Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File:                     Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier:          TmIbnydTkW2CXsuXcNnV86RpaNEy/lF09nxGtBgsc/0=
Subject key identifier:   C4:1E:E8:94:8C:1D:CB:E4:B3:48:C6:74:FF:D9:B5:71:68:D1:FE:1D
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer:       /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial:       0196B7B5B64E37636431D8E5D7072FA6084D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number:          1532
Signing time:             Sat 10 May 2025 01:01:01 +0000
Manifest this update:     Sat 10 May 2025 01:01:01 +0000
Manifest next update:     Sun 11 May 2025 01:01:01 +0000
Files and hashes:         1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=)
                          2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: w/l6MxtMgzHB5TpTikesTHn2ySpPZ3BZMeo4GaE4xyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:b6:4e:37:63:64:31:d8:e5:d7:07:2f:a6:08:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
        Validity
            Not Before: May 10 01:01:01 2025 GMT
            Not After : May 11 01:01:01 2025 GMT
        Subject: CN=c41ee8948c1dcbe4b348c674ffd9b57168d1fe1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:44:20:1d:5f:b0:20:84:4d:a4:0e:d3:b8:
                    74:7a:9f:73:ee:75:f0:5a:ca:08:23:a6:8f:7b:b3:
                    d1:36:0c:83:14:1d:dd:38:d9:a3:79:9a:22:c0:91:
                    31:18:4d:b7:87:4a:86:03:39:b5:b6:58:08:2b:d8:
                    d8:13:d3:25:ef:be:50:cb:65:80:38:c3:b4:30:8f:
                    60:59:a4:c8:4e:54:73:0b:12:e1:37:85:24:ca:27:
                    4c:3d:2a:c6:84:71:0b:fe:10:19:31:ac:fb:b8:17:
                    64:c0:1f:2d:58:21:32:47:50:6e:5d:14:88:d6:84:
                    13:d3:8f:c3:5e:45:fc:f1:a1:d8:7c:a9:d6:ae:03:
                    67:86:01:5e:74:5b:ca:92:cd:38:fe:c3:f5:14:39:
                    a8:ad:b5:1c:94:ee:2b:50:f4:11:94:ad:50:eb:ed:
                    4f:a1:e9:bd:ef:6f:fe:3c:bf:ca:b6:68:71:66:0c:
                    27:5c:77:c5:aa:12:9f:1a:23:a1:29:f7:d8:69:a7:
                    c0:89:5e:71:4b:55:eb:5c:3f:d2:26:50:5b:65:d6:
                    05:15:77:04:76:7f:a5:a6:90:6f:74:53:13:0e:e4:
                    c2:60:36:bb:e3:4b:a8:13:05:44:2d:92:8d:18:d6:
                    ec:80:c9:47:2a:ba:f8:de:8a:1e:98:80:e2:bb:0f:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1E:E8:94:8C:1D:CB:E4:B3:48:C6:74:FF:D9:B5:71:68:D1:FE:1D
            X509v3 Authority Key Identifier:
                keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:39:69:1d:eb:aa:e3:42:41:a0:03:24:9d:58:28:48:b6:ba:
         72:34:d5:cc:cb:4a:c5:86:da:54:86:d0:7e:44:6b:7e:3c:2e:
         1a:4e:02:cc:ce:bb:67:67:01:de:69:01:b3:47:9a:e6:30:50:
         d2:12:7e:7c:e5:42:e6:d7:45:55:57:73:15:38:c2:67:80:70:
         6f:51:a6:33:65:c2:b5:66:db:65:49:17:33:c6:14:9f:8f:29:
         91:26:ae:ff:0b:13:40:7d:67:b6:5e:9b:1f:e8:6f:f7:f6:4e:
         69:5f:51:d9:19:af:98:18:8c:d3:74:23:e4:5c:95:5f:c1:14:
         4b:84:a7:d4:45:ee:ed:36:3e:8b:75:9a:22:ab:48:f8:47:0c:
         16:cc:cf:17:39:96:20:f8:60:71:5b:5e:c8:a6:94:9c:53:d8:
         14:ee:7b:5d:f7:02:4c:0c:a9:65:cc:dc:03:22:81:53:db:1c:
         b1:48:08:68:65:9a:09:5c:55:28:f9:68:b0:19:83:f0:fb:65:
         f2:e0:ec:fb:89:62:5d:07:2a:e4:0b:4d:b7:ac:fa:b2:17:9d:
         92:a6:b5:ff:b5:16:d1:1e:97:97:ff:ea:a2:ba:0a:25:b3:6e:
         51:04:2c:ce:64:c8:43:32:27:dd:c9:29:a6:47:94:cd:17:df:
         52:6f:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:08:47 2025 by rpki-client