Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
File:                     ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft (raw, json)
Hash identifier:          Bng78zDhroIxp3iOgv+JY6zPy/ssOJv0YM/HSxenQAw=
Subject key identifier:   EE:3A:20:65:9C:E0:D4:D5:A5:3D:2B:65:72:43:30:00:9A:D3:3B:32
Authority key identifier: 66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8
Certificate issuer:       /CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
Certificate serial:       01964D4761B20EA4299378FE27C5C074E4A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 09:00:45 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:45 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:45 +0000
Files and hashes:         1: 0eX0y1ByZozFyvqGz0EfmzMn6QQ.roa (hash: 9RKCNhJsqijEbBv8dV32/+CAVglgcAVrqc5Rx6tHl+s=)
                          2: PrLRWGrkGlOz391B_d1bhvHtRdM.roa (hash: Zq1F0wSxITxrY6z9+vuv+6+JvubiotTrHBEnZAFhoq4=)
                          3: ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl (hash: JR1QO+K5+SC0pE7kxCSUbk82qeL2sbk6XrhdCt26igQ=)
                          4: d-rt9f-dKC8oZEWyOv7rd6kbEo8.roa (hash: K8bXuYuwS4X0pfixId+iunQp5n4hsy6zV6Ye+pRdYtA=)
                          5: yIea70mz68MEWf7MSufqGinRRfw.roa (hash: C1KZ935qcqSwGSABodTKIPq8sxOye3X7esfEPyg6lGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:47:61:b2:0e:a4:29:93:78:fe:27:c5:c0:74:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66634f14586e399cd3802d9c88b1e67d8ddb03a8
        Validity
            Not Before: Apr 19 09:00:45 2025 GMT
            Not After : Apr 20 09:00:45 2025 GMT
        Subject: CN=ee3a20659ce0d4d5a53d2b65724330009ad33b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:f2:cc:29:5c:16:47:59:84:9c:8d:d5:d8:
                    39:2b:82:85:11:36:76:14:ca:5e:81:9c:3a:19:33:
                    cf:14:65:2b:88:fd:ab:d1:f3:62:36:94:5f:0c:12:
                    01:71:a5:83:2e:c2:19:a4:3d:14:d3:cb:cd:1a:e2:
                    78:c4:c0:3d:79:a8:96:6b:18:4d:9d:2c:98:c0:ab:
                    67:67:22:d1:a3:16:05:57:18:ec:75:a5:13:60:7e:
                    64:4d:e3:17:2d:1b:b8:5d:c6:d7:5d:ae:85:d6:7f:
                    36:34:53:41:59:0a:32:38:df:1b:19:72:87:1d:5a:
                    b0:37:7a:6f:9e:e8:6d:04:6e:b6:01:78:59:d4:84:
                    e5:db:4c:bb:5b:61:86:5e:1d:60:3b:61:9f:e7:92:
                    8c:14:96:8b:cd:b3:2c:f1:8c:d0:23:ff:ba:e0:e7:
                    0a:6c:49:a9:06:85:98:cb:4f:73:99:e5:42:c7:ef:
                    0f:28:86:a4:73:56:a1:71:40:cb:bc:73:bb:0a:65:
                    9e:11:3f:be:de:c4:20:75:8a:dd:3b:fe:a3:02:d3:
                    91:50:50:7b:cf:48:60:dc:ee:3b:ea:03:bd:a3:e4:
                    5e:4e:f7:67:a3:8b:23:8c:2d:38:bf:14:05:f9:cb:
                    94:01:8d:06:41:12:70:bf:2e:72:fd:89:1b:ec:ee:
                    11:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3A:20:65:9C:E0:D4:D5:A5:3D:2B:65:72:43:30:00:9A:D3:3B:32
            X509v3 Authority Key Identifier:
                keyid:66:63:4F:14:58:6E:39:9C:D3:80:2D:9C:88:B1:E6:7D:8D:DB:03:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2c2d33-a367-449b-9c47-171db4690c0a/1/ZmNPFFhuOZzTgC2ciLHmfY3bA6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:da:89:7b:3a:24:00:cd:61:d0:cb:34:ab:02:ef:2d:58:60:
         8f:f5:75:d7:0f:fa:1f:c7:86:07:b7:c8:d4:af:35:bc:18:9d:
         6c:45:25:74:cc:56:44:6d:88:c9:96:9f:fd:71:57:19:6b:3b:
         91:9a:70:07:5f:0c:77:d2:66:44:6f:8e:23:e4:45:09:b2:62:
         8b:49:0a:f8:d5:84:72:4c:00:6a:45:10:18:20:90:0f:62:d1:
         21:84:a5:8e:10:65:4d:3d:25:fc:31:50:b0:29:c6:26:5b:44:
         e6:b4:b6:6f:ca:57:df:86:f6:78:96:ef:76:f2:62:88:f9:04:
         9b:d2:a9:8d:6c:d1:12:d1:06:ca:d4:bc:c8:98:d8:a5:3e:37:
         e9:0a:f0:22:e9:61:32:96:b3:12:ee:cb:3c:e1:a8:07:48:d9:
         24:21:ba:07:de:14:ed:9e:d2:d7:38:11:32:bc:5c:88:26:b0:
         52:29:c2:3f:4a:08:31:51:65:50:0a:0f:7f:9b:97:dd:4f:4a:
         df:95:97:76:44:f1:14:44:b5:16:fc:6d:f3:fa:75:0b:2a:fc:
         9b:08:01:4b:b6:d1:68:e4:df:40:db:d3:b3:cf:ef:6e:d3:c9:
         a0:e0:4f:46:aa:d3:8b:44:ef:b4:97:fa:b8:7a:70:9b:8a:29:
         5c:dc:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:41:05 2025 by rpki-client