Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
File:                     zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft (raw, json)
Hash identifier:          7mDuTO1hg2wEOGFONDZykqlbEVrRniSrWU35WKfGxQ8=
Subject key identifier:   CB:28:88:B2:2F:77:4F:A3:86:BE:B9:D2:8E:3E:50:56:DD:96:01:ED
Authority key identifier: CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6
Certificate issuer:       /CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
Certificate serial:       019768BC4F0C4C4A842C4209EA9B3BE08E3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
Manifest number:          88
Signing time:             Fri 13 Jun 2025 10:01:00 +0000
Manifest this update:     Fri 13 Jun 2025 10:01:00 +0000
Manifest next update:     Sat 14 Jun 2025 10:01:00 +0000
Files and hashes:         1: 157MYG0IejEjRYj-j1k-QApt6pw.roa (hash: /mAnw2Tqo4MtXrtGStA4rPK8XkvjiW+Q+8q7MR/8qbg=)
                          2: zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl (hash: Rl9JPBp2NBe+2oexnzU7ZOSfNu1ZC/FcFv5H2kSBnF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:4f:0c:4c:4a:84:2c:42:09:ea:9b:3b:e0:8e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce2bcc10d16b0fed2855e9295fc409d6507b43d6
        Validity
            Not Before: Jun 13 10:01:00 2025 GMT
            Not After : Jun 14 10:01:00 2025 GMT
        Subject: CN=cb2888b22f774fa386beb9d28e3e5056dd9601ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:32:8e:91:45:1a:c1:6b:5b:ac:21:90:77:
                    1d:24:95:ee:3e:c6:ba:52:ed:34:92:36:76:9c:86:
                    37:18:4b:9a:cd:2a:4a:f0:4a:2b:23:de:d5:e8:09:
                    d3:33:cb:1b:00:3e:cf:90:0f:fc:85:39:d8:7f:df:
                    4b:62:a0:86:67:dd:53:8b:85:90:9a:ca:e5:4f:a9:
                    c6:c3:ad:a0:02:5e:cd:9e:dc:1b:4d:8a:49:92:6d:
                    b8:38:f0:39:5c:7e:12:e6:25:74:aa:a3:1d:26:49:
                    d1:44:2d:9e:4f:ee:02:c9:c9:cb:8b:d2:1b:81:46:
                    44:01:4d:b2:b6:e2:10:62:ae:70:04:57:29:15:bf:
                    db:e8:e7:7b:4b:28:52:97:ed:4d:21:be:5c:bd:0e:
                    a7:dc:67:36:ef:aa:a0:de:12:41:ef:25:73:a5:70:
                    75:5b:2e:2d:5a:d4:b8:95:92:c5:cb:12:f1:90:f9:
                    ae:4c:4b:93:ac:7e:5d:06:93:e4:03:46:7e:c9:8d:
                    33:d1:21:1c:2d:5a:c1:cd:db:e6:c4:70:85:2e:8b:
                    ab:53:cc:a4:29:19:86:40:32:49:cb:de:6f:db:a8:
                    c0:67:f2:64:8e:5e:21:a3:3f:cd:c0:6f:1b:e8:d9:
                    ce:4f:29:ec:73:35:97:e4:f7:8d:af:e1:96:8c:b1:
                    d8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:28:88:B2:2F:77:4F:A3:86:BE:B9:D2:8E:3E:50:56:DD:96:01:ED
            X509v3 Authority Key Identifier:
                keyid:CE:2B:CC:10:D1:6B:0F:ED:28:55:E9:29:5F:C4:09:D6:50:7B:43:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zivMENFrD-0oVekpX8QJ1lB7Q9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df757c-499d-4020-a5c3-61161a65d3d6/1/zivMENFrD-0oVekpX8QJ1lB7Q9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:34:7f:34:0a:08:a3:e0:d3:e5:ad:9b:ef:d3:fc:2c:e4:6b:
         6d:fe:02:7c:95:00:6d:e1:0d:32:87:ea:a8:69:b7:6d:60:80:
         c2:a1:57:b1:cb:c2:1e:79:7b:4d:c5:c8:3d:cb:b7:61:a5:16:
         43:fb:f9:c0:79:f7:f9:e9:ed:16:7b:3f:9a:f9:eb:d0:fb:b8:
         11:9e:ec:ab:35:61:38:e2:14:63:de:37:b7:6a:e5:77:66:37:
         32:29:25:33:79:c9:7f:f7:55:21:a5:f5:40:2b:a7:3b:6a:88:
         b5:43:53:a3:0a:bb:cc:8f:ab:3a:30:6a:23:40:bc:ef:ba:08:
         01:1b:74:87:8d:f4:00:4b:dd:38:06:b9:86:8d:e7:bf:a6:50:
         4e:0e:35:f4:4d:0d:05:6a:b2:40:9d:9e:46:05:46:0b:fc:70:
         93:3c:f9:d0:5c:4c:ae:e0:7f:a1:45:a0:f5:c1:fe:13:de:29:
         fa:bb:47:e0:b7:7e:51:26:bb:f1:8d:3f:a3:13:e1:f1:92:ec:
         e3:5b:43:be:7c:08:b8:8e:af:de:91:e0:45:38:dd:87:0c:6b:
         b8:08:34:62:00:4e:07:f1:eb:41:5b:d4:4b:93:c8:44:4c:98:
         cc:e1:80:0f:b8:18:19:4d:66:3d:65:cc:df:7a:4c:47:f8:f0:
         44:12:34:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:41:51 2025 by rpki-client