Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File:                     Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier:          KLMiD2+h83KfmACTAC7XbudbMp/zCNABAotPHhe/5JY=
Subject key identifier:   7E:2E:BD:0B:4A:3C:3D:05:79:DE:FE:18:25:F0:F7:58:83:54:15:BC
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer:       /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial:       0196BFDD082474363C6F62F908194470D942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number:          09E3
Signing time:             Sun 11 May 2025 15:00:55 +0000
Manifest this update:     Sun 11 May 2025 15:00:55 +0000
Manifest next update:     Mon 12 May 2025 15:00:55 +0000
Files and hashes:         1: GTkSynOSR7JJ8hFIh874atQ2kys.roa (hash: WFZgsIYIpZf3qUaXsQ6Bchk/4++gg/bi1AspWX+Djq8=)
                          2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: wuWw8mWWi+lozTAjfSJ2buyh/CcLz2oRoUmITOVw91o=)
                          3: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (hash: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=)
                          4: qLBwfOuFs3K7TRJtu9mhTqn2oCI.roa (hash: t1+dGuENDhf8xhcNT9hdJi3ibea4hMiZnxDqhvWQ4xE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:dd:08:24:74:36:3c:6f:62:f9:08:19:44:70:d9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
        Validity
            Not Before: May 11 15:00:55 2025 GMT
            Not After : May 12 15:00:55 2025 GMT
        Subject: CN=7e2ebd0b4a3c3d0579defe1825f0f758835415bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:dd:7d:48:06:06:83:08:fb:f8:17:2f:97:
                    f0:56:04:42:60:82:13:75:8b:18:f5:38:66:d0:79:
                    b8:d9:70:5e:cc:af:57:6c:40:24:85:c4:65:54:b2:
                    59:e4:a6:c9:86:f9:d0:27:42:4c:00:ab:ed:97:55:
                    2b:0c:a8:1b:02:1c:f0:60:9a:26:9b:e6:de:52:65:
                    e8:ea:aa:a1:4b:fa:b0:55:cc:1c:9b:1a:de:2d:a6:
                    61:d5:00:d2:31:ae:61:b8:2b:8b:0c:1b:d5:30:6e:
                    d1:e8:a9:c6:63:01:5e:49:2c:ec:49:b1:a4:0a:83:
                    ac:e2:02:b8:0a:b5:b8:eb:61:e2:4b:3e:45:c5:78:
                    80:5e:b6:dc:ec:da:a8:da:0e:0c:ae:05:da:f6:c0:
                    48:77:5b:74:0e:c4:29:1f:01:19:2f:00:0a:ec:48:
                    0c:0a:81:dc:de:30:f0:ba:81:f4:56:f9:93:25:43:
                    4f:81:ae:c8:75:21:9d:40:66:75:f1:96:e2:2e:29:
                    8f:0d:9a:c1:12:09:9f:e3:61:aa:0d:5c:21:12:b9:
                    68:5a:84:a5:a8:1e:a2:46:69:5c:b1:59:67:81:46:
                    bf:97:b3:0a:96:fe:f1:75:df:05:aa:c8:69:76:78:
                    00:4f:73:51:f1:6a:17:20:5c:08:90:de:a5:af:8f:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2E:BD:0B:4A:3C:3D:05:79:DE:FE:18:25:F0:F7:58:83:54:15:BC
            X509v3 Authority Key Identifier:
                keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f5:1e:3a:3b:46:39:7c:e2:c7:24:4c:62:d6:e6:3d:78:ca:
         4f:c2:b8:63:7a:eb:4f:fa:45:aa:4e:31:5b:a5:15:d4:b8:da:
         e6:bc:c1:f5:8e:13:e2:bd:44:64:cd:a2:a5:da:0e:6c:e0:59:
         52:ae:03:8d:47:13:10:0a:f6:12:0a:0f:2d:16:c8:8f:14:1a:
         0b:30:8a:dd:a7:e9:a5:ff:cf:bc:8f:e3:58:4d:6e:c7:23:9a:
         92:05:80:3d:90:87:70:c3:2d:a6:23:25:1a:82:b8:3f:19:2a:
         cf:f0:84:fb:ae:ff:84:a1:85:cd:e8:8d:66:09:dc:01:35:89:
         88:06:b8:cb:6f:99:7a:a7:3d:46:13:20:18:65:cc:3c:e2:54:
         fe:de:6e:d6:4f:b6:55:2d:16:d9:82:b6:3f:23:07:1b:0e:82:
         b8:e6:03:05:fa:bc:ec:3b:7b:7d:8e:e3:35:43:ec:02:29:20:
         0a:d5:c3:91:83:a2:9c:20:d6:8a:18:9a:2a:e9:70:6d:28:d5:
         f1:bb:4d:c1:d1:cb:7d:30:8e:3b:6f:2f:0a:34:85:7b:eb:a7:
         e9:4a:5d:f5:bc:0e:35:36:88:c4:db:b5:7a:92:4a:0c:e0:41:
         ee:a5:9f:97:9b:9a:fb:49:28:dd:05:49:ae:cb:2b:7d:bd:f1:
         a8:59:33:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:52:27 2025 by rpki-client