Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          eqQ4mDrPJsLINs8/ueKN2/nv1cPZaKzHU/sDwE0OI1g=
Subject key identifier:   2B:0E:1F:89:5A:EC:71:F3:8D:BF:85:26:C2:C1:CD:ED:26:E4:E2:19
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       0196B8233A622C4F04788CC1990F6512C034
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          0575
Signing time:             Sat 10 May 2025 03:00:38 +0000
Manifest this update:     Sat 10 May 2025 03:00:38 +0000
Manifest next update:     Sun 11 May 2025 03:00:38 +0000
Files and hashes:         1: M-hl5kfxem0FvK73oMF7geibFPw.roa (hash: kiasuv7TGgsqASbNQOaoav2Adv17JAVzsKrjP2y4W90=)
                          2: MR2SpvAg6EKH9P9IdFI47Bp2qbY.roa (hash: bCpvV1/uI5x/Oj1Nb1ZTA1IC/FEWUDBDGVun6QLD8Vw=)
                          3: cFotkS6ux0_MLeGzyK_DeWIUeaM.roa (hash: 4CuT/CFbyV2w8Qh8mF53vlpw9DoBWeAo/yfxDDSS1VE=)
                          4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: czycuC0rbBc4OXh3Un5Ely9hwYWIlSyQwyfBSrTcdas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:23:3a:62:2c:4f:04:78:8c:c1:99:0f:65:12:c0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: May 10 03:00:38 2025 GMT
            Not After : May 11 03:00:38 2025 GMT
        Subject: CN=2b0e1f895aec71f38dbf8526c2c1cded26e4e219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:99:7c:66:36:ac:90:31:e0:ec:83:be:20:5f:
                    fd:e0:f7:21:2e:d9:4f:80:10:00:df:56:2a:a5:fb:
                    3c:60:1d:10:70:6d:26:bb:e6:a1:cf:ae:0d:bf:2b:
                    ac:70:c0:4d:a8:37:44:6d:9e:17:4f:b0:e1:be:5c:
                    ff:cd:96:9c:e2:d3:d8:4b:9f:bb:c4:d8:73:76:a1:
                    cc:87:a9:38:7e:bb:ac:05:7e:07:05:b4:57:33:e6:
                    0a:d9:ec:35:04:5c:d2:62:4e:e9:aa:95:68:80:3b:
                    2e:d3:92:a6:8e:98:f0:76:af:5b:9d:05:25:5b:a1:
                    17:5b:d5:06:f0:2d:e3:5f:2b:55:27:dd:70:f0:05:
                    5d:cb:a4:85:d4:95:25:2b:3b:6e:a4:d0:a5:61:03:
                    1c:76:8d:95:00:1c:4a:14:01:fc:37:a3:54:aa:df:
                    7f:2b:f8:8d:3a:c4:f1:ef:86:b4:54:d9:1f:dc:b8:
                    19:44:39:9e:7c:13:9f:28:bf:22:8a:ec:c4:5c:88:
                    28:16:c4:c6:29:d1:73:aa:f5:12:96:dd:27:bf:2f:
                    1d:d7:5e:c8:20:4e:83:c3:70:bc:77:da:50:b3:3e:
                    eb:df:98:b9:55:5d:39:ec:5e:cf:73:2b:95:8a:6a:
                    30:09:19:26:95:30:d5:d5:46:6e:a5:66:74:b8:86:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0E:1F:89:5A:EC:71:F3:8D:BF:85:26:C2:C1:CD:ED:26:E4:E2:19
