Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File:                     ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier:          qRfEBePx8AABNR43u1WVE1+yV9e3PwN44KPLnmgRrxc=
Subject key identifier:   FA:BA:F7:FB:59:A4:07:02:B1:8F:00:DD:0F:A8:BC:D3:2E:6A:0A:21
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer:       /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial:       01965492C6680EA175E3A6D5504E2C64F5BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number:          1130
Signing time:             Sun 20 Apr 2025 19:00:27 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:27 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:27 +0000
Files and hashes:         1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: 6JGpZSbYNNOBNVi6qs8CwOZ531ot7qXBdWeDCGTNe7g=)
                          2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:92:c6:68:0e:a1:75:e3:a6:d5:50:4e:2c:64:f5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
        Validity
            Not Before: Apr 20 19:00:27 2025 GMT
            Not After : Apr 21 19:00:27 2025 GMT
        Subject: CN=fabaf7fb59a40702b18f00dd0fa8bcd32e6a0a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:64:67:1b:61:9a:05:0e:3a:ba:51:59:5f:
                    b9:85:35:1c:79:30:6c:07:06:56:1d:62:e9:cd:0d:
                    78:49:80:59:6c:f0:29:da:e2:68:b5:72:3b:64:35:
                    32:0b:eb:0d:f0:8d:4c:7f:4f:52:4f:c3:22:26:b7:
                    2e:d6:75:9a:09:f4:52:5e:02:ad:55:c2:0b:19:b8:
                    c5:79:6a:ed:dc:75:3a:a3:27:70:40:1d:ce:69:62:
                    29:75:00:be:c8:da:65:53:36:32:9e:10:6a:02:83:
                    ee:83:14:2e:8a:97:5c:fb:4f:78:bb:fd:b1:92:7b:
                    a4:50:eb:e7:cb:14:c7:79:c6:ff:96:8a:a7:07:8e:
                    b1:0e:66:88:9a:ee:23:fc:77:56:50:e5:ff:7c:a9:
                    c3:b6:64:3b:b9:6f:e7:3a:59:71:77:30:5f:cc:72:
                    0d:67:ca:41:21:11:39:4d:1e:f2:af:fc:d5:e2:8d:
                    40:e4:0b:fe:6b:a0:7a:13:69:62:da:6f:21:0c:21:
                    fd:60:34:51:b1:f8:ea:09:8b:fe:96:6d:46:97:49:
                    4c:10:97:81:4f:cf:0e:99:a1:be:aa:38:7a:1e:cc:
                    9d:d3:4c:53:fe:f1:82:0f:eb:88:0b:f2:06:22:5f:
                    9e:9e:ca:ff:5b:72:c2:73:3e:14:f1:bb:87:0d:6d:
                    b4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BA:F7:FB:59:A4:07:02:B1:8F:00:DD:0F:A8:BC:D3:2E:6A:0A:21
            X509v3 Authority Key Identifier:
                keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:dc:4e:b4:ab:03:cc:3c:af:a7:70:1e:e9:3c:4d:50:e6:
         8c:ec:39:08:72:11:05:a3:85:f4:ab:56:af:ca:10:c0:f5:4a:
         2f:8c:90:28:0f:f7:18:ea:e2:de:60:5b:e9:dc:50:78:bc:20:
         b7:11:a5:90:f3:97:a2:15:8b:d4:34:f6:77:7c:ca:ef:d7:63:
         85:e9:d6:1a:c5:3c:98:b6:b7:2e:0a:3b:de:9d:d7:e6:d1:35:
         4d:c6:ec:89:dd:78:9e:7b:be:7e:74:25:ed:23:4b:24:26:4d:
         42:55:18:ab:08:49:e8:9d:52:82:0f:af:c9:1e:48:76:dc:df:
         fe:1e:4d:9b:de:68:8f:60:38:99:db:de:24:91:99:bd:30:a0:
         64:ba:f3:3b:e8:dc:5b:c4:98:50:ab:67:ad:ee:74:76:4b:5a:
         20:f9:b5:5b:c6:0c:70:f3:7f:cf:39:9a:c8:de:82:ef:ae:bd:
         55:dc:db:e8:3e:99:89:ba:49:24:b3:d5:9a:3f:67:a5:7a:10:
         c5:90:10:d1:8c:fc:ef:84:a5:2f:c5:6d:90:ca:48:d0:2a:0e:
         56:10:1e:3f:69:62:8c:9c:aa:23:e8:9f:8f:1c:1b:3d:e9:cc:
         85:a3:16:10:e8:b4:27:2c:2c:7f:3f:93:40:58:93:cf:b3:d0:
         5d:8f:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:54:52 2025 by rpki-client