Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File:                     ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier:          ixkl8gBHmLlzQ4MtH3n4G0rP49qg62GHVRg7pv5lm04=
Subject key identifier:   93:C0:0A:A2:5C:18:4E:CE:6D:0B:A4:AE:AB:6B:BA:D6:6D:25:13:83
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer:       /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial:       0196A61CEC2FE15788841B296C11B8BF3529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number:          1378
Signing time:             Tue 06 May 2025 15:00:35 +0000
Manifest this update:     Tue 06 May 2025 15:00:35 +0000
Manifest next update:     Wed 07 May 2025 15:00:35 +0000
Files and hashes:         1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=)
                          2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: AIaGime8c96hliroi3z8xScwz9t89hXM1TNNOxqE0+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:1c:ec:2f:e1:57:88:84:1b:29:6c:11:b8:bf:35:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
        Validity
            Not Before: May  6 15:00:35 2025 GMT
            Not After : May  7 15:00:35 2025 GMT
        Subject: CN=93c00aa25c184ece6d0ba4aeab6bbad66d251383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:a6:42:17:2d:08:54:e9:f7:aa:99:5c:67:
                    76:d2:d9:98:3c:e5:5c:cd:a2:a5:ca:72:d2:9e:8d:
                    16:5f:2b:bb:60:9b:01:fc:a1:b5:d7:bb:9f:a5:a5:
                    03:e1:21:63:0b:41:cf:de:bd:d6:fd:49:d9:34:b4:
                    f6:01:39:d5:5b:df:49:0e:19:e0:d2:66:c2:6e:61:
                    79:36:06:2b:16:0f:81:b1:d4:5f:2c:1c:0d:3e:49:
                    36:1c:c7:23:39:af:66:3a:05:09:5f:c0:f0:ec:7b:
                    22:6e:6e:79:c9:64:53:87:cd:b3:ed:85:d4:1a:54:
                    c0:18:b5:6f:59:5d:a3:65:66:c8:d0:70:a4:ef:5c:
                    e4:f1:f6:48:78:9a:c1:90:0b:d8:34:80:09:c7:da:
                    80:2d:be:02:24:98:31:dc:e5:93:29:b2:d8:1e:b0:
                    96:b2:7b:39:a7:5e:66:96:60:43:aa:5b:5d:2e:14:
                    f6:f2:55:e6:4f:db:cd:9e:95:3e:e2:a1:4c:cc:26:
                    9e:5d:9f:0a:df:fd:fe:10:35:9e:91:84:47:ea:38:
                    b8:27:25:2f:a4:8e:73:7b:ca:a9:ea:8a:c0:e1:df:
                    3b:5a:21:2c:40:49:29:71:4d:d8:35:5d:11:1a:57:
                    c5:18:c3:cd:89:a2:90:ac:4e:4f:fb:8c:dc:0b:58:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C0:0A:A2:5C:18:4E:CE:6D:0B:A4:AE:AB:6B:BA:D6:6D:25:13:83
            X509v3 Authority Key Identifier:
                keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:db:cc:2f:23:b5:dd:ba:f0:4f:3b:35:d1:ed:b8:48:f0:e0:
         95:4d:3e:48:60:3f:25:6e:3e:de:0a:33:7d:b9:59:8a:76:30:
         5b:14:99:1d:1a:f1:34:34:2b:ae:c6:e2:f5:6c:fe:6f:24:70:
         5f:79:8e:ff:67:ee:65:1e:a5:34:b5:0a:f7:3a:0e:84:3d:b8:
         52:a8:48:80:7e:1b:df:18:74:a8:92:d9:b9:26:08:14:a6:04:
         2e:4c:6e:df:5d:1c:18:19:12:50:b1:a7:cc:f1:6b:8b:7a:30:
         92:9c:c7:a3:f8:00:df:f9:33:f4:ec:5b:96:bc:78:d2:65:ae:
         ae:09:35:d3:a3:e1:70:a0:fc:61:ac:41:78:41:88:18:d0:5a:
         fc:1a:5d:f3:a2:f3:7b:c3:b3:9b:d5:ec:07:aa:a7:49:94:68:
         7a:55:99:6f:0a:a2:70:1b:e2:08:11:0a:66:e0:60:76:a2:3a:
         ea:5f:89:4e:1d:3d:a7:5c:2f:40:9e:4b:b1:a0:fe:76:2b:a6:
         45:df:47:f9:51:97:8f:d2:50:27:8e:97:d4:4e:2d:d7:8c:53:
         35:af:7c:62:45:2f:65:47:b4:82:64:b3:e1:bb:3e:aa:90:c5:
         93:2f:c3:c7:24:2f:1d:be:8b:27:6a:be:39:e4:65:2f:e9:4a:
         56:e9:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:56:37 2025 by rpki-client