Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          j40zgog9u2E7bcYiZT/dh9Yk/W/v2DZxO3R+pbXg5qk=
Subject key identifier:   58:AE:A4:6A:43:0C:99:8D:CC:6A:88:DA:B8:65:F1:4E:A8:6B:6F:19
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       0196C26FD414751FFD60D25202EEA019130A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          0D2A
Signing time:             Mon 12 May 2025 03:00:30 +0000
Manifest this update:     Mon 12 May 2025 03:00:30 +0000
Manifest next update:     Tue 13 May 2025 03:00:30 +0000
Files and hashes:         1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=)
                          2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=)
                          3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: 34D3Wab2oBUY2HnNTY9GQ97Y+Rq+P0gEFe/4gBKiLn0=)
                          4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=)
                          5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:6f:d4:14:75:1f:fd:60:d2:52:02:ee:a0:19:13:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: May 12 03:00:30 2025 GMT
            Not After : May 13 03:00:30 2025 GMT
        Subject: CN=58aea46a430c998dcc6a88dab865f14ea86b6f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:31:dc:4d:73:24:4d:fd:dc:63:73:d5:75:
                    a4:6c:2e:22:01:df:37:0e:e6:18:ca:4b:ed:58:02:
                    9b:04:cc:16:e9:fb:84:ec:11:2d:f4:02:ba:52:3c:
                    39:66:8f:4b:03:33:88:73:3e:46:18:4c:76:f9:08:
                    62:f1:b4:68:2b:3f:6e:61:ab:84:fb:f8:50:61:ad:
                    c6:13:f0:96:7c:6f:21:0e:bc:ba:7c:50:25:ad:e2:
                    52:55:42:a7:1f:9b:78:14:23:c2:88:34:17:0e:d1:
                    64:ff:2c:32:c7:7f:e4:ed:b8:ba:0e:ea:e3:9d:92:
                    0c:8f:55:58:fe:cc:2d:8f:af:04:d2:6f:0c:c3:b7:
                    2b:a2:0c:61:5b:03:84:84:9e:47:32:01:06:19:22:
                    b4:9a:e9:86:1a:62:37:6f:bf:84:02:bd:04:76:74:
                    3e:75:c4:b2:ff:ab:53:5b:49:da:e7:82:5d:7a:90:
                    0d:f1:cc:1c:17:c3:be:8d:8c:65:ff:c1:c4:51:b2:
                    63:67:24:43:e2:ad:c7:64:d4:80:0e:cc:b3:93:0a:
                    be:86:15:25:83:65:32:55:f2:76:00:61:aa:1d:54:
                    53:e4:10:cf:46:e6:3a:ab:2d:5f:a0:ca:c9:1d:91:
                    18:ec:69:e0:d9:39:83:5b:c0:1d:c6:48:ec:ca:a3:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AE:A4:6A:43:0C:99:8D:CC:6A:88:DA:B8:65:F1:4E:A8:6B:6F:19
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:68:47:e2:70:93:98:92:f0:6b:cc:c4:22:de:b7:59:f0:c6:
         20:a8:37:62:f7:19:a1:ec:56:f3:2a:e3:21:05:3b:ff:8e:1e:
         7b:bb:01:ac:81:92:33:ed:d4:3c:b5:5e:5d:c4:0f:4c:15:a6:
         38:5a:67:16:a2:90:f9:70:58:5a:43:98:70:91:ce:dd:ef:91:
         b0:72:1d:0a:46:0b:d6:39:59:8a:7b:82:aa:c9:ea:5f:d4:d9:
         97:f3:db:53:21:2c:6b:ac:0d:03:ac:cd:f2:62:47:20:3a:3f:
         e4:88:7f:8c:44:a4:96:29:53:07:16:8b:14:97:cd:01:e7:fc:
         32:10:32:43:dc:ad:f9:e9:99:00:7b:39:4b:67:f6:a8:a4:45:
         93:b3:20:29:40:1d:e2:92:e5:71:fc:15:5d:47:7e:fd:51:c5:
         10:cf:ea:ac:40:71:2c:d0:06:dc:20:43:2b:5c:61:ce:a2:88:
         7d:63:69:13:b0:05:46:55:f6:a8:e2:d3:40:f9:6b:c8:ef:17:
         aa:19:87:b0:d5:3e:3f:29:d9:38:3b:9a:88:78:0c:9a:02:af:
         85:40:7c:fb:e2:56:ad:fa:a6:67:f7:fd:fc:a0:c4:69:a5:8d:
         43:97:0a:4d:c8:53:77:8a:ca:95:20:15:81:c7:61:8c:ec:b7:
         02:70:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:52:38 2025 by rpki-client