Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File:                     ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier:          +PLynBiQ1zTwfqx7BuX/e6XOjz9oYrrBiC9NWYIR/d0=
Subject key identifier:   DF:6D:10:84:3A:CF:14:C6:60:A2:2C:B4:DB:24:1F:C3:B3:54:60:FF
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer:       /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial:       0196BF37E3841A1D00B0D835FB2111637759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number:          06AC
Signing time:             Sun 11 May 2025 12:00:33 +0000
Manifest this update:     Sun 11 May 2025 12:00:33 +0000
Manifest next update:     Mon 12 May 2025 12:00:33 +0000
Files and hashes:         1: OBgfNHwDlYtlqjjhJRFUWeZDTUY.roa (hash: 6sPRuYPKeEviFfVQ52vvMVNq0j09JkQvr2PG17VGRJU=)
                          2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: h8qPYWIWfj2BRTKmDXikUCLPT70YOOxkY11o9w/oMT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:37:e3:84:1a:1d:00:b0:d8:35:fb:21:11:63:77:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
        Validity
            Not Before: May 11 12:00:33 2025 GMT
            Not After : May 12 12:00:33 2025 GMT
        Subject: CN=df6d10843acf14c660a22cb4db241fc3b35460ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:04:9f:3d:76:91:38:fa:4f:f4:7b:b1:8e:
                    ca:98:51:db:a0:de:ec:80:3d:19:bb:ff:ab:1e:32:
                    ad:b4:8a:2c:41:cc:2c:95:b3:64:09:c5:c2:8f:f4:
                    67:d4:e3:e3:ff:9d:bb:ea:d0:02:c5:a5:0a:fa:d8:
                    6b:63:25:42:db:11:fe:de:6e:a9:bc:21:53:a9:d6:
                    55:9c:f4:19:f3:14:54:f6:31:dc:75:73:4d:ff:e9:
                    03:19:fb:d1:e6:79:b5:dd:80:12:91:18:6a:25:ef:
                    78:c7:d3:59:de:c2:f4:e1:77:ad:70:99:5a:f8:ac:
                    7d:80:fc:0f:e2:42:ab:ed:24:e3:86:40:95:b0:0d:
                    ed:3e:0b:ae:62:93:88:1d:78:5a:9f:c0:37:3d:7e:
                    55:8e:7f:cf:c9:29:0f:91:d1:55:93:07:6d:89:b4:
                    ee:b7:6c:b4:ee:01:cf:c6:e2:32:f7:bf:ed:43:d6:
                    ee:9f:fc:db:76:a5:71:01:da:ce:1a:90:ad:1b:c0:
                    ea:15:0f:6c:a7:ab:3d:f2:e2:04:71:0f:75:a1:77:
                    0d:33:70:a3:02:02:7e:5e:92:2f:1b:e6:d5:70:69:
                    40:d1:04:a9:f7:b1:6b:f6:44:f8:28:71:fe:e4:f1:
                    8b:0e:15:b1:19:ee:a1:d6:63:c9:cf:5d:83:01:7a:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6D:10:84:3A:CF:14:C6:60:A2:2C:B4:DB:24:1F:C3:B3:54:60:FF
            X509v3 Authority Key Identifier:
                keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d5:ea:4d:90:e9:c6:52:7f:57:fe:a9:0d:94:cb:bb:f5:6a:
         35:19:f5:f8:99:53:3d:88:df:15:de:53:77:5a:aa:7e:06:0c:
         00:9e:4d:81:86:4a:be:97:f5:96:da:30:ce:e0:59:4a:89:8b:
         45:0f:20:54:86:54:0d:c2:77:41:07:5c:49:5b:e2:73:60:a6:
         ff:b0:0c:fe:bd:fa:38:9b:5d:63:21:ce:c1:c5:06:6c:0a:0b:
         f9:cd:ea:5e:4c:2f:37:c2:fe:8a:5e:62:c2:71:67:5f:4e:8c:
         28:31:7a:0c:e5:51:7c:ca:d1:5a:18:96:21:97:5f:8b:4c:41:
         22:48:3d:f8:6c:25:3d:b5:b0:b2:59:4c:1f:75:33:24:ad:20:
         f5:f0:b0:c3:00:66:aa:1e:0e:b8:36:4b:c2:9f:e1:6e:48:a1:
         26:5a:11:cd:d8:c0:59:b4:67:ad:c3:04:77:98:2c:a3:63:b0:
         46:23:d4:11:0d:34:54:a8:b9:50:be:87:fc:e7:25:69:87:9c:
         14:e6:a2:58:22:39:81:ed:e8:db:32:da:76:0e:e1:ab:78:5f:
         78:3e:63:f0:d5:4f:7b:7a:63:0e:02:0e:eb:bd:87:7c:fc:af:
         ea:40:fe:59:70:5b:ac:ec:72:24:78:d6:88:f3:60:f3:3f:85:
         84:69:3a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:10:54 2025 by rpki-client