Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
File:                     ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft (raw, json)
Hash identifier:          /8S/7CBIKrJLQCmtaL4P2WTVLzk+TaqtuUb3fcDdmZk=
Subject key identifier:   DF:EF:59:1D:8F:40:57:AD:B8:EC:B2:0C:BE:2B:F0:51:C9:8C:3F:EB
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Certificate issuer:       /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial:       019747E79DD8F3663AD0761C9BD92C7864CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
Manifest number:          04C9
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 01:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 01:00:50 +0000
Files and hashes:         1: 1-P9YegJEgTTrNaAEU3IIuc08RmY.roa (hash: VMR860mh90RZ0uHCWx/O5Sa1yv7ih7Q2heb0CHOeN9M=)
                          2: DeGtb7yujTyTVa3OH4DyZgT0oXs.roa (hash: nw8jgAJXgkkRIoQf1v0bYUYfpASn5VshZprEj2zsrkk=)
                          3: EMVR9NYVRq-EMjxpptyq2L_gJw8.roa (hash: ae6WIIHau+j7Ux1GHG57mV6lm8wtBV6sLPHMj084L2M=)
                          4: GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa (hash: Gjo03csZv216WbwMAfrV2mPHc5TstpRZcbzipd7HL+w=)
                          5: ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl (hash: PYOMAnCTMqG6OqyliD2FbHmH/fBrnf8fRZaEQRsw/PQ=)
                          6: kNJTv0u8R3n31XhM175qS3qSPYc.roa (hash: yEcxvFp6oLKPqomZkL6wGasrZzjv/ubXMRsnyY1hRmM=)
                          7: oBmDtOMzv9uYHMZKHsP_7TZtJDo.roa (hash: 1TEsgDEf5icrK07cJlsmMerQGE88qLGKElgw/ofxA2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 01:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:9d:d8:f3:66:3a:d0:76:1c:9b:d9:2c:78:64:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a665b90069bd71850602e7400c529793269e39
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Jun  8 01:00:50 2025 GMT
        Subject: CN=dfef591d8f4057adb8ecb20cbe2bf051c98c3feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:3d:25:80:b9:77:85:3f:52:54:cb:1e:b2:
                    1b:a8:40:67:91:86:3e:90:cc:98:fd:ec:cb:b6:e2:
                    d3:c1:65:b7:cf:a6:3e:b2:46:87:d5:fa:88:d0:5d:
                    11:78:68:f2:a7:e5:c8:c1:cc:ca:33:41:b4:37:05:
                    d8:c0:b6:79:f0:f1:aa:9b:e2:f7:ff:8a:4d:09:d8:
                    11:ed:5e:81:80:5f:a7:05:af:2b:a6:47:33:57:0b:
                    90:c9:05:8f:35:f9:95:ac:af:20:68:6c:0d:5e:fc:
                    a9:0e:9d:b7:14:fc:0e:fc:9d:cb:19:8b:59:02:96:
                    de:4c:3c:f9:e9:88:81:ca:04:64:d7:2d:b8:f0:5a:
                    16:95:f4:7d:ae:61:62:d0:71:41:11:32:11:5a:00:
                    89:17:ba:7b:ea:6e:d9:a5:aa:44:00:b9:22:8f:e1:
                    03:48:0b:df:96:38:87:7c:da:7e:32:44:bb:6d:9f:
                    47:b2:2e:59:4f:ff:02:5e:78:fa:cb:f6:21:0d:8a:
                    86:e0:55:97:f2:c8:66:d6:96:4f:96:9d:84:32:56:
