Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File:                     Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier:          KFbDVUKBRYYrwZcpRBeZeUNp5mn7bb++F5sy15xsHtU=
Subject key identifier:   8C:6F:0E:11:AA:15:CF:B9:83:C3:CD:CC:25:C5:D4:E1:CD:D0:31:01
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer:       /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial:       0196AD31E3D5D4EC10BC05310A450D510240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number:          152B
Signing time:             Thu 08 May 2025 00:00:49 +0000
Manifest this update:     Thu 08 May 2025 00:00:49 +0000
Manifest next update:     Fri 09 May 2025 00:00:49 +0000
Files and hashes:         1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
                          2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: 3JB12dKr4qNgyZGvzRex6Jf1SJYAPSkZHlhloE4ATZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 20:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ad:31:e3:d5:d4:ec:10:bc:05:31:0a:45:0d:51:02:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
        Validity
            Not Before: May  8 00:00:49 2025 GMT
            Not After : May  9 00:00:49 2025 GMT
        Subject: CN=8c6f0e11aa15cfb983c3cdcc25c5d4e1cdd03101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:82:26:32:b8:4a:15:46:f3:c3:fc:ae:09:a7:
                    17:40:ad:31:42:e2:d9:e8:b4:6d:14:b5:ba:92:d7:
                    69:bf:d1:82:4e:31:93:ca:94:4f:35:a5:50:d1:a1:
                    a0:20:1f:81:56:3d:4e:65:c8:cd:cb:09:d4:ac:cb:
                    f4:eb:1e:ab:7b:1c:ee:48:3c:d0:1e:1a:40:ae:94:
                    14:ba:7a:ee:3b:bc:d3:4d:3d:5e:54:0a:be:55:4c:
                    5a:fc:6d:18:ec:71:e6:ba:75:05:a4:54:f8:d4:fc:
                    43:9c:65:a6:83:f0:c8:23:32:d5:90:64:10:36:19:
                    8e:d2:b2:b6:45:ee:17:47:6b:f8:73:8d:39:12:ae:
                    0a:70:66:71:f5:90:f6:1f:50:bf:66:aa:60:b5:45:
                    24:e9:e1:9c:93:f6:6a:6d:58:3a:25:2f:de:11:10:
                    5f:ff:cc:7b:f5:ae:58:78:2d:b3:54:31:40:f2:66:
                    f3:aa:7e:3a:60:53:28:02:a8:f8:59:f1:ee:b5:d1:
                    0d:5f:82:41:42:6e:5a:ba:a6:85:cd:61:b4:59:62:
                    c6:8d:00:b9:ec:53:8d:9d:2c:6f:08:a1:e2:f9:21:
                    71:6d:3d:0f:40:c3:e6:16:3d:fd:3b:d1:84:bb:71:
                    e3:e6:7f:85:6f:a2:66:e3:bc:3d:dc:bf:b7:b6:63:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6F:0E:11:AA:15:CF:B9:83:C3:CD:CC:25:C5:D4:E1:CD:D0:31:01
            X509v3 Authority Key Identifier:
                keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c9:3e:bd:83:cf:5b:95:48:ba:c5:8e:6c:0c:ec:2c:43:02:
         86:4f:fb:40:9c:b2:55:69:6a:22:97:cf:98:16:5f:20:1b:19:
         b9:e0:41:c0:03:fd:34:44:e8:ca:26:53:ed:07:25:57:7c:80:
         7d:79:06:fd:ae:50:48:57:aa:1e:71:c8:50:75:a4:1f:58:a1:
         c2:d8:d4:f3:a8:1e:c2:56:2d:0a:22:84:de:ac:53:1e:b6:dd:
         4b:bf:18:6d:15:ce:0e:97:37:bf:d9:46:27:b4:e2:bd:9e:34:
         60:a2:33:06:5f:82:66:c5:1d:0a:a0:80:d6:d0:b9:ba:70:74:
         1d:64:9e:dd:a9:6f:c2:f4:c5:5d:72:5b:c7:af:3d:21:2c:42:
         c9:6d:cd:5c:97:6e:1e:9f:4a:2e:72:79:62:bc:de:64:97:5c:
         e1:3e:82:10:ad:4d:73:3f:ac:1f:a3:a8:c1:43:05:4a:5e:20:
         c0:01:d3:83:a3:00:ea:e5:31:96:8b:77:ed:94:ea:fb:e6:82:
         f3:9f:7f:11:20:9b:a4:6b:18:e3:d4:24:a1:61:68:46:0e:d6:
         7a:1a:24:f5:69:2f:c5:c6:ea:b8:b1:1a:67:5e:8e:fd:67:81:
         65:e5:6d:48:4e:b2:bc:51:5d:a5:c8:83:32:35:cf:f3:4e:55:
         37:d7:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:10:21 2025 by rpki-client