Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File:                     z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier:          7WFvJth2LAVKB2BVrX6QD7nk6YZ5YYPk7avb2mVYCTc=
Subject key identifier:   20:D7:A5:74:06:31:C2:86:FE:72:CB:32:9D:32:3B:0D:74:C5:93:B9
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer:       /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial:       01976C98A2E1F1F72EBD5936E908B681DD10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number:          12B4
Signing time:             Sat 14 Jun 2025 04:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:31 +0000
Files and hashes:         1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
                          2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
                          3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
                          4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: 1HXJa0jiprmknsm1Bn47UMgDmtJRbyvZ5Xwyx+zYEPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:a2:e1:f1:f7:2e:bd:59:36:e9:08:b6:81:dd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
        Validity
            Not Before: Jun 14 04:00:31 2025 GMT
            Not After : Jun 15 04:00:31 2025 GMT
        Subject: CN=20d7a5740631c286fe72cb329d323b0d74c593b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:8a:0b:c3:da:6a:0a:62:92:bd:c5:67:77:
                    63:20:47:34:b3:62:dd:c6:a5:4d:94:f0:98:6d:bf:
                    8a:4c:74:c4:db:1c:a9:55:6e:af:82:8a:ea:08:73:
                    07:aa:9e:8b:d7:31:28:cb:05:97:7d:bc:3f:d3:39:
                    72:53:eb:b7:50:4d:50:4b:bd:02:b1:ec:5c:12:01:
                    52:93:98:65:07:5d:e9:37:da:05:ef:3e:49:5b:2a:
                    b4:f0:ad:af:56:b2:5e:f4:ca:e1:e0:56:3b:ff:a3:
                    e0:16:97:a9:64:af:c7:b8:22:ce:bc:05:61:6f:8d:
                    b0:d3:ab:8a:82:c5:ed:bf:5c:6b:c2:21:82:e9:85:
                    52:e7:e2:f9:39:7d:34:65:ef:46:43:3f:fa:f2:0a:
                    32:23:43:86:1c:97:6a:51:6d:2d:88:da:d4:ee:84:
                    bc:ec:47:2c:c2:5f:11:63:b2:97:32:41:16:6e:07:
                    9a:7a:75:5c:91:91:7b:7e:c7:be:d2:3e:54:ac:bc:
                    0b:c2:ee:51:29:e2:c7:b7:42:f8:0e:43:79:8a:30:
                    2e:5a:c0:ca:4d:90:37:30:24:64:d7:ce:9d:aa:65:
                    3d:11:51:f7:79:e2:0b:21:6a:b1:44:fc:36:0a:ee:
                    d9:12:25:b8:6b:d4:47:6d:16:7d:11:2d:90:c3:15:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D7:A5:74:06:31:C2:86:FE:72:CB:32:9D:32:3B:0D:74:C5:93:B9
            X509v3 Authority Key Identifier:
                keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:96:54:24:2a:40:96:af:60:e0:66:da:8c:f9:28:2c:0e:99:
         50:7f:3e:74:c9:ef:a2:be:36:fc:f6:5e:2a:d0:fb:25:a3:d9:
         e9:e2:b0:16:32:2e:44:f1:0b:e0:7f:9e:63:bc:87:39:ec:e5:
         a6:a0:ca:93:35:8a:be:03:34:77:36:07:79:e1:ea:79:3e:bf:
         2a:01:50:46:a0:88:ce:98:46:27:79:22:ec:b0:7e:81:6f:db:
         fa:a3:2d:56:c6:7d:5a:33:16:6f:31:56:83:40:e5:e5:ce:0a:
         21:2f:de:ef:62:ec:24:96:da:ce:8a:a9:c4:11:27:82:45:83:
         a4:ef:03:91:b7:e3:e3:2d:60:59:58:58:28:9c:b4:35:5d:c7:
         41:e1:f8:8c:44:bf:db:17:71:a1:57:80:ac:36:12:3c:f8:60:
         aa:27:24:b2:1c:09:d6:10:42:10:5b:c6:85:1b:69:a2:e6:fd:
         74:54:a4:87:73:b6:41:15:26:df:3b:16:d3:48:b0:95:84:66:
         19:35:d5:bb:9a:32:dd:70:5f:21:44:a1:2d:c1:26:3b:b0:c9:
         95:26:79:b6:54:99:cc:49:59:47:2f:c7:b8:29:b8:5f:de:1c:
         a5:e9:c6:b4:41:16:7d:4e:61:32:1e:e8:12:3a:51:b9:02:8c:
         e8:c4:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:42:54 2025 by rpki-client