Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File:                     ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier:          ld1aWZ7vZIIw7key6riwDxc9EI5G42aVFDsyIPfzLUY=
Subject key identifier:   55:AB:57:3C:DA:24:A2:8E:4D:3F:5D:29:38:33:98:42:CC:C4:FD:98
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer:       /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial:       0197488BF0DC1CD0AC4583D8F97427B69340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number:          0FBC
Signing time:             Sat 07 Jun 2025 04:00:20 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:20 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:20 +0000
Files and hashes:         1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: yJRc1VzRFT5vlvzWk8Nu4kAVslvsuHks0t/Q8E2MNrM=)
                          2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8b:f0:dc:1c:d0:ac:45:83:d8:f9:74:27:b6:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
        Validity
            Not Before: Jun  7 04:00:20 2025 GMT
            Not After : Jun  8 04:00:20 2025 GMT
        Subject: CN=55ab573cda24a28e4d3f5d2938339842ccc4fd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:ad:8c:89:7e:b2:1d:e0:24:4d:e4:42:4d:
                    7b:5f:f4:26:c1:04:73:8e:84:10:e1:7b:9d:7a:d6:
                    54:2b:f0:cc:38:6f:a0:81:ec:6d:41:d9:72:0f:d8:
                    df:b8:3d:93:57:5f:43:db:0b:2c:7c:5a:ef:51:f6:
                    2b:16:9f:27:61:86:db:ca:e2:77:f1:0f:9e:e2:01:
                    80:c1:9c:69:2c:36:8c:b6:a1:7e:f9:eb:2b:1d:93:
                    48:fa:c2:3c:26:48:82:ad:74:9f:dc:dc:fc:50:61:
                    13:82:22:26:68:a6:1d:a7:9c:a6:96:a6:45:01:02:
                    37:cb:bc:97:b8:e1:7a:a9:f3:80:a6:ba:da:14:18:
                    f6:0d:1e:09:cc:76:54:66:45:f3:48:6a:28:b3:b3:
                    35:50:14:8f:28:99:9d:15:b7:53:c0:84:c9:08:03:
                    1b:a5:a5:85:a1:6a:5b:83:5a:8a:bb:f8:45:b1:1b:
                    85:5a:40:74:7f:46:15:1e:8a:ca:91:ea:13:dd:98:
                    05:a4:cf:06:fb:2f:99:fc:80:a7:68:4b:77:69:28:
                    ca:a1:3f:25:2d:15:92:2c:97:5a:76:91:af:cc:3f:
                    26:64:39:9c:e1:12:81:48:9e:88:53:a7:be:76:7c:
                    3c:dd:6e:96:a7:68:e4:1e:dc:32:31:f1:b0:0b:9d:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AB:57:3C:DA:24:A2:8E:4D:3F:5D:29:38:33:98:42:CC:C4:FD:98
            X509v3 Authority Key Identifier:
                keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:80:41:ae:7e:6d:d5:3f:8d:97:4b:99:b4:19:82:9b:c7:49:
         a5:39:aa:c5:a8:00:a0:93:4d:01:e7:43:8f:c7:cc:e2:c6:f4:
         a1:30:92:df:f2:a5:08:e8:07:00:40:63:19:1e:e3:29:cd:33:
         5a:be:96:de:75:b4:44:27:ef:49:98:a9:73:d7:e8:aa:b5:dc:
         1d:5c:db:83:5b:20:f4:1e:a5:78:26:35:5d:82:e1:68:2e:f8:
         da:c3:21:1a:ba:27:cc:5f:1e:d8:30:2c:73:48:8a:c5:a7:98:
         f9:a0:c8:c2:db:d7:48:52:a7:1b:5e:f2:8a:4e:76:cc:fc:f1:
         ad:30:5e:82:31:91:00:84:ef:a5:a8:3f:dc:d9:af:32:c8:e0:
         1a:61:82:40:e0:2a:a0:18:c3:c5:36:be:72:eb:ef:72:f1:66:
         1d:82:d3:85:23:79:d6:32:c9:be:70:ce:2e:58:75:7b:6b:d7:
         24:bb:2b:34:b3:ad:02:8d:07:2f:de:d5:88:69:b8:88:f1:76:
         d0:a5:24:ef:d5:cd:8e:94:7c:aa:ab:7d:41:06:5a:a8:6d:95:
         06:c2:df:31:98:17:ac:67:1c:75:69:f6:5f:ac:ce:a8:c5:59:
         6b:17:16:b3:a6:67:1c:10:91:cc:99:4b:f7:ef:21:a1:02:a8:
         16:43:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:13 2025 by rpki-client