Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File:                     znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier:          sTyVr3J7Uo7TVkeVivhk7ooLNQo2d7Wd+j7Gt+s/66w=
Subject key identifier:   95:10:65:DD:46:98:29:83:64:20:79:65:E1:B4:C5:1F:20:4E:D8:65
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer:       /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial:       01974CD7531B2BB7AD3DFA4AA26031820D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number:          05C3
Signing time:             Sun 08 Jun 2025 00:01:09 +0000
Manifest this update:     Sun 08 Jun 2025 00:01:09 +0000
Manifest next update:     Mon 09 Jun 2025 00:01:09 +0000
Files and hashes:         1: SBa7BiJFT-mIs1J1piv1ATsLy8Y.roa (hash: IPgzHNDHbety+MkOooZgTafgMRF/usWyWiKxf6WdA3E=)
                          2: oPKPd-423WF5V15yagK86WwFUVY.roa (hash: bGYB3v8kpj4d0uBLYdK9tT6a9KgSd3ApBvwwynLJ+KU=)
                          3: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: mPQwB6aS2rvea5uDflwrTDY/+ers3U21HUvdoBnjGDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:53:1b:2b:b7:ad:3d:fa:4a:a2:60:31:82:0d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
        Validity
            Not Before: Jun  8 00:01:09 2025 GMT
            Not After : Jun  9 00:01:09 2025 GMT
        Subject: CN=951065dd4698298364207965e1b4c51f204ed865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ab:dd:c9:6a:e3:b7:03:e7:ca:05:46:91:ce:
                    9a:e0:f4:fa:7a:eb:a6:16:8b:fe:b8:5a:e3:a1:61:
                    26:1c:29:ff:de:37:3d:11:dd:18:c9:59:9d:18:1f:
                    f4:a2:df:40:94:4e:02:04:03:6b:10:b0:00:1d:5f:
                    a7:56:41:c0:44:f9:7d:7a:df:4a:5a:b8:a0:cb:6f:
                    a3:3b:eb:ed:01:c5:0f:a7:07:49:ac:94:8c:9a:3e:
                    37:dd:8c:47:88:2e:17:90:f2:fc:3a:4e:51:31:ad:
                    e6:20:c0:b7:49:99:dd:ac:59:b3:17:0c:7f:86:1d:
                    09:fe:18:b7:d1:c5:d6:27:53:73:dc:c7:c7:30:d6:
                    14:3c:f5:33:26:49:f9:57:ed:d0:cd:38:b7:a1:84:
                    9a:f0:10:a8:04:65:23:63:65:e1:6e:4a:eb:fa:e0:
                    b5:b0:c7:6d:23:eb:09:8f:6d:1c:00:1e:81:6d:d3:
                    45:f5:3c:25:4d:cf:ae:df:0c:18:37:d0:b5:fe:46:
                    29:91:58:47:a1:d0:ae:24:bb:52:68:b1:d9:44:c8:
                    cf:95:01:03:f6:0f:46:4f:1c:2f:4f:17:68:34:6e:
                    5b:b4:98:47:7d:d2:fa:b2:6d:f7:7b:05:4b:cf:60:
                    f2:7b:11:ab:20:5d:7d:dd:9b:15:d9:c9:80:87:74:
                    ff:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:10:65:DD:46:98:29:83:64:20:79:65:E1:B4:C5:1F:20:4E:D8:65
            X509v3 Authority Key Identifier:
                keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:07:6a:fb:af:d3:dd:b2:68:2e:e2:24:30:ef:fc:1e:72:59:
         af:da:8b:cb:da:fb:21:f2:be:b9:4e:b1:44:16:c0:36:b1:5e:
         c7:3f:c7:eb:46:65:19:6c:a9:bd:f3:d2:ec:5b:88:3d:5c:62:
         a5:2f:78:ea:d1:8f:ba:dc:3b:79:43:8d:ed:5b:e4:c1:9e:d2:
         bd:85:e3:89:cb:29:48:00:6a:b7:94:02:38:eb:e8:33:db:ba:
         cf:57:d1:88:cc:a2:a1:37:b7:60:97:9e:03:b4:56:e9:87:52:
         1a:90:10:3f:af:e4:a4:d9:31:77:cc:1b:ae:90:8a:b5:70:f6:
         54:f8:a0:77:58:08:84:80:ab:65:93:9e:e3:b2:80:3d:7a:b9:
         64:87:b5:62:3c:8a:ba:a7:54:ff:81:bb:2e:56:69:e2:b7:26:
         0d:3e:67:fc:1c:bc:41:d8:9d:65:70:40:c8:44:43:fa:88:ed:
         91:10:2e:e0:be:aa:f1:1d:0f:51:ef:ca:a9:81:63:0b:b1:d5:
         71:82:7b:13:20:67:4c:a0:64:f0:14:4e:b6:90:1b:ff:79:2f:
         5e:ac:93:0a:52:5c:a0:da:ea:16:ff:fd:94:c5:9a:a2:18:c6:
         6e:ff:aa:9d:37:92:3b:93:cf:97:df:e3:80:df:38:b8:1b:85:
         af:eb:47:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:23:39 2025 by rpki-client