Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File:                     ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier:          qIGVgTel7rWekB1+vDE7gzE9aaNmLjaPydHMagnqm8c=
Subject key identifier:   F9:B0:49:7C:99:A9:81:79:1C:9D:74:B6:22:69:EC:94:B9:AF:2D:20
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer:       /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial:       0196B7477637FD99313776EF56FFF47C9F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number:          059A
Signing time:             Fri 09 May 2025 23:00:35 +0000
Manifest this update:     Fri 09 May 2025 23:00:35 +0000
Manifest next update:     Sat 10 May 2025 23:00:35 +0000
Files and hashes:         1: 1c920Ct5rOPHF_34AgNrTQyTHns.roa (hash: 3ha9UyAf61XbEV4U4pqec4b6uB2FvJUFQO9xEs0mMB8=)
                          2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: o/zjoBD1nIIMylXkqRnNy30LYjWRvDm0+B5RHJKWOKc=)
                          3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
                          4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:47:76:37:fd:99:31:37:76:ef:56:ff:f4:7c:9f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
        Validity
            Not Before: May  9 23:00:35 2025 GMT
            Not After : May 10 23:00:35 2025 GMT
        Subject: CN=f9b0497c99a981791c9d74b62269ec94b9af2d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:52:62:74:c4:07:19:a8:24:60:9b:f3:4f:
                    12:f9:2c:34:33:a9:b2:8a:62:b9:e5:13:0e:c9:be:
                    40:13:04:71:ab:3c:a4:3d:6e:34:e3:52:b7:70:38:
                    6c:5f:a8:30:9d:4c:06:e0:d3:04:f7:bc:80:59:35:
                    a8:32:7d:08:8e:16:dd:8b:ba:ba:38:a3:f7:a8:72:
                    92:b8:c3:ab:0d:c2:da:5a:81:34:9e:21:9e:56:5d:
                    5c:61:cf:ea:ec:89:e2:81:bc:8c:ed:33:06:b7:1a:
                    10:54:ee:b6:5d:eb:d2:f0:fc:da:57:e7:99:42:9e:
                    c6:aa:27:e3:ac:1b:c8:49:89:c4:a4:ea:b9:5b:23:
                    ee:92:f0:a1:d7:be:dd:e5:a8:f2:a6:ca:61:8d:4f:
                    21:36:b5:55:3f:e6:33:cd:b9:88:b9:4f:bf:f1:c2:
                    46:2d:c0:c3:63:22:95:5e:0e:c7:00:a7:09:33:b7:
                    b6:21:f4:b6:e7:08:3a:de:eb:92:e5:a1:0a:c7:71:
                    b3:48:f7:d8:31:12:ad:23:d0:c3:a2:4d:9b:02:f7:
                    0f:f0:e0:d3:08:6c:4a:d1:2b:e9:53:b7:e5:8c:d5:
                    63:52:86:db:ab:3e:47:ba:ad:e7:6d:69:98:2d:eb:
                    54:0f:da:06:2a:c2:80:b4:5c:13:e8:08:b0:f4:81:
                    3a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B0:49:7C:99:A9:81:79:1C:9D:74:B6:22:69:EC:94:B9:AF:2D:20
            X509v3 Authority Key Identifier:
                keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:33:56:a8:4f:05:bc:13:07:2b:ee:a1:6c:c4:92:32:65:84:
         fe:84:18:e9:3c:8d:92:62:07:4d:5f:df:ca:44:40:66:ba:f3:
         b1:c0:c6:7f:a6:f1:1f:c6:b1:1d:01:a0:2f:2a:57:d2:47:b5:
         81:5a:c7:b4:8a:37:5f:7e:06:00:03:53:02:68:1d:48:2d:c3:
         01:de:70:2c:b3:de:77:19:b7:20:fe:43:e5:ae:b9:c0:75:c2:
         e2:88:7f:37:90:b0:23:f2:76:13:11:99:7f:c6:2a:41:6d:5d:
         5e:69:9a:47:31:cc:b3:41:37:ef:31:7a:9c:80:a3:2d:19:8c:
         eb:c7:d5:85:36:25:24:ae:4f:03:e1:db:cd:d5:33:5a:40:c6:
         d2:77:d0:c4:5e:ec:7d:92:bf:8d:1b:6d:f1:23:56:d3:be:9a:
         64:4a:7c:8f:e4:d5:65:9b:ad:c4:97:e7:c6:7c:3a:39:e8:d2:
         81:05:be:2d:b1:53:b6:16:3d:a7:11:6c:7b:af:36:14:25:a3:
         83:55:63:8b:b1:8d:5a:31:76:3c:6d:7a:59:32:52:e8:db:86:
         b2:99:5c:e3:a9:32:87:b0:ae:84:27:4d:05:bc:4c:60:9a:0b:
         99:ac:38:e5:b9:47:bf:e1:bb:27:8b:1a:ce:6f:c2:92:45:be:
         a4:ef:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:39:15 2025 by rpki-client