Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File:                     zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier:          v/srdtC63oehjy9Cryu5R7lYxasuQMyu71u75vPig3Y=
Subject key identifier:   D9:1E:93:E9:6C:80:57:21:D2:A0:00:25:22:5C:58:7A:44:43:9E:43
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer:       /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial:       01976C61CE592BB85D3367BEDF5768998C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number:          104E
Signing time:             Sat 14 Jun 2025 03:00:38 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:38 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:38 +0000
Files and hashes:         1: 1-OuknPy_I73ZJ_OK7-eydsH6EGQ.roa (hash: 1km3bnZmBhTCtJX0A5W/ri14NfTFKPNRu0kBcpb2/R8=)
                          2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: 7N3lK67eWXf87WV9ZEpbP5+73ppa7sAN6UyX+ggQkHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:ce:59:2b:b8:5d:33:67:be:df:57:68:99:8c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
        Validity
            Not Before: Jun 14 03:00:38 2025 GMT
            Not After : Jun 15 03:00:38 2025 GMT
        Subject: CN=d91e93e96c805721d2a00025225c587a44439e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:98:4a:9a:94:b2:9d:16:78:2c:4e:02:66:4d:
                    49:b8:02:38:13:4c:0c:68:0c:08:4d:8b:68:4c:f2:
                    35:ed:13:a0:ec:72:4a:3b:be:a1:45:79:2b:5c:50:
                    2b:9b:be:61:81:17:51:03:95:47:35:53:d0:af:6f:
                    14:73:56:63:78:4e:77:5f:2e:6c:52:b8:e1:49:f4:
                    f1:fd:27:18:af:28:3e:bd:89:a0:8e:e0:1f:b7:b7:
                    13:d6:05:34:0a:5c:04:b6:79:8d:5e:30:64:06:05:
                    0f:71:b5:f0:dd:33:f2:1f:f1:ad:1e:bb:e1:99:f2:
                    fb:20:97:b1:d0:30:72:8e:17:ce:b4:77:de:5c:71:
                    6b:9b:48:ab:53:17:ab:f8:d0:e6:12:74:60:38:70:
                    e8:ca:e9:8c:dd:3c:ed:1d:bb:1d:2b:53:e9:b6:2a:
                    83:4d:2f:c3:4d:2e:ea:6c:fb:30:62:32:91:14:12:
                    ad:72:49:0b:59:f9:ea:b0:fa:59:e7:04:a8:e6:dc:
                    00:9c:db:4e:63:88:5a:02:80:2b:77:e9:68:1c:36:
                    72:fb:b3:67:c3:31:a9:70:bc:a6:ac:1d:5b:07:8f:
                    ac:ac:3d:60:6d:00:a9:82:e6:53:e9:9d:5b:60:cc:
                    b4:00:d1:ca:f1:02:03:cf:24:2e:ed:0b:5a:7a:b0:
                    4a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1E:93:E9:6C:80:57:21:D2:A0:00:25:22:5C:58:7A:44:43:9E:43
            X509v3 Authority Key Identifier:
                keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:e9:42:46:c0:35:1a:68:f0:28:ff:2e:7d:63:9d:a2:8d:
         ab:83:48:01:23:6e:db:0a:49:cc:e6:c6:7e:4c:e3:e5:50:31:
         36:d3:a9:b5:48:0b:52:f8:96:8a:b4:73:45:ae:32:06:65:a2:
         9f:3c:b6:76:86:ea:0d:7e:30:90:ff:59:ab:26:c7:db:cf:da:
         12:81:29:3a:fa:70:97:92:42:02:8d:1f:2a:38:40:94:b2:7a:
         9e:a5:17:68:53:0d:af:d9:f0:2a:5b:6f:6c:d6:12:cd:e3:f6:
         f6:24:9c:c3:da:5f:c7:a6:cc:57:24:a7:94:ca:91:aa:50:51:
         74:bd:d6:20:15:2a:bf:68:09:5f:e2:34:d8:b3:c1:6d:f8:08:
         a2:f6:00:97:dd:8d:5f:9b:1a:08:df:84:48:bf:c4:55:73:5f:
         07:a0:a6:3d:84:b8:5e:83:f9:f5:9f:3a:8f:a5:9b:3a:49:bf:
         a8:c5:6f:dc:09:10:cb:8d:0d:c7:44:b2:67:fe:1a:2c:6e:54:
         3f:af:8f:7b:7c:c3:bd:a4:e0:41:da:4a:fc:7b:21:47:d6:62:
         ed:36:4d:73:72:df:92:f1:9c:30:50:e9:d7:e1:a7:79:a4:ca:
         1d:88:80:a5:d4:c0:b7:f5:da:79:27:f9:d1:ae:91:a0:5a:48:
         09:28:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:33:41 2025 by rpki-client