Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File:                     zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier:          jvaxL+93lcE1NOkFmVVCIkspXOR96ao7Lg4jL/4p9A4=
Subject key identifier:   2B:DA:7D:89:87:95:20:9C:9D:50:87:17:BB:48:D1:E2:A1:87:A9:31
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer:       /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial:       01975912073EFD10D85FF734DE7D0163AA21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number:          1044
Signing time:             Tue 10 Jun 2025 09:00:43 +0000
Manifest this update:     Tue 10 Jun 2025 09:00:43 +0000
Manifest next update:     Wed 11 Jun 2025 09:00:43 +0000
Files and hashes:         1: 1-OuknPy_I73ZJ_OK7-eydsH6EGQ.roa (hash: 1km3bnZmBhTCtJX0A5W/ri14NfTFKPNRu0kBcpb2/R8=)
                          2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: v2U88Y+rGAdktPATgOZLZ7bap1tWgwjqjOgNzITYYcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:12:07:3e:fd:10:d8:5f:f7:34:de:7d:01:63:aa:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
        Validity
            Not Before: Jun 10 09:00:43 2025 GMT
            Not After : Jun 11 09:00:43 2025 GMT
        Subject: CN=2bda7d898795209c9d508717bb48d1e2a187a931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:a0:43:7d:af:86:75:cc:38:96:a5:ee:65:
                    3b:95:ab:2f:81:56:f8:14:33:dd:48:06:10:ef:ce:
                    e3:a7:de:d1:d1:85:f0:89:35:fc:07:76:ec:9b:a5:
                    53:fa:80:ad:d5:33:c3:31:d2:a9:bb:bf:06:7e:25:
                    e5:42:ab:7e:36:23:bc:96:3b:64:09:ef:44:09:e4:
                    ab:d4:30:3a:72:bc:1f:27:32:3d:55:2c:95:fb:da:
                    21:cd:17:26:f6:2e:f3:59:e5:7d:25:aa:ab:8d:b4:
                    14:67:8d:14:8a:9a:1d:95:f9:84:ca:72:75:2c:c7:
                    44:a1:22:fe:e1:f3:48:ff:2e:0d:ae:49:fd:c9:b2:
                    b7:f4:68:a5:8b:b6:03:8b:d4:7c:da:80:fe:ca:09:
                    28:3f:a6:2b:fa:be:81:71:11:b5:a4:64:3e:6d:be:
                    9e:28:6f:a0:db:6c:c8:37:78:90:6b:a5:63:9b:d6:
                    1a:a4:49:27:5e:72:cf:7a:89:07:96:55:27:4d:98:
                    ce:ff:7f:37:f5:a2:d1:70:a0:4c:9a:ac:50:31:f8:
                    f2:ce:53:94:54:73:24:72:dd:7e:ba:0e:d8:6a:2f:
                    e7:07:99:7b:71:6a:18:8c:91:24:64:c9:ab:8b:38:
                    2b:d3:aa:ec:66:dc:31:3d:79:c0:46:d4:61:c2:bf:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:7D:89:87:95:20:9C:9D:50:87:17:BB:48:D1:E2:A1:87:A9:31
            X509v3 Authority Key Identifier:
                keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:99:07:72:02:a3:2d:df:f9:d2:86:8c:df:43:29:2f:b2:07:
         d2:a4:df:65:eb:8b:e5:31:7f:a5:fd:6f:23:5b:b9:1e:6c:2f:
         ba:59:ec:f1:7b:33:de:04:2b:77:59:3e:c0:b7:79:7e:c7:a6:
         63:da:2f:fa:28:52:64:ce:c8:ed:d0:4e:27:9b:97:26:a1:71:
         43:54:ce:1b:c0:a0:05:54:30:b9:7a:38:fa:c4:aa:05:f6:7a:
         8c:2b:b3:11:2d:79:f5:2a:23:5b:6e:10:ac:0c:bc:ca:f3:28:
         5b:7e:fd:c4:38:a5:ae:73:e5:34:17:e4:cc:0b:7f:6c:be:e9:
         13:66:9e:6c:51:24:66:47:c7:64:2d:70:1f:e5:c9:ad:14:9d:
         d7:a9:9c:d5:34:10:90:f0:06:21:5d:62:99:21:2b:b8:de:76:
         e0:3d:f2:93:e6:65:06:27:7b:38:92:00:5f:64:d6:81:9f:40:
         21:47:96:d3:e0:13:6b:01:c6:16:ee:ba:a3:5f:fa:81:c4:36:
         8a:5e:77:91:7f:5c:65:e3:30:fb:65:c9:58:11:1f:24:18:d0:
         84:bb:f5:21:ee:90:86:c3:88:13:78:84:92:81:0a:6f:55:3d:
         f9:15:f4:82:e1:da:ed:2f:34:35:da:e4:e0:ae:39:f7:99:ac:
         c8:7f:5c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:50:49 2025 by rpki-client