Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File:                     ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier:          RAKEmuOgWjbaze2wuXz24GND4ubpcxS6dfX0ph88TMA=
Subject key identifier:   4B:EB:0F:3B:99:7A:60:B1:C9:F5:1D:C1:60:7A:DF:70:10:2F:C8:0D
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer:       /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial:       0196C04B26B47B3E95752CC02AE52A472D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number:          0C9C
Signing time:             Sun 11 May 2025 17:01:12 +0000
Manifest this update:     Sun 11 May 2025 17:01:12 +0000
Manifest next update:     Mon 12 May 2025 17:01:12 +0000
Files and hashes:         1: 23ACakt78guGwZL3RTi3BKpWsN0.roa (hash: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=)
                          2: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: /W22FPHDHS4eX68a6GEQvsRU/+l2GTK3VszXRuheiy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4b:26:b4:7b:3e:95:75:2c:c0:2a:e5:2a:47:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
        Validity
            Not Before: May 11 17:01:12 2025 GMT
            Not After : May 12 17:01:12 2025 GMT
        Subject: CN=4beb0f3b997a60b1c9f51dc1607adf70102fc80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c9:35:7f:e9:a5:0a:a6:3f:1c:55:79:23:ba:
                    04:d1:da:0c:1b:3f:a7:97:49:96:dc:10:b9:bf:35:
                    ea:99:5b:ce:25:47:a6:d6:dc:76:40:0d:8e:ab:ce:
                    4e:a7:43:ff:af:79:a2:57:b6:5c:84:ae:37:12:21:
                    16:b2:f0:8a:ee:b8:29:83:96:d8:81:10:bb:d0:76:
                    27:19:c4:00:48:05:ab:20:96:cc:34:bf:c4:b9:ec:
                    e3:95:07:fe:6a:84:86:48:87:8c:f2:3d:e8:cb:9f:
                    b4:b4:5e:d7:4d:0f:f3:a8:46:e6:3b:eb:8f:e5:dd:
                    a3:68:d8:c1:86:de:88:57:d7:d1:ea:01:8c:d5:17:
                    45:6f:57:77:52:14:ab:4c:1b:f4:5d:95:87:d6:4c:
                    8e:7f:be:b6:f6:d6:30:cc:9c:7e:8a:72:14:27:65:
                    22:22:fc:64:1f:b7:d9:26:a2:a2:21:85:ae:a0:34:
                    e8:54:e3:2c:40:10:78:77:25:9e:d7:59:08:c9:d4:
                    01:19:db:5d:e8:15:5b:84:ed:85:a2:61:9d:df:a1:
                    49:b7:42:34:04:2a:28:36:86:a3:10:67:ee:b6:38:
                    7c:51:82:6a:dc:c1:ed:b9:ad:f2:06:ae:43:cf:22:
                    29:f2:b7:a4:3f:d4:19:28:83:2a:9a:50:00:38:fb:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EB:0F:3B:99:7A:60:B1:C9:F5:1D:C1:60:7A:DF:70:10:2F:C8:0D
            X509v3 Authority Key Identifier:
                keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c2:f8:b6:9b:61:76:b7:bc:6c:d1:39:49:6e:4f:f5:70:b4:
         6c:e5:b9:77:f1:cf:33:3e:78:70:2a:72:1a:56:83:19:f6:f9:
         c0:47:b0:cd:5b:84:03:35:51:ec:93:fc:9c:07:df:96:c8:20:
         17:73:17:c3:86:a4:73:a2:1a:27:c3:02:77:ab:05:58:56:23:
         d4:a1:35:a2:14:01:07:b8:55:63:a3:79:a5:f1:3f:d2:7c:39:
         58:6b:93:a6:1a:22:a1:18:3d:fc:ee:ab:86:a7:d7:1b:97:26:
         74:9d:ae:31:5a:7b:58:14:76:36:21:5b:e5:08:2c:39:28:93:
         0c:0b:59:45:61:1a:39:1b:a5:bc:6c:3a:39:26:9b:d2:e5:51:
         c0:48:7b:fb:fd:e7:f0:5d:13:fe:25:47:5b:c4:cd:83:16:bc:
         b9:ac:b4:0e:19:45:06:f0:5d:a8:2a:bf:09:92:d9:c3:90:33:
         b3:d1:a1:c1:9d:a7:30:6c:91:7b:15:6b:f7:08:de:d8:93:d7:
         1a:07:84:d0:fa:34:1e:74:f6:c9:58:5f:2a:26:e1:b0:81:1b:
         8d:db:8d:f7:1d:a4:5c:6d:94:b8:ec:e9:2a:3a:fc:49:d4:da:
         7c:90:1c:06:f5:60:0e:43:5b:43:74:bb:8f:a5:fe:1a:f9:1d:
         7c:fd:96:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:29:08 2025 by rpki-client