Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
File:                     ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json)
Hash identifier:          zOaMlQJXS4JjrUXrmpKZejvUCRA642xEL4t4NElRR58=
Subject key identifier:   A5:BE:74:C5:C8:0F:71:87:FE:42:76:75:D9:1B:96:CC:56:0F:4D:7F
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Certificate issuer:       /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial:       01964A0FEA348FEE0811494EA534869E0B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
Manifest number:          10F5
Signing time:             Fri 18 Apr 2025 18:01:18 +0000
Manifest this update:     Fri 18 Apr 2025 18:01:18 +0000
Manifest next update:     Sat 19 Apr 2025 18:01:18 +0000
Files and hashes:         1: YINjBgqke9O6MEFg3LsttnUbivA.roa (hash: FiVOsjs04yLCv34Ov+9Fkl+VTtf648KKXDA45deG6fU=)
                          2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: bPYnkVgc6ghIAxb5RUfAHJJctYrpM8kpHuVXPHQxFsA=)
                          3: a48ohAuzOYw-D3deAcBdgdbuYdE.roa (hash: s6C2UNG19Y9Btn3B7Z6k8U1vX9nGyhjdM6XWlgIHyig=)
                          4: tGlHaeP9l4PIJg0VnS_cNRO7zcQ.roa (hash: OUc0RlEHBoBsIR+K/PErkMIbX3pRL0dEZfaQuWCuRDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 18:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4a:0f:ea:34:8f:ee:08:11:49:4e:a5:34:86:9e:0b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
        Validity
            Not Before: Apr 18 18:01:18 2025 GMT
            Not After : Apr 19 18:01:18 2025 GMT
        Subject: CN=a5be74c5c80f7187fe427675d91b96cc560f4d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c8:2d:d3:fc:ef:63:46:63:d0:43:2e:0e:70:
                    ed:da:a4:4f:9a:52:a7:59:76:18:5a:f5:9e:83:d2:
                    dd:79:fc:51:61:17:a8:35:93:44:a5:6a:e2:96:e2:
                    c6:b6:1d:f5:dc:e2:58:83:98:aa:ac:8b:89:90:d2:
                    af:36:ad:02:9f:6a:ce:2e:33:fb:91:e1:09:fb:11:
                    fd:05:44:cf:b7:97:ad:c9:20:72:16:9b:5a:c3:b2:
                    5a:5a:01:a9:f8:5e:54:33:a4:3e:ac:3a:00:17:8b:
                    cb:e1:17:df:7d:b6:01:22:db:1f:6e:41:84:57:83:
                    7d:8d:3f:e5:76:8e:40:b6:37:e0:65:ec:f1:32:97:
                    99:3c:3e:1b:76:73:e8:8c:d3:6f:4d:3b:45:d1:04:
                    18:5c:0d:15:c5:20:ed:49:bb:ee:04:bc:4a:78:5a:
                    f9:4a:3d:79:11:43:16:16:fd:62:0a:d1:fd:77:91:
                    d1:e6:d8:51:84:89:a3:60:f7:71:50:d1:30:48:92:
                    e9:49:60:87:56:b7:e9:9f:1a:bc:f0:e6:de:9c:d8:
                    bc:f9:f5:7b:6e:ef:31:6a:96:00:43:eb:a0:9e:06:
                    7e:7f:71:28:53:cc:81:ed:95:c5:0e:83:18:3b:bf:
                    8b:97:97:88:91:cc:18:71:fe:24:42:2e:43:1d:ec:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BE:74:C5:C8:0F:71:87:FE:42:76:75:D9:1B:96:CC:56:0F:4D:7F
            X509v3 Authority Key Identifier:
                keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:34:53:7c:27:2b:01:15:e5:ca:77:67:8d:39:16:d5:76:0d:
         02:f8:2c:33:b7:7d:61:87:36:87:03:4b:6b:dd:c8:4d:71:e0:
         0f:f6:56:22:60:d7:6f:87:9a:6d:e2:ed:e7:c0:94:e2:28:a4:
         49:a5:37:40:36:70:dd:79:ca:e4:e2:6e:8d:a4:5f:4f:89:bc:
         56:b7:78:85:9c:68:21:44:94:3f:7b:ab:ce:23:bb:6f:72:2a:
         17:51:4f:d2:10:23:07:ad:9d:ef:55:13:9f:e4:a1:95:9c:54:
         b8:cf:c7:f0:e0:d4:1b:24:ef:ea:e3:12:34:8a:f9:df:92:9c:
         4b:19:12:3e:51:31:e2:88:4b:63:b4:64:f6:df:63:e5:0d:32:
         44:69:61:91:41:f6:e8:fa:31:88:b1:b0:8d:01:2d:e5:00:e3:
         f7:93:f2:c0:81:96:a2:b1:80:46:9a:fc:10:79:f1:fc:a5:3f:
         88:6b:1a:43:9b:35:a1:1a:ee:cb:fc:ce:e9:97:4e:d9:2d:5c:
         f7:32:b3:06:b8:69:51:68:e5:a2:22:fd:37:2f:fd:8a:5a:7d:
         5d:a0:9c:c3:70:81:20:be:80:5e:21:82:e4:9f:c4:f1:13:92:
         da:46:3d:d0:2c:70:7e:45:40:6f:af:95:e0:89:f0:93:e4:a3:
         91:15:a3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:25:49 2025 by rpki-client