Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
File:                     ZEzbroSyaoSEsQwA6_37y0mQwVc.mft (raw, json)
Hash identifier:          Zb07tmG9M/QtUe/i+rlwTct9NTpaIeMgm8wlT77JTfI=
Subject key identifier:   2F:EE:04:4B:83:FC:7D:FA:8C:17:EB:7F:0B:91:F3:83:AB:FA:E2:56
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Certificate issuer:       /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial:       019650ECDC2D92B0AA3D344669B9F622E2DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
Manifest number:          101B
Signing time:             Sun 20 Apr 2025 02:00:22 +0000
Manifest this update:     Sun 20 Apr 2025 02:00:22 +0000
Manifest next update:     Mon 21 Apr 2025 02:00:22 +0000
Files and hashes:         1: HQMtz4B5CutgL-N5xfaUf94QUuU.roa (hash: fTXkjV5cqvWtMWH5Zll2nFHO95PtDXPWClZJchYPGPQ=)
                          2: ToVVgCXoslxYoBXJ20dyufaadGQ.roa (hash: pQi4XzfxTHe7c0yuSomBxVB+uUc5SATfiB1mQxdDEJI=)
                          3: ZEzbroSyaoSEsQwA6_37y0mQwVc.crl (hash: LjByJCIT8K3iFhH5yVNyRSAGObz7JB9GiKy0bqjNIrE=)
                          4: vn_6MTwelLUlLNDCZO0aRScUDTY.roa (hash: nZ+qSFZb5cEckLJHgsHRLeTqOf+uDgCygsG9DhaI2LA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:ec:dc:2d:92:b0:aa:3d:34:46:69:b9:f6:22:e2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
        Validity
            Not Before: Apr 20 02:00:22 2025 GMT
            Not After : Apr 21 02:00:22 2025 GMT
        Subject: CN=2fee044b83fc7dfa8c17eb7f0b91f383abfae256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:bc:c9:66:06:45:53:2c:31:71:e0:ca:32:
                    d0:f6:a1:cb:a0:f9:29:5a:ab:d9:0c:62:07:9d:5e:
                    97:70:96:ca:69:79:8e:fc:ce:b4:71:37:6f:ab:7d:
                    03:06:a8:70:83:37:a9:0b:f8:1b:ed:be:a2:60:7f:
                    cb:41:68:11:b5:ca:70:1e:26:5c:56:a9:2f:f7:26:
                    c0:7b:e5:54:2e:15:55:2d:e6:52:c5:06:b1:33:20:
                    6a:b5:81:7e:c9:fa:08:97:39:c3:9c:c3:fd:62:5d:
                    4c:a3:49:1c:d5:d6:dc:0b:9b:2a:cd:25:96:e8:9f:
                    5e:bc:cb:ca:d6:45:cd:f4:c3:c8:50:55:ee:68:94:
                    af:df:3d:0e:70:56:c1:b8:3b:14:c3:c3:a1:b8:0e:
                    8d:83:75:0c:80:cd:aa:b3:d7:e8:00:bf:67:3d:09:
                    4f:2a:2e:39:00:6b:a1:61:b3:a0:c0:98:83:e5:c3:
                    d0:3e:27:5c:5b:da:d0:a5:28:11:38:df:5d:f6:19:
                    8e:ae:5b:5b:08:8d:e6:b6:56:31:df:20:16:dc:84:
                    c6:65:e9:a5:19:4c:1c:68:4f:ac:53:1d:14:63:7c:
                    0e:e1:95:84:45:ad:f6:c1:7c:84:49:9b:76:0c:6a:
                    36:eb:0d:e5:f4:d8:97:89:ae:a3:69:7f:a5:50:40:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EE:04:4B:83:FC:7D:FA:8C:17:EB:7F:0B:91:F3:83:AB:FA:E2:56
            X509v3 Authority Key Identifier:
                keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:19:94:4b:77:dc:44:bf:df:d0:e1:ac:1f:da:7e:f6:a6:bd:
         9f:fe:24:0a:15:c4:b3:0d:ce:35:ee:1d:17:b8:3a:25:29:4d:
         2a:42:94:b6:48:c9:89:c3:5e:fe:25:15:8b:c5:ee:b3:94:a3:
         2f:97:77:98:e9:69:b7:92:d6:ad:b4:9d:23:fd:41:61:03:03:
         e1:10:7a:06:84:e7:a1:6e:0a:77:05:1e:17:3f:22:9e:7e:b2:
         61:85:63:9c:4a:4b:25:b7:68:7a:64:b4:a1:c8:86:d2:af:33:
         5d:80:dd:9f:55:51:c3:ab:7d:02:88:20:90:db:38:7b:f1:df:
         e8:07:3c:eb:ef:f1:5a:f5:4a:00:6f:c9:26:b2:19:4d:db:f9:
         67:3d:9e:1a:fc:fe:97:9e:72:71:e8:e2:8a:e8:a9:10:f3:6f:
         6d:b1:c8:57:88:7d:a0:7f:12:36:f8:bf:00:e4:f6:21:a2:ae:
         40:83:a5:bd:49:2c:b4:f9:60:67:0d:38:34:34:ae:6e:3a:c2:
         ba:b6:32:aa:a2:68:81:88:78:79:e0:56:8a:5c:42:c6:48:c9:
         7b:5a:b7:22:9d:d2:ed:ac:91:d3:2a:c2:9c:e0:dd:82:39:f6:
         4e:7b:db:cf:08:7b:e5:84:60:86:1a:ee:1b:34:af:07:61:90:
         ed:88:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:01:56 2025 by rpki-client