Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File:                     zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier:          d7hxNKkqDGxyu7vKLmRNZ4WsBLhMtFrFiGS/ss87Yco=
Subject key identifier:   19:44:5D:71:C9:47:B5:DB:0B:16:11:DE:D6:74:A6:C2:E2:A7:9F:33
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer:       /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial:       0196CB054A7FABCD7CE0DF71EB094760820E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number:          1087
Signing time:             Tue 13 May 2025 19:00:43 +0000
Manifest this update:     Tue 13 May 2025 19:00:43 +0000
Manifest next update:     Wed 14 May 2025 19:00:43 +0000
Files and hashes:         1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=)
                          2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=)
                          3: I0kK8lFUEdPv-eqKMMyljZV7C4o.roa (hash: Q3VKBZJSjAUikf5Cp1W9wOJwDitcZkWKMm49P+1zxlI=)
                          4: kAtcjeL4q23GFCUbpg4QtXInyEI.roa (hash: 5K8wPb3jbiUlLft+liX8W5eEXe9eE+pHlH9nNwzDSk4=)
                          5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: hZcQljYz1bAgD5mEnCHQU2QTe3iTzSonPbSjpFpoGZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:05:4a:7f:ab:cd:7c:e0:df:71:eb:09:47:60:82:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
        Validity
            Not Before: May 13 19:00:43 2025 GMT
            Not After : May 14 19:00:43 2025 GMT
        Subject: CN=19445d71c947b5db0b1611ded674a6c2e2a79f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:0d:cd:b6:2f:77:11:05:32:85:46:c8:64:
                    69:5e:ff:fe:de:ad:ea:d1:6e:11:52:2c:36:53:39:
                    c4:b0:69:9c:f2:27:09:db:9b:9f:4c:e1:a7:f7:40:
                    01:6c:8b:50:a5:d3:ae:54:35:eb:fd:6b:f4:80:0c:
                    4f:e0:70:bc:54:13:e0:81:02:cf:c3:27:a7:8b:81:
                    77:b3:83:4f:48:b4:23:d6:de:56:bf:8c:e6:60:34:
                    96:38:6c:e3:18:4f:08:c2:e1:3f:e6:0f:35:13:f4:
                    26:91:b8:b0:4d:0d:99:b8:66:17:dd:1d:f8:90:29:
                    7b:a3:34:fc:cd:8c:aa:c0:ee:19:65:b5:57:ed:17:
                    7d:81:02:49:c6:c2:53:48:41:2b:fc:42:40:83:12:
                    15:47:5d:77:b7:57:e1:d3:e8:10:d0:3f:44:64:34:
                    53:4f:15:7d:45:45:3c:d5:2a:20:31:f1:0c:52:5d:
                    4b:aa:14:2c:ea:06:c3:0d:43:1b:a2:f8:b3:d8:62:
                    59:d6:24:20:84:1f:21:9c:08:0d:0c:4a:63:a9:1e:
                    cb:5d:b5:c6:5c:dc:fa:20:f0:dc:e9:51:6a:57:ad:
                    f3:47:b8:fb:91:29:1a:18:58:2a:5d:97:3d:23:e0:
                    12:a9:c4:8d:6d:dc:9d:60:52:cd:c6:0e:a8:95:2e:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:44:5D:71:C9:47:B5:DB:0B:16:11:DE:D6:74:A6:C2:E2:A7:9F:33
            X509v3 Authority Key Identifier:
                keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:97:67:2a:a5:5f:5e:29:c6:94:51:30:2e:ab:5c:a9:6b:53:
         f1:7b:e7:e0:a4:3e:0d:85:ba:a1:e1:df:3b:fe:01:16:2d:42:
         a8:a6:d2:b4:32:2a:31:6c:c6:d4:74:c7:21:b2:0f:ac:c5:99:
         e6:31:aa:94:ca:73:02:3e:1e:34:15:4f:6d:af:24:cb:dd:a5:
         ca:e7:a9:c6:9f:74:6b:61:6d:62:f1:2c:50:45:9e:cf:18:82:
         ad:15:99:66:b9:35:1b:86:6f:ea:30:a1:f4:9b:4f:b3:8e:5e:
         9d:ac:7f:66:5d:19:16:ec:38:ce:a1:52:36:f4:03:2e:d9:27:
         23:94:06:db:e3:57:d8:f2:59:70:23:8b:3c:16:d2:90:6b:ef:
         db:24:28:af:36:4f:84:67:f9:9a:7d:a6:35:b6:19:33:a2:6a:
         11:bc:50:18:ab:3c:c1:ff:54:52:46:7b:1e:a2:85:77:65:c5:
         08:a5:f1:64:59:95:ea:fd:51:6c:ae:60:a0:ff:02:eb:04:f7:
         e4:30:d3:38:e9:90:79:e4:ed:fe:1e:c6:af:7e:e6:b6:e3:d4:
         e7:ba:ed:6e:95:ca:84:ba:e9:46:0d:4a:22:bc:3f:3a:cf:72:
         4d:99:bd:79:76:99:a0:8d:60:e7:a1:6e:c1:56:01:c7:be:de:
         b9:8d:39:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:20:29 2025 by rpki-client