Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File:                     zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier:          8/R7pHYNsb1J0nYy002OW/zDl4AzVPkwyKAS3UmpPuo=
Subject key identifier:   60:D4:64:EA:F3:D4:11:63:A5:BB:D9:F3:26:FD:E1:46:EA:E8:8F:CA
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer:       /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial:       0196C615B5BBB3A6F97859743EE1D113EF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 20:00:33 +0000
Manifest this update:     Mon 12 May 2025 20:00:33 +0000
Manifest next update:     Tue 13 May 2025 20:00:33 +0000
Files and hashes:         1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
                          2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: QcrgMwmionP7Ycn6HPG50PB9AwRhxTDWI9TnUqiOgPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:15:b5:bb:b3:a6:f9:78:59:74:3e:e1:d1:13:ef:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
        Validity
            Not Before: May 12 20:00:33 2025 GMT
            Not After : May 13 20:00:33 2025 GMT
        Subject: CN=60d464eaf3d41163a5bbd9f326fde146eae88fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:f7:71:0f:14:81:9d:d5:77:81:45:90:9b:
                    e6:d4:c9:dc:f8:a7:85:87:f1:01:40:09:74:a1:db:
                    cc:f8:f5:65:0c:3b:fc:eb:bf:6b:78:44:ac:8b:2b:
                    e4:f0:2a:a9:7d:ce:41:76:f6:59:b4:01:e3:42:1a:
                    7c:4c:61:c9:3a:bf:88:44:ac:b5:09:2c:de:92:ff:
                    14:73:d1:36:59:41:d7:fa:28:b6:a5:87:a3:97:ff:
                    14:6e:cb:e5:4b:a7:ba:b1:a5:48:3d:3d:db:c7:41:
                    e4:4f:9f:cd:a4:f3:9b:bc:96:73:c2:5f:b6:11:91:
                    4d:d2:80:16:71:85:0c:2b:1d:95:5f:96:ba:0c:0d:
                    6f:7d:26:6b:76:a4:2b:37:fe:9b:f9:82:ee:e8:f5:
                    8c:c3:f0:a1:34:75:0a:32:68:9d:c8:6d:56:bb:11:
                    1d:c8:d6:6a:02:32:12:92:e5:4d:bd:f8:73:2b:a8:
                    c3:f3:2e:cc:ed:95:19:1b:bb:3a:6a:18:5f:a9:5e:
                    f3:f5:3b:c8:42:39:1d:fd:ea:b8:c2:ff:e8:d9:d8:
                    10:cd:fd:70:9e:a1:78:cd:cb:b4:b4:92:68:3d:81:
                    78:5e:ee:6e:e6:18:0c:89:54:cd:8f:1f:6b:29:78:
                    63:de:b6:f4:9d:5a:80:87:19:c8:5f:0d:48:ff:91:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D4:64:EA:F3:D4:11:63:A5:BB:D9:F3:26:FD:E1:46:EA:E8:8F:CA
            X509v3 Authority Key Identifier:
                keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:e7:3f:80:34:e6:91:9b:14:a6:58:44:04:a4:fb:bc:9a:
         4c:a9:3c:72:2e:d0:51:d4:ad:44:70:50:4f:48:7f:40:f2:a9:
         d1:2f:64:a7:8b:a9:b2:4c:75:d6:ea:ee:a2:e9:52:b9:54:90:
         03:17:af:7c:79:5d:95:05:4b:dc:c1:57:a2:15:c8:38:a1:7b:
         93:34:ef:bb:85:45:cd:b0:9b:06:0c:7f:f1:86:3a:46:d2:af:
         05:68:91:1a:fc:1d:a0:38:c8:55:4c:dc:1a:c6:75:da:a3:6c:
         fc:66:4a:2a:57:ea:4a:7c:17:0a:6d:98:01:59:3a:0c:7e:7d:
         5d:ab:58:d8:32:59:cb:3e:5e:16:ed:fe:0a:26:11:1a:3e:d7:
         8b:1e:a9:f6:6d:2c:5a:94:84:1d:2a:f4:e6:1f:da:71:af:2d:
         0c:97:18:7e:91:44:1e:97:27:18:d8:2f:2a:eb:9a:1d:3e:00:
         7d:34:f6:c6:b9:0a:3d:e0:7e:9a:77:cb:6d:49:92:8c:67:6d:
         ec:0b:fa:f7:a5:b5:1c:a0:71:9b:50:c2:c9:24:74:f5:4e:2b:
         70:a2:5f:81:c3:5d:71:18:8e:e6:78:c9:76:97:bf:b3:45:49:
         87:68:a4:4e:2f:70:aa:06:9f:34:4e:4d:c1:a7:69:66:3d:0b:
         e8:86:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:00:40 2025 by rpki-client