Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
File:                     Zu07pox4v_LEckQAreY0hIL7Q2Q.mft (raw, json)
Hash identifier:          SzzBKQABbdTxP47N6K6gB2GNPZDTm3W0nqC98beh0JA=
Subject key identifier:   35:01:8B:8E:19:6D:6D:7F:90:C7:CE:ED:0C:A4:53:9F:0E:FD:D5:88
Authority key identifier: 66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64
Certificate issuer:       /CN=66ed3ba68c78bff2c4724400ade6348482fb4364
Certificate serial:       019752A2B479E1D4738A981268D56BF9E6CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
Manifest number:          05AA
Signing time:             Mon 09 Jun 2025 03:01:24 +0000
Manifest this update:     Mon 09 Jun 2025 03:01:24 +0000
Manifest next update:     Tue 10 Jun 2025 03:01:24 +0000
Files and hashes:         1: Fj8ltGVj4bwSu39N9YoDfu9hSDQ.roa (hash: uLPHDZq9gqVO8ebYrJkyS5eyy5WJ7smXGXrfo42hNSA=)
                          2: MaxzsR0kwMliUpktNGJeA1YTbq8.roa (hash: E2oo5IoDgbAj+TaESsQDHN0WQGIrVE8oADktvNT9aM0=)
                          3: Ur62Nf4a7xdo9YL9reRteLUJLQg.roa (hash: cTYkrEu5Wjkc8LFBNFp03pV3rpo4tl8VZFY9in/a2XI=)
                          4: YXA6aqio6Sogb7UifutDHrpNQ4Q.roa (hash: xfPovmvwvvSgxymKTvQ/ETIu4GwrujkG9BRHiCGNR8E=)
                          5: Zu07pox4v_LEckQAreY0hIL7Q2Q.crl (hash: GVv8GMp9TVhgeVi4XcxYk4wVkhNt4lQuLDnbAFrCYa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:b4:79:e1:d4:73:8a:98:12:68:d5:6b:f9:e6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ed3ba68c78bff2c4724400ade6348482fb4364
        Validity
            Not Before: Jun  9 03:01:24 2025 GMT
            Not After : Jun 10 03:01:24 2025 GMT
        Subject: CN=35018b8e196d6d7f90c7ceed0ca4539f0efdd588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:92:ce:e3:64:99:46:05:83:28:88:a6:b7:7c:
                    bb:36:40:d5:f7:42:08:ee:50:73:e4:89:4d:85:d7:
                    4c:3c:ed:cb:a4:15:ad:d8:0a:fc:0e:29:0d:7d:64:
                    36:5b:7a:31:db:d4:13:cb:1b:d3:42:b6:87:ae:5c:
                    b6:7e:41:23:a1:43:1e:ee:81:8d:f6:fe:16:cd:dc:
                    c0:05:48:a7:ed:40:a1:b4:51:84:4b:20:b4:8e:43:
                    65:c2:b2:31:60:64:59:14:3d:12:9b:e9:97:f2:b9:
                    62:d2:4f:97:eb:57:51:2a:49:1e:3e:24:58:4c:25:
                    f6:df:39:c5:ed:14:43:1f:91:e6:e9:12:a7:42:c6:
                    80:a8:d8:e8:47:56:1c:d6:33:4d:1b:85:ca:aa:20:
                    ef:d4:02:97:af:a5:08:61:c8:7a:16:88:4e:b0:8a:
                    0a:cd:b9:65:73:ac:19:06:db:68:44:00:00:25:0e:
                    0c:c3:4e:e2:10:12:47:d3:77:b6:50:e8:f4:d9:a5:
                    59:69:16:76:ae:2f:69:1f:09:86:6b:ec:37:88:f0:
                    47:ae:53:07:07:1c:bf:22:d3:3e:50:bf:d2:dd:7c:
                    59:04:4e:01:55:14:28:8a:55:16:73:51:1c:4d:cd:
                    4d:28:cb:59:90:50:4c:db:25:b7:0f:ab:06:b5:a5:
                    2e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:01:8B:8E:19:6D:6D:7F:90:C7:CE:ED:0C:A4:53:9F:0E:FD:D5:88
            X509v3 Authority Key Identifier:
                keyid:66:ED:3B:A6:8C:78:BF:F2:C4:72:44:00:AD:E6:34:84:82:FB:43:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu07pox4v_LEckQAreY0hIL7Q2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b79a68-5b02-4097-a2e3-0a43b7a3eb54/1/Zu07pox4v_LEckQAreY0hIL7Q2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:15:42:3f:b3:7d:b2:8c:38:c3:e9:6d:c7:c7:0e:81:24:33:
         b9:59:a2:df:99:39:5c:3e:fa:9d:32:d0:a2:4b:83:10:99:73:
         c2:4b:c5:00:92:bc:b4:ad:59:08:db:67:bd:98:d8:79:4d:da:
         2c:0f:34:23:42:a7:7d:77:8e:51:53:e2:fb:2f:1d:20:2e:99:
         cc:18:54:2d:f2:f1:99:f0:8b:c7:f2:8d:53:87:8c:aa:b0:f8:
         f4:1b:71:df:06:25:aa:a8:cc:cd:fa:66:f2:08:ab:a8:82:41:
         91:1f:2d:95:c9:d3:bf:ff:81:5c:d0:8e:69:ad:94:28:2f:2b:
         ae:6b:2c:e6:a7:1d:3a:c2:73:12:6b:9d:f4:7f:17:c0:63:9f:
         81:63:42:fd:85:fb:8f:9d:39:9b:5a:89:8e:95:1f:a6:ed:91:
         ae:67:41:d0:d6:d7:b0:ab:90:52:39:c8:b8:5c:57:08:d7:1e:
         5a:86:de:1e:d8:77:dd:5e:f5:b1:dd:0c:64:6f:82:18:20:ca:
         46:35:de:29:2a:c3:81:00:24:43:12:e0:e9:97:8c:c6:9f:7e:
         c8:57:69:3d:d1:ad:74:53:30:23:b1:49:55:5c:16:5c:2c:9c:
         2b:2d:c6:43:cc:25:d0:73:94:1b:e4:d9:d7:77:8b:63:01:2b:
         6e:53:37:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:28 2025 by rpki-client