Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File:                     ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier:          93JyVkC/cPNVLMMxlpfPSqQ12kZsrXlfUdemppMO5kg=
Subject key identifier:   78:55:DB:6F:63:71:19:F4:21:AD:48:E6:41:70:79:03:BE:93:5D:8C
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer:       /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial:       0196A6F8DA812D7C293DF6B51AEDD40A0944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number:          1529
Signing time:             Tue 06 May 2025 19:00:48 +0000
Manifest this update:     Tue 06 May 2025 19:00:48 +0000
Manifest next update:     Wed 07 May 2025 19:00:48 +0000
Files and hashes:         1: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: M9Pj8TxBE7IK/XRcFR1DW3hOEmEt7750k4VrTnv8wzg=)
                          2: eVvmAEAIedlVHCPd9SMP0Bncqxc.roa (hash: 4VuWPxpiNhIPFJNGqrNiqAkoBmgIxFNuRTiyh6Py9uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:f8:da:81:2d:7c:29:3d:f6:b5:1a:ed:d4:0a:09:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
        Validity
            Not Before: May  6 19:00:48 2025 GMT
            Not After : May  7 19:00:48 2025 GMT
        Subject: CN=7855db6f637119f421ad48e641707903be935d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:b9:97:1c:9f:e3:b0:e5:0b:f0:c2:0d:27:
                    12:6f:7f:fe:ab:0f:60:c5:8f:48:1d:d0:8f:89:06:
                    77:d5:c6:ef:17:fb:5c:47:42:91:8b:9e:49:40:6b:
                    99:d4:99:7a:9f:e4:b3:21:e1:41:e2:79:ff:f7:55:
                    74:40:0c:b5:44:47:7f:f8:84:95:5f:f9:78:0e:0f:
                    ac:c5:cb:54:79:de:8f:c4:50:02:c0:68:50:2e:74:
                    0e:52:11:7a:70:2c:3b:01:de:ac:78:fe:56:74:9f:
                    1d:61:bb:54:86:e3:1f:df:ce:07:2f:9b:31:9b:8a:
                    fb:fa:b0:6f:d1:11:8b:50:a7:b4:13:04:57:af:4b:
                    e4:03:cb:86:eb:3f:f5:2c:6a:48:77:e2:66:cd:98:
                    1e:35:e2:e0:cb:be:f3:4a:0d:c9:ad:e2:96:e1:42:
                    41:a9:f8:d8:bb:9b:6a:9d:66:b0:35:c4:c1:80:38:
                    51:cd:39:50:17:5d:22:35:40:e9:9f:bd:6b:fd:20:
                    d1:8b:f4:d2:ab:52:bb:88:c9:f7:9a:b7:de:e5:84:
                    73:e7:bf:ef:81:1b:cb:7e:2d:83:c9:df:ec:27:60:
                    48:9b:49:c9:e3:91:96:c9:1c:6d:95:81:13:8f:3a:
                    a8:2c:11:c7:e0:dd:ce:1e:b4:6e:7f:4d:ab:16:8c:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:DB:6F:63:71:19:F4:21:AD:48:E6:41:70:79:03:BE:93:5D:8C
            X509v3 Authority Key Identifier:
                keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ac:2d:79:1f:85:1a:b5:4b:06:c8:c0:18:85:a2:2f:4c:80:
         50:4b:48:86:76:3f:57:7d:22:d8:1b:f6:b0:d4:15:58:07:b5:
         4f:d2:71:de:1b:d8:8b:c3:bf:2d:8d:5f:74:22:7e:09:71:73:
         90:43:90:d5:9c:f4:45:74:6d:c2:18:d9:bb:7f:be:aa:7a:9d:
         1f:36:b2:1d:e5:13:3d:af:fc:12:70:d0:d4:d4:fc:c1:b9:fd:
         ee:c7:4a:de:5e:b1:07:f2:7b:19:56:4a:d3:8e:2c:35:46:20:
         d3:4e:b4:b2:76:42:b2:b7:bd:76:cb:ae:c4:1d:4d:d5:a2:54:
         bc:28:ff:04:36:20:f0:5c:a8:94:60:be:4f:e7:58:48:eb:35:
         1e:a2:e3:88:62:89:8e:2b:e3:64:2a:d3:2c:09:bb:05:fc:1f:
         64:88:9e:1c:4e:6c:d2:af:38:da:63:1e:9e:b2:fc:8c:71:a9:
         45:09:a9:16:8d:ca:cc:e9:3f:2b:3e:2c:fe:43:74:a9:58:50:
         da:88:03:73:95:e6:16:80:97:f1:0e:7c:0f:9d:1d:86:02:0e:
         8d:03:93:c4:3c:8b:f8:e7:79:bd:ed:f4:12:d4:1c:e5:fe:25:
         e0:6d:45:1f:c6:46:f3:d9:67:9f:5e:e4:de:50:18:2e:c4:b1:
         57:0b:81:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:10:32 2025 by rpki-client