Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
File:                     Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft (raw, json)
Hash identifier:          reVspAuj7vnpoi8uWZ+Wmq2jeawMDuwtKScQqZnMGaM=
Subject key identifier:   1C:C4:FD:06:BA:F5:F1:C6:B0:D5:14:51:48:39:E7:72:72:FE:C2:18
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Certificate issuer:       /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial:       0196BF6EEC6A43F3649A60AF855A04AC4B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
Manifest number:          0C1F
Signing time:             Sun 11 May 2025 13:00:39 +0000
Manifest this update:     Sun 11 May 2025 13:00:39 +0000
Manifest next update:     Mon 12 May 2025 13:00:39 +0000
Files and hashes:         1: Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl (hash: bMoen3mSlUOEMlReQZd9n43YqM0NIMP9Wysa2oUCkgU=)
                          2: g-_eT5ct7bDp65zymgf5llHzTKc.roa (hash: 6qrqxL/Wtd1D30D40m2/VyQoFXL4FQNDdMtRsZ56brc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6e:ec:6a:43:f3:64:9a:60:af:85:5a:04:ac:4b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
        Validity
            Not Before: May 11 13:00:39 2025 GMT
            Not After : May 12 13:00:39 2025 GMT
        Subject: CN=1cc4fd06baf5f1c6b0d514514839e77272fec218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:b5:1b:f8:0e:b7:c4:7c:3d:fe:47:d2:be:
                    89:1e:db:2c:d3:bd:cc:12:08:46:fb:6a:6c:f8:33:
                    aa:3f:23:9d:d9:98:33:d3:c2:32:8b:ed:68:07:54:
                    99:e2:42:85:de:f1:5c:92:a8:6a:09:3e:c4:9c:c3:
                    b5:13:6c:23:61:f9:0b:66:77:3c:63:8b:20:6f:2f:
                    5a:e1:47:db:42:04:01:7c:eb:6e:43:95:1a:ef:de:
                    0c:04:bf:e7:a4:b2:0a:15:14:b3:a2:da:72:5f:0b:
                    56:45:03:5b:84:d1:ea:98:1f:51:15:9e:f7:75:73:
                    5c:65:de:5b:94:10:8f:26:df:40:15:77:bc:85:99:
                    5f:8c:50:99:d5:6a:3a:86:ca:8c:a5:a0:9c:84:7a:
                    52:08:6e:50:5d:98:ca:1d:60:db:47:0d:33:9f:dc:
                    c2:bd:cd:bd:aa:32:87:b6:e5:e3:65:e4:47:26:1c:
                    4b:d2:80:5f:49:d2:a5:b3:cb:e9:c6:45:41:2b:54:
                    9b:ca:3d:56:fe:13:de:47:c8:65:b9:af:8f:1c:ae:
                    e3:ec:8c:3e:5f:bf:6e:f0:62:90:c5:72:a6:2e:a8:
                    58:d8:02:47:c1:5e:2c:34:f9:5b:d1:82:15:2a:22:
                    e0:c3:8c:2f:16:9a:ba:b8:96:01:03:a1:f1:e7:20:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C4:FD:06:BA:F5:F1:C6:B0:D5:14:51:48:39:E7:72:72:FE:C2:18
            X509v3 Authority Key Identifier:
                keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ef:11:85:8f:98:3a:ea:03:dd:bb:97:92:60:1c:0f:ba:9a:
         15:28:58:f3:74:ea:1a:71:06:5f:29:7a:24:fc:b1:bd:96:4e:
         1b:02:e2:49:38:69:9d:f1:d9:ac:ef:de:63:a5:9d:82:4b:2e:
         ad:64:98:ce:c3:68:fc:82:2b:f4:f3:70:ee:6e:81:b7:a6:5b:
         a2:c6:f1:72:7b:f4:ab:df:73:d2:ef:b6:a0:cb:84:8f:95:7a:
         6e:19:55:bb:05:6c:df:8a:b3:f6:3d:09:51:03:94:86:ab:1a:
         ab:10:9f:16:a0:39:d3:59:ed:8a:8a:d5:14:9d:ce:6c:8d:58:
         6b:a6:0d:06:0c:18:c1:ef:ea:1c:37:26:9a:ae:9c:93:e4:6a:
         1b:40:f5:27:e8:09:e2:7f:ff:16:06:e5:d3:2c:8a:ea:ad:26:
         39:10:27:5b:60:6a:cb:08:02:85:e2:ff:38:8b:de:ec:fa:dd:
         d1:13:8a:ff:64:90:46:a0:e0:38:c9:d4:78:ae:bd:fb:1e:b8:
         cf:fc:7c:12:c7:a6:ca:ba:40:3a:29:bf:c8:b5:b3:e0:95:b3:
         8a:d6:61:21:f0:3e:11:c7:61:00:b3:ff:19:6a:f9:81:3d:18:
         01:18:ad:97:f4:d1:a8:c6:c2:59:83:6e:a5:a5:e4:22:fb:86:
         ac:04:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:53:35 2025 by rpki-client