Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
File:                     zeKPHxgJm6vwoZCIvqNboITskpc.mft (raw, json)
Hash identifier:          QINDIIkG3n++O/B4zRaogDf5SKSt6qOMkGhW+a+ZZMQ=
Subject key identifier:   2B:5F:DA:58:57:2C:4D:FE:7D:7E:2A:7B:F6:16:08:25:DC:8D:E4:74
Authority key identifier: CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
Certificate issuer:       /CN=cde28f1f18099babf0a19088bea35ba084ec9297
Certificate serial:       01976D3E80BF4AEF08494B570BAD6213AF03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
Manifest number:          0D83
Signing time:             Sat 14 Jun 2025 07:01:42 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:42 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:42 +0000
Files and hashes:         1: tODsj4wJmlLizDhD4zx5X4Q0kBs.roa (hash: 8ot7Ptkdu5uwMXdssVMoEe9aK4JBYnjK0TXriR+RS5I=)
                          2: zeKPHxgJm6vwoZCIvqNboITskpc.crl (hash: HR4EnJGUJfrNlFALvdDY1J9xpKXj2ddR+b1IgtFRJgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:80:bf:4a:ef:08:49:4b:57:0b:ad:62:13:af:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cde28f1f18099babf0a19088bea35ba084ec9297
        Validity
            Not Before: Jun 14 07:01:42 2025 GMT
            Not After : Jun 15 07:01:42 2025 GMT
        Subject: CN=2b5fda58572c4dfe7d7e2a7bf6160825dc8de474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6e:25:3d:3f:05:f0:32:35:ce:74:18:77:0e:
                    49:3d:e8:35:4a:1a:98:8a:e2:b3:38:75:02:3f:3e:
                    64:ae:79:76:8a:ff:9c:ed:98:d8:a2:ad:32:10:4b:
                    c1:8f:54:26:c5:b3:b9:bd:1b:32:f6:1c:e2:72:0e:
                    a5:f3:c5:56:a1:69:ab:55:4b:ad:82:20:0c:24:8e:
                    18:6d:62:19:6c:91:c9:68:0c:7c:12:09:f6:ed:0e:
                    8c:af:03:c4:50:2d:88:b0:b9:3b:80:82:fb:ee:5a:
                    a6:b9:0b:61:a3:41:43:83:b2:88:97:85:7b:83:d1:
                    f4:9a:15:e9:5a:27:63:c1:36:e0:b2:62:83:6f:b8:
                    41:e1:92:c4:f8:f4:2f:2b:48:d9:77:89:45:77:57:
                    d4:db:b6:e3:49:9f:b2:f0:e5:4a:24:27:3a:9b:4d:
                    15:60:7a:46:ea:16:a0:44:1b:f8:e6:c9:f8:5b:d0:
                    15:0e:30:93:83:71:37:71:64:a6:38:80:06:91:c3:
                    ea:01:1a:6d:33:a5:39:5e:a3:a4:c7:19:7c:11:d7:
                    d3:46:df:f0:4f:1b:fd:2d:77:2a:ad:94:52:03:04:
                    a0:e3:25:a7:9d:33:21:a5:c5:a8:b6:09:64:da:5b:
                    55:13:fd:a9:cc:21:5d:55:db:bb:18:d3:2d:26:ad:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5F:DA:58:57:2C:4D:FE:7D:7E:2A:7B:F6:16:08:25:DC:8D:E4:74
            X509v3 Authority Key Identifier:
                keyid:CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5e:43:b1:cf:19:a7:d7:3a:ea:a2:dd:59:a4:8f:b5:36:5f:
         b7:af:9d:e7:5d:07:f7:ff:9a:53:57:69:e7:09:4e:63:98:fd:
         c7:0c:b5:65:d2:eb:a3:2d:87:95:55:19:9a:22:ff:29:ff:03:
         c2:b1:9a:ed:10:aa:09:69:6b:83:40:87:bc:17:16:2c:c2:ad:
         b0:ab:b1:16:48:8f:ea:26:c1:5d:f8:bc:58:ae:46:94:72:3b:
         08:f2:d6:fb:7f:89:b5:eb:11:62:4c:7c:00:0a:5c:36:32:b1:
         cb:18:1b:bc:da:70:2b:45:2f:0b:ea:80:5a:26:e5:a2:10:72:
         92:58:dc:4c:4f:5a:2d:a5:31:52:06:a0:24:75:11:37:8f:3f:
         ab:9f:0d:79:c6:71:23:80:bf:25:fe:01:25:48:2f:b4:2b:4e:
         0f:dd:6a:69:df:13:cb:8b:00:80:49:58:64:3d:bd:36:17:20:
         72:f8:ef:5a:c1:e5:fb:cd:69:8e:bf:b0:0b:da:83:ba:23:ed:
         02:b5:0d:45:84:28:8f:99:a1:f5:6a:79:0d:4e:ab:1d:00:b6:
         3f:ac:f3:5e:fa:c1:8c:33:e0:7f:e3:f3:04:87:cd:6d:e2:2d:
         d6:f0:fe:ed:ea:e1:6e:74:68:62:f5:c7:7f:ad:89:68:0a:df:
         e0:45:3c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:47 2025 by rpki-client