Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File:                     Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier:          tXtLWohFV/bPulrv3Engo8tybSJ2z9NGPhgycXHe/uY=
Subject key identifier:   9A:05:54:4C:C1:78:12:3E:19:1B:E7:34:49:D3:02:11:4F:B3:02:A2
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer:       /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial:       0197B6A1CC663A6FAC3E8C97EE8FE715BC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 13:02:26 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:26 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:26 +0000
Files and hashes:         1: ZLef86UZ8-ykPDzWWLmzoQSdgC4.roa (hash: 9D+NhHpbmJi6ZpbrwdmFqtG+bLkEiMEM9kjTpQm+k4M=)
                          2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: G0xxYnqI/O8Zof+ofddKksc12Orvvhu6eRNki+jL0/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:cc:66:3a:6f:ac:3e:8c:97:ee:8f:e7:15:bc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
        Validity
            Not Before: Jun 28 13:02:26 2025 GMT
            Not After : Jun 29 13:02:26 2025 GMT
        Subject: CN=9a05544cc178123e191be73449d302114fb302a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:7b:eb:7e:e2:7a:a0:89:8a:c7:eb:52:6e:
                    a4:cb:c7:53:94:e1:2d:37:39:f8:82:8e:3d:04:4c:
                    81:2c:f6:74:44:ce:d4:50:af:1d:af:8a:ad:6e:cc:
                    55:07:a3:97:07:67:a4:08:f9:78:dd:69:51:58:b4:
                    10:49:47:a2:92:9e:ac:a3:7d:8e:ce:84:82:62:c2:
                    11:aa:d5:88:cb:dd:ff:44:93:3f:c0:0e:5b:8b:d4:
                    6b:22:b3:17:b1:1e:ec:49:2b:ec:f7:a4:e9:02:7d:
                    dd:26:fb:37:c5:5e:10:86:9e:ae:0f:90:bc:c6:2a:
                    6a:1b:25:91:2d:31:bf:af:92:ee:b2:8a:0f:15:8f:
                    47:7a:b6:19:2f:c7:59:6c:58:04:2b:0f:b7:e6:3a:
                    91:69:2f:ea:db:75:4d:77:be:8e:9e:58:e5:f3:fd:
                    a9:3a:6b:db:f2:1a:6c:4d:d2:c0:2f:57:89:05:6f:
                    1f:0c:c0:0d:42:c5:2f:15:d4:d4:63:15:9c:ba:fd:
                    3d:69:03:ce:80:30:84:b1:35:1f:84:91:59:66:33:
                    c6:3c:41:80:89:26:10:1c:bf:53:36:e1:41:a0:ea:
                    de:dd:e3:f4:61:12:69:46:38:28:50:d6:21:d1:43:
                    c3:f7:e1:8d:f5:54:39:42:10:c3:f2:1b:fd:9a:4a:
                    b3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:54:4C:C1:78:12:3E:19:1B:E7:34:49:D3:02:11:4F:B3:02:A2
            X509v3 Authority Key Identifier:
                keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:20:09:2f:ee:6c:e0:ed:ff:c3:06:ab:47:45:3f:cd:24:cd:
         e1:c6:2d:cc:be:9a:66:3f:c3:21:4c:cd:60:1e:50:71:90:16:
         10:26:d9:e1:82:23:6f:e1:c1:76:4c:1c:a2:dd:6d:02:d5:01:
         be:ea:38:70:f0:c7:cc:14:20:61:26:33:60:43:12:48:09:18:
         87:72:d7:52:9b:5d:d8:f9:1a:b4:0a:ab:62:97:36:cb:26:20:
         e9:36:26:79:26:44:7d:d4:77:16:39:27:4e:10:72:37:2e:ad:
         80:d7:87:13:fb:cb:e5:73:91:8e:98:1e:74:02:06:0f:dc:ed:
         0e:a2:59:23:cc:68:87:9a:32:e5:71:65:e7:2f:95:c9:91:d8:
         63:73:8e:e2:fb:a9:02:5b:bc:d2:06:36:dc:8f:b9:67:f5:6b:
         47:23:c1:88:ae:a7:a6:fb:71:fa:5b:02:9a:45:11:c9:03:a7:
         43:4b:5c:16:55:19:dd:91:23:56:14:e5:9f:61:da:ca:ec:6b:
         72:33:a4:f8:64:3d:35:aa:92:a6:41:63:e2:2b:9c:c5:49:05:
         d0:59:c2:c9:2b:ea:4f:ac:ff:a2:7e:7e:55:6b:af:68:e4:d0:
         5c:dd:46:38:af:88:c0:dc:fb:49:f6:93:e0:6c:07:d8:4d:4a:
         02:ad:0b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:30 2025 by rpki-client