6CsX1ig41pY=)
                          5: doDyzqqCQoqFs364AYHR_vs_9YI.roa (hash: n0tTCokEp8NBC6AkuYcyF3ZEXZVQKkGkYM93Vv520tk=)
                          6: exp48BWKUcDXUkG7i2Cr80hvpEo.roa (hash: PxK1jmuTn8+Arb/4EbK+9fd9fS7Yg9Yie0DgOUJDKD4=)
                          7: sfUsMcIrItn-6M-6LEpHfM2PmZA.roa (hash: kXBXp2wVH8CqH+KGVUIhNcFki1g+gzcxR7XYL4WqFqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f3:1d:3d:6f:92:34:7b:3a:83:53:69:3f:3b:7a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: Jun 13 11:00:52 2025 GMT
            Not After : Jun 14 11:00:52 2025 GMT
        Subject: CN=f47b4610df7050154516caae4858a4b1886511fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:29:25:22:c4:8c:49:6e:4b:13:82:4a:47:
                    43:cf:19:15:58:bc:bf:6c:ab:08:18:75:d0:05:2a:
                    72:23:49:00:9f:66:a2:11:f5:5c:bb:40:9a:a9:bd:
                    2a:48:a5:ad:b0:ef:9f:40:0d:1d:8b:b1:d9:ae:26:
                    e7:61:c5:a1:91:20:2f:a8:42:50:7e:74:9d:a6:67:
                    9c:6e:d4:a9:b3:14:08:8b:b4:91:62:20:2d:8a:f0:
                    5c:ee:a5:c6:e2:62:0f:d4:25:7e:ab:fe:05:0e:cd:
                    71:42:2c:b6:19:d7:4b:d2:b2:85:06:2a:62:39:e7:
                    ce:31:ed:28:58:82:53:10:e3:99:5a:fa:4e:ed:f9:
                    05:7c:a9:2a:45:a6:ae:7b:5b:4f:22:b4:f3:49:d7:
                    6b:fe:4a:79:25:26:d2:bc:59:9c:33:bd:17:75:e4:
                    3d:18:fc:1e:5e:5b:1b:73:1f:76:89:c4:ee:91:ae:
                    0d:70:5f:71:54:6d:14:8b:17:0b:b1:3c:6e:fb:56:
                    0f:45:9d:71:76:1a:7f:00:f2:93:83:f8:86:27:b2:
                    d8:11:12:6f:ad:13:0d:7c:d9:16:e4:3d:43:f4:28:
                    20:3a:a5:0d:d4:d8:ee:11:f8:a6:04:74:12:30:49:
                    7d:bc:fa:04:98:1f:9a:c2:3e:0f:7b:fd:62:cc:eb:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7B:46:10:DF:70:50:15:45:16:CA:AE:48:58:A4:B1:88:65:11:FD
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:06:27:aa:31:a4:5c:07:b2:5f:25:f6:bb:51:71:60:13:4d:
         c3:75:76:cf:fd:43:d2:cd:c9:ff:44:a8:bc:7f:70:ec:3b:b0:
         a5:bf:89:06:5d:3f:ed:b6:ed:a3:bf:76:7c:39:9c:27:76:6c:
         8d:df:4f:b4:25:32:88:da:7d:67:b4:6d:35:81:21:72:af:3a:
         d7:e3:2a:a2:39:c3:f9:90:2e:53:ee:4d:4d:94:56:7d:a8:fe:
         b4:6b:53:04:6c:42:59:fd:60:48:7b:c6:ef:ba:f2:b2:e7:28:
         9a:4e:f0:a5:74:2d:df:74:43:3f:4d:27:64:02:07:19:03:70:
         0b:4b:c1:be:5e:d6:34:6a:df:a0:92:a5:51:7d:90:cb:99:57:
         84:b5:a3:e2:07:7a:bc:b7:c8:ce:4a:5e:a6:66:b5:61:63:79:
         20:c5:ec:1a:e8:aa:7c:7a:6f:66:b8:67:d4:84:20:7c:f6:25:
         bd:8a:1f:1a:a3:25:a5:6f:7f:4b:96:8d:18:e5:3d:46:26:ce:
         59:66:29:8b:2b:92:45:01:1c:e6:bc:35:a0:bc:51:78:38:4b:
         c5:cd:24:a8:95:dd:31:2f:25:88:46:c4:49:b6:16:c8:dd:17:
         99:86:c4:1a:0f:02:49:a7:6f:4b:39:95:e7:cb:d1:b0:75:88:
         4b:07:6e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:53 2025 by rpki-client