Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File:                     Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier:          XPKz/IwXMuFDjscAk4a4ekKuxPaCmelDdJTij045iSs=
Subject key identifier:   F9:0F:3D:5B:D0:BC:E1:41:92:15:75:C8:CD:55:F2:C6:37:C6:9C:B7
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer:       /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial:       01960BD5D6F37E15D3B78918ADF07779C4EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number:          09BB
Signing time:             Sun 06 Apr 2025 16:01:25 +0000
Manifest this update:     Sun 06 Apr 2025 16:01:25 +0000
Manifest next update:     Mon 07 Apr 2025 16:01:25 +0000
Files and hashes:         1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: 09J8eDDdVH02Q0chckoZSz1HhKo14wjdoty5YDFneyg=)
                          2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0b:d5:d6:f3:7e:15:d3:b7:89:18:ad:f0:77:79:c4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
        Validity
            Not Before: Apr  6 16:01:25 2025 GMT
            Not After : Apr  7 16:01:25 2025 GMT
        Subject: CN=f90f3d5bd0bce141921575c8cd55f2c637c69cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:d4:19:6c:9d:20:a4:b2:2c:04:01:b1:03:
                    70:b7:92:94:ce:73:b9:be:44:ce:b4:2d:ae:4f:83:
                    a9:d0:4e:cb:77:54:3e:3a:50:38:2c:e7:bf:7f:cb:
                    de:31:18:3b:05:70:68:7b:43:05:16:28:f1:5d:47:
                    92:15:1f:c0:77:a8:1d:2d:bc:15:67:48:ce:aa:d4:
                    8e:1b:2a:3e:51:b9:36:7e:07:7d:03:35:15:b1:1d:
                    96:67:4d:9c:da:2e:46:3e:76:5f:aa:5e:d7:3c:f0:
                    f3:45:76:b2:77:d7:61:bf:39:b1:6f:5e:70:11:f7:
                    2a:06:f6:86:51:88:15:f7:9f:4a:ab:05:52:d6:ca:
                    48:f6:a2:96:ef:06:6c:fe:81:c5:90:39:93:50:27:
                    77:6c:b5:6a:b7:2c:72:10:f5:eb:7b:d7:d1:50:6f:
                    1e:2b:37:2d:da:b6:95:3c:1b:bf:a2:50:d0:7d:62:
                    b2:4a:8e:af:43:ca:7e:16:05:0c:f0:19:95:bd:38:
                    77:e3:87:6f:a2:9a:2e:98:3e:4e:73:b7:91:25:70:
                    3e:6c:74:15:d9:36:ec:16:a0:1b:db:fa:13:1e:41:
                    c3:1a:92:9b:2d:d5:f4:b1:45:40:57:06:54:e2:29:
                    17:e4:d3:21:20:5c:dc:6f:3d:bb:8d:19:fe:64:06:
                    c9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0F:3D:5B:D0:BC:E1:41:92:15:75:C8:CD:55:F2:C6:37:C6:9C:B7
            X509v3 Authority Key Identifier:
                keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c7:60:f2:9d:0d:92:27:29:15:9b:f5:3d:dc:9c:e7:a6:8f:
         35:bb:e2:42:d7:c8:49:67:b1:7a:37:03:96:cc:95:e4:56:fb:
         b9:23:71:55:7d:a5:16:3d:79:04:d7:47:db:1b:d3:ab:30:5c:
         f0:21:41:03:6c:a0:0e:41:bb:98:8a:22:70:1a:e3:74:22:a0:
         72:e2:fd:99:2b:ba:13:1c:d5:df:cc:d1:cf:c1:a7:b1:76:88:
         9d:9c:a7:97:db:1e:90:48:13:4a:1d:ff:b7:e7:36:b6:ad:0c:
         0c:72:7e:0a:96:eb:92:a8:21:17:c4:86:27:23:01:e6:8d:80:
         3d:02:dd:4f:81:e5:c3:b0:55:d0:8c:d2:9e:c6:76:95:d0:c3:
         85:31:34:d9:0d:78:6c:b1:d9:78:8a:a3:c9:59:16:62:2b:07:
         26:98:49:45:e9:e7:8c:ae:b2:e1:6e:13:74:01:54:43:9a:03:
         57:6d:ed:ed:df:df:5f:ee:0d:32:d8:9f:a4:13:45:f8:b0:cd:
         71:1b:b9:10:3f:d5:55:7e:a7:98:93:3d:9c:5b:1a:ce:6c:1b:
         64:2c:bf:26:c7:a6:8f:7b:9f:f8:35:6a:ad:be:64:45:60:44:
         fd:d3:6e:9c:c9:06:d3:d5:60:c7:bf:f8:25:1f:21:d9:75:e6:
         63:50:19:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:44 2025 by rpki-client