Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
File:                     z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json)
Hash identifier:          OMjIFGEhuXWuzCGGjqAxkaaOo3qo6wf4960FtC3ZkCE=
Subject key identifier:   68:41:4A:B8:D1:47:79:33:8F:22:E4:FA:B3:B6:5C:44:C3:FF:44:5E
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Certificate issuer:       /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial:       0197C124BFEB1B8EFBBB879E0618BDEF2679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
Manifest number:          08AC
Signing time:             Mon 30 Jun 2025 14:01:40 +0000
Manifest this update:     Mon 30 Jun 2025 14:01:40 +0000
Manifest next update:     Tue 01 Jul 2025 14:01:40 +0000
Files and hashes:         1: DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa (hash: ZdFCYWIasaf//f4zgLVM9d1VQcq8sWh/cpG9mNzIlnw=)
                          2: Y_bp31HDq8uAy4l6THmKPbLCNsI.roa (hash: 9XEelD2ZciA/ZipA/uoYFFsArdGQrDybFJa5ScNreOg=)
                          3: _wDpItSC0HSOgvkQZmYWMWTXQro.roa (hash: /5YtbpUy82u+cUJWT1RGpyakzo95z6EKYbAFHFrfUcw=)
                          4: xe1Xtte-l4mWDxVWnZUVoJfv978.roa (hash: eTv/lTHlf1G7tnxCPkM7+fpZ+Fnfpfp4hidvIU4UnJU=)
                          5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: 1Pcz8X3i97BVrsZJP+tJpBqUSDomA8heZfFS/jdD3Js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c1:24:bf:eb:1b:8e:fb:bb:87:9e:06:18:bd:ef:26:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
        Validity
            Not Before: Jun 30 14:01:40 2025 GMT
            Not After : Jul  1 14:01:40 2025 GMT
        Subject: CN=68414ab8d14779338f22e4fab3b65c44c3ff445e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b7:c9:c6:82:09:97:4a:f6:91:e9:e6:60:2a:
                    9f:b7:a6:bb:ec:ef:32:64:f0:de:56:ed:10:cf:24:
                    9a:97:5b:57:06:4b:10:78:5f:3f:83:1e:88:41:22:
                    2f:23:d8:79:17:97:0a:82:3e:3d:ba:f9:f6:0b:43:
                    f2:43:80:7e:55:29:f4:c4:8a:40:52:f7:f2:94:ba:
                    43:ff:a1:36:ed:01:17:ab:c2:68:10:5d:f8:10:e2:
                    cd:3b:06:44:32:57:dc:a5:cd:cd:95:59:1d:b6:49:
                    50:15:9c:30:01:fe:d7:4e:2f:94:ac:7f:ed:e1:2d:
                    67:4b:70:32:76:cc:6c:f4:bf:33:c0:09:ac:ec:72:
                    80:3a:82:0e:20:ad:9b:9b:a2:84:40:77:31:29:60:
                    6b:88:86:e1:30:36:53:cd:e1:19:a4:a9:5d:85:7a:
                    ad:1c:f8:d8:96:ac:31:1b:48:16:b2:d3:41:0d:aa:
                    28:fd:ae:c9:51:d2:60:01:f9:50:a0:a7:99:1e:2b:
                    bf:26:d9:5b:6f:8a:0e:e5:dc:e7:22:a0:4a:1c:11:
                    67:bf:dc:1e:7e:cc:cc:22:a4:34:e2:4a:27:5d:df:
                    f8:91:3d:ba:56:a9:ab:36:3d:f0:2b:fa:9c:b3:ff:
                    c4:67:da:93:25:af:ab:93:36:49:c2:f4:6b:ae:93:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:41:4A:B8:D1:47:79:33:8F:22:E4:FA:B3:B6:5C:44:C3:FF:44:5E
            X509v3 Authority Key Identifier:
                keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:14:88:4b:5e:6d:69:cf:ce:48:8c:01:5e:b0:7c:cb:55:
         f4:83:cc:8b:e9:06:ba:96:c6:91:46:9f:1e:ee:f4:8d:d5:bf:
         84:74:7e:a4:ce:07:24:5b:17:6d:fb:75:63:05:71:91:55:81:
         7a:e3:99:d0:ec:43:cd:cd:3c:a1:d2:a1:f8:d9:e0:d5:00:6d:
         8f:b6:c7:12:97:42:a1:7f:41:eb:ce:c0:16:f2:55:22:da:a9:
         9a:8a:a8:66:04:a7:f1:c5:7c:ae:6d:3f:2f:fd:89:22:05:76:
         26:2b:85:bb:5f:ee:cf:e0:d9:fd:27:42:dd:06:18:0d:d6:bd:
         59:3a:8d:d5:0e:eb:28:4b:43:41:c0:32:c1:b4:87:18:9b:a2:
         62:b9:08:70:11:0c:54:72:fa:52:da:95:4e:d8:d2:45:f8:a2:
         bf:29:9f:0b:47:2e:ad:4e:28:95:64:eb:b6:a1:86:cc:92:f6:
         16:be:7c:54:fd:3d:07:29:22:32:ee:d6:b8:3c:aa:60:31:52:
         34:34:a1:f7:48:6d:a9:6e:0d:ac:22:91:57:c6:cc:42:b2:58:
         b8:65:c9:44:18:36:98:a0:7f:74:c8:3d:84:4c:bd:5c:65:bf:
         c7:ad:4b:ff:a6:ae:b1:3c:a3:6c:ae:e8:b6:54:fa:ea:c5:db:
         65:f5:e2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:44:02 2025 by rpki-client