Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File:                     zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier:          zWmXj0x133ndRvILyMe+ws2G7yoLFzh0SjKpR0DlKzQ=
Subject key identifier:   5F:C7:72:FE:4B:88:31:5E:91:B7:1A:DE:D7:FF:4E:1A:0D:0D:E1:DC
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer:       /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial:       01975B009941896780E02C2CDB9962A2C89F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number:          1045
Signing time:             Tue 10 Jun 2025 18:00:55 +0000
Manifest this update:     Tue 10 Jun 2025 18:00:55 +0000
Manifest next update:     Wed 11 Jun 2025 18:00:55 +0000
Files and hashes:         1: 1-OuknPy_I73ZJ_OK7-eydsH6EGQ.roa (hash: 1km3bnZmBhTCtJX0A5W/ri14NfTFKPNRu0kBcpb2/R8=)
                          2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: noN/vhoFPmno9yI5hrfiSxyLsBWbm1opwOYI5oXcpWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:00:99:41:89:67:80:e0:2c:2c:db:99:62:a2:c8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
        Validity
            Not Before: Jun 10 18:00:55 2025 GMT
            Not After : Jun 11 18:00:55 2025 GMT
        Subject: CN=5fc772fe4b88315e91b71aded7ff4e1a0d0de1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:53:bf:89:d4:e7:fd:ce:7b:de:36:f3:9c:8a:
                    d0:d9:9d:40:3c:57:77:7e:19:8b:43:c6:1f:f1:a8:
                    02:97:b4:cd:cd:07:d6:59:81:07:e3:90:08:97:35:
                    a9:5f:b8:5e:85:f4:8e:3e:f0:22:db:9b:86:bb:32:
                    1a:c2:ea:fb:c9:27:a4:b9:99:7c:29:f4:db:7a:5e:
                    6f:9c:f8:2a:c2:45:73:40:1c:25:05:c5:ae:6c:0c:
                    f0:92:17:bd:82:bf:9b:ee:0e:b1:5f:63:76:f8:cb:
                    68:d4:bb:0b:ee:94:58:0a:2a:36:0c:89:ae:66:7a:
                    e9:5f:a8:3f:ea:22:40:91:0e:cf:38:dc:3b:33:64:
                    fc:47:0b:7c:71:b6:07:d9:a0:ba:97:52:12:0b:6b:
                    81:5e:15:d4:f5:d3:93:d3:49:84:4d:6f:0a:4a:c7:
                    0c:52:9f:18:67:0d:af:0f:62:9b:87:6f:8d:4d:2c:
                    49:51:f3:3b:d6:12:e6:a3:1f:db:4f:85:b3:81:d0:
                    42:24:d9:d5:e4:e8:f0:4a:1a:64:06:50:ca:f4:c6:
                    dd:a5:24:a0:04:f8:43:ca:60:7b:be:b0:96:66:9c:
                    be:ba:e0:61:f5:e8:b3:f0:5b:b4:8e:48:d2:4c:e2:
                    6e:e7:09:f8:c4:9d:e5:92:e3:5e:1d:85:8d:00:91:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C7:72:FE:4B:88:31:5E:91:B7:1A:DE:D7:FF:4E:1A:0D:0D:E1:DC
            X509v3 Authority Key Identifier:
                keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:0c:c2:f1:43:01:1e:24:ea:d1:f5:e8:65:35:90:b0:93:
         73:ab:db:35:56:d5:17:d5:e6:99:80:c1:13:e1:90:e0:80:6d:
         f2:53:ab:d6:95:a2:eb:42:c3:6d:7e:39:59:2e:4b:cb:59:90:
         9d:73:59:0d:07:12:2d:a2:2a:d7:c1:8c:66:f2:f0:ce:76:a6:
         3b:34:ee:5b:33:a2:6b:60:d2:25:24:1f:44:fb:06:9f:a3:38:
         b8:14:4f:c1:5f:7f:79:1f:0e:cb:a9:c6:ca:12:1a:9d:d0:f0:
         f1:8f:de:b1:1a:d8:74:1d:20:1b:d0:ad:f8:90:cb:cc:db:9f:
         c9:7d:c9:f8:d0:bf:50:ec:9e:8a:34:41:58:2b:12:2b:af:10:
         01:a3:fd:6c:57:e2:7b:24:0d:5b:96:1c:59:95:9b:a4:66:a3:
         ea:0d:94:8b:5d:a5:91:31:7b:c0:28:84:82:83:40:07:0b:4e:
         84:41:c0:30:dc:5e:54:23:e9:00:34:99:38:07:fa:f3:43:79:
         90:cf:81:86:71:f3:4b:a4:bd:75:8b:61:34:87:f3:c6:78:44:
         a3:7c:cc:34:c4:d5:34:68:52:72:78:ba:2a:da:24:9d:10:1b:
         aa:1a:08:1f:52:90:52:86:28:7f:07:9c:e0:02:e1:03:3f:ff:
         25:9b:fc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 21:04:53 2025 by rpki-client