Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File:                     zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier:          INZG9o8XVjaD2VvRCb0ynewh+FhXxRAD0Rwv4X4uOxI=
Subject key identifier:   00:A8:41:AA:C0:C7:9F:C3:92:16:9B:D6:AA:88:CB:82:59:35:56:89
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer:       /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial:       0196ACC3BD66FC11021B5A7D2BCF2CB45231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number:          1532
Signing time:             Wed 07 May 2025 22:00:31 +0000
Manifest this update:     Wed 07 May 2025 22:00:31 +0000
Manifest next update:     Thu 08 May 2025 22:00:31 +0000
Files and hashes:         1: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (hash: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=)
                          2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: VOw+WXA6eXw1NBzfwJqbEWEWidT7pL3BiZHfopqSFV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:c3:bd:66:fc:11:02:1b:5a:7d:2b:cf:2c:b4:52:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
        Validity
            Not Before: May  7 22:00:31 2025 GMT
            Not After : May  8 22:00:31 2025 GMT
        Subject: CN=00a841aac0c79fc392169bd6aa88cb8259355689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:0d:fb:55:75:de:80:ee:db:e6:23:8a:4f:
                    76:08:74:be:76:f4:a7:e5:9c:0e:e4:0e:99:ec:dc:
                    60:da:cb:f5:ae:42:22:03:21:c4:ee:7a:54:c0:b6:
                    f7:81:3f:b0:35:12:ae:f3:86:15:87:89:30:35:04:
                    f6:78:0e:6d:2f:b0:93:9d:b6:0e:ba:fe:87:bb:ea:
                    ba:d6:1f:a9:e3:4e:8b:9d:7d:ff:67:88:80:39:a0:
                    ed:ac:32:16:dd:0e:a0:81:e8:60:4b:c0:fa:26:a2:
                    96:c8:05:7d:29:47:c5:3b:bf:64:70:91:41:74:9f:
                    c5:06:09:95:02:87:33:df:c4:ea:b9:dc:1c:f6:4b:
                    ec:58:1c:a7:35:56:37:c7:93:68:37:9f:c0:70:ac:
                    64:fc:dc:de:f3:4e:57:b1:c8:59:0c:9c:35:29:f7:
                    d1:39:41:6a:25:b6:7c:68:d5:bd:2d:d8:a5:6f:01:
                    7e:7d:f3:98:1c:36:80:63:ab:16:f2:49:1d:6d:6e:
                    01:25:b0:5f:5b:a1:30:f0:e5:23:66:18:90:37:2e:
                    b9:87:65:17:83:d5:31:d2:1c:a5:c2:08:ea:f8:41:
                    69:bf:e4:87:fb:cf:85:bb:15:fd:c1:2d:c9:31:27:
                    16:38:a7:38:b5:a7:c0:63:d6:d2:a5:af:c7:5c:4a:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A8:41:AA:C0:C7:9F:C3:92:16:9B:D6:AA:88:CB:82:59:35:56:89
            X509v3 Authority Key Identifier:
                keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:64:5c:80:76:f7:61:e6:b4:8d:1e:13:b9:22:36:0f:38:82:
         56:24:32:52:1a:a8:a9:90:d0:43:e5:da:7d:71:f5:f2:a1:8b:
         12:91:93:a1:ed:3a:94:88:9d:a4:e0:98:46:36:5a:3d:0e:c9:
         9f:76:4d:66:4b:c4:1a:c0:f9:82:b5:76:be:07:4d:54:e5:a3:
         c5:c7:d7:3f:9f:b4:4b:bf:bc:45:2f:c7:fa:ea:09:d1:d2:ba:
         f0:17:ce:00:5c:04:b4:3f:24:3b:45:3a:20:2e:c5:65:ec:0f:
         11:fd:c2:50:0b:7e:e1:c5:d5:5d:15:38:e8:42:f6:d2:4d:05:
         9e:7d:13:e4:49:b1:25:9a:85:a8:f4:c2:55:54:cf:f3:6f:99:
         56:db:3e:54:9d:fd:af:4f:31:6e:3f:dc:b2:d7:4d:20:9e:e0:
         d1:7b:7a:07:ff:e0:9f:ea:a1:d5:4e:e1:3d:7f:6e:3e:2b:f7:
         11:32:5d:c7:81:28:5d:8a:4f:38:4a:fd:48:96:42:30:32:e7:
         37:8e:c8:11:12:f7:70:8b:2a:4d:db:78:4b:9b:f9:8c:a3:3d:
         71:ab:3e:ac:56:da:35:7d:f4:d7:c5:f4:0e:71:57:9c:5d:e9:
         5e:46:83:53:0d:04:77:3f:4a:f5:fb:03:8d:fe:58:8a:e4:f5:
         e7:26:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:58:13 2025 by rpki-client