Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File:                     ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier:          IMi9Vib1y4YBPi7at5Eu/poJXAY9ZCaU9fltcHeObJQ=
Subject key identifier:   F1:F3:17:EA:C9:EA:BE:E5:24:9D:59:D1:29:A6:83:32:77:CC:DD:4B
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer:       /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial:       01969DBECD4213C64AF11261EF85A747DB2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number:          1556
Signing time:             Mon 05 May 2025 00:00:49 +0000
Manifest this update:     Mon 05 May 2025 00:00:49 +0000
Manifest next update:     Tue 06 May 2025 00:00:49 +0000
Files and hashes:         1: GaKfTqsXTBbzB0l6PPjCOtbieE8.roa (hash: bGjsSkVxtFTtg2bHcJH2NQE4duud/iaOMe/znbQ8Z78=)
                          2: RGQ5srvtHbdURiQlYxW8ivrDFG8.roa (hash: buPWNRKOvNBqFPTOoMN0ZIjfHBE170p5yrGiEymKeHo=)
                          3: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: hzzA/QqircKjkTujYToAH0OAbfCRiQJesfbV84RktYw=)
                          4: duOf09gggM7TDjJiWU0nkT8FsYU.roa (hash: 25aNtWfE21D31QMlGlCqimTiOpzPGbBhttON+NoFDhc=)
                          5: vZCiwKajLAj94g_r1KS02gxe_XQ.roa (hash: /9FsroII+PnZV3EcII02TBLCdlztOBLTex1BPR/WLFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:cd:42:13:c6:4a:f1:12:61:ef:85:a7:47:db:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
        Validity
            Not Before: May  5 00:00:49 2025 GMT
            Not After : May  6 00:00:49 2025 GMT
        Subject: CN=f1f317eac9eabee5249d59d129a6833277ccdd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:44:dc:1b:f2:57:b4:ca:24:28:fa:1b:75:
                    ca:ec:1b:e4:0f:68:fa:0e:37:8f:74:5b:f7:0c:b1:
                    ad:db:a9:99:f7:2f:80:af:4c:50:ea:c1:55:70:fe:
                    7d:85:fd:94:2c:26:bd:3f:45:74:f7:8b:67:83:00:
                    c1:2f:4e:ff:59:49:fa:f2:0e:6f:64:69:4e:f0:14:
                    41:49:fb:15:14:5a:68:16:3c:44:cc:a3:f8:d7:d1:
                    38:c9:86:e5:4e:b7:ee:ee:80:e3:21:27:1b:14:d4:
                    6a:a2:a0:70:08:af:95:b8:78:0c:e6:b7:28:b5:18:
                    7e:97:ab:c5:a2:60:37:e1:df:ca:7e:d6:c2:49:5d:
                    87:94:7b:4a:2f:df:3e:c2:ab:b1:19:c6:fb:88:33:
                    f7:e3:44:81:5b:98:27:9d:21:f5:ea:1f:a4:14:bf:
                    e9:0d:85:2e:5a:eb:2e:7d:06:60:a7:28:c6:33:3e:
                    92:49:ce:da:19:6b:e2:10:ee:76:3f:a9:99:08:6f:
                    bf:84:50:10:1c:e9:cd:17:62:96:04:cc:21:4e:f4:
                    5a:3c:4f:e5:ff:77:bb:c1:36:f3:26:7a:07:c7:4f:
                    bf:47:2d:cd:c8:f1:3a:b8:05:de:20:39:d8:0d:cd:
                    3a:e1:7f:27:a1:4b:6f:2c:0b:73:57:7b:59:e9:cb:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F3:17:EA:C9:EA:BE:E5:24:9D:59:D1:29:A6:83:32:77:CC:DD:4B
            X509v3 Authority Key Identifier:
                keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:c8:5a:93:4d:2b:a4:f6:6e:ad:f7:af:8e:a7:b2:2c:2a:33:
         01:9a:ae:37:cf:f6:65:d7:6d:41:50:aa:de:6d:a5:96:a4:af:
         d8:e7:ad:a4:33:83:a2:fa:e8:ac:36:4e:03:50:88:fb:91:2d:
         db:0d:16:a0:c0:16:7f:41:03:d3:1a:6a:69:ef:fc:91:a1:53:
         84:d9:58:45:e4:3c:cb:91:53:36:69:a2:9d:27:6d:0e:12:b5:
         70:9e:78:9b:7b:85:1b:d7:53:96:1a:bd:04:9f:04:32:29:4a:
         1e:00:96:ac:cb:a5:1c:a1:1a:29:4c:5c:15:c4:86:5f:12:ac:
         06:88:20:dc:f6:2b:f2:9a:ec:55:70:fc:11:8a:06:c7:fd:35:
         85:b9:0e:d5:56:7a:fe:cf:ca:0f:5c:39:44:7d:d8:69:00:8b:
         81:8c:34:b5:3a:66:17:9d:2b:95:e5:bb:83:c6:5c:2e:f1:c1:
         77:71:10:de:6c:06:1d:d4:d0:39:8d:d6:cd:2c:07:fa:16:2e:
         80:31:2a:97:63:03:cc:19:58:64:fa:73:12:72:00:6b:9b:84:
         95:27:aa:10:94:70:6d:df:04:22:0e:3a:35:e5:9b:6f:be:7b:
         df:e7:b1:89:68:94:e7:6f:0c:2b:09:a6:10:85:86:6f:0b:13:
         59:0a:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:15:31 2025 by rpki-client