Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File:                     zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier:          cUqpP4RVhoX3cQnfC8bUbEsxzElaoVA/v9O61BpjH3M=
Subject key identifier:   D9:1E:D1:B0:49:D6:01:42:11:76:1F:32:D5:0D:0D:4A:9C:7D:74:65
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer:       /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial:       019749D5DA027B6B3B516AF56CDA93B15D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number:          0131
Signing time:             Sat 07 Jun 2025 10:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:41 +0000
Files and hashes:         1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=)
                          2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: KxAX5GDc9HPya0floRjQjaWxjgADaPMz7OlBzXqXLf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:da:02:7b:6b:3b:51:6a:f5:6c:da:93:b1:5d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
        Validity
            Not Before: Jun  7 10:00:41 2025 GMT
            Not After : Jun  8 10:00:41 2025 GMT
        Subject: CN=d91ed1b049d6014211761f32d50d0d4a9c7d7465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:4d:82:ff:4e:a6:3e:57:10:f6:2b:fe:95:
                    7b:22:d3:09:77:dc:33:75:d5:54:66:ff:aa:99:05:
                    da:9e:fb:ff:20:b1:c4:12:a8:e2:28:37:00:aa:92:
                    33:56:50:45:84:30:83:61:88:78:83:d5:3e:bc:32:
                    c9:50:fa:51:32:9b:c3:ad:51:a4:13:b8:28:dc:19:
                    8f:2b:04:c6:e3:2c:5c:a7:80:77:77:04:87:4c:1c:
                    83:f0:d7:84:42:a0:80:92:54:b5:42:ac:da:9f:8e:
                    6f:2a:9a:de:73:15:45:1f:45:a8:32:39:43:78:7a:
                    a6:a5:7d:3c:32:90:25:11:f7:05:93:0a:a7:c5:32:
                    b1:26:be:1c:f6:70:31:65:16:08:a8:a0:8e:59:a1:
                    1e:ac:d4:df:18:fd:9c:e7:cc:a2:5d:2c:3b:24:4b:
                    c1:7e:fd:ba:a2:28:5f:8a:e4:1b:d4:13:00:1c:d2:
                    ab:ba:f2:bf:29:90:54:05:04:7b:f9:06:7f:0c:0a:
                    9f:ac:fa:1c:0f:38:05:6e:5e:48:33:b8:0d:ff:b9:
                    51:56:77:0c:97:13:67:ed:72:01:66:d1:7b:06:0d:
                    00:25:c3:c3:93:0f:3f:0d:11:c5:bc:06:ae:31:e2:
                    db:c4:6c:20:e4:6d:63:ed:a9:aa:43:27:72:4d:8d:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1E:D1:B0:49:D6:01:42:11:76:1F:32:D5:0D:0D:4A:9C:7D:74:65
            X509v3 Authority Key Identifier:
                keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5d:eb:4c:08:c6:4c:5f:34:22:5a:83:d3:8a:f8:ed:40:a4:
         77:b0:02:42:f9:a2:23:eb:22:08:ad:24:31:fd:62:e8:7b:8c:
         51:bf:b1:a8:c2:a0:8a:69:69:0c:c0:d6:a5:a7:ae:62:80:44:
         3a:b9:00:27:1b:78:03:42:e8:d7:06:66:41:d9:0b:50:4c:59:
         30:91:4d:1a:c5:27:6b:f0:82:c1:b3:9a:bf:95:d9:00:f5:81:
         da:39:ee:27:21:45:34:7c:17:ed:10:8a:7f:7c:1f:e0:c1:29:
         8e:cd:1a:e5:57:8f:bb:27:ea:03:b2:43:be:7b:39:80:89:f7:
         93:e2:a8:1f:ca:13:a3:7a:e4:8a:2b:6f:d9:2e:7d:19:c2:1d:
         ac:a4:cb:77:22:62:68:fe:c0:b4:1b:87:d9:ed:a1:9c:b1:8e:
         5b:84:b4:b4:7a:67:1d:ac:b6:90:03:4a:1d:9a:3f:35:b9:9d:
         d0:62:88:e8:bb:16:e8:db:14:b0:6d:12:5c:2e:37:cc:c3:83:
         87:1e:71:27:5a:95:3b:3c:c4:c5:18:f8:ad:d0:5a:93:21:42:
         a0:70:5e:20:61:ce:4d:b0:a1:07:59:ac:df:d4:e9:d4:b2:6e:
         60:2d:3f:c2:bf:d9:bb:4b:e0:39:63:1d:5d:2f:73:ad:fc:b5:
         2f:60:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:56 2025 by rpki-client