Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File:                     ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier:          K67GhAxF2BHdKeVY8dRj37ll6CX15vZNK0jae+cBivY=
Subject key identifier:   F0:59:18:61:A3:94:F6:0A:66:D5:0B:10:1C:E9:C3:8D:E3:C3:A1:E0
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer:       /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial:       0197B77C4773603FCE2565ABDB5FEED305CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number:          15BD
Signing time:             Sat 28 Jun 2025 17:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:04 +0000
Files and hashes:         1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
                          2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
                          3: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
                          4: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: bbudCqbq4n3hr3VhuyUm5YSVlAVELwQcAfFLQfNVSvs=)
                          5: nHMt9tnZDRx6m3JgaG-0g5rC0g0.roa (hash: 1doY6wOIAWaSvtGgJud3474i9gzt/qEdhjfPhIJDXfE=)
                          6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
                          7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
                          8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:47:73:60:3f:ce:25:65:ab:db:5f:ee:d3:05:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
        Validity
            Not Before: Jun 28 17:01:04 2025 GMT
            Not After : Jun 29 17:01:04 2025 GMT
        Subject: CN=f0591861a394f60a66d50b101ce9c38de3c3a1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:37:04:3a:8a:ae:66:d4:bf:63:b4:83:ee:
                    80:77:4e:f2:8d:da:f6:f6:44:b4:41:15:3f:d9:8a:
                    e2:96:b8:a7:4a:bf:41:c9:46:ab:b9:38:66:6c:51:
                    c7:c0:19:e9:c9:c1:d5:78:f5:ef:8f:2e:83:a8:85:
                    34:c2:65:50:97:5b:bc:47:ec:ea:a0:7b:51:ff:97:
                    2b:54:02:01:6d:de:78:5a:21:da:60:6f:ad:d5:37:
                    60:21:8b:7b:00:f1:79:63:44:a7:4e:08:60:e3:06:
                    64:07:9c:5f:5e:22:5b:e2:62:a7:9a:a6:25:e9:61:
                    a3:48:64:ca:49:ce:c7:db:e8:69:5f:71:38:0a:70:
                    53:8b:31:e4:e0:59:24:7e:33:26:1b:0b:56:3c:8b:
                    24:90:ee:5a:df:96:a7:9c:b7:9a:25:9d:e9:4d:f1:
                    a7:48:62:1d:ba:54:33:ea:8f:20:52:99:9b:60:2a:
                    e3:e2:7d:aa:5b:a9:30:be:86:a0:9c:0a:a3:2a:ad:
                    77:74:70:20:2f:ea:8d:f8:80:b6:f6:ad:4e:87:c9:
                    e1:ce:09:7d:46:28:a0:c5:02:e8:69:3b:e9:9d:11:
                    e5:cc:33:17:88:d1:73:ef:c6:ec:32:ef:19:1a:d5:
                    5b:b6:5a:e6:b5:64:f5:27:7d:60:c6:1b:bb:d9:e8:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:59:18:61:A3:94:F6:0A:66:D5:0B:10:1C:E9:C3:8D:E3:C3:A1:E0
            X509v3 Authority Key Identifier:
                keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:05:56:1d:c1:9c:e7:88:95:4b:27:8a:c4:13:49:d4:95:35:
         0a:af:d8:76:10:4e:e2:4d:58:4b:40:e8:e4:00:92:7d:91:ed:
         95:4e:52:98:1a:c0:4b:b0:66:f6:46:16:eb:a3:43:88:53:e4:
         ac:69:3b:f6:b3:6c:e2:c9:c9:80:ef:2c:65:44:f6:ff:8f:d2:
         2d:68:65:d2:46:71:ef:63:3a:f3:2a:18:d9:f0:ff:b6:27:89:
         94:75:57:28:9a:bc:d0:ac:5c:f3:5a:b6:65:50:1d:81:99:fa:
         7d:07:1e:d3:c2:ba:d4:7f:45:39:fc:07:d6:6a:05:f1:60:b1:
         e5:7b:f0:a3:a4:da:52:84:71:f9:a4:fb:e1:60:8e:60:37:ed:
         8c:aa:dd:d0:12:94:89:fb:9c:1d:7f:4d:03:99:3e:a6:d9:fb:
         4a:95:47:47:5d:a8:93:0b:29:b3:a8:38:63:6d:68:2d:d1:03:
         d7:1b:66:52:b8:3d:5c:ec:df:1c:f8:41:cd:65:6c:32:7d:75:
         64:9d:22:aa:cb:32:59:3e:a7:cb:a2:30:02:42:3a:83:4f:8a:
         43:e6:cd:2d:02:bb:63:d9:ab:8d:94:c9:33:2a:e2:a4:01:fe:
         fc:9d:cf:2b:c1:10:fc:d8:27:fd:31:d4:d5:9e:80:6b:93:6a:
         62:cb:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:54 2025 by rpki-client