Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File:                     ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier:          z+UcVKB50biAis2OW99LBqYUlKkX77e/v67j4sPyjw0=
Subject key identifier:   F8:3C:84:D1:E3:70:F5:D4:B2:C1:29:DE:F9:77:8E:11:D3:05:2B:70
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer:       /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial:       0197B6A18B1D24C0234822919B9E33A24B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number:          15C2
Signing time:             Sat 28 Jun 2025 13:02:09 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:09 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:09 +0000
Files and hashes:         1: 1-aRCdRBpKSBpGR4v9msgat9V61M.roa (hash: BYs6ku3Xn4FdJ9wa1nH/1VswjYO1JqNKzo75omWp/nM=)
                          2: Pl-xLYhjY5YlhNM49xs9QKMtfBU.roa (hash: UmyMwMyNw8j81M3/HKdHg6H50eTkm3sFnC7O9PysISQ=)
                          3: Smd34xeFUEeunOCrNaNvyPItMW4.roa (hash: tLjLkBtCoEO7JoIBI3BKAYDHLRl3QBXXfkRn3x13Z0I=)
                          4: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: fztbG3NpOuB/MRjDuE/1KFf+BRwV97JMcEUiNXJkvEM=)
                          5: iI9-w7tHXxNtTl_I4COghj0uNew.roa (hash: b/PEDW5ud97u67vxZ3rzQUfyJtK+SNRKCKr9PKh3cqQ=)
                          6: tSkgtw28-Km5F0YiHIf1O1pkoXI.roa (hash: 0ECcSRlX4TniqxVIh1N6rLlLbSyp1biqLJH1F5jVobk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:8b:1d:24:c0:23:48:22:91:9b:9e:33:a2:4b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
        Validity
            Not Before: Jun 28 13:02:09 2025 GMT
            Not After : Jun 29 13:02:09 2025 GMT
        Subject: CN=f83c84d1e370f5d4b2c129def9778e11d3052b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:21:e5:3d:70:6b:03:53:8b:66:59:14:d8:
                    6f:e3:44:2f:03:48:a8:a5:83:c8:d4:63:4d:2d:de:
                    05:1b:a9:ae:42:c1:6d:d0:77:d9:9c:05:4c:5b:37:
                    68:f1:0d:69:1e:6c:a1:d0:51:31:64:52:73:fc:aa:
                    2b:8d:0d:b6:06:c9:22:98:81:60:ce:4d:ba:b1:94:
                    2d:6a:26:ee:66:9c:d6:e2:77:99:66:00:82:fb:d0:
                    63:ba:ce:17:69:b9:34:a5:b6:9c:e5:e3:10:11:6d:
                    30:de:02:b1:47:21:1f:18:95:aa:c2:e5:a1:36:73:
                    59:6c:bf:41:b6:06:2d:db:45:68:82:c3:37:d1:e3:
                    78:65:97:ed:62:22:9d:32:73:64:6d:dd:79:aa:a6:
                    5e:df:98:30:bd:30:ed:86:3e:69:e0:9b:2a:6a:28:
                    92:84:87:c0:b5:7a:db:66:55:19:57:7b:4c:b8:16:
                    c0:2e:f9:11:b9:69:8d:5d:5a:7f:87:e2:d0:5c:b8:
                    7e:93:28:bc:bd:b0:b7:76:64:62:38:f2:69:6b:ad:
                    44:00:c5:74:ed:f5:6f:12:da:ae:48:b8:e0:c0:a3:
                    00:ed:a4:32:10:ee:aa:ef:d0:94:a2:6d:bc:a4:f2:
                    91:9c:30:90:da:66:b1:37:06:33:6a:d1:73:7a:b4:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3C:84:D1:E3:70:F5:D4:B2:C1:29:DE:F9:77:8E:11:D3:05:2B:70
            X509v3 Authority Key Identifier:
                keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:49:f1:00:57:35:52:a9:51:5d:20:af:e5:6f:d1:51:36:aa:
         05:4c:b3:5b:48:fe:b5:8f:d2:c4:a5:97:c5:a7:c2:f7:65:e7:
         ed:29:f4:f1:5d:07:42:b5:99:61:50:17:74:7b:2d:5a:b4:3a:
         17:d0:9a:1c:3d:21:44:ca:93:c1:e9:61:33:14:09:3d:ae:6f:
         80:5b:9b:27:8e:8d:65:7f:96:6f:90:85:97:27:bb:93:30:50:
         1d:fd:e4:3a:22:e9:28:51:5f:4f:8a:78:0d:84:08:04:8f:92:
         08:38:dd:c0:12:87:7b:b2:02:13:3b:86:3f:79:93:2e:23:7f:
         06:fb:a7:e5:41:f0:49:bb:e5:aa:d5:83:c1:c1:b4:2b:8a:6a:
         62:43:da:7d:ce:d3:92:bf:85:92:c6:72:02:47:35:97:b7:13:
         e1:53:3b:62:7c:ac:c1:16:73:6b:52:14:1b:77:9b:d5:09:5b:
         0d:42:98:f1:14:d4:a3:57:0d:1a:91:15:fb:e2:ad:ee:a4:ce:
         b2:41:8d:86:88:2f:c7:fe:43:22:cb:38:4c:f6:5e:9c:73:28:
         59:78:7a:32:a1:bc:b7:bb:76:04:45:1b:64:5a:fa:11:60:44:
         d9:2b:d7:f3:7d:90:c1:2a:3d:b5:73:88:93:32:4f:55:47:75:
         64:75:99:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:10:59 2025 by rpki-client