Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
File:                     zwL19I4SLlVvm1mK2aYtPD4UQZo.mft (raw, json)
Hash identifier:          nF4V/f2ejiS6uk64Vp7doq4JyaeiDkM+3FMTf3at7DQ=
Subject key identifier:   E8:7E:B7:AD:6C:99:76:B0:68:D5:96:6B:2C:2B:49:0C:7A:23:81:7F
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Certificate issuer:       /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial:       0197B96AEA3DD187E87CF25D6DD7D843D45E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
Manifest number:          1547
Signing time:             Sun 29 Jun 2025 02:01:21 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:21 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:21 +0000
Files and hashes:         1: 748a2LHN88wONpwbpFWq4xMldnY.roa (hash: eDoYazA4tm3EizecQjyxeeqDwWD+d/nhbBUj2RIPHuc=)
                          2: zwL19I4SLlVvm1mK2aYtPD4UQZo.crl (hash: Bxxd7V4gZGBW6rsWOxPshUXSkrG7IG5EDUhn01g95QE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:ea:3d:d1:87:e8:7c:f2:5d:6d:d7:d8:43:d4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
        Validity
            Not Before: Jun 29 02:01:21 2025 GMT
            Not After : Jun 30 02:01:21 2025 GMT
        Subject: CN=e87eb7ad6c9976b068d5966b2c2b490c7a23817f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:8b:dc:26:3a:31:91:07:c4:49:55:8d:d6:
                    11:94:97:bb:2f:a6:90:c1:1f:ed:89:5e:35:75:53:
                    ea:ec:ea:af:f5:56:f8:5f:8b:6c:60:cb:14:9a:60:
                    52:18:26:3d:4e:d8:72:c1:3b:8f:d9:3d:49:2d:ec:
                    72:fd:2d:36:4f:97:e9:51:84:55:c2:0b:10:f5:d0:
                    b7:e0:ad:5d:22:32:cc:1f:0b:82:9b:56:b4:14:b6:
                    1d:93:ea:fb:c3:fc:c0:1b:81:27:27:cd:87:b8:c9:
                    6b:6c:8e:ef:81:a3:2a:44:b8:7b:9a:f5:a4:13:f7:
                    fd:97:1d:b1:e7:cf:07:03:44:81:d4:2f:c6:89:13:
                    c5:01:6f:ea:04:f8:b2:ed:7f:12:f6:ec:7a:59:35:
                    3f:71:55:84:de:46:43:b4:05:a5:b3:b6:0c:75:6d:
                    72:17:76:f1:bf:a3:fa:86:49:d3:44:50:0f:b8:8d:
                    4b:42:2d:d0:3a:7e:bc:98:5b:59:50:88:a0:82:d9:
                    32:3c:b9:12:54:6d:8b:88:14:16:6c:c9:0f:a0:96:
                    29:34:a4:5c:c5:bd:22:b6:1a:b3:a7:5f:30:58:99:
                    a8:7b:3a:1e:11:ae:42:7c:a4:7c:dd:5d:37:dd:9b:
                    a2:23:f6:c4:c0:a0:cc:2e:ec:61:d4:8b:aa:72:11:
                    77:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7E:B7:AD:6C:99:76:B0:68:D5:96:6B:2C:2B:49:0C:7A:23:81:7F
            X509v3 Authority Key Identifier:
                keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d1:4f:98:ca:01:50:cf:9a:af:23:60:d6:b6:24:ca:a3:c3:
         40:98:a2:35:f8:ff:61:fe:13:09:20:28:fe:15:de:57:86:3d:
         2c:6b:84:41:5a:7c:60:f6:d4:21:12:59:3f:0c:6d:b4:e2:42:
         2a:88:ce:e1:b1:9a:e7:28:d0:9b:6b:c4:0c:ba:68:ff:0c:8f:
         a8:b3:c8:f8:df:12:54:7e:b8:f1:e1:3c:f8:db:47:bd:0e:b9:
         75:ac:31:5f:e4:8b:a0:d1:88:b4:75:e3:98:78:df:48:5b:0c:
         07:3b:c2:49:24:a4:6f:98:72:92:f1:ad:ff:7d:ab:d9:4e:e4:
         fb:a5:b0:9a:95:cc:48:3f:31:0e:28:8b:c2:c4:93:ed:f4:e1:
         12:dd:89:26:c8:02:f5:89:60:ac:43:97:e6:52:8e:3a:7d:fc:
         ac:15:30:1e:f7:a1:72:83:eb:c3:b3:08:06:43:ee:9c:6b:4d:
         47:51:d3:7d:d7:f9:2b:22:bb:dc:92:b8:e7:0c:f5:47:71:ae:
         aa:10:5a:5d:2a:83:3f:1a:36:91:cf:37:c7:a1:e4:0a:15:e3:
         68:86:de:25:5e:6d:02:a7:be:e2:0b:82:cf:cc:70:96:63:29:
         9a:dd:6b:74:d9:90:b8:38:b1:55:f2:23:83:4b:1c:ae:6d:92:
         e4:3b:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:33 2025 by rpki-client