Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File:                     ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier:          nfQ8XJO6TMyEGdF8z0AbDvv79aV3mlh7AjNpeqbQxmc=
Subject key identifier:   FB:02:DC:06:8C:86:53:7B:E3:2D:0C:AA:AD:13:A0:04:A4:AE:85:1B
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer:       /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial:       01974A439328A4553340B5CEABA87BFFD9E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number:          13CD
Signing time:             Sat 07 Jun 2025 12:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:31 +0000
Files and hashes:         1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=)
                          2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: ErwIqTH8zpBsKqJfLZT9+d+EThG0m21pHKJW+eKJYaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:93:28:a4:55:33:40:b5:ce:ab:a8:7b:ff:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
        Validity
            Not Before: Jun  7 12:00:31 2025 GMT
            Not After : Jun  8 12:00:31 2025 GMT
        Subject: CN=fb02dc068c86537be32d0caaad13a004a4ae851b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:62:21:66:74:62:2e:5d:6b:b0:73:81:b2:
                    4c:c8:c9:ac:4d:2b:c8:aa:84:9b:82:a2:79:2d:a3:
                    3c:d3:8d:ff:ea:df:6d:f9:4f:55:05:9a:e9:cf:a6:
                    8d:0d:da:17:12:2e:0c:72:b1:6c:22:fa:4d:5a:53:
                    f2:ee:fa:86:bc:da:35:e6:f7:5c:81:32:b5:97:9c:
                    ed:26:18:d9:ec:d5:c9:c7:85:57:bb:d0:86:79:cd:
                    b8:02:f5:5f:78:f9:09:9c:a0:3f:60:34:27:b2:53:
                    2b:f3:8c:b1:f3:e2:2f:ac:fc:9e:b5:db:60:9b:68:
                    37:c4:a7:0d:01:06:94:7d:8b:3d:d2:f1:ec:c5:e4:
                    f8:2e:09:ef:43:5f:c7:6d:19:74:87:79:5a:9b:6b:
                    4b:9b:d9:8c:1a:c7:cd:cb:66:54:59:0e:9f:a8:97:
                    7f:09:17:e6:1b:5b:92:85:d1:96:c0:db:c2:64:b1:
                    07:5f:1c:dc:4b:b8:57:9d:07:8c:36:ea:f5:02:25:
                    5a:01:bd:0a:a2:e3:0c:b2:ad:c5:bc:c0:16:27:ee:
                    8d:a6:6c:78:a1:5b:fd:ed:17:9f:98:c9:c8:da:13:
                    6c:de:c0:db:85:cd:60:ab:0d:ef:3d:ec:0b:cc:3d:
                    a5:c1:89:33:bf:a9:3e:28:2d:c9:6d:cd:a3:6b:fb:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:02:DC:06:8C:86:53:7B:E3:2D:0C:AA:AD:13:A0:04:A4:AE:85:1B
            X509v3 Authority Key Identifier:
                keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a6:22:db:72:8e:fc:8d:33:b8:34:9d:b2:f3:48:49:6e:38:
         ad:e0:99:98:ce:c7:45:82:a7:7e:0c:2e:94:a8:2d:86:c4:46:
         2f:c9:f7:44:65:14:9b:2d:c4:28:7f:c7:d7:6c:27:f0:91:72:
         bd:b5:30:bb:59:bb:df:75:c1:de:72:c4:49:51:56:fb:ed:4f:
         89:60:68:49:ad:cd:4f:d2:ff:b2:b9:d1:4a:23:87:ac:2b:1d:
         3d:03:5f:79:59:f3:b1:0c:d5:8a:5f:2a:7f:03:31:40:13:0d:
         3e:9b:33:26:1b:df:57:25:fa:b3:5c:23:11:0d:94:13:57:0c:
         75:af:1e:90:ad:00:31:26:ec:11:bc:b9:81:22:2c:35:1a:92:
         eb:78:63:c2:b2:42:3e:ab:d6:36:b0:70:bf:de:b4:52:4a:dd:
         cf:1f:37:be:f3:0d:64:e9:71:db:a2:52:5e:20:ae:cd:37:83:
         63:a1:4d:58:de:0f:8d:08:95:25:68:a1:55:40:ce:6e:61:b3:
         5a:74:20:a9:17:b0:cc:12:20:85:c1:95:ae:e1:3b:3f:9a:d6:
         37:6e:59:10:ab:6e:c3:be:97:75:e0:b5:e3:75:81:23:d7:28:
         bd:d2:ae:7f:aa:a7:ad:90:03:97:df:c9:0f:63:aa:67:14:1a:
         67:3c:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:04 2025 by rpki-client