Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File:                     zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier:          tiN6d2kvQThN+UdLw+CdaoZEHjtN9ChLBG8HWDMpVk8=
Subject key identifier:   09:3D:6E:63:83:A3:58:72:C6:F2:68:DE:00:5E:36:FE:79:57:E9:19
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer:       /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial:       0196C04AE5D00A1453AB4F6C8AB8F880534C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number:          1538
Signing time:             Sun 11 May 2025 17:00:56 +0000
Manifest this update:     Sun 11 May 2025 17:00:56 +0000
Manifest next update:     Mon 12 May 2025 17:00:56 +0000
Files and hashes:         1: 4LK6RGBLui-aEbPRtqPLVkSUW60.roa (hash: HKFxqJUpJsHV+sptJ97e+oKZWNhWHZ0wI/MLAzbhfC8=)
                          2: 7SnZ2wdTAHyiVcyhnIAGtBdWwvY.roa (hash: KOo8uRmX/xugX/zDKxM39qWHbAMQmIcpriUpdt/0wYA=)
                          3: PAAVgOudpAsUIfqhJcqm8oy8JDE.roa (hash: ymqqiqdeF4cim2K3zQCPb5b7mDDQ30DVocSbeg0Ahjc=)
                          4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: FbVCcq/goh3XlKx82dVTv4V970sOR897ODj/MHp9l3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4a:e5:d0:0a:14:53:ab:4f:6c:8a:b8:f8:80:53:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
        Validity
            Not Before: May 11 17:00:56 2025 GMT
            Not After : May 12 17:00:56 2025 GMT
        Subject: CN=093d6e6383a35872c6f268de005e36fe7957e919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:52:85:51:5a:92:44:8f:27:c2:1c:fc:66:
                    f0:2a:5d:c8:49:db:32:ad:ed:a5:70:4f:5e:b5:59:
                    12:d5:a6:af:57:cf:88:42:be:b4:0c:5b:37:fa:f9:
                    95:a3:29:91:4a:f8:57:6c:64:00:d9:d5:b7:cc:13:
                    2e:0e:af:bd:ce:81:a5:17:14:37:26:05:3c:21:fe:
                    b9:d4:2c:f5:2f:0e:fc:10:52:01:62:a0:49:ba:3a:
                    a2:1d:d3:a5:d7:af:33:cd:e0:b2:85:f7:2a:42:1f:
                    ce:15:5a:15:a9:17:f0:bc:7e:ae:0f:db:87:98:5a:
                    39:1e:d4:b7:e0:d7:7b:f0:90:5b:f3:e9:4b:ab:b0:
                    00:bc:3d:80:67:ca:47:49:69:52:64:0a:8a:d2:87:
                    15:f0:68:77:ae:4a:d5:75:b4:54:3b:e8:fa:bb:4d:
                    19:17:25:f2:a5:55:24:ed:2d:3a:b8:db:b5:5d:10:
                    fe:e3:64:59:c3:3d:82:81:b9:cb:4c:3b:3d:d8:04:
                    c6:6e:40:61:bf:16:eb:20:c1:b8:86:ce:f4:da:9d:
                    e9:34:96:18:dc:ce:29:ef:d6:4e:f1:dc:10:a5:74:
                    fb:8b:ad:4e:2e:e1:fb:6a:cb:3d:2d:57:85:2f:4d:
                    43:6b:30:2c:0e:c1:da:66:19:2e:09:81:f1:7f:cd:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3D:6E:63:83:A3:58:72:C6:F2:68:DE:00:5E:36:FE:79:57:E9:19
            X509v3 Authority Key Identifier:
                keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a4:77:88:22:be:78:60:40:c9:90:2a:e7:e3:8c:08:30:c5:
         6f:3c:e2:35:99:7e:34:06:56:25:08:65:60:54:1c:b4:02:cb:
         41:f5:60:58:38:b5:be:18:9c:40:6a:5c:a8:d3:06:b6:98:ce:
         0c:a5:a3:4b:f9:00:a0:96:38:ea:51:05:07:8a:76:78:59:f7:
         d1:7f:29:f6:72:29:4c:1b:1a:e0:ae:3c:e4:4f:d8:f3:af:0f:
         2c:71:9d:2a:35:d9:da:e3:85:2e:93:d1:77:a9:e3:85:30:7b:
         60:b7:b3:1a:5c:ef:4f:cd:ab:56:cc:45:02:a4:2e:30:dd:a1:
         85:9d:10:23:f0:24:13:69:96:84:fb:43:99:57:b1:49:4c:25:
         93:ff:3a:03:31:8d:af:44:07:19:f7:0e:df:7e:c8:a1:65:5c:
         a3:dc:d7:4c:2b:4e:47:ab:e6:68:a1:77:94:b2:8e:ad:5b:00:
         f5:61:f1:98:74:de:02:b0:7c:15:62:fa:ec:6e:f1:16:6c:34:
         8a:45:c4:72:c0:59:b8:f2:bc:34:8a:93:85:d7:e1:80:95:ee:
         63:ce:f5:d1:15:d0:9d:c2:3f:9c:17:6d:3a:ed:99:3e:50:26:
         d8:41:ad:11:9f:74:8e:cb:da:2d:d0:83:87:cb:07:da:d2:4d:
         1c:b1:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:34:35 2025 by rpki-client