Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File:                     ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier:          RJXbg2aSf93VqVS0hiN9be8V9O9tKqeHsKXwcml2Jj4=
Subject key identifier:   66:77:FE:F6:0F:D8:42:8D:7B:F8:12:1D:98:FB:3E:61:FF:68:E0:BF
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer:       /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial:       0196AF202E54BEFF77CC9FA209AF279EEC3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number:          1531
Signing time:             Thu 08 May 2025 09:00:43 +0000
Manifest this update:     Thu 08 May 2025 09:00:43 +0000
Manifest next update:     Fri 09 May 2025 09:00:43 +0000
Files and hashes:         1: 1v8i4fKHGgVFWMzHMhW8J-xxCqk.roa (hash: 3nrn/SO1kBcjpxN/GEFTE06I2/Ei7ozh8XwfvRrFcmg=)
                          2: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: we78fE65bnFWFFcqAJx+7rXq8q41yYLTqCkKviOYX+8=)
                          3: clYhAW8kFlSaTpdGL_6AqwLYC_c.roa (hash: XEbICpC7LdXsG9DjCaajLcED5VcPq/8r93ZX2PiFgnw=)
                          4: nXVN6v3CzmLleKeTxS_kRgT2CK8.roa (hash: oJxgRFyz2Xezz+l0iWGdoRK6g6HPkdzeG09BGt4Hpn8=)
                          5: yAPFTHuBSG8S3cBogTgaLXQHsIA.roa (hash: Dghvk7oUxYxn4x3kqmECJ3G0zYv5Ok/s1CWEsFSe7A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 09:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:20:2e:54:be:ff:77:cc:9f:a2:09:af:27:9e:ec:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Validity
            Not Before: May  8 09:00:43 2025 GMT
            Not After : May  9 09:00:43 2025 GMT
        Subject: CN=6677fef60fd8428d7bf8121d98fb3e61ff68e0bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:3b:b2:52:16:75:a0:86:4e:bd:5d:44:c1:
                    c6:ac:8e:f1:1b:8e:62:16:a4:12:d1:8f:8c:46:65:
                    07:21:5f:d7:5d:2a:f0:83:65:69:b1:3d:1e:9e:06:
                    5f:c5:cb:62:50:ed:6b:a4:f3:0e:50:9a:69:4c:b2:
                    75:8b:ca:89:f2:1f:51:9d:6c:c3:c8:8c:79:6e:0e:
                    d4:8e:1a:77:3f:a9:bb:1b:c9:61:37:72:01:e1:b5:
                    bb:4a:8b:e7:9c:59:df:38:fb:21:65:36:b5:d8:5e:
                    e7:e7:b1:7d:3c:3c:94:29:d9:53:74:21:cb:d3:03:
                    b9:a7:06:f3:6f:46:1a:49:fa:b6:c3:4d:a8:aa:c2:
                    a9:72:d6:f3:f9:6c:ae:3e:d1:cf:09:aa:4f:37:e0:
                    0d:3d:67:73:80:94:9b:32:5d:ef:be:fe:46:73:9d:
                    14:de:aa:8b:16:8a:01:52:d6:52:a5:56:ba:89:eb:
                    5e:d5:7e:12:3f:c5:e9:b8:19:5f:17:6c:fb:08:df:
                    dd:91:51:4e:56:87:c5:87:2d:60:4b:b3:e4:97:77:
                    b7:94:77:28:5c:82:b2:0d:3d:79:88:35:aa:fa:7d:
                    cd:5d:41:9f:22:d9:92:9a:d4:16:80:f7:ef:62:73:
                    61:bb:98:7b:0b:7d:07:c1:81:97:eb:08:aa:c3:9f:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:FE:F6:0F:D8:42:8D:7B:F8:12:1D:98:FB:3E:61:FF:68:E0:BF
            X509v3 Authority Key Identifier:
                keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:79:57:2c:f4:79:e8:c3:52:2e:8e:79:63:d4:7a:cb:40:0f:
         d1:d6:09:48:a3:c8:5f:43:0d:97:f5:c6:4d:ff:c7:de:20:9d:
         99:aa:09:a3:b9:1d:37:36:49:c2:10:00:17:92:15:cc:9f:65:
         ef:5d:e5:d2:70:7c:f6:82:78:61:67:a6:11:1f:7d:f2:1f:e0:
         e6:24:c0:1f:d3:c3:7d:d7:95:12:48:b2:19:e7:9e:9f:23:19:
         7c:d2:6f:3a:2c:aa:d6:06:b6:5f:5b:4c:92:b1:1d:bf:c2:6e:
         ff:cb:40:a5:ce:f3:83:ae:e5:f9:6a:84:8c:de:1b:11:b6:a2:
         ba:3e:ba:41:99:d2:56:79:e3:c4:3a:5b:d6:f9:16:fd:ef:e8:
         4d:74:b2:97:98:ec:0e:46:a2:a1:69:93:d2:e5:ff:08:3c:82:
         df:68:b4:46:89:05:b8:0e:18:ef:08:65:a2:b5:cc:52:c8:7a:
         44:1c:81:41:c2:b8:5a:96:a4:df:a1:f2:12:05:ea:6d:10:ec:
         03:58:b4:67:95:36:6e:6f:16:90:e7:ac:17:3d:3d:87:9f:9f:
         2b:f1:e4:8a:c6:af:9d:9d:2f:2f:54:cb:45:56:2f:24:f4:63:
         04:81:9b:4e:69:97:0e:54:77:4d:0e:28:43:dc:04:20:39:d5:
         73:04:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:12:53 2025 by rpki-client