Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File:                     ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier:          m+lz4YV+nZx74qNPO8sQHG9dEEkPQtxNI0QY3B10r5k=
Subject key identifier:   E4:9D:DE:EA:A1:44:38:02:E1:68:7C:36:AE:4D:83:DF:35:AC:51:3E
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer:       /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial:       019747B0880F8CD921A8B914D553BA4CE5DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number:          15AE
Signing time:             Sat 07 Jun 2025 00:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:40 +0000
Files and hashes:         1: GaKfTqsXTBbzB0l6PPjCOtbieE8.roa (hash: bGjsSkVxtFTtg2bHcJH2NQE4duud/iaOMe/znbQ8Z78=)
                          2: RGQ5srvtHbdURiQlYxW8ivrDFG8.roa (hash: buPWNRKOvNBqFPTOoMN0ZIjfHBE170p5yrGiEymKeHo=)
                          3: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: Eq0gL6vbJ4Coqbj50bjoErzfKFKNvZXKXKxIQwNNsAQ=)
                          4: duOf09gggM7TDjJiWU0nkT8FsYU.roa (hash: 25aNtWfE21D31QMlGlCqimTiOpzPGbBhttON+NoFDhc=)
                          5: vZCiwKajLAj94g_r1KS02gxe_XQ.roa (hash: /9FsroII+PnZV3EcII02TBLCdlztOBLTex1BPR/WLFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:88:0f:8c:d9:21:a8:b9:14:d5:53:ba:4c:e5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
        Validity
            Not Before: Jun  7 00:00:40 2025 GMT
            Not After : Jun  8 00:00:40 2025 GMT
        Subject: CN=e49ddeeaa1443802e1687c36ae4d83df35ac513e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:29:ac:16:8b:bc:7f:13:ee:08:16:86:b5:
                    a8:21:2b:d6:19:6b:ed:24:d9:6a:a9:2b:07:ca:ff:
                    7f:b4:a8:b7:3b:85:5d:a9:e5:31:99:ce:09:d1:7d:
                    b1:43:c0:ec:96:11:f7:9e:94:58:d1:84:f9:d7:66:
                    66:1b:8e:5b:d0:bb:35:9d:6f:b0:5b:cc:a9:10:57:
                    d4:a2:4d:5d:8e:89:15:43:a7:c7:0f:42:9c:20:c2:
                    ff:d9:3c:03:2f:24:ad:bd:1d:19:c9:1c:f9:4a:c1:
                    34:b5:0c:ed:97:09:56:85:2a:be:b1:5b:7f:17:bf:
                    6c:5e:30:4d:7b:0d:6b:f2:1e:85:4f:ad:9e:22:a9:
                    bb:96:cb:e2:01:fa:8b:f5:b1:33:2c:47:ee:06:80:
                    7e:39:08:02:21:55:79:8d:89:d1:f4:b0:18:bb:68:
                    55:04:b7:e9:ad:d8:52:6d:48:86:3e:7f:34:d2:20:
                    d5:9a:24:1e:eb:62:fa:d6:01:0d:b2:f6:ed:c4:e6:
                    01:c4:44:fd:aa:78:5f:a2:9f:03:7e:de:46:21:84:
                    12:7f:b9:12:2f:89:6c:4c:8f:b5:82:e3:6c:0f:83:
                    ff:6c:59:33:7f:c6:8b:6f:00:be:2b:d9:d0:f9:17:
                    44:2f:d3:b1:b4:ee:45:27:65:99:14:4f:8a:38:31:
                    55:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:DE:EA:A1:44:38:02:E1:68:7C:36:AE:4D:83:DF:35:AC:51:3E
            X509v3 Authority Key Identifier:
                keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:78:d1:a8:b5:97:3b:21:c9:89:0e:d3:8d:60:f9:e6:68:55:
         9b:22:50:47:7f:7c:2d:fe:6b:90:14:c6:58:54:5d:7e:f3:44:
         2e:41:e1:56:5e:8e:87:e1:06:f6:a7:36:44:d7:b5:54:8b:d4:
         b4:84:be:e3:7b:6e:4c:ea:5a:b2:d0:d4:ba:37:ac:eb:7d:24:
         10:d0:35:ba:21:5d:7e:b5:02:f5:d1:42:2d:94:fc:6d:7c:ea:
         5a:1e:e0:ab:5d:dc:84:ba:3a:cd:3d:49:a7:dd:7f:86:60:86:
         a7:6f:a2:29:96:0e:16:a6:d0:1c:ad:9f:7f:7f:05:b4:ab:53:
         1f:06:6e:a4:93:5d:c3:15:e2:55:fc:cb:ef:89:f3:28:1b:4b:
         fa:da:63:e3:e6:8a:cb:e1:2c:16:70:54:17:3a:d4:29:5c:0d:
         1e:79:32:67:8e:78:fa:04:e8:67:58:8e:51:42:3d:16:ed:bc:
         d9:a1:a9:31:ba:b0:98:83:6e:29:c3:55:1a:81:4e:2d:70:3c:
         84:a2:86:9a:63:7a:28:d3:42:cc:cf:70:04:4c:82:45:84:23:
         64:d2:8f:1a:be:80:41:cd:09:e9:cb:fc:24:f7:eb:45:98:76:
         55:58:f8:73:cf:55:86:06:b0:e4:c0:c9:7d:1e:2f:74:0f:0c:
         4f:78:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:08:30 2025 by rpki-client