Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
File:                     zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json)
Hash identifier:          PpTvGgzQCSYu7qq9KbMKJfZIJ/pLGegsJV4Yg1ka4gk=
Subject key identifier:   F5:3D:CA:6C:F9:DF:7C:0C:5A:9C:AD:C7:16:63:DF:C9:45:67:9D:5B
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Certificate issuer:       /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial:       0197B6A142D0BB437855AF71792B7AE2F491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
Manifest number:          0B50
Signing time:             Sat 28 Jun 2025 13:01:51 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:51 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:51 +0000
Files and hashes:         1: MkrzUPp2fw2MTxDAyX7xHZLlYbk.roa (hash: slTzkCKMJrVrVLZuZQUzVX464caMJ5HD4oz3QsYxNQY=)
                          2: _2rlTorI9d4EskVB3Q2AELQgntg.roa (hash: MJ/JOjkufW/i3x6kFr8d78WsqqTFtkNpKnXIQ8qokdg=)
                          3: aXdWyB6YGPpk-J46No4vsmKxGCE.roa (hash: TIgYhNRVQ3p/R3gXtf1t15mu2N3p/Mr9E78IoFCU1PY=)
                          4: lTK57WKRl8JHYSn3Me1JiHVYX6c.roa (hash: OsSENyDZ+wkTwyFgI+grH7k0F+jqVnxydXIxiH9U0Ng=)
                          5: oJSpmKHDBTQennb3bFM-AUri38c.roa (hash: gaj/8isA/Vy8LzqeD5fj8KpWVmIYxfupI+6YOWca7WI=)
                          6: yroUuw1scM5vJqw9L2C1NZloBMg.roa (hash: tq+65QQs/oxlmOUT1sm7YA/yaQJk+Rn+QS41OHsKCiw=)
                          7: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: yoYiHHhHYrhYcNBlbKMp6zKT+DV8mrf3HUglHFr1Pd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:42:d0:bb:43:78:55:af:71:79:2b:7a:e2:f4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
        Validity
            Not Before: Jun 28 13:01:51 2025 GMT
            Not After : Jun 29 13:01:51 2025 GMT
        Subject: CN=f53dca6cf9df7c0c5a9cadc71663dfc945679d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:b6:72:f5:95:b8:fd:5d:f1:93:23:f8:e0:
                    81:bb:09:3f:16:59:ba:ce:5c:60:a6:c2:3d:15:de:
                    1e:e0:44:24:16:e8:56:23:ed:ac:aa:96:7b:0b:45:
                    34:d2:f2:ed:bf:df:f8:06:15:77:55:2a:30:07:3c:
                    73:d8:f6:20:f9:d4:2a:66:73:8c:d1:8a:53:b3:0f:
                    ac:5d:f2:9b:56:9e:c1:46:fa:42:b7:2a:45:30:82:
                    55:82:04:fa:2c:ed:25:59:c3:a2:fc:2e:2e:df:87:
                    1f:a4:fa:78:f4:fa:a3:87:57:fc:cd:a1:93:7a:5b:
                    b7:97:b0:88:da:88:1a:e7:35:89:64:8f:40:73:0b:
                    89:33:31:5b:60:4c:2f:64:ed:6d:8f:02:00:59:f7:
                    40:5f:77:51:17:62:ae:66:67:48:9e:f9:d0:0d:b3:
                    27:93:a8:3f:09:ab:00:c3:f3:b8:6d:f6:a6:1d:7f:
                    fb:f6:54:f8:cc:e4:13:c2:cc:41:a2:0b:39:bc:90:
                    c1:91:6c:de:c8:9d:5d:11:79:88:c3:10:5e:7d:64:
                    56:4a:b9:31:94:67:ea:fc:80:24:45:6d:d0:f2:2d:
                    83:1a:f8:75:bb:98:e0:bf:ed:d2:9a:9c:46:ed:85:
                    53:93:ea:28:29:2c:08:7c:76:8a:0f:18:e5:0d:be:
                    15:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3D:CA:6C:F9:DF:7C:0C:5A:9C:AD:C7:16:63:DF:C9:45:67:9D:5B
            X509v3 Authority Key Identifier:
                keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:af:d8:3b:90:07:7f:5c:80:5d:d8:d8:9d:cb:a2:d7:42:d0:
         74:a8:d9:a0:33:bd:2a:8a:39:fa:f4:a4:f9:d6:ab:dc:da:78:
         df:c2:df:d5:18:fa:7e:05:42:fb:c9:07:ba:8b:43:f0:f8:8b:
         ce:dd:b9:68:85:67:5d:68:3a:e1:6e:d6:ab:64:5a:c3:19:c4:
         35:4a:e0:e5:13:36:ca:2d:42:48:f5:5f:55:7a:13:1e:9d:91:
         c8:d7:24:80:bd:43:68:4c:c1:ac:9f:74:88:12:54:3b:f0:fd:
         f5:21:37:2e:f6:91:6c:b7:83:51:8c:28:6e:d9:2e:b6:eb:04:
         9f:2e:7e:9b:65:c5:d3:b9:2b:49:e7:18:30:61:36:17:e3:65:
         5a:0a:ea:83:2f:5b:fc:33:f6:5a:9c:54:d3:99:e9:8f:44:73:
         2c:ff:9e:78:6c:c9:93:8b:4e:1e:f7:68:8c:6b:d1:8f:93:d4:
         50:39:c7:96:1d:fb:ca:f7:d6:a9:5f:91:5f:42:2a:ff:d3:33:
         86:ee:4f:c8:59:55:ff:00:16:52:a6:0f:83:c2:9d:6b:59:ff:
         4d:0c:3d:bf:8c:18:ef:74:a0:c9:d2:29:11:db:7d:07:d5:9f:
         63:49:1a:0a:6c:84:bd:d8:75:85:1d:09:d7:72:78:d3:eb:30:
         d0:fa:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:44 2025 by rpki-client