                    c1:24:7b:e8:15:6b:8f:b4:ce:1b:74:8e:6e:ad:a2:
                    aa:c7:9d:61:7e:34:ca:d8:87:ef:c6:46:9c:91:44:
                    53:2c:72:64:39:d3:55:99:8d:bc:dd:66:5d:45:cb:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EF:59:1D:8F:40:57:AD:B8:EC:B2:0C:BE:2B:F0:51:C9:8C:3F:EB
            X509v3 Authority Key Identifier:
                keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:79:cf:74:e2:7e:dd:b8:9a:83:aa:9c:75:4b:fa:c9:a8:26:
         c0:ac:be:80:4b:e1:02:d7:78:c1:18:dc:7f:19:ba:36:69:29:
         c0:05:68:0e:d5:92:67:19:a0:7c:49:cb:64:7f:14:87:04:40:
         a7:e5:76:11:a1:d8:0f:bf:ff:e6:09:fc:f7:91:1c:90:d7:9f:
         e4:ac:bb:dc:57:87:51:84:20:6b:48:0e:d1:78:ab:37:e8:f5:
         78:2e:6d:86:15:1a:1f:b3:c5:bb:b3:1c:a1:74:38:80:ef:0a:
         9c:26:a1:27:ff:de:d2:78:2f:34:37:ec:c6:3a:d2:14:78:30:
         66:57:4e:4f:41:4a:81:20:7b:a5:33:66:cc:3b:da:24:7b:af:
         d3:28:bc:5d:7a:09:a1:e1:03:dd:8a:23:a6:34:1e:b1:b7:26:
         63:fe:f3:18:6d:9a:94:21:0d:f4:9d:79:70:dc:27:02:5b:3a:
         19:c4:0a:7f:d5:12:07:e7:45:9f:e7:d9:a8:d2:27:c9:42:29:
         53:4b:1f:0c:14:56:ea:56:19:88:d3:ba:9d:4b:1c:72:66:83:
         ea:93:bf:b8:7d:2f:94:dd:07:3f:72:d8:6c:b5:1c:46:93:4c:
         91:ac:4e:dc:29:ab:d5:dd:bf:44:72:4a:bc:76:76:c5:ec:6b:
         bb:60:88:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdH553Y82Y60HYcm9kseGTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTY2NWI5MDA2OWJkNzE4NTA2MDJlNzQwMGM1Mjk3OTMy
NjllMzkwHhcNMjUwNjA3MDEwMDUwWhcNMjUwNjA4MDEwMDUwWjAzMTEwLwYDVQQD
EyhkZmVmNTkxZDhmNDA1N2FkYjhlY2IyMGNiZTJiZjA1MWM5OGMzZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5U9JYC5d4U/UlTLHrIbqEBnkYY+
kMyY/ezLtuLTwWW3z6Y+skaH1fqI0F0ReGjyp+XIwczKM0G0NwXYwLZ58PGqm+L3
/4pNCdgR7V6BgF+nBa8rpkczVwuQyQWPNfmVrK8gaGwNXvypDp23FPwO/J3LGYtZ
ApbeTDz56YiBygRk1y248FoWlfR9rmFi0HFBETIRWgCJF7p76m7ZpapEALkij+ED
SAvfljiHfNp+MkS7bZ9Hsi5ZT/8CXnj6y/YhDYqG4FWX8shm1pZPlp2EMlbBJHvo
FWuPtM4bdI5uraKqx51hfjTK2IfvxkackURTLHJkOdNVmY283WZdRcs3fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/vWR2PQFetuOyyDL4r8FHJjD/rMB8GA1UdIwQY
MBaAFGWmZbkAab1xhQYC50AMUpeTJp45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjct
Yzk0NTdlYzgxMTUxLzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lNmQ4ODAtMzkwMy00YTExLWJhMjctYzk0NTdlYzgxMTUx
LzEvWmFabHVRQnB2WEdGQmdMblFBeFNsNU1tbmprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknnPdOJ+
3biag6qcdUv6yagmwKy+gEvhAtd4wRjcfxm6NmkpwAVoDtWSZxmgfEnLZH8UhwRA
p+V2EaHYD7//5gn895EckNef5Ky73FeHUYQga0gO0XirN+j1eC5thhUaH7PFu7Mc
oXQ4gO8KnCahJ//e0ngvNDfsxjrSFHgwZldOT0FKgSB7pTNmzDvaJHuv0yi8XXoJ
oeED3YojpjQesbcmY/7zGG2alCEN9J15cNwnAls6GcQKf9USB+dFn+fZqNInyUIp
U0sfDBRW6lYZiNO6nUsccmaD6pO/uH0vlN0HP3LYbLUcRpNMkaxO3Cmr1d2/RHJK
vHZ2xexru2CIgQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:58:04 2025 by rpki-client