Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier:          8clD9DY0m1XZBPzl6smvwPhiB8MNsOFmVQ4gh0KRD/c=
Subject key identifier:   12:37:EB:12:71:E0:5A:4B:5D:EC:A8:3D:49:8E:4C:7D:66:B0:FB:52
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       0196790D50EF3BF935898BACA32C0975E26C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number:          1515
Signing time:             Sun 27 Apr 2025 21:00:37 +0000
Manifest this update:     Sun 27 Apr 2025 21:00:37 +0000
Manifest next update:     Mon 28 Apr 2025 21:00:37 +0000
Files and hashes:         1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: 9KsA/mkZexAlOp234PEkvfTjoNO4rnI5Rr0EspxlJaA=)
                          2: kwXk5lchLSQusIqWIc1_LElpPmw.roa (hash: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:0d:50:ef:3b:f9:35:89:8b:ac:a3:2c:09:75:e2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: Apr 27 21:00:37 2025 GMT
            Not After : Apr 28 21:00:37 2025 GMT
        Subject: CN=1237eb1271e05a4b5deca83d498e4c7d66b0fb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:38:98:5b:dd:36:9a:a1:13:57:35:16:65:
                    a7:f1:c9:7e:a6:a3:2c:bc:e0:d9:96:33:54:2b:09:
                    09:7a:b8:54:97:58:45:95:e9:38:ca:98:59:27:0f:
                    55:9b:40:02:c7:95:76:50:8d:05:87:0a:bc:ac:dd:
                    bf:c1:9b:ad:60:79:36:4e:2d:62:e8:9d:7a:e6:fb:
                    12:89:d3:3e:c3:d4:5f:7e:4a:55:db:19:a1:1d:1c:
                    b6:7e:0d:7a:8b:35:0b:4a:b0:0a:8b:56:c5:82:d3:
                    b2:b4:ea:ff:95:8c:c5:9d:2e:2f:1f:fd:5d:a0:8d:
                    f7:03:ea:84:ce:5c:ca:88:15:e6:8a:8a:e1:09:8a:
                    70:e3:9e:0d:ae:fe:90:b6:6a:a2:f3:49:2f:fc:a1:
                    b3:a9:3a:03:b3:f7:eb:1d:a7:a6:9c:93:a4:57:a8:
                    09:5a:21:9f:94:b2:85:45:0d:bb:54:8f:b6:5a:ab:
                    48:4d:af:64:fe:b8:bd:0f:9f:3c:1a:32:de:e0:a9:
                    31:0c:4c:42:7e:b6:fc:7d:a2:ad:1d:b2:a0:5a:a0:
                    e0:3d:ca:79:47:11:37:ea:bb:b5:4f:0e:e8:52:ec:
                    e1:37:50:b8:36:b6:69:4f:9e:77:64:77:b2:ba:eb:
                    93:f3:87:82:7e:90:0c:4b:b2:3d:38:de:5b:de:54:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:37:EB:12:71:E0:5A:4B:5D:EC:A8:3D:49:8E:4C:7D:66:B0:FB:52
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3d:4f:67:24:2f:30:07:e7:6b:50:25:e2:27:25:e7:ca:1b:
         78:bc:20:f4:a5:9a:f8:96:ad:47:1d:92:fa:bc:ff:86:a5:ea:
         3c:d4:c4:7c:fe:fe:0a:3e:2d:d9:dc:9e:7b:4a:91:cd:d6:0d:
         e8:23:76:ea:bb:75:05:e5:4f:10:83:70:87:68:56:9f:c8:1d:
         90:cb:fb:e3:86:20:9d:56:72:c9:ea:85:92:92:a6:00:61:d7:
         02:ef:e3:6a:c0:c4:cb:a1:3f:be:03:6f:a9:55:80:5a:9b:d1:
         ea:17:d6:6b:26:68:33:86:40:3b:fc:a8:41:93:92:78:50:ef:
         6b:b0:03:2c:ef:89:35:b1:ae:83:0d:2b:08:5c:9b:02:5c:18:
         15:de:29:f2:a9:f9:3c:bb:0f:11:6f:50:84:62:ac:fa:59:89:
         b8:2f:2d:7a:81:bf:98:5b:95:85:54:9c:ea:9b:7f:3e:8d:56:
         f3:05:4e:b6:83:33:0f:9a:01:ae:df:e5:89:ad:20:6c:fc:84:
         1d:c6:e8:9c:d9:ac:03:df:b8:ed:2a:f6:b0:3e:18:d3:b3:1c:
         c4:c0:f7:60:44:4f:b2:b8:74:ca:8e:1e:92:34:d4:86:7b:54:
         49:32:af:f4:62:61:48:f9:66:f2:dd:6f:1e:85:42:28:6d:b2:
         c0:50:65:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:11:56 2025 by rpki-client