Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
File:                     Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft (raw, json)
Hash identifier:          /KBoMnmog8TWiBqy6qcXQeShLiPn+c/nIgO5Jk1ZdTk=
Subject key identifier:   63:4F:D1:F5:43:5F:A3:C6:72:8C:F9:FB:71:68:FE:50:0A:FA:35:FC
Authority key identifier: 66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30
Certificate issuer:       /CN=66ec789976d3b584016cac19f34bbede966cd230
Certificate serial:       0196BC004C855780ABABDD85818557C5532B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
Manifest number:          1534
Signing time:             Sat 10 May 2025 21:00:58 +0000
Manifest this update:     Sat 10 May 2025 21:00:58 +0000
Manifest next update:     Sun 11 May 2025 21:00:58 +0000
Files and hashes:         1: 1KzANFt0aPj0q7oH7exbtu-amXU.roa (hash: mW2duFDxzUlFHO8La7Ej6q1lO3QaO9KQzC0XOixRqPM=)
                          2: Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl (hash: mrDOb6P4bpsxFUO9/k3vuG/SAhQNdf+AQS9+/2/A6vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 14:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:4c:85:57:80:ab:ab:dd:85:81:85:57:c5:53:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ec789976d3b584016cac19f34bbede966cd230
        Validity
            Not Before: May 10 21:00:58 2025 GMT
            Not After : May 11 21:00:58 2025 GMT
        Subject: CN=634fd1f5435fa3c6728cf9fb7168fe500afa35fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:03:3b:91:a4:d5:1f:50:a4:87:72:51:3b:
                    6f:00:47:53:0c:ac:e1:14:4f:cc:21:fb:1d:60:4b:
                    51:f9:08:78:7a:b8:96:d0:0b:8f:12:a2:2e:11:12:
                    48:f0:b5:59:cb:09:44:02:82:65:d7:db:59:48:c0:
                    71:6d:3a:77:0d:ec:09:c9:4b:3f:f7:f7:ee:c4:9e:
                    cd:e4:21:e9:af:ca:93:1a:9f:cd:c8:15:9e:75:ca:
                    69:a4:27:28:e8:dc:da:45:8b:48:e3:20:96:02:5e:
                    2d:fe:55:c1:15:d5:e0:31:34:c1:ce:04:c3:1e:19:
                    f5:88:54:a8:ab:0f:6d:af:a8:d5:20:6c:64:c4:59:
                    5a:f3:0e:31:a2:9c:7b:a7:38:eb:01:28:e4:28:bc:
                    f2:38:b9:71:45:b4:7b:58:63:7e:87:f2:a3:29:5f:
                    25:bd:8d:55:ad:29:97:17:ad:d1:52:53:22:bb:93:
                    20:70:dc:d1:0a:a0:1a:79:58:d1:cf:5b:30:6a:68:
                    2d:90:7d:d0:fc:0a:df:20:e9:16:9a:bf:10:e2:c9:
                    73:13:a2:7b:27:41:f0:92:8e:39:1b:43:90:39:58:
                    91:cc:41:af:9e:06:e2:62:47:3b:ed:58:4b:56:79:
                    26:06:7e:07:eb:a3:c2:5c:0e:64:12:07:33:21:02:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4F:D1:F5:43:5F:A3:C6:72:8C:F9:FB:71:68:FE:50:0A:FA:35:FC
            X509v3 Authority Key Identifier:
                keyid:66:EC:78:99:76:D3:B5:84:01:6C:AC:19:F3:4B:BE:DE:96:6C:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zux4mXbTtYQBbKwZ80u-3pZs0jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/07bf5b-0340-434e-a444-f0761e29e6c4/1/Zux4mXbTtYQBbKwZ80u-3pZs0jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:90:f6:62:d6:66:b0:d3:35:a8:8f:86:8d:07:46:1e:b4:3e:
         96:ba:51:39:33:2d:c2:21:db:c0:e2:25:6a:ac:ce:98:c2:47:
         69:dd:9c:b0:3d:29:e6:2a:be:d4:a2:d5:74:91:f9:07:32:76:
         23:a0:9c:8f:34:e7:2e:3b:b9:fb:db:c4:3f:a8:f1:1f:73:e0:
         28:ed:9c:51:c0:30:b3:fb:d8:25:e7:e8:42:bd:4e:87:6a:b0:
         c9:1e:14:ff:a2:a1:42:38:e8:06:5c:ec:93:62:b6:2b:3a:0c:
         b7:47:1f:8d:ad:9d:7a:32:c2:64:94:f4:71:e0:e4:fe:ed:e7:
         86:3b:f1:d6:39:93:12:fb:70:50:9f:97:95:f9:ea:ef:a1:df:
         22:0b:08:83:6d:bd:c5:89:ea:6b:e1:9e:5c:2f:e4:ec:3e:81:
         3f:67:9f:86:28:29:5d:f9:5e:d1:29:77:d2:4b:de:a7:58:e2:
         4e:bf:2e:67:39:7b:5e:bc:1e:50:fb:21:03:90:15:7c:9d:31:
         86:1c:e7:91:78:70:3e:2d:41:3d:13:c0:97:2d:be:7b:bf:c4:
         21:b3:3f:73:34:19:f6:67:10:a0:3b:9a:aa:aa:57:3d:61:f5:
         6a:43:22:c8:12:34:32:d8:3b:59:ef:21:f7:18:53:f6:7e:1b:
         c5:51:1f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:27:15 2025 by rpki-client