Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File:                     zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier:          v67OdjC8QLEadYPLU4OY2EayEoCA/JmQ4kTEBMj34S0=
Subject key identifier:   3A:03:A3:D9:19:75:FF:72:B6:A8:9E:CB:BA:B9:8D:2A:2A:95:65:E1
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer:       /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial:       0196BB922F06521F9B305C6C5B9A3F402330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 19:00:41 +0000
Manifest this update:     Sat 10 May 2025 19:00:41 +0000
Manifest next update:     Sun 11 May 2025 19:00:41 +0000
Files and hashes:         1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=)
                          2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: B5xV7XqU2UUWxuGNbEn/ClGD5Ru/yb3MivOkTXss6bE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:2f:06:52:1f:9b:30:5c:6c:5b:9a:3f:40:23:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
        Validity
            Not Before: May 10 19:00:41 2025 GMT
            Not After : May 11 19:00:41 2025 GMT
        Subject: CN=3a03a3d91975ff72b6a89ecbbab98d2a2a9565e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:ba:61:dd:4d:93:6a:89:0a:ee:33:93:cd:
                    70:11:9f:bf:5a:2a:b1:dc:1d:07:a7:ab:5b:41:d7:
                    0d:2b:57:9f:d3:b8:7f:b2:e4:25:d6:30:05:34:d8:
                    35:7e:33:63:13:41:f3:20:43:d9:b5:82:7f:e0:5c:
                    5a:d4:87:04:97:7a:f7:0f:9e:68:92:09:2f:ba:eb:
                    87:11:32:33:3d:06:9f:4b:4c:a9:b8:cd:89:ce:43:
                    b6:3f:89:43:25:06:b4:74:35:a6:15:4f:b7:9b:c9:
                    ef:ad:23:73:94:45:97:68:ee:b5:a9:c4:44:c3:22:
                    5e:9c:7f:07:35:73:b3:57:e2:cb:31:f1:cf:3a:f7:
                    70:01:07:10:ee:53:57:7d:a6:9b:82:06:fc:7d:af:
                    da:58:d6:2b:d1:fb:26:e0:43:ec:29:65:38:e8:df:
                    76:4e:50:64:e0:95:9c:6d:5a:5b:95:0d:c6:5d:a2:
                    08:4d:46:b3:dd:ef:1c:2f:49:ae:30:3e:1b:c7:a1:
                    b6:93:08:d7:53:f6:bf:b2:35:c1:2e:17:00:9a:e3:
                    c1:98:35:10:0b:7c:41:76:0a:3a:4c:5b:19:31:b2:
                    ee:2c:4d:1f:7d:d9:1b:09:b9:e6:45:5a:59:d0:48:
                    32:a1:b3:f9:69:f3:fe:29:67:ad:30:b9:10:f8:ba:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:03:A3:D9:19:75:FF:72:B6:A8:9E:CB:BA:B9:8D:2A:2A:95:65:E1
            X509v3 Authority Key Identifier:
                keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:af:12:64:66:56:4c:9c:5a:c0:5b:7d:da:5d:7c:63:8f:
         97:4e:d9:23:6b:cc:15:8b:44:92:1b:35:b9:d8:b5:43:7d:72:
         48:70:97:7e:28:1b:b9:0a:68:84:75:0d:39:36:1e:84:86:4a:
         91:5e:45:f4:79:eb:be:1c:b8:10:4d:e7:10:df:e6:1e:c1:f2:
         e0:96:2e:4a:68:6d:a0:08:aa:3a:cd:77:53:b4:ce:7c:7c:1f:
         ce:2e:55:4e:5b:5b:c5:9f:8c:94:37:3f:c2:d2:d0:4b:da:74:
         4f:bd:48:2e:23:3d:4e:cc:e9:d6:ff:19:2e:d6:ed:b7:6c:27:
         fa:5b:6e:1f:e5:60:39:b5:b6:ea:1a:53:f0:53:4a:64:d4:bd:
         15:e2:97:d6:54:25:fa:70:d4:f4:a4:16:c8:b9:57:d7:eb:83:
         78:87:b7:dc:32:24:8d:0c:e3:d8:61:06:52:0b:49:fc:fb:70:
         b5:ad:06:51:b9:41:12:cb:db:c8:92:8c:3c:7a:c9:61:8b:2e:
         24:ee:d1:f0:4e:69:af:43:b4:e9:34:81:cd:1b:02:3d:70:55:
         65:e8:b7:96:b3:fd:a8:d6:f4:0c:bc:dc:5d:fd:92:38:15:27:
         77:c2:f7:d5:ab:76:19:33:01:a9:1c:ef:43:4e:9e:24:94:5e:
         6d:b3:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:16:31 2025 by rpki-client