Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
File:                     ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft (raw, json)
Hash identifier:          kuAZgyyW0p9UsbvgqI15lHUtJHNR941dCRibbqfmjCU=
Subject key identifier:   00:FC:D1:4A:F6:FA:8C:31:2A:FD:13:EF:D2:1E:99:E4:62:D0:AD:92
Authority key identifier: 65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E
Certificate issuer:       /CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
Certificate serial:       0196A3C0A1A0C164CCDCA30F43E27F15BF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 04:00:32 +0000
Manifest this update:     Tue 06 May 2025 04:00:32 +0000
Manifest next update:     Wed 07 May 2025 04:00:32 +0000
Files and hashes:         1: 4Ce0RkzJxFf2zmOfoaUJ_gBJn-E.roa (hash: D0dPfxOksgJWe+dXu2u19DHS26MVsqfPtPHxRFo3TcI=)
                          2: ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl (hash: 3b6W6ClNFcxfLGwtw2ooXn0a4IZPk31clLHvnPu0r9U=)
                          3: ky6_9R6eveNvLuCWPAC-r7adSS0.roa (hash: U6nC3qpfku8imjHFuiezWbVoq5/CNzst9vKAejsjQls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:c0:a1:a0:c1:64:cc:dc:a3:0f:43:e2:7f:15:bf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65516ddc7331e2e269dc57d9c7632f25de7d0c6e
        Validity
            Not Before: May  6 04:00:32 2025 GMT
            Not After : May  7 04:00:32 2025 GMT
        Subject: CN=00fcd14af6fa8c312afd13efd21e99e462d0ad92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:ff:a2:6d:4a:57:c3:2e:57:02:86:5a:a9:
                    ce:91:80:91:b3:5a:a0:07:78:8d:bb:29:d0:62:c0:
                    13:73:b0:b3:b2:66:2a:1c:2b:56:81:3f:32:39:73:
                    5b:5a:6e:8c:89:81:19:e0:16:53:74:c6:44:87:74:
                    72:fe:2b:f1:41:18:67:ba:6e:14:c8:6d:95:b3:45:
                    56:5d:56:6b:65:29:31:5b:17:a2:b8:86:ec:24:58:
                    13:29:4a:6d:6e:69:69:7c:b9:32:aa:fd:21:77:f4:
                    cc:45:40:2d:14:be:d5:1a:ac:31:eb:73:7e:71:19:
                    3d:80:ac:fa:18:f4:ce:8f:20:a7:da:81:8f:0f:da:
                    87:29:54:6f:79:7b:eb:b0:f8:c2:e2:f2:2d:ff:f0:
                    8a:01:d8:59:d3:f9:dd:8c:85:b7:84:3c:2d:34:6b:
                    17:c6:5a:8b:12:78:71:71:c2:de:3c:d7:bd:86:8a:
                    98:6c:c4:55:dc:17:32:df:78:49:67:d4:88:ac:f4:
                    42:ee:56:a6:f3:cf:f7:aa:18:39:71:36:84:43:94:
                    da:f3:00:14:66:51:c2:e2:29:c4:43:66:2c:0c:7e:
                    8a:a9:3c:67:8e:b9:4e:b3:59:12:ea:a3:e0:be:92:
                    9e:82:bc:73:5c:a7:f8:c5:31:af:96:66:c6:22:5e:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FC:D1:4A:F6:FA:8C:31:2A:FD:13:EF:D2:1E:99:E4:62:D0:AD:92
            X509v3 Authority Key Identifier:
                keyid:65:51:6D:DC:73:31:E2:E2:69:DC:57:D9:C7:63:2F:25:DE:7D:0C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVFt3HMx4uJp3FfZx2MvJd59DG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8def12-897e-4e22-aa8b-834b9c10bf48/1/ZVFt3HMx4uJp3FfZx2MvJd59DG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5c:95:c5:8c:d8:97:ea:4e:b7:a0:d1:ee:66:5f:03:ec:08:
         7d:57:64:01:8b:18:74:91:48:04:82:e3:36:42:3c:1e:0f:f3:
         6c:9f:49:78:ba:eb:0b:47:24:0d:e3:94:cf:c4:36:c0:cc:d9:
         66:49:c3:48:13:4c:09:14:f5:e3:cd:df:b9:54:3f:2d:4a:e6:
         b2:b5:d9:12:b2:45:a7:f1:88:c3:57:27:d0:f0:4c:be:99:32:
         65:76:87:3e:13:4c:77:e7:1b:92:1e:24:c5:c8:18:bc:26:ab:
         79:69:82:73:4b:fa:dd:69:63:86:b2:0d:48:48:22:16:6f:c3:
         6a:bd:63:1d:a7:73:ba:fb:77:7c:2c:11:58:e8:49:0c:30:bb:
         88:f3:53:b5:90:41:f5:d4:fe:af:b0:98:cc:91:dd:8d:58:a8:
         19:01:15:99:bd:0f:7e:2f:c8:c0:9a:ca:b9:8e:85:94:9d:3d:
         e3:2a:98:db:47:a6:46:bc:43:53:31:35:bd:70:88:82:ad:92:
         5f:3a:02:cf:3b:a9:23:0e:f6:12:be:4f:4a:21:b3:e0:28:ad:
         0c:78:32:a1:87:c1:ae:12:52:f4:3a:3e:73:f9:72:2d:47:15:
         2d:45:0e:62:62:76:a0:ff:35:14:01:f6:42:c7:77:5c:b3:cd:
         a6:53:ae:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:14:22 2025 by rpki-client