Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
File:                     ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft (raw, json)
Hash identifier:          b57YEyaaSNU77FWYt8qvHo67n+waYrpJHqDPZ0oJfz0=
Subject key identifier:   E3:B9:D7:52:3A:F1:BF:AB:97:EA:81:37:69:24:39:45:A4:AD:A6:2E
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Certificate issuer:       /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial:       0196C64CD6366E7058CCDBB4E659C66F3B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 21:00:46 +0000
Manifest this update:     Mon 12 May 2025 21:00:46 +0000
Manifest next update:     Tue 13 May 2025 21:00:46 +0000
Files and hashes:         1: 6ekzezCQTRRJ6ani1kLlgl9_UEQ.roa (hash: E8YKQ+7oKbQVBsilOuJbTsXN0BQkzpHb4tN03LRQOhY=)
                          2: ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl (hash: aZRmBjcSs3TCHIhdIwAXHSX8jkMNnor4pm30qDrxgqg=)
                          3: jjkw7d-vM1Kuz3VrP2qfo9DvNCo.roa (hash: VJTPRYmj0bLLGoSUyYkDz754dQcYj27q2IKg/a+56Gg=)
                          4: rWTg50lIWr4eBCYZpN1g2rEsvwA.roa (hash: h6askj3XUZ9cNfHdvd89Te7uFDoO162bWotdGeS5FPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:4c:d6:36:6e:70:58:cc:db:b4:e6:59:c6:6f:3b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
        Validity
            Not Before: May 12 21:00:46 2025 GMT
            Not After : May 13 21:00:46 2025 GMT
        Subject: CN=e3b9d7523af1bfab97ea813769243945a4ada62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:9c:55:2f:c5:fd:a2:21:e9:ae:49:7c:31:
                    3a:d2:35:00:26:42:f3:7b:b9:2d:87:c9:c4:b5:c9:
                    77:98:54:ac:80:f5:86:5e:34:11:d9:2b:86:54:5a:
                    4c:57:7d:e7:6b:78:6e:35:39:27:50:70:ce:88:a9:
                    0e:0e:c5:28:36:4f:86:08:24:21:36:b4:c3:54:01:
                    a5:1f:7a:02:93:e9:db:cc:3e:a4:49:2e:c8:d6:48:
                    eb:75:1d:0e:6b:1b:9f:b0:c3:d2:3e:6e:5e:d7:02:
                    37:d2:c8:6a:3d:6c:f4:d2:85:5d:2f:f9:6a:81:d8:
                    63:3b:47:95:87:0c:11:82:8a:27:a6:4c:24:6e:10:
                    77:fe:ae:e7:08:37:c3:16:4f:5f:5b:40:c5:ee:29:
                    ac:f3:1d:55:ca:7f:d1:c2:17:ad:cc:9f:dd:e7:2e:
                    35:a7:a0:fd:1d:30:cf:dd:aa:e4:50:d5:7c:51:03:
                    3f:2e:c9:e0:36:0c:08:9b:30:90:92:f2:19:f6:ee:
                    6a:06:65:0b:70:9b:46:a7:9c:53:e9:f8:41:6e:83:
                    de:cb:c4:3d:83:09:bc:36:68:5f:3b:7e:09:6f:13:
                    73:9e:49:a8:52:c6:a2:72:33:b2:3d:6a:7f:2b:dd:
                    3d:76:16:02:e8:1f:68:26:0b:e9:94:c5:40:b1:e3:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B9:D7:52:3A:F1:BF:AB:97:EA:81:37:69:24:39:45:A4:AD:A6:2E
            X509v3 Authority Key Identifier:
                keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:94:99:d5:18:c4:38:d0:1a:20:f9:9b:19:8e:1c:46:a2:6a:
         da:a4:8f:e4:b3:9d:4f:1b:98:5c:cd:d7:8f:61:70:11:b9:9c:
         ee:c3:79:1e:e9:20:64:f0:e8:b5:04:dd:d2:05:ce:b6:fb:52:
         80:9d:bc:87:e2:cf:62:0f:5a:e8:0e:18:8a:e7:39:46:8f:7b:
         f7:5d:32:21:74:b0:e2:15:9e:e8:b8:93:99:be:1e:b3:9b:85:
         1b:ca:df:17:d6:eb:c9:11:dc:a0:3a:36:b7:c8:76:58:ac:69:
         bb:06:d7:c5:cd:ed:90:65:2b:88:9e:d9:36:54:b1:64:ad:64:
         aa:31:55:35:39:44:ba:5c:3b:db:ff:e4:63:9d:26:2e:b1:a1:
         12:c6:d0:da:79:2b:0f:f1:90:e6:bb:59:8b:f0:5d:3f:f5:7d:
         21:4b:e3:4b:2f:07:92:3b:30:67:11:a8:88:14:29:e0:6c:33:
         f1:06:0b:66:45:72:7e:0a:7d:fd:49:be:bb:73:5d:ee:3f:ae:
         20:d5:37:5e:80:13:85:b9:46:ce:0e:ce:33:df:61:ea:d8:2f:
         44:57:ac:5c:ba:e8:10:94:82:0a:91:ec:ff:a6:70:f0:64:80:
         11:05:08:0f:98:9c:6a:94:1d:5c:f3:c6:50:dc:48:a9:cf:59:
         36:66:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:05:52 2025 by rpki-client