Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
File:                     ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json)
Hash identifier:          i1YzVTUYUN5Rfd9fFOsZF/smQdYnY0QciRJfcl9z2Wg=
Subject key identifier:   86:5C:63:EE:59:DB:49:33:F5:77:AD:70:10:73:B2:20:DE:83:38:C8
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Certificate issuer:       /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial:       0197B6D74D7BF8D862F5E05BD13A94E56BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
Manifest number:          15BE
Signing time:             Sat 28 Jun 2025 14:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:52 +0000
Files and hashes:         1: 8AY6X4XCRyiZxzFlt6tsbjR30jM.roa (hash: 5ZRaImHY2F/S3wQVqNNqg0MgU/7l0llwd1UlTTznV7w=)
                          2: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: jjQNf36gavJYJyM0FBUVcqZi8mpM2YigP+MoLQ+qpqs=)
                          3: bth8nL17vmRfjOgOkE44hcyUW-U.roa (hash: +2CIURrrMY1RojUxyGB46gsHzcj2R0An7rXyNN3SRxE=)
                          4: fyItLKzWB2M2DcciXcjMC9ehbVo.roa (hash: 3hotdI7UkUaU/+3bTtSUK7y3DutUUFvTPfXcX54WRXY=)
                          5: xn5m4EslppaLzMQirkAjRslNCRc.roa (hash: UOBKdq1hXA/nlG6uZfbozsCpkf5JEX4D4dlwEvI1lPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:4d:7b:f8:d8:62:f5:e0:5b:d1:3a:94:e5:6b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
        Validity
            Not Before: Jun 28 14:00:52 2025 GMT
            Not After : Jun 29 14:00:52 2025 GMT
        Subject: CN=865c63ee59db4933f577ad701073b220de8338c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:ca:f5:8f:e1:c6:50:18:02:95:37:81:af:
                    76:7f:ce:9d:32:24:35:90:7b:7e:a0:13:52:12:15:
                    db:99:bf:0b:d0:21:18:09:3a:9c:3e:50:cb:1f:4c:
                    32:f8:d6:3f:fa:d6:47:64:6f:b5:1e:7d:0c:08:72:
                    f0:14:ad:e5:49:0c:d1:a0:c1:af:76:b4:48:62:bd:
                    61:26:ca:17:b7:27:2a:ab:14:50:b2:73:96:9c:0a:
                    3e:eb:9b:80:59:22:31:0a:74:2c:39:9a:26:15:9c:
                    be:e8:33:64:6f:09:07:51:7a:b6:d4:df:20:df:60:
                    2b:fd:a5:26:78:c4:fc:e4:bf:c8:01:07:7b:d8:7e:
                    bd:07:8d:03:d3:32:af:ed:64:45:48:f4:1b:5e:d9:
                    46:d0:ad:3a:48:32:1b:f9:56:d5:d5:ab:8d:a2:ba:
                    07:47:cc:c4:13:c9:e8:6b:fa:bf:0e:9e:0d:05:32:
                    84:b6:20:24:8a:f7:2e:2b:62:5a:3d:d9:cb:48:ac:
                    64:f9:e8:05:2f:8a:f3:84:37:46:80:32:68:ce:d5:
                    d1:dd:f9:f5:50:9e:f4:13:1d:14:93:b7:21:62:d5:
                    a3:95:d7:11:3e:a1:88:f8:1f:ee:a9:fd:73:f3:4d:
                    84:4e:c4:73:47:f2:8a:5a:37:1f:dd:87:86:bb:97:
                    cb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:63:EE:59:DB:49:33:F5:77:AD:70:10:73:B2:20:DE:83:38:C8
            X509v3 Authority Key Identifier:
                keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:df:28:4e:9b:ee:3d:8d:40:30:82:85:de:27:74:2c:7e:65:
         0c:38:20:c0:94:89:6e:0b:c0:46:fe:bd:73:d5:84:48:6f:12:
         18:d0:31:e5:99:e2:e3:3e:c1:3e:4a:66:5a:aa:b8:17:f5:66:
         c4:30:f5:c6:44:26:13:02:82:3c:16:78:53:c6:12:88:82:32:
         f7:6b:b7:c9:a0:e6:8e:ba:8a:6f:c8:e6:dd:05:a0:80:5f:63:
         79:ee:0f:38:97:d1:c5:40:3f:1b:80:8f:11:a0:87:c7:b2:b9:
         9c:70:0f:9a:de:4f:d1:10:82:d5:65:0c:c7:ad:d4:8c:82:28:
         36:bc:e2:80:d2:5b:d8:58:c2:62:5e:88:53:26:00:58:c1:8f:
         14:3e:b7:a9:ca:26:3c:35:00:0e:45:f3:fe:e5:f9:a6:0b:5b:
         69:7b:86:12:a1:59:fc:99:9b:32:82:e0:f9:60:fb:60:67:16:
         f4:bc:c6:09:58:29:43:d5:1f:1c:5d:b8:45:92:40:82:1c:ca:
         f5:44:3b:ff:38:f5:fa:43:a6:9f:fc:ee:db:60:e0:f6:5e:ad:
         77:26:45:8a:63:fa:6a:76:8f:69:a4:3f:d8:4e:e8:4a:35:5d:
         83:78:91:87:3f:de:fa:ca:42:77:a7:a6:bd:19:3c:9b:11:83:
         a7:30:87:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:06 2025 by rpki-client