Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File:                     zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier:          ewzE2rhQO6Komf0i4rJ0y0QnVagJzoI18t+V2up3xN0=
Subject key identifier:   B1:69:0C:25:E3:7F:F2:5A:33:84:41:36:2C:3B:3E:14:4F:20:1C:31
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer:       /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial:       019656819E746240C1BF10B467C845BFB9B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number:          0B8E
Signing time:             Mon 21 Apr 2025 04:00:57 +0000
Manifest this update:     Mon 21 Apr 2025 04:00:57 +0000
Manifest next update:     Tue 22 Apr 2025 04:00:57 +0000
Files and hashes:         1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
                          2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: cORDgH+QTSKacVcz0Gcft4fvPerlJZKTICjwSQautFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:56:81:9e:74:62:40:c1:bf:10:b4:67:c8:45:bf:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
        Validity
            Not Before: Apr 21 04:00:57 2025 GMT
            Not After : Apr 22 04:00:57 2025 GMT
        Subject: CN=b1690c25e37ff25a338441362c3b3e144f201c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c5:fd:17:53:da:a0:79:ab:a7:3d:1e:58:9c:
                    01:04:7a:e4:d2:e3:96:3d:d8:4d:f9:b3:8d:01:14:
                    10:76:e3:9d:d2:7e:30:3d:74:f8:e9:be:07:32:12:
                    bb:cb:6e:f8:34:d5:7f:e2:2f:4c:53:a6:df:b3:f3:
                    55:b6:6f:32:fc:ac:6a:d4:da:9e:9f:a3:2c:13:c1:
                    f4:08:7a:eb:c9:89:26:b2:24:14:2a:d4:f2:9c:67:
                    e9:8c:41:f7:25:02:9d:d5:ba:74:77:b6:3d:17:16:
                    c6:5d:d9:75:3d:83:1c:1b:17:7f:df:6c:80:b0:cf:
                    6d:63:0f:b8:97:8a:17:22:f4:d3:d4:06:e0:6a:90:
                    ed:34:90:0b:92:62:e0:ec:3f:5e:4e:0a:29:4c:78:
                    33:f8:f6:5e:38:fb:ca:a5:f6:e4:92:ba:25:24:91:
                    4b:4a:87:27:58:6a:90:78:12:e0:35:c9:2d:09:4c:
                    fe:bd:12:46:6a:a8:4c:69:57:06:68:61:c0:c5:3a:
                    2c:61:db:54:e3:d3:7a:57:1f:65:40:04:ab:02:6a:
                    90:b3:6e:df:ec:db:2f:e2:8b:8c:59:a0:be:60:02:
                    d8:c2:28:02:38:dd:5b:32:25:14:d1:98:25:7f:8d:
                    99:03:49:d3:dc:25:7b:0c:54:37:fe:ac:73:73:29:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:69:0C:25:E3:7F:F2:5A:33:84:41:36:2C:3B:3E:14:4F:20:1C:31
            X509v3 Authority Key Identifier:
                keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ee:a7:ac:86:51:ff:b9:f6:2d:bc:e4:55:73:17:f9:61:4e:
         8d:65:18:7f:93:e2:34:6a:18:b4:08:ea:e8:84:d2:42:4d:10:
         bb:ea:69:5a:1a:4d:a7:ad:d7:1a:bf:01:01:aa:4b:f5:5d:9f:
         51:63:8e:d6:a0:bd:0d:3d:d9:83:c2:88:94:c3:3a:9b:90:bb:
         aa:d7:4b:8c:96:3d:2a:a6:2a:06:de:72:1f:b0:70:32:ea:81:
         2f:77:0b:43:19:33:af:6a:b8:7c:a7:ad:1b:6c:a7:a9:7c:ab:
         cf:e0:23:37:2c:73:41:a0:43:6e:7c:c1:c1:02:d9:d3:af:31:
         5e:ed:f1:07:98:94:26:42:bf:7e:75:ee:3c:b4:39:10:ef:43:
         16:07:57:52:8a:48:e1:57:51:03:9b:48:dd:42:2e:35:34:3f:
         95:af:2a:7c:2c:ad:95:10:2c:36:16:0a:0d:49:19:ee:b8:b4:
         0d:44:67:5e:0d:b4:a4:69:18:27:6a:70:c5:06:d4:7e:54:cf:
         f0:2f:20:52:f4:1c:cc:fa:5d:27:83:05:95:33:b2:69:d6:89:
         6f:c0:b8:78:9f:59:e3:68:6a:80:10:74:8a:ee:35:80:93:f0:
         b3:4b:ad:fe:bf:0e:ad:1f:ac:94:03:df:3b:e5:e4:99:33:05:
         1e:e0:93:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:20 2025 by rpki-client