Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
File:                     Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json)
Hash identifier:          THs8/4b9zmO3Hj2aI7lVFq8qpZ5A1+P+mjUTyS721O4=
Subject key identifier:   01:00:38:F5:1B:B0:BB:15:28:8A:B5:EC:89:71:AC:73:DC:55:9D:E1
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Certificate issuer:       /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial:       0197C537D573FBE5D25F3041B2156AA12285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
Manifest number:          0469
Signing time:             Tue 01 Jul 2025 09:00:59 +0000
Manifest this update:     Tue 01 Jul 2025 09:00:59 +0000
Manifest next update:     Wed 02 Jul 2025 09:00:59 +0000
Files and hashes:         1: 7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa (hash: Y7dInOrS0ZTrLRgU8acVZK7oVPUrhKyIbJiSvV0jVfY=)
                          2: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: Z3SHT7voy7eXk7jA/nN9WdY5F01WbX6djGF2Rv0Xe7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c5:37:d5:73:fb:e5:d2:5f:30:41:b2:15:6a:a1:22:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
        Validity
            Not Before: Jul  1 09:00:59 2025 GMT
            Not After : Jul  2 09:00:59 2025 GMT
        Subject: CN=010038f51bb0bb15288ab5ec8971ac73dc559de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bc:5d:03:94:7f:ca:99:47:fe:cc:fc:f4:81:
                    56:9d:f4:91:54:18:52:3a:fc:6e:54:b2:7b:0b:52:
                    f4:3f:44:b4:d5:90:7e:52:48:2c:fa:56:70:17:c8:
                    0a:f6:29:1d:7c:ce:1d:02:87:28:06:4a:01:85:23:
                    56:db:9b:c7:85:d7:6a:40:44:50:ea:66:88:a5:00:
                    24:d8:d3:0f:d4:89:20:41:f8:92:de:09:0a:3d:7f:
                    e0:29:d1:75:8f:22:fe:08:a7:78:65:a2:b0:4a:09:
                    bb:34:18:87:30:67:c9:38:a7:16:fe:32:4f:9b:d2:
                    9c:4b:13:0f:d3:a5:cb:83:61:b3:a3:b1:18:7d:d2:
                    fa:dd:2e:db:14:2a:0c:a8:85:ff:fe:59:7e:a7:ba:
                    8b:92:fa:43:ca:4b:06:0c:c6:11:fe:f9:e5:16:ef:
                    7c:57:01:48:17:f9:d1:ff:6e:a9:2b:71:9d:c7:2b:
                    bb:46:2a:1b:ba:65:51:8e:ce:d4:7f:26:9b:cc:da:
                    6f:09:0c:44:db:de:93:3b:25:43:b4:c6:3c:ca:a3:
                    82:53:3a:45:e4:e8:2f:ae:53:e9:47:41:9b:03:88:
                    6a:09:33:b3:e8:ff:a4:35:a7:18:1d:7b:8a:49:33:
                    07:0a:8c:84:1e:f1:84:6d:a9:fe:3f:05:ed:99:1c:
                    7d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:00:38:F5:1B:B0:BB:15:28:8A:B5:EC:89:71:AC:73:DC:55:9D:E1
            X509v3 Authority Key Identifier:
                keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0b:31:55:4b:76:a4:b6:cf:c0:8b:5c:2d:21:5c:fa:b6:1a:
         00:ce:81:ad:29:46:32:1a:87:4b:35:19:a5:7c:3d:b6:fc:33:
         e0:49:92:96:66:09:7b:43:bf:c1:6d:dd:e0:87:90:0c:53:49:
         c4:9b:ba:64:a9:d6:c5:e1:27:27:26:48:92:c2:cc:3f:c7:cd:
         bd:12:99:53:75:9e:d3:88:e8:18:f4:36:0a:cd:8d:4a:21:fc:
         d4:bf:b8:16:c2:59:2a:df:15:b7:ad:0f:c4:05:2f:85:c0:56:
         56:50:63:69:a6:49:73:a3:37:c8:67:22:f8:25:3c:94:e4:4e:
         f2:20:4c:de:1f:36:03:e6:5c:7b:a7:61:10:3c:4f:38:0a:85:
         92:ac:0f:7e:e1:ae:f2:5b:32:8c:94:61:b8:fe:8c:f5:89:00:
         1c:72:26:1a:ea:08:64:e7:bb:8e:aa:a7:c9:4b:53:fc:0d:46:
         94:ee:a2:a8:bd:39:01:37:36:19:6f:f5:24:7a:1a:1a:38:b8:
         d3:3e:ea:d9:a2:b9:3d:f2:51:0c:4f:5d:26:e9:1a:0f:00:fa:
         8d:dc:b9:54:10:dd:d1:35:7c:d5:9c:b1:ea:8d:8a:46:ba:1a:
         67:e5:4d:24:43:e7:dc:7d:44:ad:d6:46:76:dc:db:7a:b5:28:
         bd:2d:12:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:07:50 2025 by rpki-client