Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
File:                     zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft (raw, json)
Hash identifier:          7axmJSUoI6olMtqZeyIY8ttc5E7XqUyukCoL8nV9kI4=
Subject key identifier:   5C:E9:65:62:31:AF:B3:05:23:5C:1C:86:F4:11:24:2D:C9:69:98:F3
Authority key identifier: CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3
Certificate issuer:       /CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
Certificate serial:       01968058BBF82389246EA17BB9EF9EF86B5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
Manifest number:          150F
Signing time:             Tue 29 Apr 2025 07:00:20 +0000
Manifest this update:     Tue 29 Apr 2025 07:00:20 +0000
Manifest next update:     Wed 30 Apr 2025 07:00:20 +0000
Files and hashes:         1: 1QFlrvAPCEY9CxtKdM8ySIJ2CQM.roa (hash: qOb1k95cjdyB0rlC/+JRqF7RzF8ycajnDjjrG1VLQhQ=)
                          2: zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl (hash: bJMEAaMDNxB4tyJ4ILP1t+jNPcuiJqx+JFSIFC42uX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:58:bb:f8:23:89:24:6e:a1:7b:b9:ef:9e:f8:6b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6ca05c4cb61d9e2329298d354c2a769bdd05d3
        Validity
            Not Before: Apr 29 07:00:20 2025 GMT
            Not After : Apr 30 07:00:20 2025 GMT
        Subject: CN=5ce9656231afb305235c1c86f411242dc96998f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:63:a7:83:51:f0:ba:e7:24:5d:1a:ee:a8:27:
                    4e:e5:95:7d:ca:cb:91:cf:6d:b6:6e:04:08:16:c6:
                    fa:7c:a3:f6:86:ef:e4:dc:a4:41:65:22:ef:8a:3d:
                    01:21:9e:f2:f5:e8:b0:c4:91:d3:4e:53:2b:9d:a4:
                    ff:d0:c2:f6:5c:c7:95:b6:3c:1d:36:95:a2:41:90:
                    d9:83:19:ed:ab:23:78:b7:62:b7:d1:f8:c6:7e:39:
                    b9:81:a6:4f:e2:d5:ba:89:7f:bd:42:95:9b:01:aa:
                    db:c2:c5:fd:b1:fc:61:06:e5:2b:81:0f:ad:33:0a:
                    e9:36:b3:1b:58:ac:54:9a:29:6b:cf:c9:e2:54:5d:
                    46:fb:40:27:78:93:38:09:5c:8f:aa:6a:ed:8b:44:
                    ea:9f:a7:7a:55:c5:c4:b3:79:84:ce:8e:57:9a:cc:
                    82:a3:e4:6d:84:50:fe:13:a7:6c:5e:e9:c6:cf:99:
                    39:d6:e5:c0:61:69:dc:c4:32:6b:d9:42:51:7c:03:
                    a5:0f:a3:36:7d:67:10:6b:ff:95:07:24:44:b9:40:
                    22:5a:69:1b:30:02:57:ab:6d:2c:12:fa:f9:21:ff:
                    f4:8d:ec:7c:5b:c4:f7:b5:6e:5d:d2:00:0e:fe:57:
                    5e:92:d3:d5:af:63:39:c6:7e:59:2f:5e:8f:7a:65:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E9:65:62:31:AF:B3:05:23:5C:1C:86:F4:11:24:2D:C9:69:98:F3
            X509v3 Authority Key Identifier:
                keyid:CC:6C:A0:5C:4C:B6:1D:9E:23:29:29:8D:35:4C:2A:76:9B:DD:05:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGygXEy2HZ4jKSmNNUwqdpvdBdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/097b01-9470-48eb-850d-afc602714e13/1/zGygXEy2HZ4jKSmNNUwqdpvdBdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2d:26:7b:af:5c:ff:6a:df:05:2d:0e:63:ad:5b:1b:fb:4d:
         6c:0d:5f:82:8e:c7:7f:9c:7a:34:dd:e5:28:38:12:ce:ff:f7:
         36:1e:78:df:da:49:9c:e5:fa:34:27:c4:e9:33:51:d5:29:7e:
         06:0b:b1:f8:a8:0e:50:00:19:eb:b4:7e:76:2e:89:2d:27:06:
         85:19:a3:50:9d:17:e8:82:88:63:d0:59:84:4c:4f:e0:21:bf:
         fd:8e:59:6e:48:92:a6:a3:20:78:70:fc:27:46:07:54:6d:52:
         62:3b:d0:bc:b0:8f:6d:ee:1f:87:8e:34:4a:ac:97:0c:7c:49:
         f5:bc:fd:32:54:0d:19:20:a8:9f:6d:95:4a:60:a7:b0:3d:2f:
         cc:69:46:4b:a9:8b:82:3d:25:e2:9f:3d:a4:60:37:92:ab:d0:
         c3:90:c8:42:38:b6:2d:7f:54:e8:8d:3e:1c:b0:43:81:eb:9f:
         01:09:c9:a6:f5:a0:d9:36:0c:3a:02:cf:32:d9:41:95:c4:bf:
         ae:19:81:ff:f8:4c:8b:ce:b9:be:8b:61:e2:2d:81:8d:c8:39:
         61:81:c9:86:87:e0:92:ab:98:35:39:3c:a4:74:85:60:05:38:
         25:81:e0:c8:57:b1:a1:90:09:cc:7b:8f:f6:51:5b:bb:1c:13:
         b3:82:dd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:34:11 2025 by rpki-client