Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File:                     Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier:          beJXSgs0lWY9YcA+doshTmrJ0j6TebpXPeDZ1DeyXrU=
Subject key identifier:   04:44:AB:C9:93:FB:4C:D9:5A:F8:AF:91:39:24:64:8C:DF:65:FC:94
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer:       /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial:       0196CCBC8987C3DA2C1CB53E89A4A48A1A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number:          156A
Signing time:             Wed 14 May 2025 03:00:30 +0000
Manifest this update:     Wed 14 May 2025 03:00:30 +0000
Manifest next update:     Thu 15 May 2025 03:00:30 +0000
Files and hashes:         1: Cd7cyChZhy9mMNvd0Nth-NseLV4.roa (hash: TLZJfbst8zmWkSuiSURO6a7dmcirf5v9QS7cBAmoefs=)
                          2: Fh6CLt6xczOHHemrrM4bMN7qnwo.roa (hash: hvSyiuRPH2Z9ZscYXJ/Gadi12dcqRqXvTeKlVkuzaPk=)
                          3: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=)
                          4: I1XoXbCRQDzU94nytFVYdEpxlsY.roa (hash: x9Wg/IuXvM9pdB1fOvM4EOxkcoralT2x+DA/73JOviQ=)
                          5: MzbBL-KB16aNaaOWCdz_zlq5-Sk.roa (hash: EojRlQEsQxjmCahz4GI2JRZbd+U9Ggw+WBgDfZNnVQ8=)
                          6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: 28+qEhEE27NHVODk3qm4cZWBp7V/fC12bpzCclJpKtM=)
                          7: bv4tcwtbryxLyYhV6XTH39AB-vY.roa (hash: Xi6BhRdiZvjQrRH2s9UR2MhITflZG1sNqXTRu0wxscs=)
                          8: fN1BDsW9C5C9Bqke6ry_fePDBlM.roa (hash: 3fdGseWrPkjGKUusjcENuIavE0xvyg7utbXjROm1P3E=)
                          9: mo5JK6v6R0SlbhL9bpJDUSnP2o0.roa (hash: 727Fnu3PPIa8ngtI0/OvrhrO6bIcmHl3XFKfTHPbhNk=)
                          10: pi020TsW0QReka4EU_X98LZY30k.roa (hash: gf5U/BiHkb9/XX1VONoBqkzZ+yxHvJslptQx9dyXOBA=)
                          11: qDEIt49JLY1H1gFAAbmQ8aaWUYI.roa (hash: xIlEw0FiUYRvplwXdUlAk/D6XIj861qLM1Kz3WS/HKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:bc:89:87:c3:da:2c:1c:b5:3e:89:a4:a4:8a:1a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66df7742890173927935206a28efbf48123e787c
        Validity
            Not Before: May 14 03:00:30 2025 GMT
            Not After : May 15 03:00:30 2025 GMT
        Subject: CN=0444abc993fb4cd95af8af913924648cdf65fc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d4:90:f6:29:ab:2a:e6:6d:5a:db:58:cc:66:
                    c7:2c:de:11:e2:21:36:ba:53:1a:4a:88:56:fa:07:
                    d9:3d:86:95:13:30:b6:9e:48:c1:a8:59:ed:e9:14:
                    b7:15:6e:7c:6a:d7:d5:33:7a:a1:d1:8f:8d:f5:38:
                    1a:f9:82:be:39:03:2c:13:43:f5:89:63:00:41:75:
                    fa:ba:d0:47:3d:57:d7:53:4f:7c:68:9e:aa:63:3d:
                    33:b7:ea:d9:b8:0f:44:cb:e3:fb:c6:d3:c8:fd:37:
                    4b:bb:1c:4e:0d:2e:8b:d4:b5:c0:47:24:2a:43:83:
                    3b:08:eb:d8:a3:d0:67:2a:15:9a:7a:9b:19:2e:2e:
                    71:13:53:f5:33:d7:e9:e4:f8:16:85:6d:38:ce:57:
                    3b:e0:8b:c0:98:58:ce:6c:09:ca:86:ba:35:c1:2f:
                    e0:5a:ad:57:a1:cb:9e:dc:8a:cf:da:bc:bd:ea:fb:
                    d9:f7:66:d3:59:3d:7b:18:55:3e:db:17:15:0e:16:
                    b5:1a:47:3f:75:f1:dd:a2:f3:7e:e1:79:04:9e:0e:
                    02:6f:58:38:2f:f9:89:2a:e0:f5:21:bc:67:5d:c0:
                    b5:5e:ea:cd:fa:97:d7:8d:33:10:a2:76:2a:46:15:
                    20:95:b6:52:fd:97:68:42:5b:2f:ba:06:5f:bd:2b:
                    6e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:44:AB:C9:93:FB:4C:D9:5A:F8:AF:91:39:24:64:8C:DF:65:FC:94
            X509v3 Authority Key Identifier:
                keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:df:8b:a1:09:0b:5d:58:35:89:78:33:92:90:41:38:a0:17:
         06:18:e3:82:51:d0:31:7f:77:9c:12:91:44:47:db:6f:60:ff:
         48:1a:38:7e:ae:49:3c:68:bd:6e:03:53:e8:2e:28:ec:61:3f:
         6e:df:ae:5e:89:e7:ff:b5:ee:89:99:92:0c:72:27:d9:ba:50:
         f4:ad:d8:9f:d5:7c:50:23:b7:1a:a0:43:5e:db:97:e3:be:a7:
         8f:f7:92:80:73:17:57:9a:89:bc:6d:82:f3:93:55:9f:70:b0:
         43:ca:51:ad:a2:58:0a:c8:46:02:c1:d7:3b:e5:c5:82:18:75:
         e0:c7:68:b5:93:87:b3:66:d7:34:08:76:d6:2a:63:b3:30:5c:
         22:b2:05:0f:18:80:22:22:cb:8f:ae:9c:c8:1e:38:3d:f9:92:
         f2:aa:ab:73:23:d8:1b:f3:79:b6:20:a8:10:0f:68:28:4c:f9:
         37:07:bc:71:bf:af:11:0e:3b:9f:d3:6d:7b:c8:ed:03:e2:99:
         cd:7b:5d:65:dc:d3:f3:3c:38:65:66:0a:2b:6e:bc:0d:bd:e7:
         cd:de:34:61:7d:1f:16:be:fc:59:a6:54:31:47:a9:3c:88:3c:
         e1:4a:2a:8f:17:91:30:43:0a:4b:8c:54:80:50:f0:0e:a1:3e:
         0e:88:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:38:39 2025 by rpki-client