Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          7CHoIXHpziinT16SRR3nToUFMppMB4lbLKK20oUMU2w=
Subject key identifier:   CD:E6:63:BE:27:29:78:3B:00:11:E2:EB:6C:B5:99:44:54:B6:A9:7B
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       019671F89A5839FCBC3E58073F3D73F24806
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          151A
Signing time:             Sat 26 Apr 2025 12:00:39 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:39 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:39 +0000
Files and hashes:         1: 51l0ZaazViO-9DNCdW3GnWR4GwI.roa (hash: UwPqa23rEDmYBVT49o12uDR12sWWmyh1Kinzo0LGRpA=)
                          2: 6MwiHlH7brP7gkYxWGSzNKL3O8w.roa (hash: uucPBDwTY0D+/18evXxrCTaPjIOWXa7urOwmQvZx8kM=)
                          3: BKzk8PEv4C-K-dAjelZ2PQmBLbk.roa (hash: 0eLcFnn58Q6bI77SyMiyrXborE81MoDtpAJ0qlI9pZA=)
                          4: XjYbgGRK9V_PFyDlq3G6V2Wxzsw.roa (hash: fWbd0EX3ziv/6uF5wR8i+XeMR7zd9h8m0bOvPg7RJi0=)
                          5: nX9e-Y8BTdCoEM6_BJNC6l6Sdrk.roa (hash: XhxPnrvDqx0alyntNHd6QEfUT7v4BfXJpEnK8r6nu/w=)
                          6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: +h/B1I2ASeeX4SW4hO+sMhgIZ3se8wyNglb6Ya2tQco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:9a:58:39:fc:bc:3e:58:07:3f:3d:73:f2:48:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: Apr 26 12:00:39 2025 GMT
            Not After : Apr 27 12:00:39 2025 GMT
        Subject: CN=cde663be2729783b0011e2eb6cb5994454b6a97b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ad:63:ee:f5:4d:96:89:5a:55:99:bd:bd:47:
                    9c:95:af:3e:13:ee:8a:ff:89:b0:0b:3c:8c:eb:e9:
                    c1:f9:5f:4e:f9:ef:b5:e7:cb:2d:62:12:f4:7b:4c:
                    c9:4f:2c:1e:bf:d2:23:81:9b:31:7a:c0:10:67:39:
                    4c:7e:b5:be:bd:dd:e9:dd:ec:e9:98:21:74:e9:29:
                    b0:66:89:56:61:7c:16:69:27:72:d1:00:c8:e1:92:
                    69:ec:b4:ff:4e:dc:00:f7:6d:2d:6c:89:0c:b6:e1:
                    ee:0f:ce:88:7c:ae:36:e4:ae:ea:7d:83:43:10:94:
                    a9:88:92:70:92:1e:b2:14:70:32:ee:d7:f7:d5:83:
                    0d:9d:f0:b3:b9:3e:0d:5b:2b:91:eb:9e:f7:7f:fd:
                    b7:6f:47:f4:34:65:d4:4b:f2:1b:15:4c:73:3e:c7:
                    d0:fe:08:06:23:bf:ce:f6:58:ce:d3:72:b2:94:a6:
                    68:20:98:54:68:93:e9:15:71:ec:e3:4d:84:fc:45:
                    8c:ca:f3:b4:3c:90:25:8f:f4:86:69:be:97:64:d7:
                    23:cf:ba:91:c4:38:ad:0c:a5:11:f6:5d:ef:43:43:
                    c9:d7:31:51:1c:d9:9e:b1:85:f4:ea:96:8d:0a:bb:
                    8e:7d:6f:bf:89:c1:88:67:19:3b:18:e2:60:e7:48:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E6:63:BE:27:29:78:3B:00:11:E2:EB:6C:B5:99:44:54:B6:A9:7B
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:ba:bf:36:93:42:a2:47:4a:f6:12:ca:a7:3c:d0:8f:a3:
         04:97:e3:26:b8:d6:c7:99:1d:f3:c5:5f:ea:5d:a3:ef:50:a1:
         5d:33:77:ad:15:94:57:6b:30:1a:d6:48:ac:f0:4f:44:10:1b:
         e7:c4:49:36:13:93:d3:3e:c9:b8:9d:20:4f:0a:10:ae:5b:88:
         17:b9:c6:0f:3e:69:20:91:cf:96:83:cb:7d:7e:30:72:82:fe:
         33:12:fb:8f:1d:3a:73:0d:bb:7b:2d:15:8e:95:dd:a3:d7:39:
         2b:f8:cb:c5:a0:de:f9:f5:cf:8b:cb:7e:2c:11:03:1a:f3:93:
         91:ab:a8:9f:b7:54:ec:58:29:5c:50:a3:21:57:e1:d3:dc:5a:
         8a:36:e4:7c:2d:90:67:16:99:a6:76:26:ca:de:1c:6d:b4:b8:
         87:a6:36:9b:f0:66:ac:5a:a9:f3:42:46:81:ed:e0:7e:17:d9:
         9f:dc:1d:9c:4c:87:35:d7:1f:11:56:76:56:37:ce:77:ce:5a:
         6b:5a:be:19:c0:9f:e5:64:71:d5:4f:21:15:7a:b6:94:a8:02:
         cc:85:b0:75:03:57:ac:f9:4f:ae:0a:37:d3:18:82:f0:09:11:
         0a:5d:1b:b5:66:16:d9:8c:ce:2f:82:e4:a8:23:0a:54:dd:df:
         09:9c:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:16 2025 by rpki-client