Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
File:                     ZtM30zC6RO_P71VTVRMqaixpeDw.mft (raw, json)
Hash identifier:          FF29dRGVcJ79CptgjZ9S6zN34jk/YneP2ymWk7/tDK4=
Subject key identifier:   B0:4B:8A:37:18:85:9E:B6:EA:38:18:24:58:ED:B9:89:77:96:D6:6A
Authority key identifier: 66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C
Certificate issuer:       /CN=66d337d330ba44efcfef555355132a6a2c69783c
Certificate serial:       0197B77C0BEEABE69E4A19807B2BD21EC2C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
Manifest number:          1481
Signing time:             Sat 28 Jun 2025 17:00:49 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:49 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:49 +0000
Files and hashes:         1: 1V6f1oV4KdVfTtXD9C3yVDxLM0g.roa (hash: QjrhXSoTLzzQB8pNCdz/57KujYqXNHGX03aljVkY0I8=)
                          2: LWQOU0lsBJ7AcpfwEXoL-ok6rok.roa (hash: 0/1RbhG27PyHjDZyoP4IqnfgSwWfnZZl+ijORLw+Ejw=)
                          3: ZtM30zC6RO_P71VTVRMqaixpeDw.crl (hash: 8EH27NAc+ifnfxOxIADztAC31K1VneA7z00BNXfA/kQ=)
                          4: vmCYxXBe6-CXL6B1D1C_4Plw6tE.roa (hash: BOX7FDtGe/sQ9owge+TRj9jp46uxKtCvT9m2x87H1K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:0b:ee:ab:e6:9e:4a:19:80:7b:2b:d2:1e:c2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66d337d330ba44efcfef555355132a6a2c69783c
        Validity
            Not Before: Jun 28 17:00:49 2025 GMT
            Not After : Jun 29 17:00:49 2025 GMT
        Subject: CN=b04b8a3718859eb6ea38182458edb9897796d66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:d4:3a:fa:58:ee:0b:6f:1b:35:b2:36:b8:
                    e6:a6:d3:34:ac:cc:d3:d3:cc:f2:69:20:03:1b:fe:
                    bd:80:cf:0f:cd:9d:a7:65:59:8a:8a:20:6f:25:17:
                    17:ba:5b:7d:29:1b:0b:eb:4b:93:3f:f9:18:90:2e:
                    0d:78:a0:a1:5a:5a:1e:29:b6:4c:50:93:7a:9a:eb:
                    af:07:bc:95:8c:b1:d1:0c:fc:9b:3b:2d:3e:b5:8d:
                    ed:c8:10:cd:a0:53:ac:a5:ca:04:4d:7f:65:a7:5c:
                    72:6b:9d:92:ae:d4:bd:ae:6b:7b:d4:99:b8:40:44:
                    92:94:da:05:c5:2a:27:d9:c8:99:bd:8f:c5:f0:f9:
                    f4:81:97:c1:f4:48:ca:53:d6:05:e1:ea:12:6e:02:
                    b8:31:2e:88:5a:8b:02:e1:77:2a:26:de:f3:d0:57:
                    00:ad:a1:66:2e:16:e5:e9:63:03:58:dc:84:99:e2:
                    4b:00:0e:c3:6d:2b:98:87:54:10:a9:66:81:eb:6f:
                    32:86:4a:43:21:fd:03:d0:1e:6b:6c:fc:72:96:69:
                    bd:05:4c:07:fa:bd:84:b8:d3:01:7f:85:b6:4e:5b:
                    8d:59:c5:9e:42:bb:d6:68:b9:16:e5:9e:dc:dd:be:
                    ac:75:7b:26:78:27:9f:63:6c:7e:51:8b:61:3f:d9:
                    db:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4B:8A:37:18:85:9E:B6:EA:38:18:24:58:ED:B9:89:77:96:D6:6A
            X509v3 Authority Key Identifier:
                keyid:66:D3:37:D3:30:BA:44:EF:CF:EF:55:53:55:13:2A:6A:2C:69:78:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtM30zC6RO_P71VTVRMqaixpeDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2b5e7c-67b1-477d-895f-8f5fc92125db/1/ZtM30zC6RO_P71VTVRMqaixpeDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b5:0a:7a:2e:c3:a0:c1:cf:e2:bc:57:9d:61:90:0a:08:33:
         9d:ab:9c:86:cd:b7:57:a9:53:97:4a:a3:15:69:79:0d:76:11:
         7c:5e:02:1d:21:ec:01:6f:64:ec:ff:56:c2:ae:8d:ac:e7:3c:
         f3:d7:19:45:22:0d:30:56:f3:72:44:06:3a:22:0e:d4:5c:9f:
         fe:1f:84:0f:1d:12:a6:87:3d:78:c6:b2:0f:c7:f1:92:c2:a3:
         3b:d4:50:da:46:4e:47:35:b1:3e:75:dc:1d:a2:da:30:21:0b:
         bf:f3:17:e9:1b:74:4f:bd:7c:87:15:d5:45:fa:1d:b8:e7:42:
         76:92:18:d1:28:ad:85:b4:72:df:e7:a7:fa:f1:d6:73:c7:db:
         e2:cc:42:23:e2:65:1b:49:80:18:59:4b:a7:e9:6f:90:37:7b:
         ba:d2:d4:98:23:10:65:ee:6e:6a:2a:85:c9:f5:b9:a5:a5:8a:
         20:f4:55:62:2d:a2:9d:21:7e:f2:07:3c:9e:2e:15:3f:fb:be:
         b8:00:eb:9c:5d:54:f8:d6:50:c1:d8:b6:77:5b:ba:4f:80:52:
         41:15:07:18:8c:74:99:84:91:3e:6e:e3:ce:77:4c:c4:41:99:
         c5:c3:92:a6:7d:a1:45:c0:35:dd:b4:50:0c:51:a1:85:14:ba:
         ad:d3:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:52 2025 by rpki-client