Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
File:                     zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft (raw, json)
Hash identifier:          zNm5YZYzICxscV6tmFyEf/UC0z3eQIXvU3pZwFgx7w8=
Subject key identifier:   98:53:65:DF:44:37:8A:A9:13:FC:18:3F:E5:58:D5:68:3F:34:D8:53
Authority key identifier: CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B
Certificate issuer:       /CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
Certificate serial:       0197B8210147CAE14725C0B06B3F389A0794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 20:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:00 +0000
Files and hashes:         1: 3UV0tf4TpPvOJSDiaLYyYXtXVvM.roa (hash: 91M1HXlX3TdwneLYlb0DmYCeKKtHfStsh7Dj5kd2gPQ=)
                          2: hTVB9eVU8NNiy6MIVDn_GhyE-TY.roa (hash: d7gEsYm91j6b+k2E5nN8wQQW4TMiwqo8rZZMnn76l+U=)
                          3: lmY3OHV06iQ2okHJC_xew_5c0LY.roa (hash: VAAXf3sc2kIcjjslDb0B8KOFlo5MNyl0zFRFKzuk/g0=)
                          4: r_1BD4QIwyD4kFSgnJUFtmINdFo.roa (hash: analV2m8+Aw9Y/v6KpT1JDqGOt2ZN0tCbqPYX5Hv+/c=)
                          5: zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl (hash: oQTrepouvzhf/KfjVBVY6x/h4nk33QK64WgRSNuu11c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:01:47:ca:e1:47:25:c0:b0:6b:3f:38:9a:07:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec3b347a216bc437b0bd4cf0bc8cda65e8c2d3b
        Validity
            Not Before: Jun 28 20:01:00 2025 GMT
            Not After : Jun 29 20:01:00 2025 GMT
        Subject: CN=985365df44378aa913fc183fe558d5683f34d853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:81:df:a1:42:2a:fa:9e:67:47:87:c6:0c:
                    88:d1:7e:9e:91:e1:4f:e8:5d:a8:84:61:b8:10:4f:
                    b9:86:18:7d:fb:c9:6f:90:2b:8e:1e:e5:49:07:0f:
                    b8:99:1c:9d:a9:f7:d6:ad:73:4f:cf:4f:64:71:12:
                    e6:2d:b1:d8:9c:cf:33:db:2a:dc:65:ff:9f:63:fb:
                    50:f1:77:2c:33:e5:27:96:ae:9d:0d:73:6e:5a:cc:
                    f4:e1:08:2c:dd:04:8c:61:a9:e8:ba:3e:42:5a:7a:
                    9a:17:23:cb:26:00:4a:40:5e:07:bf:b5:b7:ed:61:
                    5c:8a:0c:8e:43:1f:a1:65:a1:64:6f:0e:1d:d7:14:
                    fa:87:eb:03:48:16:13:07:6e:2f:2a:0b:78:eb:df:
                    87:3e:27:95:d5:57:88:f0:99:3d:ae:4c:24:a8:dd:
                    ff:f6:a3:78:ad:50:87:92:4f:f9:10:d0:05:d9:40:
                    a1:6b:85:67:6d:1b:56:65:02:0a:79:0c:e8:88:2d:
                    85:8c:df:8b:66:a5:af:7d:85:31:9e:3b:9b:f2:2d:
                    8a:e4:ef:8a:a9:ca:b1:e9:fd:67:6e:c3:ac:8d:17:
                    23:e2:a2:13:27:b6:5c:44:86:73:98:f0:ce:e2:2f:
                    ee:1e:7c:c2:92:74:8b:50:34:47:78:d5:1c:24:78:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:53:65:DF:44:37:8A:A9:13:FC:18:3F:E5:58:D5:68:3F:34:D8:53
            X509v3 Authority Key Identifier:
                keyid:CE:C3:B3:47:A2:16:BC:43:7B:0B:D4:CF:0B:C8:CD:A6:5E:8C:2D:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsOzR6IWvEN7C9TPC8jNpl6MLTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/7a683b-fa78-4112-b6b6-155fb3fe287e/1/zsOzR6IWvEN7C9TPC8jNpl6MLTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:01:c5:af:72:37:2c:1b:77:82:de:bc:75:8e:d5:45:9d:9a:
         06:dc:76:a2:5b:27:6e:37:d9:e0:15:5a:1b:4f:a6:ba:e3:c1:
         46:4f:88:77:2c:5e:3a:a9:ba:41:69:d7:99:55:b2:1b:dc:60:
         e3:05:73:b0:2a:db:85:34:cd:c1:08:79:75:32:d7:61:3c:e4:
         49:c7:5a:b2:f4:c6:3a:f4:8c:35:d2:0b:f2:56:48:22:f8:1f:
         82:f3:8f:1d:c5:f0:56:de:b2:8b:fe:91:ba:c6:73:22:60:58:
         b9:66:aa:ab:59:48:7e:a9:d8:5e:3a:bd:b0:30:2c:65:42:47:
         49:21:53:d2:f2:22:d2:e6:ae:81:16:a3:01:6a:c4:f4:c9:50:
         6c:39:d1:91:ec:e8:e2:c0:95:60:30:7e:57:4a:b5:0f:5a:34:
         27:24:e3:00:79:9c:ee:5a:37:54:3e:b2:5b:f9:51:37:37:70:
         7c:53:22:a1:52:32:fe:51:c5:dc:08:06:d8:8e:6e:48:f4:d5:
         fa:17:f8:7d:9b:55:28:8e:d1:34:26:85:b8:61:85:7d:75:4b:
         9d:36:8e:bd:7c:b8:1f:e7:a1:cc:15:87:79:b9:c8:ab:4a:4c:
         9f:fc:c7:4f:40:3d:4e:c7:1d:3a:19:58:b5:cd:42:7f:59:aa:
         0a:9b:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:35 2025 by rpki-client