Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File:                     Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier:          f0DBXiOPDdfIEbhDqpqN9wzleZzSdk72V5JHXtoifbg=
Subject key identifier:   AD:64:92:EA:18:38:59:E5:BA:A4:9E:27:34:15:EB:04:B5:FD:13:16
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer:       /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial:       01976884F2A19E0E02904AEFFAEE35BC43A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number:          1591
Signing time:             Fri 13 Jun 2025 09:00:32 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:32 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:32 +0000
Files and hashes:         1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: Pu4qUD6wlPU3+Y3fkVD+rGO9ofkdi4Zd6LCJjZKcFy8=)
                          2: kwXk5lchLSQusIqWIc1_LElpPmw.roa (hash: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:84:f2:a1:9e:0e:02:90:4a:ef:fa:ee:35:bc:43:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
        Validity
            Not Before: Jun 13 09:00:32 2025 GMT
            Not After : Jun 14 09:00:32 2025 GMT
        Subject: CN=ad6492ea183859e5baa49e273415eb04b5fd1316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:9e:9f:b2:c2:49:3c:e1:32:14:43:ae:15:
                    b4:03:7b:82:3e:98:57:e7:9b:c4:30:86:73:ed:fe:
                    af:ad:7b:52:8e:4f:f8:40:7d:4b:12:32:bb:69:d3:
                    c8:b0:a4:e5:66:5b:12:e9:67:67:5e:bd:47:3f:7b:
                    e0:63:32:47:17:fa:86:a8:21:c7:0a:31:2f:82:a0:
                    55:cf:26:df:af:31:ee:d5:46:bc:41:f9:6f:54:8b:
                    18:f5:ac:d7:e0:64:45:78:94:97:24:2a:10:30:b2:
                    7b:f2:f6:15:c1:3c:88:2a:0f:5a:f1:2b:45:3b:b0:
                    f3:29:7e:63:99:25:6f:1e:1f:d0:65:a1:9f:36:22:
                    ee:c9:69:f7:fc:b4:70:ce:9c:36:e3:d0:da:fc:ee:
                    43:29:ad:f3:1b:2f:da:7e:b6:ac:e3:88:12:f7:4d:
                    7e:fe:78:18:45:f9:59:06:49:43:11:f1:1f:73:7e:
                    da:0c:0f:44:5e:cc:bc:03:dd:a2:ce:c4:5c:74:87:
                    90:8b:18:33:61:1a:9e:2d:3a:d0:cd:a5:1f:e0:28:
                    14:73:5b:fa:00:42:15:7c:2f:9f:c3:dd:25:c3:5a:
                    16:3f:e5:2b:62:e8:67:d7:11:d2:a6:26:a2:48:10:
                    95:f3:26:72:cc:76:f6:59:b9:ee:b6:4e:ed:f2:d3:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:64:92:EA:18:38:59:E5:BA:A4:9E:27:34:15:EB:04:B5:FD:13:16
            X509v3 Authority Key Identifier:
                keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:78:3d:c6:6b:ba:79:20:51:1e:40:40:eb:8c:55:30:76:65:
         15:ad:1a:ba:8c:ef:93:6f:38:a6:ea:10:25:de:82:0f:65:76:
         d2:38:4c:ef:75:c8:db:00:50:69:d6:70:a6:aa:f0:38:99:85:
         82:79:44:d1:a5:d0:a8:9f:d8:60:aa:1f:80:c7:3b:96:c5:04:
         8e:3f:a7:72:49:7f:73:71:d6:4c:e1:aa:92:e9:08:94:ad:d6:
         75:c5:6b:85:24:8a:99:32:dc:be:88:cc:1e:db:ea:1f:eb:07:
         77:3d:3d:c8:b9:81:92:10:19:8b:dc:e5:59:b9:98:8a:ab:86:
         fa:71:33:c6:87:17:9e:0d:35:6b:a5:3c:1a:a4:e2:ab:19:f1:
         6c:7b:e8:dc:d5:3a:5e:73:fc:5b:62:ef:e4:7c:d7:7b:e0:7b:
         b0:4c:8d:4c:d6:64:12:cb:df:f6:ae:8a:96:19:af:6b:b6:98:
         60:68:22:ca:50:0e:2a:0b:51:be:8a:66:82:ef:51:b2:e1:68:
         12:d7:d0:d6:3d:67:d9:f6:3d:90:28:0e:54:f0:0b:02:1e:65:
         dc:6e:2e:5b:cb:4d:b4:b1:09:fe:23:39:4b:ed:af:c3:ec:7f:
         7a:93:e8:ed:60:39:ec:e6:83:5d:cd:e3:c3:1d:82:44:1d:a2:
         41:0a:38:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:27 2025 by rpki-client