Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
File:                     zFkRQzuiBvRQrJvQZchslmCEAcE.mft (raw, json)
Hash identifier:          riWzYPYOaaBDZdZkL/S1Y4ehLM3heiQwF2KKG/T+wfI=
Subject key identifier:   D1:78:2F:2F:6C:12:13:FA:20:70:75:0C:21:4A:FC:9E:26:47:02:66
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Certificate issuer:       /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial:       0197C50143262A7DA105E4729D2C97D65366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
Manifest number:          15BF
Signing time:             Tue 01 Jul 2025 08:01:23 +0000
Manifest this update:     Tue 01 Jul 2025 08:01:23 +0000
Manifest next update:     Wed 02 Jul 2025 08:01:23 +0000
Files and hashes:         1: 4LK6RGBLui-aEbPRtqPLVkSUW60.roa (hash: HKFxqJUpJsHV+sptJ97e+oKZWNhWHZ0wI/MLAzbhfC8=)
                          2: 7SnZ2wdTAHyiVcyhnIAGtBdWwvY.roa (hash: KOo8uRmX/xugX/zDKxM39qWHbAMQmIcpriUpdt/0wYA=)
                          3: PAAVgOudpAsUIfqhJcqm8oy8JDE.roa (hash: ymqqiqdeF4cim2K3zQCPb5b7mDDQ30DVocSbeg0Ahjc=)
                          4: zFkRQzuiBvRQrJvQZchslmCEAcE.crl (hash: 8IvWOT9pMjqjVbpaJ33fuF8enjkVWKgoFlTQzTCpK9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c5:01:43:26:2a:7d:a1:05:e4:72:9d:2c:97:d6:53:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
        Validity
            Not Before: Jul  1 08:01:23 2025 GMT
            Not After : Jul  2 08:01:23 2025 GMT
        Subject: CN=d1782f2f6c1213fa2070750c214afc9e26470266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b5:e3:8c:ad:35:13:3a:63:27:34:81:b5:11:
                    1a:14:bb:f9:8a:97:d3:b5:36:61:34:05:91:65:5a:
                    55:f1:99:2a:ab:f1:ab:64:63:70:6e:a9:33:c7:c4:
                    e7:69:7e:df:00:8c:b6:d8:d5:2f:6c:72:32:26:e4:
                    c6:8c:d0:59:e2:ad:6f:14:a3:ec:6b:de:70:7a:aa:
                    5c:98:95:69:10:c1:7e:54:79:1d:46:43:1e:9d:48:
                    16:7c:bf:0a:b4:c9:6f:e3:dc:8b:b7:f9:2a:9a:b8:
                    75:2d:d5:31:36:5d:6a:8c:c6:ad:6a:b5:f7:b6:30:
                    bb:d8:b2:e6:2f:d1:6b:5f:2a:c1:87:26:f3:77:96:
                    be:30:ef:ca:5c:ef:6a:c2:66:39:a8:76:b3:21:2d:
                    64:16:2c:86:dd:87:5b:97:ae:cf:4b:ff:42:0a:d8:
                    a9:11:19:9f:a4:bc:d4:67:1f:26:d0:2b:76:10:61:
                    2c:d3:53:73:ba:76:5e:8c:d8:98:df:ce:89:14:eb:
                    e1:9b:0f:40:13:53:90:a5:4f:4b:5d:2e:21:a6:b7:
                    f9:b6:dd:25:13:80:f3:08:88:ba:aa:6e:ab:e1:1a:
                    42:a6:6d:50:15:32:ad:27:c6:3d:37:a8:25:61:6f:
                    dc:fd:99:e4:c4:78:a1:49:57:a0:4d:0b:dc:a1:fb:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:78:2F:2F:6C:12:13:FA:20:70:75:0C:21:4A:FC:9E:26:47:02:66
            X509v3 Authority Key Identifier:
                keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:11:a2:cd:ca:10:83:c8:eb:b3:b3:99:c6:12:aa:54:0d:29:
         cf:0b:5c:b2:4e:16:a1:d3:f5:05:f4:4f:9c:ed:84:a7:03:fa:
         3d:29:34:67:8a:f5:ae:b7:fc:02:4b:ce:b4:2a:bb:4d:17:ff:
         9b:26:09:68:0b:a6:5f:d0:0b:e8:5c:e8:8b:4b:3f:0a:e6:7b:
         36:c3:e3:d1:e7:83:d7:78:1a:97:db:f8:71:42:c7:05:7e:ae:
         d9:f7:a0:63:4b:ee:3d:5b:97:47:a2:53:f9:a6:81:72:57:88:
         6d:e4:94:7c:c8:24:87:a6:ef:b0:58:10:82:c7:81:1e:fb:88:
         52:4e:a3:55:b8:3e:02:d2:26:87:67:c7:b3:17:ba:8a:d0:e6:
         2b:bc:82:3f:7a:3b:d6:a2:11:e7:de:17:dc:2b:20:d0:43:35:
         ff:06:3c:b2:3a:49:9a:99:8c:0d:38:a2:f4:ff:48:66:f4:17:
         27:25:cb:45:e5:33:b8:cd:5b:d8:f3:3f:78:ff:7f:58:51:c0:
         39:4d:18:1d:be:69:34:61:33:8a:1a:86:45:8e:11:50:0f:db:
         30:21:46:d6:f3:19:a3:ee:19:55:e7:a9:0d:be:66:47:b6:93:
         c9:1c:ab:c6:cc:7a:5b:12:88:cc:5b:cb:47:69:bd:42:de:6c:
         3c:15:37:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:31:22 2025 by rpki-client