Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File:                     Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier:          DGDXa+MVLxdgywcWclsswbVd6Mihu/O/g6hO889FsT0=
Subject key identifier:   2F:9D:EE:09:A0:30:C1:AA:01:81:A5:8B:45:B9:D7:B3:EB:8D:A6:C2
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer:       /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial:       0196C6BAF3E6386FA5DC6EF63889AE9685C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number:          154C
Signing time:             Mon 12 May 2025 23:01:02 +0000
Manifest this update:     Mon 12 May 2025 23:01:02 +0000
Manifest next update:     Tue 13 May 2025 23:01:02 +0000
Files and hashes:         1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: U4bgW3r9WNCTpmkYJW1YqbQR9E0uRU7x7F5el22c90U=)
                          2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:ba:f3:e6:38:6f:a5:dc:6e:f6:38:89:ae:96:85:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
        Validity
            Not Before: May 12 23:01:02 2025 GMT
            Not After : May 13 23:01:02 2025 GMT
        Subject: CN=2f9dee09a030c1aa0181a58b45b9d7b3eb8da6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:96:37:2e:b9:ac:87:4c:0b:80:5d:f6:cf:03:
                    17:99:81:a4:8d:e5:ec:e6:9d:37:31:49:a3:24:ff:
                    5d:e2:0c:b3:13:d8:72:b2:8b:0c:ad:2c:00:b1:e1:
                    bf:22:f0:1d:ec:f7:a7:2b:ad:08:34:f6:42:14:4f:
                    99:ea:00:fb:a1:90:4d:22:8c:08:7e:28:d8:75:42:
                    28:f2:66:9e:a8:5a:b9:b6:01:a5:c7:ab:bd:fa:50:
                    84:2b:21:e7:8b:46:ee:0b:92:af:00:4e:d8:18:78:
                    79:45:b1:8b:c6:90:69:53:29:cb:dc:68:4f:c1:ae:
                    a3:a7:19:84:8b:53:2a:dd:e8:97:a5:fe:27:bb:57:
                    16:f1:95:c3:78:a5:d9:d8:a7:2b:fc:bd:35:3e:d6:
                    96:5b:ee:3c:a1:eb:58:85:3d:d3:d8:9a:f7:f7:d1:
                    04:e8:26:7a:a9:f7:4c:1f:48:dc:5d:27:1e:ce:bc:
                    d3:61:87:49:32:b1:3c:cf:2a:1e:41:5f:45:fe:97:
                    db:ed:4d:d1:fd:06:06:59:fa:f1:d0:f2:0e:84:0c:
                    32:9a:cd:50:80:f8:99:9a:13:01:31:39:a1:8a:15:
                    fe:b8:70:80:e0:ce:26:9e:71:83:e7:61:87:38:c2:
                    05:c1:28:6f:32:36:df:87:c4:30:c8:fa:46:b4:03:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9D:EE:09:A0:30:C1:AA:01:81:A5:8B:45:B9:D7:B3:EB:8D:A6:C2
            X509v3 Authority Key Identifier:
                keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:15:83:72:46:be:d7:e9:85:a4:d0:b3:e8:75:95:64:76:ad:
         1d:59:54:66:65:22:14:58:5a:b1:87:f9:d0:93:30:c3:82:f4:
         7c:9c:b1:05:12:d9:ba:34:92:fd:38:6b:a6:2a:3d:7c:6f:b1:
         5e:77:c0:32:d4:36:ec:c5:39:b1:2b:d0:49:8a:8f:85:49:99:
         12:b9:f1:d8:4a:ce:63:6b:f4:33:e8:1e:d1:0e:6a:b2:84:42:
         f0:bb:d2:f9:6c:ea:ca:0b:62:99:b7:82:b9:57:c7:01:56:f8:
         53:cf:f6:cf:39:48:fe:cf:b3:fe:a1:1d:3c:55:94:79:3d:ae:
         93:a3:a9:16:a0:9a:07:c3:fd:31:25:96:42:06:04:01:f8:22:
         c1:29:61:c8:13:2d:82:ba:fb:25:77:22:69:d1:87:2d:95:68:
         75:26:dc:a8:bd:0e:4e:6e:84:76:8d:0f:81:ad:80:e2:ea:53:
         1f:96:ab:f2:04:c8:18:44:98:7b:ee:d5:36:9c:74:cf:2d:49:
         3f:25:15:e0:fe:e1:61:5d:5e:6d:26:4c:39:94:35:36:11:00:
         3c:5b:e1:a5:3b:8d:66:b1:d1:53:08:bc:22:da:f5:5a:b1:1b:
         a7:63:e6:74:e1:bf:44:53:94:01:e4:e0:0e:87:c3:65:57:a1:
         1b:cb:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:32:09 2025 by rpki-client