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bc:f7:ec:32:76:a1:83:1b:57:22:12:4b:4f:a2:85:2b:01:
         b1:b0:00:df:6f:58:89:bc:98:7a:43:94:4d:1f:bc:9e:d0:06:
         6c:3b:a5:a0:da:bf:10:0d:b2:0e:0c:8b:a4:e1:a1:d0:ba:c0:
         3a:35:64:83:27:2d:7b:0a:25:91:1a:9d:3c:e5:71:15:96:2f:
         ca:5a:79:82:20:cb:c1:25:e1:d0:ae:2f:59:da:5d:8e:70:81:
         b4:59:69:95:26:f5:eb:a0:b2:ad:b9:d6:8e:b7:73:20:67:54:
         b0:27:26:1d:b7:5b:67:79:cd:ae:53:1a:cf:76:c4:58:3d:2b:
         3c:5d:17:79:a0:57:71:74:7f:9f:ce:68:10:30:4e:5b:dc:85:
         6d:b3:4d:c3:1e:ef:e5:e2:f9:eb:dc:c1:c0:a8:be:1f:4b:c9:
         26:c9:64:9e:8c:44:0f:f9:e3:0c:76:bb:19:04:73:4a:97:1b:
         41:97:29:a6:3c:07:59:a6:68:54:5c:e8:dd:ad:96:98:3c:48:
         12:6d:99:be:dc:ce:79:94:5a:66:28:41:af:62:25:cd:4d:5c:
         3e:e8:46:63:d2:f1:f8:63:88:0d:f9:19:52:f6:ca:b3:49:dd:
         e3:ed:00:d2:da:3e:81:68:6f:28:c9:ed:d2:b9:3c:6e:b0:1c:
         3e:fb:48:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4IzpiLE8EeIzBmQ9lEsA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlN2NhY2ZhNzM1Y2VlYWZkZDJhMjE0YzA5ZWU3MjQ2OTQy
NTI1MGUwHhcNMjUwNTEwMDMwMDM4WhcNMjUwNTExMDMwMDM4WjAzMTEwLwYDVQQD
EygyYjBlMWY4OTVhZWM3MWYzOGRiZjg1MjZjMmMxY2RlZDI2ZTRlMjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZl8ZjaskDHg7IO+IF/94PchLtlP
gBAA31Yqpfs8YB0QcG0mu+ahz64NvyuscMBNqDdEbZ4XT7Dhvlz/zZac4tPYS5+7
xNhzdqHMh6k4frusBX4HBbRXM+YK2ew1BFzSYk7pqpVogDsu05Kmjpjwdq9bnQUl
W6EXW9UG8C3jXytVJ91w8AVdy6SF1JUlKztupNClYQMcdo2VABxKFAH8N6NUqt9/
K/iNOsTx74a0VNkf3LgZRDmefBOfKL8iiuzEXIgoFsTGKdFzqvUSlt0nvy8d117I
IE6Dw3C8d9pQsz7r35i5VV057F7PcyuVimowCRkmlTDV1UZupWZ0uIaUmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsOH4la7HHzjb+FJsLBze0m5OIZMB8GA1UdIwQY
MBaAFM58rPpzXO6v3SohTAnuckaUJSUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYt
Yjg0ZWRhMmU4NDZhLzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hNjM2ZWQtZDIwZi00ODAyLTkyODYtYjg0ZWRhMmU4NDZh
LzEvem55cy1uTmM3cV9kS2lGTUNlNXlScFFsSlE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrz37DJ2
oYMbVyISS0+ihSsBsbAA329YibyYekOUTR+8ntAGbDuloNq/EA2yDgyLpOGh0LrA
OjVkgyctewolkRqdPOVxFZYvylp5giDLwSXh0K4vWdpdjnCBtFlplSb166CyrbnW
jrdzIGdUsCcmHbdbZ3nNrlMaz3bEWD0rPF0XeaBXcXR/n85oEDBOW9yFbbNNwx7v
5eL569zBwKi+H0vJJslknoxED/njDHa7GQRzSpcbQZcppjwHWaZoVFzo3a2WmDxI
Em2ZvtzOeZRaZihBr2IlzU1cPuhGY9Lx+GOIDfkZUvbKs0nd4+0A0to+gWhvKMnt
0rk8brAcPvtIXw==
-----END CERTIFICATE-----
Generated at Sat May 10 10:28:05 2025 by rpki-client