Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
File:                     z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json)
Hash identifier:          HyZpsur5nuL9ZbgoHMS/s55IG8z/x/98J13MshYAeb8=
Subject key identifier:   23:3A:AB:F6:07:60:2C:98:D5:A5:18:12:25:F9:18:6A:A0:41:17:AC
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Certificate issuer:       /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial:       0196BC6E47EA36F0822AA83EDFAA0166333C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
Manifest number:          0825
Signing time:             Sat 10 May 2025 23:01:06 +0000
Manifest this update:     Sat 10 May 2025 23:01:06 +0000
Manifest next update:     Sun 11 May 2025 23:01:06 +0000
Files and hashes:         1: DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa (hash: ZdFCYWIasaf//f4zgLVM9d1VQcq8sWh/cpG9mNzIlnw=)
                          2: Y_bp31HDq8uAy4l6THmKPbLCNsI.roa (hash: 9XEelD2ZciA/ZipA/uoYFFsArdGQrDybFJa5ScNreOg=)
                          3: _wDpItSC0HSOgvkQZmYWMWTXQro.roa (hash: /5YtbpUy82u+cUJWT1RGpyakzo95z6EKYbAFHFrfUcw=)
                          4: xe1Xtte-l4mWDxVWnZUVoJfv978.roa (hash: eTv/lTHlf1G7tnxCPkM7+fpZ+Fnfpfp4hidvIU4UnJU=)
                          5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: Ttm8opOXeAE7s5e7tmw3wZTvtdowwfWlVKNr7yrb+yE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6e:47:ea:36:f0:82:2a:a8:3e:df:aa:01:66:33:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
        Validity
            Not Before: May 10 23:01:06 2025 GMT
            Not After : May 11 23:01:06 2025 GMT
        Subject: CN=233aabf607602c98d5a5181225f9186aa04117ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:84:c3:0d:e4:2f:6f:ed:c9:c4:94:b8:c8:
                    b6:c0:06:35:75:63:bb:4c:bc:3b:d2:be:db:f1:41:
                    8f:fb:41:0e:2a:30:e0:66:45:fd:d4:27:d4:cc:d1:
                    3e:69:ed:24:b8:1b:56:c2:2d:cf:1f:61:f0:90:55:
                    bb:2e:f1:bc:d4:16:85:c7:4a:99:ac:84:65:af:a8:
                    d8:60:97:b0:b5:56:07:f4:8c:ec:7f:00:59:98:ba:
                    b4:80:f2:2b:2d:c8:10:38:6b:75:56:75:03:ca:9c:
                    f4:57:45:17:f6:3b:3f:2a:5f:d5:da:10:7f:76:8f:
                    64:72:01:ba:63:31:d2:e6:bd:e4:69:05:b5:d0:c5:
                    ff:1f:bb:8b:07:33:c3:be:cb:4f:0f:5a:be:9d:df:
                    c2:e0:1b:2a:dd:f9:08:20:01:b3:a4:9e:91:13:d8:
                    68:eb:26:4d:a4:37:07:f4:02:7d:8b:b3:2b:56:5d:
                    df:8c:ab:c9:fb:e7:8a:72:db:0b:c7:dd:25:97:3d:
                    50:47:f0:a9:75:30:b5:89:e7:c7:1f:9e:bf:07:00:
                    b4:65:71:bf:ce:41:f1:51:a0:e8:e2:c9:83:79:31:
                    42:b0:b4:41:34:f8:28:7f:05:9a:88:de:c0:94:cf:
                    05:b8:0c:48:e8:b1:4d:49:30:10:d9:74:7b:87:72:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3A:AB:F6:07:60:2C:98:D5:A5:18:12:25:F9:18:6A:A0:41:17:AC
            X509v3 Authority Key Identifier:
                keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:54:7b:45:b6:de:a8:96:47:7c:bd:a5:81:f3:55:7a:4e:94:
         8b:49:98:1a:d6:e3:3a:83:4e:74:33:9e:a1:eb:a3:0c:1e:cc:
         ad:60:f7:9e:52:be:53:ce:22:96:40:4f:25:57:8a:d5:d7:53:
         28:7b:e2:50:36:6e:f7:24:fd:22:d5:01:52:5c:be:72:c3:b5:
         d7:43:95:5e:47:6c:bf:a4:b2:f3:04:a3:5f:84:95:cf:1d:e6:
         04:09:07:9d:2e:09:d5:f6:1b:be:ac:ed:6c:20:75:29:39:f1:
         d4:24:d1:d2:70:33:db:0f:9a:89:75:7c:26:7d:5d:86:6f:f1:
         9a:9f:3c:c2:cd:19:49:86:2b:21:25:da:f5:be:4c:50:5c:29:
         29:a7:1d:7c:1f:1f:dd:91:2d:14:f1:58:94:26:49:94:d4:bd:
         4e:de:71:3e:37:cf:45:fa:c7:34:6e:ff:88:53:05:bf:51:09:
         c4:f3:fa:de:b0:35:7a:2d:bd:cf:b3:e9:8a:64:99:34:77:51:
         d9:b8:cb:e2:7b:a5:43:61:35:2b:12:1b:b2:e4:5c:74:cd:d8:
         30:24:a8:6c:e7:d9:c1:9c:48:3a:23:a4:32:7b:31:b9:e2:2c:
         f1:af:91:b2:67:32:c7:ad:7c:36:8e:25:7d:af:2e:b5:79:b8:
         f2:da:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:37:25 2025 by rpki-client