Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
File:                     ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json)
Hash identifier:          /esE1a5HjGvVLpAetwx4Xl/QaKiexxZQtoG+77+ijyk=
Subject key identifier:   8A:71:C5:D9:6C:54:2F:92:9F:CF:9D:5C:5D:A6:67:E6:2D:A6:E6:EE
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Certificate issuer:       /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial:       01969CABAA29B1C011717042EC71002A05D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
Manifest number:          1524
Signing time:             Sun 04 May 2025 19:00:18 +0000
Manifest this update:     Sun 04 May 2025 19:00:18 +0000
Manifest next update:     Mon 05 May 2025 19:00:18 +0000
Files and hashes:         1: G6NrW3y5EqOh-RgJpBb737yZLyk.roa (hash: wCHunDZi4NJcQQFd2igk175J53d+RrxOeT27vR93kLI=)
                          2: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: iAb+x4etHra9MSXMn+zzqoQnICYhsizxCL409igocSc=)
                          3: gzfX_YElaVuorbJFmzrDP83HpJs.roa (hash: /WT8uVeP+a0ogLSqro0SWXG/OOSeISwxGQticrGht7k=)
                          4: iIuGz7RbK5-6_sH4vM6hDlbmm84.roa (hash: NR09n14cZ06DE+j7XwmogKyYaQjIh4GJAdSuXipSGyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 19:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:ab:aa:29:b1:c0:11:71:70:42:ec:71:00:2a:05:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
        Validity
            Not Before: May  4 19:00:18 2025 GMT
            Not After : May  5 19:00:18 2025 GMT
        Subject: CN=8a71c5d96c542f929fcf9d5c5da667e62da6e6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ac:b9:48:c3:0b:dc:fe:01:56:a1:1f:d6:42:
                    91:95:08:c3:d6:21:ed:29:4f:63:84:70:b0:a7:80:
                    c9:08:25:50:f2:75:61:a2:68:e4:65:ae:5c:b3:1e:
                    3f:86:9f:8a:67:d2:0d:71:ac:d1:0c:b0:67:ce:1c:
                    41:33:fd:92:64:73:e9:64:c4:0a:dc:62:88:73:45:
                    b3:56:1b:8a:90:c4:d4:c8:6a:cc:41:70:fe:cc:69:
                    cf:63:77:96:e8:d7:aa:5e:65:68:e0:a1:5a:aa:88:
                    74:a5:cb:94:ac:af:5b:9b:5a:39:4d:8a:bc:70:e8:
                    f3:80:1e:6d:d5:9a:18:0d:db:05:be:91:43:e6:a0:
                    ec:2b:b9:14:0f:9d:a0:e6:7b:25:6c:1f:37:a0:02:
                    12:d3:d4:5c:99:8c:74:db:9d:14:4a:c4:cc:40:84:
                    44:f6:3d:b4:ef:ae:6c:f0:aa:8b:96:3b:4f:0a:f6:
                    73:26:84:0d:76:87:8a:90:50:28:f4:4f:86:f3:33:
                    ef:06:0c:09:40:5d:95:c5:b1:73:0c:43:d5:b0:b3:
                    0d:08:05:94:4b:17:e5:e7:23:f4:f9:15:67:15:59:
                    da:02:54:df:24:ec:0f:d8:cb:08:7f:16:53:c6:e6:
                    e5:7c:8c:41:8d:3e:ac:50:72:db:2b:a4:48:2a:d3:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:71:C5:D9:6C:54:2F:92:9F:CF:9D:5C:5D:A6:67:E6:2D:A6:E6:EE
            X509v3 Authority Key Identifier:
                keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ee:ad:cf:c8:2c:7c:5b:00:3d:90:6c:d1:f6:1c:0e:3e:b7:
         e2:6f:ae:7e:8f:5d:cb:72:b7:65:43:a1:7c:b0:ae:ee:39:07:
         6c:2b:d5:60:a3:d6:b3:03:ea:3b:90:50:e9:46:23:52:b0:d4:
         c0:1e:3f:12:03:ec:f8:8f:44:52:28:1a:d4:0a:24:4a:11:ac:
         7f:be:2e:e9:c7:c2:e8:89:7e:6d:11:fc:54:4a:44:34:a9:7a:
         d3:6a:dc:f1:cd:fa:27:11:c9:3c:50:22:06:06:bd:f1:9f:9d:
         54:ac:b5:eb:89:44:fc:84:25:bf:0f:52:32:dd:99:a2:12:95:
         63:a3:bf:89:3c:d9:32:53:69:a3:9e:b7:a1:f9:0c:df:ca:36:
         b8:1f:d0:37:09:da:1d:2f:58:6f:b3:b6:e5:78:df:d0:0b:d4:
         95:cb:0d:ee:8f:71:4a:7f:58:4c:33:b4:81:70:5c:65:79:1d:
         17:83:df:13:cd:95:24:6c:5a:57:89:7c:d1:b4:11:68:0c:cf:
         d4:31:9f:c3:90:cf:77:93:de:f0:bb:86:91:4d:d2:60:ba:1f:
         b1:f1:d3:64:1f:52:4b:f9:02:d0:96:2b:d9:39:19:fd:f0:c3:
         bf:f8:94:04:3b:e3:cb:1e:45:ab:c4:2c:0a:4d:e8:b6:f9:6c:
         77:a3:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:52:23 2025 by rpki-client