Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
File:                     zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json)
Hash identifier:          JZFVWPjP/ir3s1LJJUBDAzk4Cl+vpKT5WltaJpjRxMU=
Subject key identifier:   6C:EF:DF:75:EA:56:C2:13:5C:40:7E:F1:CD:6D:70:7D:95:53:B1:C2
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Certificate issuer:       /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial:       019681A31D161134937D59DC59223AC95D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
Manifest number:          0AB0
Signing time:             Tue 29 Apr 2025 13:01:12 +0000
Manifest this update:     Tue 29 Apr 2025 13:01:12 +0000
Manifest next update:     Wed 30 Apr 2025 13:01:12 +0000
Files and hashes:         1: MkrzUPp2fw2MTxDAyX7xHZLlYbk.roa (hash: slTzkCKMJrVrVLZuZQUzVX464caMJ5HD4oz3QsYxNQY=)
                          2: _2rlTorI9d4EskVB3Q2AELQgntg.roa (hash: MJ/JOjkufW/i3x6kFr8d78WsqqTFtkNpKnXIQ8qokdg=)
                          3: aXdWyB6YGPpk-J46No4vsmKxGCE.roa (hash: TIgYhNRVQ3p/R3gXtf1t15mu2N3p/Mr9E78IoFCU1PY=)
                          4: lTK57WKRl8JHYSn3Me1JiHVYX6c.roa (hash: OsSENyDZ+wkTwyFgI+grH7k0F+jqVnxydXIxiH9U0Ng=)
                          5: oJSpmKHDBTQennb3bFM-AUri38c.roa (hash: gaj/8isA/Vy8LzqeD5fj8KpWVmIYxfupI+6YOWca7WI=)
                          6: yroUuw1scM5vJqw9L2C1NZloBMg.roa (hash: tq+65QQs/oxlmOUT1sm7YA/yaQJk+Rn+QS41OHsKCiw=)
                          7: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: rhnSrwMwV8FiuooAfsJyoWbh8pxxfvu5ckvvm4RyHrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:a3:1d:16:11:34:93:7d:59:dc:59:22:3a:c9:5d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
        Validity
            Not Before: Apr 29 13:01:12 2025 GMT
            Not After : Apr 30 13:01:12 2025 GMT
        Subject: CN=6cefdf75ea56c2135c407ef1cd6d707d9553b1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:4b:a6:c6:5d:04:1e:55:fb:d8:3a:e0:a0:
                    d9:9a:dc:bd:0d:7b:3e:14:15:7e:b4:c1:09:82:7b:
                    43:ab:ac:8d:74:ff:80:14:40:0a:64:50:e5:cc:97:
                    87:fd:30:e0:b9:14:a0:71:d5:71:2d:8e:af:c3:40:
                    0c:45:e9:9a:7d:8c:fd:9e:1e:df:cd:3d:20:e0:d3:
                    77:52:f5:19:75:8e:7a:c1:30:59:9f:09:06:b1:be:
                    3f:a5:d9:41:a6:3b:aa:c9:10:be:21:b1:84:3c:b7:
                    05:af:d4:21:fb:2e:ca:5d:ae:47:2e:88:6b:37:c2:
                    7a:ee:46:54:03:e7:c0:d4:b3:62:95:47:3f:59:4e:
                    e8:da:f4:f1:7f:26:8b:59:6e:ff:7b:f6:59:4b:3e:
                    34:67:8a:b5:de:96:fa:97:35:a7:21:bf:ee:42:29:
                    e9:22:17:e2:bd:cb:a7:dd:e0:2f:3f:d6:97:ff:4c:
                    1f:7d:bd:f4:33:1a:19:2e:63:a3:c0:d0:25:00:58:
                    b5:98:34:de:84:6f:7f:52:f9:16:3e:cf:b4:9d:e5:
                    b8:76:58:39:00:b4:36:ff:aa:02:d8:6e:ce:04:e5:
                    14:9b:5a:2e:7d:79:37:e0:de:64:87:5c:9a:50:f5:
                    d1:54:f0:c8:59:ab:0a:07:16:14:b1:e2:60:8b:79:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EF:DF:75:EA:56:C2:13:5C:40:7E:F1:CD:6D:70:7D:95:53:B1:C2
            X509v3 Authority Key Identifier:
                keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cd:62:60:c2:34:fd:94:6b:35:bc:df:56:49:3f:33:d1:32:
         0b:a8:cf:ef:30:b9:63:fd:4b:a2:f1:9a:13:ad:73:60:da:b0:
         3d:45:08:30:4f:b3:3b:88:f1:09:59:20:09:f2:2d:c3:8b:05:
         4a:9e:5e:7c:15:36:e3:97:f9:90:f8:4a:a5:2d:06:84:6d:5c:
         39:ec:ba:3c:e1:99:52:84:58:82:36:92:61:de:6f:6a:08:e8:
         88:fc:49:0c:d9:e9:52:aa:f0:53:d8:a3:07:95:5c:8d:c4:6f:
         6d:75:ff:57:19:17:81:79:d7:7e:fe:3b:2a:48:4a:4e:95:55:
         c1:e5:35:73:81:88:51:39:7d:45:f3:d6:12:a9:22:e4:88:0f:
         5e:5b:c9:43:0a:ac:d5:36:52:d9:ab:ea:dd:99:c3:53:6f:04:
         4d:06:88:d3:1b:89:8c:76:77:75:8c:80:2a:16:9f:6e:28:27:
         17:22:e5:1d:59:c7:55:49:d3:fb:2c:a1:02:9f:90:03:b9:15:
         e2:9e:b7:6a:c9:e3:96:6f:cb:9b:14:27:47:54:be:fd:2b:b2:
         0d:d0:d8:b2:9f:33:ba:5c:fa:d0:1b:40:f8:cf:22:d6:35:a2:
         20:b1:c2:ff:ed:88:2b:5f:c5:eb:6e:fe:83:51:21:05:2a:e4:
         a9:a5:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:24:52 2025 by rpki-client