Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File:                     Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier:          IGvQgfJoeibaFyOSgkn059sQmNZr6s+ca5JVnKpd7bg=
Subject key identifier:   78:C1:A9:4A:A1:84:3C:B5:C8:B3:0D:39:A5:78:55:59:C0:75:DB:AD
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer:       /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial:       019687A4484A2E62D4A0522C6EC2924C1B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number:          1518
Signing time:             Wed 30 Apr 2025 17:00:12 +0000
Manifest this update:     Wed 30 Apr 2025 17:00:12 +0000
Manifest next update:     Thu 01 May 2025 17:00:12 +0000
Files and hashes:         1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: SXdiUFHyh8F3StiFwe767yYjq2h+E+5EuGiRzOpr1Oo=)
                          2: bhq2oKJsXiAPmHmxil5SZXJs2hk.roa (hash: y1Ce6WtfvZHZo4j+/NRj6oK2WGjHyCLTganiUlBZ6fg=)
                          3: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (hash: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 17:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:a4:48:4a:2e:62:d4:a0:52:2c:6e:c2:92:4c:1b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
        Validity
            Not Before: Apr 30 17:00:12 2025 GMT
            Not After : May  1 17:00:12 2025 GMT
        Subject: CN=78c1a94aa1843cb5c8b30d39a5785559c075dbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:67:3a:c5:f7:0b:11:e8:2e:1e:83:e6:9d:
                    2c:0a:b9:19:ca:8f:bd:f1:e1:8e:df:58:3b:bd:e5:
                    57:bf:32:5f:0c:48:f1:f1:72:40:2d:15:c3:c7:db:
                    4e:d3:f0:a8:87:f8:12:73:b2:d5:1c:e6:f1:f3:a5:
                    c1:08:09:ed:10:37:ce:b3:96:cd:92:f6:56:9f:e3:
                    65:ab:b2:47:39:0a:9f:b0:9b:95:5d:2c:d5:99:f8:
                    bc:f3:1e:6b:14:6d:be:c2:69:70:4e:e8:83:d6:85:
                    1e:47:38:59:c6:2c:d0:8d:10:4c:9d:35:9e:ae:fd:
                    21:26:8c:c8:61:1d:ae:25:41:15:0c:dc:6e:39:5b:
                    55:f4:68:69:c1:04:d2:3f:32:fd:a8:d2:3f:0e:ee:
                    fd:61:19:e5:20:c1:fa:6e:26:be:f0:93:43:c3:31:
                    40:41:9d:52:aa:16:03:cd:0f:c2:ac:25:98:ec:5b:
                    c6:a4:4b:4f:17:ec:f9:5d:4a:fa:a6:33:da:ff:74:
                    8e:44:99:b3:fc:8e:fb:bd:b2:fc:17:b1:96:1a:1f:
                    20:9a:a5:be:02:93:cf:d7:91:00:45:8d:43:c3:77:
                    7f:0a:d9:94:17:9c:53:34:91:fd:d7:ec:be:a8:84:
                    91:7e:fc:69:75:1f:25:15:3d:56:c2:96:a6:18:fd:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:A9:4A:A1:84:3C:B5:C8:B3:0D:39:A5:78:55:59:C0:75:DB:AD
            X509v3 Authority Key Identifier:
                keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2c:07:c7:53:16:7b:07:6a:1d:59:b3:b4:ca:00:6a:8e:95:
         f6:42:61:ae:34:77:12:25:27:1e:43:41:79:ce:36:e1:bb:04:
         27:12:21:47:dd:b8:be:04:7a:74:43:35:ea:91:ae:f0:91:64:
         c2:c4:d3:25:8a:31:4e:0c:f2:dd:a8:19:12:98:c5:84:5b:c3:
         3a:93:22:9a:75:d7:70:43:c6:cd:d2:3d:0c:2f:de:d9:8b:44:
         2f:e8:4d:85:42:62:ee:fe:bd:2c:f0:d1:41:31:0b:2e:c5:f0:
         81:f4:55:64:4d:28:71:ed:7d:da:61:b9:4b:2b:9c:30:bf:e5:
         40:9d:15:16:3a:8b:31:6f:15:33:c6:f0:72:5d:ab:99:e6:8b:
         0e:1d:75:9b:a6:09:fe:0f:b8:36:14:18:dd:bc:ea:07:00:4b:
         42:81:ee:d7:4e:8c:1f:1a:4e:70:60:4a:a8:5a:37:48:33:36:
         6f:eb:47:cd:ac:b8:82:4f:d9:c7:be:96:af:a0:51:b8:30:bb:
         db:13:d2:08:e5:38:b0:31:47:27:30:6e:f1:d4:82:ea:87:90:
         b0:0d:69:22:8c:dd:d5:1b:1d:3b:76:7c:c1:7a:9a:5b:95:23:
         7c:b2:90:6a:a7:ec:d0:9e:71:31:59:05:9b:56:92:e7:15:c6:
         86:de:30:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:34:39 2025 by rpki-client