Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File:                     ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier:          L62D/jS2a/WeEsL3rB/912Tx2usj67PTEMacrh+Tywg=
Subject key identifier:   BF:31:B7:78:FC:21:3B:48:43:07:25:4F:8D:7D:A7:22:84:43:C4:C7
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer:       /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial:       0197B5C4D904222AD48CC952B8D85C3F5F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number:          15E7
Signing time:             Sat 28 Jun 2025 09:01:06 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:06 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:06 +0000
Files and hashes:         1: GaKfTqsXTBbzB0l6PPjCOtbieE8.roa (hash: bGjsSkVxtFTtg2bHcJH2NQE4duud/iaOMe/znbQ8Z78=)
                          2: RGQ5srvtHbdURiQlYxW8ivrDFG8.roa (hash: buPWNRKOvNBqFPTOoMN0ZIjfHBE170p5yrGiEymKeHo=)
                          3: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: O5oSh/8tY7fb9OPThHnZcFMtTJxx5031t3y9aEmvQVI=)
                          4: duOf09gggM7TDjJiWU0nkT8FsYU.roa (hash: 25aNtWfE21D31QMlGlCqimTiOpzPGbBhttON+NoFDhc=)
                          5: vZCiwKajLAj94g_r1KS02gxe_XQ.roa (hash: /9FsroII+PnZV3EcII02TBLCdlztOBLTex1BPR/WLFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:d9:04:22:2a:d4:8c:c9:52:b8:d8:5c:3f:5f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
        Validity
            Not Before: Jun 28 09:01:06 2025 GMT
            Not After : Jun 29 09:01:06 2025 GMT
        Subject: CN=bf31b778fc213b484307254f8d7da7228443c4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:86:33:22:86:18:9d:67:87:9b:df:41:bf:
                    19:43:f6:4f:10:de:7f:38:28:18:38:1e:c9:d0:da:
                    69:8f:ac:d9:43:eb:3c:63:fe:07:0a:f0:79:7a:74:
                    1c:75:49:72:59:60:05:d0:ba:42:7d:ef:4b:db:6b:
                    3e:2c:2d:62:19:aa:c5:c0:f9:f0:7b:33:f9:a9:3e:
                    cf:94:32:e2:f7:61:d2:b5:23:b4:5c:eb:2e:a7:7b:
                    30:71:e6:e8:3e:60:6b:ee:17:ba:3d:46:d9:a6:eb:
                    9e:01:46:7a:6e:76:44:1c:c8:92:fc:34:16:5b:6f:
                    e0:e9:45:5a:ad:ac:d1:77:84:cd:28:ae:92:42:1e:
                    a6:88:f6:fa:3e:3c:6f:50:9e:f1:8d:b0:58:2b:d7:
                    66:6f:88:50:71:49:00:6d:b5:06:21:61:d6:a2:ce:
                    04:cd:95:c4:9c:4e:7c:9a:2c:1b:55:16:7f:ea:a6:
                    0b:22:62:7b:02:a4:e8:2f:12:86:ac:a5:5b:bc:df:
                    82:3d:14:f8:0b:0c:f4:ae:ea:2f:cd:91:1e:b4:39:
                    12:6b:4e:70:b8:d2:82:46:5a:de:24:34:01:c7:e1:
                    73:97:3f:d1:26:45:27:8a:37:14:21:0d:35:34:f3:
                    13:62:33:da:48:bd:7b:c6:64:0f:69:1f:3e:94:f9:
                    b2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:31:B7:78:FC:21:3B:48:43:07:25:4F:8D:7D:A7:22:84:43:C4:C7
            X509v3 Authority Key Identifier:
                keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:b2:b5:b0:bb:30:74:a7:f2:24:44:e4:a5:74:bc:cd:e9:4e:
         55:81:1e:b2:1a:aa:2b:0a:ab:cc:ce:2f:09:29:cb:a2:c4:8a:
         e6:e6:11:84:bf:e5:78:64:31:ed:31:68:73:44:43:ab:37:31:
         70:df:50:7c:d5:28:0e:ec:60:31:1f:f1:05:11:03:6d:78:52:
         a7:61:e8:5c:86:71:67:da:29:ca:ed:2a:98:67:2b:9e:64:a3:
         5d:da:fc:ec:55:e8:77:2e:50:c1:2b:ad:e4:3e:a4:c5:a7:99:
         b6:ac:e9:7c:9a:ac:98:1c:b1:72:e3:be:59:bd:0a:5d:da:4e:
         a2:42:8e:2f:9b:bd:d9:25:4e:34:c8:8b:5a:63:78:1e:ec:3a:
         2d:11:80:a5:f0:85:97:c6:21:43:5c:89:20:44:d1:7d:91:f8:
         10:30:e2:c9:da:39:ee:4e:c9:d7:70:0e:c8:13:67:44:f7:1e:
         0c:9e:e6:d8:8a:42:b8:16:04:c5:45:97:5b:09:25:ac:62:ac:
         36:7d:2c:cf:9f:28:13:27:61:c6:b9:5f:d2:08:55:d2:55:30:
         10:dc:8a:26:9f:9b:d7:3e:c1:9f:87:c4:37:9b:3e:94:8c:2f:
         09:7e:cf:9e:fe:00:60:56:a6:8a:f6:e0:08:bf:44:9d:f4:54:
         ea:de:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:25 2025 by rpki-client