Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File:                     Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier:          lcuOVeFIMJ5xxtzhKlVRWF4e+ibO09kHR9Ic4+y1gSs=
Subject key identifier:   3C:69:4F:59:9C:59:73:A3:4F:C8:81:E1:19:4F:BD:BC:4E:28:4C:15
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer:       /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial:       0197B7B340AD513F4BF8510A228F772E017B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number:          1548
Signing time:             Sat 28 Jun 2025 18:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:07 +0000
Files and hashes:         1: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: Vku7QCkFFXjqPDqaD4BMtNYGH7KTGwkRqSMTJiT4nb0=)
                          2: vICAXNaVi9WpUOInUKGa4x8kVzo.roa (hash: wwadTuvBpX7uW9J+Oei6uXdC+2oxhi7N3s69AlGUoYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:40:ad:51:3f:4b:f8:51:0a:22:8f:77:2e:01:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
        Validity
            Not Before: Jun 28 18:01:07 2025 GMT
            Not After : Jun 29 18:01:07 2025 GMT
        Subject: CN=3c694f599c5973a34fc881e1194fbdbc4e284c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:2c:18:fd:a6:26:3a:40:1a:4c:6c:e4:e4:
                    b5:ee:9e:98:b7:de:9a:04:a6:fd:be:ef:35:0d:a1:
                    a4:1c:1d:32:6a:03:05:f7:e9:15:e6:0c:2e:84:45:
                    0f:4c:64:95:12:4f:d8:a3:98:fd:85:fe:a5:4d:ce:
                    d6:92:a9:76:90:4d:76:b7:4e:c8:44:b9:72:ab:f5:
                    b7:5f:ae:ed:d4:d2:65:35:a3:dd:68:02:bc:f1:8d:
                    e2:bc:72:72:5e:e1:34:57:f4:3a:d7:5e:73:0e:78:
                    5b:22:51:c8:30:9b:55:4f:ba:fb:76:6e:29:7b:a2:
                    f0:38:60:7b:e3:cf:cd:9b:14:37:b2:0b:f3:07:71:
                    da:02:6a:11:2e:f1:52:93:7a:dc:2d:80:4f:a3:97:
                    9b:53:92:3e:3a:d0:ca:dd:26:9a:18:ea:14:5a:33:
                    44:84:18:9d:c8:a9:4b:44:d4:62:26:bd:e4:b1:5e:
                    4d:ca:79:00:36:7c:ba:b8:85:05:38:45:e2:04:2b:
                    bc:6a:91:1c:3d:2d:f9:df:69:73:a4:b3:7a:ab:e5:
                    e9:c5:cf:3e:ec:62:4b:d8:f9:f6:36:52:a5:ed:e5:
                    6e:7e:5b:08:b9:58:cc:f3:02:50:ba:25:bf:f5:40:
                    e1:09:a2:7d:19:6a:ab:94:13:d5:de:80:8d:73:1e:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:69:4F:59:9C:59:73:A3:4F:C8:81:E1:19:4F:BD:BC:4E:28:4C:15
            X509v3 Authority Key Identifier:
                keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2a:09:92:d8:a0:34:cd:84:2d:97:d9:32:bb:35:fb:c8:61:
         e5:a6:04:a2:5d:82:c0:a7:2d:ab:cd:8e:71:77:48:c9:44:12:
         f8:75:a4:b9:7c:03:e6:50:a1:39:7f:58:97:cf:80:74:46:7e:
         30:4e:e5:c9:bf:d7:8c:34:10:a7:c3:b2:ef:58:0d:bc:17:bb:
         0d:46:60:20:2e:6b:e1:6c:a1:0e:0a:6d:3a:d0:47:5b:97:db:
         98:61:54:12:45:bd:c9:2f:5f:72:9f:93:fe:2c:03:e4:a3:56:
         27:31:5f:45:0c:13:ef:3d:bf:31:22:20:81:a7:33:5e:de:cb:
         00:89:1b:b6:bb:f1:42:9e:7f:15:1f:58:cd:76:7f:ad:b5:bd:
         f8:5d:86:7b:14:a7:be:94:49:99:49:37:23:21:f4:68:e5:62:
         34:f7:a9:4d:bf:58:31:ab:ab:8b:ea:67:2b:2f:b9:3b:a6:7b:
         53:36:a2:0a:c8:cd:cf:14:4f:18:1d:65:0a:01:e2:da:67:b2:
         89:04:48:6c:af:71:e2:c6:e7:fc:bb:f3:28:b6:04:5b:34:f9:
         07:b0:a3:b0:1f:93:31:95:48:a3:60:48:8e:f5:ef:23:02:48:
         9f:ed:50:3d:63:4a:9d:27:db:f6:7a:97:99:3e:e7:11:86:cf:
         49:d1:55:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:19 2025 by rpki-client