Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File:                     Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier:          W5coFLDG/nKxRxpboy3r/wO+Pqt3RsFN84qg4ZKbk9c=
Subject key identifier:   4C:51:18:F6:D7:3E:6E:CB:13:43:56:0C:2C:B4:76:91:0F:31:30:4E
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer:       /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial:       0197CCF19E4398C010CBFB27BD8772D8A90B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number:          15F3
Signing time:             Wed 02 Jul 2025 21:01:16 +0000
Manifest this update:     Wed 02 Jul 2025 21:01:16 +0000
Manifest next update:     Thu 03 Jul 2025 21:01:16 +0000
Files and hashes:         1: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=)
                          2: JDg5pnuBYnMYrz2b4bhEcsSMjhY.roa (hash: JrOCyN26LRkftj4uemRvhd9/88LW/oSbsqF9jvrHtnw=)
                          3: NL0IJjm7jrfozZ5bICucRbGVYr8.roa (hash: DDP4brvIuTXLrA8+Uvh9Tcq7O9ulXJw+0WUACyChp5o=)
                          4: YsIgrSJUYriYGQHuohCcIVhX9do.roa (hash: SJhg/pqUQs56qO7PFd9gOS+lz9SdTB/peMTP9Y4EoQc=)
                          5: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: ykUkYkV8uJpWr3BX7Zx7jQlRI3i2nTT8kSiUOSCGGE0=)
                          6: bv4tcwtbryxLyYhV6XTH39AB-vY.roa (hash: Xi6BhRdiZvjQrRH2s9UR2MhITflZG1sNqXTRu0wxscs=)
                          7: fN1BDsW9C5C9Bqke6ry_fePDBlM.roa (hash: 3fdGseWrPkjGKUusjcENuIavE0xvyg7utbXjROm1P3E=)
                          8: fjCDcJ-GdlaMAHbuKYCPeeb7aqo.roa (hash: cg/ck7JNgX5H5SPck5caxw/6enMqzT+4sXKpWgfqgXk=)
                          9: mo5JK6v6R0SlbhL9bpJDUSnP2o0.roa (hash: 727Fnu3PPIa8ngtI0/OvrhrO6bIcmHl3XFKfTHPbhNk=)
                          10: pi020TsW0QReka4EU_X98LZY30k.roa (hash: gf5U/BiHkb9/XX1VONoBqkzZ+yxHvJslptQx9dyXOBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:f1:9e:43:98:c0:10:cb:fb:27:bd:87:72:d8:a9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66df7742890173927935206a28efbf48123e787c
        Validity
            Not Before: Jul  2 21:01:16 2025 GMT
            Not After : Jul  3 21:01:16 2025 GMT
        Subject: CN=4c5118f6d73e6ecb1343560c2cb476910f31304e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:31:38:bc:42:35:4f:46:4d:f7:b1:21:14:
                    59:ff:97:51:90:e2:63:8d:80:65:ba:f3:fb:21:d9:
                    93:4b:60:5f:9d:eb:43:5d:1c:78:6f:d0:2f:97:6c:
                    6c:64:16:03:cc:fc:b5:d8:e1:bd:6d:87:0d:7c:17:
                    c1:44:77:d0:0d:fd:1f:49:7b:86:f3:93:5a:15:a9:
                    62:6d:bc:17:b3:62:5e:7b:91:2b:cf:b1:ed:6f:cd:
                    5b:59:76:09:c4:0e:27:b6:d7:fe:fb:87:1b:d9:22:
                    de:d5:2b:9e:45:c4:61:79:7a:c7:71:d2:4b:57:c9:
                    70:ca:b8:ae:06:a0:a7:45:aa:ea:bd:a7:94:89:35:
                    29:02:15:f7:87:0a:bf:9b:6e:50:b2:c9:4a:24:a2:
                    fe:12:73:d4:07:8b:3e:27:19:e2:16:fb:89:a8:74:
                    32:bc:90:cc:21:90:62:d0:85:79:31:ff:5d:6a:06:
                    e6:5a:0d:23:18:4d:45:46:6a:07:95:97:f3:7a:d8:
                    d9:91:a1:f3:f4:d5:b3:b9:81:fd:79:c4:15:13:5d:
                    1d:2d:2e:bd:4a:f6:49:aa:8f:d5:58:27:b7:90:a0:
                    d5:99:5a:09:85:9a:67:af:c0:2a:71:61:d6:7d:67:
                    40:21:8d:61:0c:47:31:fe:16:99:f2:41:12:86:2e:
                    2c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:51:18:F6:D7:3E:6E:CB:13:43:56:0C:2C:B4:76:91:0F:31:30:4E
            X509v3 Authority Key Identifier:
                keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4c:2a:6e:ba:99:d2:f1:de:b9:db:2e:56:8e:ba:4c:e1:8a:
         50:e8:0c:9e:d5:02:2f:0f:1f:33:84:ed:ff:c8:bc:82:38:a5:
         48:a6:55:14:f5:42:9b:6e:31:48:46:e8:dd:ab:27:39:fd:e6:
         fe:be:43:2c:6f:c2:fe:5d:9a:11:d9:50:53:59:95:52:f1:64:
         a3:f6:bf:49:67:f2:7c:f3:58:09:5a:4c:6f:1d:78:90:3a:9c:
         8b:e2:81:8b:76:bd:2d:c1:e1:68:ed:e6:a7:b4:f8:22:1e:7a:
         7e:83:e2:eb:7b:e1:b3:00:ac:61:e1:38:6d:34:9a:94:d6:a5:
         99:bd:29:7f:7e:d7:70:52:e5:14:a9:47:f8:75:43:06:b9:f2:
         bd:b3:c5:b1:a1:74:15:b1:9c:32:50:34:8b:6e:de:23:5a:d6:
         25:68:df:bf:92:02:9c:4a:63:29:55:b3:da:6b:6a:7d:fd:60:
         6e:0e:6e:cd:a7:f3:9a:c2:c0:17:40:62:fd:f6:a3:41:42:84:
         0a:b1:12:ca:f3:48:8b:2c:5d:03:35:02:4d:87:ca:33:90:2a:
         54:3e:6b:1f:e8:57:cd:15:64:65:80:f4:82:7b:ba:f0:cb:eb:
         e6:55:a8:79:ff:a9:62:b3:37:ec:21:c9:42:97:45:ec:8b:42:
         ed:4e:96:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:34:22 2025 by rpki-client