Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
File:                     Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft (raw, json)
Hash identifier:          wwaKP7uGn1SUucN5mZX1mnkU+p/OlHqanyGtu/8ouVg=
Subject key identifier:   0D:52:9B:EB:B5:72:D4:3A:F1:18:30:BF:FB:B3:EC:60:A9:77:F8:FF
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Certificate issuer:       /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial:       0196B558D09E985A0D3E019945A59D8BE594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
Manifest number:          0DB9
Signing time:             Fri 09 May 2025 14:00:18 +0000
Manifest this update:     Fri 09 May 2025 14:00:18 +0000
Manifest next update:     Sat 10 May 2025 14:00:18 +0000
Files and hashes:         1: 9WT5lvrUTbcRS85JMSDk2uyrP5g.roa (hash: SuEzhNB8Z7i6RNSDwq8VVK9RN7Pd1DtyYQCtgqjgF5k=)
                          2: MUzH6xsh7lBrmnntCvAf96p9dnc.roa (hash: EiKpNpruJXWiN5MyW+0u9tVMVSJplWcWZqVPZo/F/5E=)
                          3: NHMobz5RYRVit9LoY3zWGAN_HOc.roa (hash: tGGn1zlHUoMNuDm6FPTyGRaUtT/oaeGBSOiswtnEYQU=)
                          4: Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl (hash: FBZBfXklt89ipfcUmdT7olYby3qWfuVOEudKnMfLoAM=)
                          5: doDyzqqCQoqFs364AYHR_vs_9YI.roa (hash: n0tTCokEp8NBC6AkuYcyF3ZEXZVQKkGkYM93Vv520tk=)
                          6: exp48BWKUcDXUkG7i2Cr80hvpEo.roa (hash: PxK1jmuTn8+Arb/4EbK+9fd9fS7Yg9Yie0DgOUJDKD4=)
                          7: sfUsMcIrItn-6M-6LEpHfM2PmZA.roa (hash: kXBXp2wVH8CqH+KGVUIhNcFki1g+gzcxR7XYL4WqFqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:58:d0:9e:98:5a:0d:3e:01:99:45:a5:9d:8b:e5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
        Validity
            Not Before: May  9 14:00:18 2025 GMT
            Not After : May 10 14:00:18 2025 GMT
        Subject: CN=0d529bebb572d43af11830bffbb3ec60a977f8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:db:b1:c5:21:ae:72:39:e5:d1:92:ca:85:
                    42:37:b1:66:fb:d2:54:0d:2d:11:8e:82:2f:31:65:
                    59:5a:7e:2e:48:44:2a:a1:61:08:88:5c:1c:dc:41:
                    fe:80:4b:26:e0:7a:c0:aa:fd:7d:35:d9:70:5a:e6:
                    90:07:46:82:5e:34:41:d3:21:2d:0e:ec:6c:82:8c:
                    56:8f:2b:c6:67:9c:82:48:c0:2f:9e:99:8a:b1:22:
                    cb:fc:bc:7f:5a:0c:a7:d1:3c:aa:d1:ad:a8:b0:c0:
                    41:6b:6e:79:59:75:01:5e:3d:41:07:b4:ea:93:6c:
                    d8:c6:dc:05:72:76:cc:95:70:4a:13:4e:77:29:56:
                    4b:ac:82:c3:ad:a3:4c:36:31:9a:4c:d2:e9:df:0c:
                    23:a7:46:b4:d5:53:b6:ce:82:75:03:60:4a:7e:a4:
                    52:d7:ee:42:83:34:23:66:8a:55:d0:7c:bd:a4:2f:
                    39:c5:b1:f4:f8:0f:d1:53:03:c6:05:f6:49:bb:52:
                    51:dd:9f:80:b6:10:04:3e:d3:1f:c6:47:7c:7a:b5:
                    46:35:03:10:08:97:ba:17:3d:f6:e3:65:90:56:90:
                    79:54:93:39:f7:9f:8a:55:21:1f:32:3a:14:de:63:
                    e3:6f:f9:1b:61:74:8a:33:4e:8b:4e:c0:e7:39:dc:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:9B:EB:B5:72:D4:3A:F1:18:30:BF:FB:B3:EC:60:A9:77:F8:FF
            X509v3 Authority Key Identifier:
                keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:41:f7:34:c3:43:36:17:0f:53:d2:3e:0b:e1:9f:3a:3f:3a:
         f5:66:be:b4:cf:9f:26:8f:a0:f7:9c:56:e5:57:95:5b:87:dc:
         a9:c9:41:51:cb:1c:cb:40:40:45:0f:bc:ea:eb:35:1d:9e:2a:
         c7:97:f9:3c:c6:5b:b5:79:04:96:0d:40:6d:22:3e:2e:91:cf:
         ae:a6:c8:b5:6f:1e:d8:39:54:78:b2:b1:62:49:a9:8f:e1:28:
         a4:4e:c0:55:ce:c3:50:9d:85:29:7e:2e:d9:69:e4:16:57:e4:
         db:ef:83:6d:6b:fe:0e:a2:90:80:19:b8:32:6f:9c:60:36:26:
         76:86:38:6c:cb:03:e6:c4:70:78:fa:0a:93:19:0b:bb:9a:ed:
         11:71:c4:42:87:7d:77:6e:41:78:33:8e:51:f7:8b:57:45:bd:
         ce:6c:d3:8c:bc:50:d3:c2:80:7d:b7:21:3a:8f:0c:e8:92:90:
         d5:16:e5:e6:84:12:5c:80:48:f3:6e:38:ea:ab:25:fe:1d:23:
         2d:4b:01:f1:d5:b7:c9:f8:d4:dc:83:a8:aa:48:ce:48:f5:47:
         fb:9b:cc:11:90:5a:33:60:cf:cf:03:55:82:9c:f6:b9:38:11:
         34:db:6d:e8:f7:1d:40:cb:13:8c:02:0d:e6:02:47:2b:87:46:
         b4:a4:42:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 16:31:31 2025 by rpki-client