Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
File:                     ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft (raw, json)
Hash identifier:          p68HEw6kfdi3ZslY/iKpI/cHPddpIU7O/dop19ZgOAY=
Subject key identifier:   EE:E7:D5:EC:AC:F6:15:DC:77:95:2D:0B:E4:8A:31:93:B2:C6:4B:16
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Certificate issuer:       /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial:       0197827C8E64192FAEA1C3F852788F1590B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
Manifest number:          04D1
Signing time:             Wed 18 Jun 2025 10:01:30 +0000
Manifest this update:     Wed 18 Jun 2025 10:01:30 +0000
Manifest next update:     Thu 19 Jun 2025 10:01:30 +0000
Files and hashes:         1: HUQfSbUXQ8o5sejAFjmqjv9tlM4.roa (hash: 0zqsTYbHTNoaCDejiRL7Xvvp739hTKFX211y1GkZqpw=)
                          2: IRgLAnTQtNSoAjzAdTJssFWXSw8.roa (hash: OLDZQBhRqUKwifuLNk5oWPjP3iOP3ZFBViXpFb8/RAs=)
                          3: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl (hash: Au/WC1WBsKUcEXMEVFrhdMPOjLZ/edMWHNzNkuRa5z0=)
                          4: r-mMpss0ZPS6wfcro6Yc6v3bf5I.roa (hash: AfE+ZyYoM7YopSTeu6QdJkZ27/i6Ksf0AYTOdnxfZrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:7c:8e:64:19:2f:ae:a1:c3:f8:52:78:8f:15:90:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
        Validity
            Not Before: Jun 18 10:01:30 2025 GMT
            Not After : Jun 19 10:01:30 2025 GMT
        Subject: CN=eee7d5ecacf615dc77952d0be48a3193b2c64b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:14:44:76:a6:5a:8e:96:3e:92:0f:33:90:
                    32:77:8e:ee:e8:a4:f8:31:4f:f8:d1:a8:96:f3:a7:
                    5b:83:a8:dd:a4:a9:7b:fc:e6:77:36:3e:e5:7c:5a:
                    05:de:b4:f6:97:b5:3c:20:81:2e:26:3e:3a:b2:37:
                    70:1a:15:3b:52:61:ee:c1:94:1e:2e:dc:d6:ed:76:
                    a2:24:35:94:5f:44:11:bb:2a:12:f2:31:ef:48:4a:
                    12:0d:75:e5:23:8e:dc:63:8b:7a:77:e5:87:fc:fc:
                    c9:f5:6d:91:df:91:1d:aa:b1:fe:9f:5d:3b:c7:bf:
                    e3:fc:01:81:04:17:3c:e4:e5:94:3c:b4:d8:f6:91:
                    44:4a:6d:b3:e5:0f:d4:e1:aa:f3:32:5f:b0:0e:81:
                    84:33:c4:84:e4:9a:f2:14:ff:71:b4:a7:e8:0c:7e:
                    25:ad:eb:87:59:b3:fb:3b:6c:80:61:01:1c:7b:19:
                    aa:77:65:7a:12:44:02:d5:6d:16:b5:f8:82:2d:9a:
                    8e:7f:9b:41:0a:9a:ea:c9:d6:c8:62:ae:4c:1d:9a:
                    ad:8d:71:e6:57:95:54:fe:23:35:1f:f2:fe:56:25:
                    ce:f6:f5:b3:1d:40:c3:95:0e:70:45:3f:f1:92:2c:
                    f7:04:02:ba:d0:bb:1e:a5:24:c5:39:d2:1e:c0:5a:
                    55:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E7:D5:EC:AC:F6:15:DC:77:95:2D:0B:E4:8A:31:93:B2:C6:4B:16
            X509v3 Authority Key Identifier:
                keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:36:35:6d:58:c8:ad:c0:42:f0:ac:51:9a:c8:81:8b:6d:32:
         c8:d7:1c:70:74:af:56:8a:f0:c8:24:6f:28:ca:fc:cb:3c:85:
         01:53:fc:98:2a:15:44:c3:57:6a:48:6a:e1:19:10:e4:5c:57:
         66:c3:a0:5c:3f:44:4f:15:b2:4a:dd:99:e5:1f:00:fe:b6:f1:
         5e:ac:f6:71:b5:d0:ae:66:76:d8:5a:40:b9:5d:80:cb:c5:4f:
         fc:31:98:2c:c9:7a:fe:d2:fb:71:fc:fa:3b:45:13:bc:82:8c:
         22:fd:57:e3:9c:5d:b8:99:4e:f6:06:4b:58:9c:b5:f2:e7:48:
         28:6a:55:70:b5:29:ed:72:af:fc:8e:fe:2c:cf:2f:a4:cd:60:
         75:56:9c:26:e6:45:ec:78:ea:4d:5e:fa:f2:ed:83:37:87:34:
         2f:bf:14:93:7d:6d:00:c1:a6:f7:30:60:88:bb:77:a2:10:56:
         df:12:3d:27:1c:0c:98:63:c4:06:04:2c:95:50:8b:82:39:eb:
         b0:e9:29:f3:28:58:2a:71:ec:02:68:73:06:18:24:bb:fb:14:
         14:a3:22:9c:be:be:0a:02:6e:31:54:f0:ce:9d:69:c2:72:54:
         c6:cf:3f:ba:fa:f9:dd:d0:2d:a8:4d:31:85:a7:3e:09:00:6e:
         8e:3b:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:55:53 2025 by rpki-client