Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File:                     ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier:          9Cmn32bPS4rx6aMSFtjSOZcfiZO4xjX1hSvrHfo8E8o=
Subject key identifier:   BA:FD:CE:2D:DE:49:06:1E:EB:A7:5D:95:A4:29:EA:58:15:5C:68:6E
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer:       /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial:       01975FF0035E9A82A8E83CF695ADFE1BD209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number:          019E
Signing time:             Wed 11 Jun 2025 17:00:54 +0000
Manifest this update:     Wed 11 Jun 2025 17:00:54 +0000
Manifest next update:     Thu 12 Jun 2025 17:00:54 +0000
Files and hashes:         1: G8N3qTa4VczFzinJ5WzomATxm3g.roa (hash: 9nI91Hj8CyleS8L7CFcjCsRKa59524cSRX5eWMKZBYE=)
                          2: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: qYar91RfuQs3FaaFnt6QIUA9GYmtO9UOFDPSgCDKBsc=)
                          3: lh0Ymr_ga0779X3_Cx26imTai5c.roa (hash: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=)
                          4: sQVxZ_lbDcaGAO6GQ4Uax3TrnbA.roa (hash: NBxjFtKEwZR8bN/MCO3rMHIc0Pkb+5FRotafl/NdAVw=)
                          5: ySpicQatPy5iHCLP1veD0rDhvRU.roa (hash: y3lstPEKv9L5HhDFlk02HVUCo0C3eJ06Z+uYgaJZhhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:f0:03:5e:9a:82:a8:e8:3c:f6:95:ad:fe:1b:d2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
        Validity
            Not Before: Jun 11 17:00:54 2025 GMT
            Not After : Jun 12 17:00:54 2025 GMT
        Subject: CN=bafdce2dde49061eeba75d95a429ea58155c686e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:12:6b:0a:d2:93:56:1b:9b:ed:92:06:6d:
                    71:74:0f:15:6c:52:df:f1:c7:8b:65:94:ed:73:24:
                    7b:87:40:24:55:22:dd:de:b7:b1:f4:7d:4d:3f:c4:
                    76:0c:04:41:31:cc:75:8e:ff:a1:5e:79:06:7f:5a:
                    e3:37:53:e4:ab:60:97:35:1c:fe:cb:29:fb:e9:ef:
                    b8:cb:f8:c9:68:fc:f5:8c:ef:fa:cf:6c:0d:35:33:
                    8e:e3:63:02:62:b8:e3:4e:9f:d6:17:ee:83:9a:a8:
                    27:b2:16:b7:49:5a:a3:c5:e3:0b:93:28:4a:3e:ea:
                    d4:bf:de:9e:aa:48:a4:20:3a:55:bf:fe:51:82:67:
                    40:6f:58:21:56:e5:1e:94:e1:07:f9:c5:8d:38:1b:
                    ac:e9:15:55:dd:2d:b3:ce:5a:55:5f:9d:14:45:0f:
                    f8:68:3a:b4:73:11:5d:c6:3e:d1:d4:b1:f8:cd:f9:
                    95:d9:16:53:1d:99:34:9b:77:e1:5f:77:ae:b2:d8:
                    57:e2:d0:b9:ef:04:73:8f:5e:7b:e1:e0:9f:38:f1:
                    8c:60:10:55:ad:3b:ab:32:b0:f1:b4:0d:ad:6a:36:
                    94:59:bd:01:f3:46:f1:4d:02:8a:51:e6:1a:e7:26:
                    e0:ad:78:8f:08:de:41:4b:6f:50:7d:87:8f:9b:3e:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FD:CE:2D:DE:49:06:1E:EB:A7:5D:95:A4:29:EA:58:15:5C:68:6E
            X509v3 Authority Key Identifier:
                keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:68:73:bf:8c:85:9b:b9:60:3c:0a:c6:77:48:bf:e0:d2:66:
         26:8e:0c:f0:9a:79:ae:a4:d2:50:3f:f6:63:06:e5:6d:8e:16:
         d5:2d:41:5a:64:b7:ad:74:f7:15:e6:ee:40:ed:dd:1b:b3:2e:
         ff:0e:c8:15:23:bf:ed:df:2c:97:fc:eb:8d:f7:6b:17:bf:77:
         19:1f:35:a3:b4:76:ad:b1:ee:ef:4f:e1:d5:62:16:6f:bd:b0:
         77:07:c3:fb:0b:99:62:cc:42:62:aa:83:b4:81:b7:d3:ce:e9:
         17:bf:9e:35:5d:3d:1a:f2:7e:f8:06:c9:09:93:b0:7c:07:86:
         8c:56:1b:c3:4c:44:25:f3:e7:e1:6d:22:49:ec:17:ee:40:d5:
         fa:eb:c7:cb:5e:a9:6d:dc:9c:9c:33:c0:9e:db:f9:17:76:79:
         35:ac:31:66:56:71:ad:d0:80:8d:dd:4c:01:8d:94:71:d7:24:
         63:7b:c1:d0:79:b1:7c:92:5b:b2:b1:19:a7:d3:eb:78:07:c0:
         a8:d0:fb:c2:3b:95:b8:62:cf:2b:35:c6:b6:ae:0c:84:f0:6e:
         88:41:bb:c5:42:fa:a3:11:9e:02:bb:3e:0c:bb:66:11:24:dd:
         d6:da:e5:60:6d:be:7e:7f:03:c5:03:63:9d:3e:4b:b4:df:0f:
         68:06:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:49:50 2025 by rpki-client