Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
File:                     ZN_ibUAxQb6QWashRDJbQC1Mq30.mft (raw, json)
Hash identifier:          xbHjSnGvF8pNVZvlLCSRkrulBLKDpStlUkcc5dT7pYI=
Subject key identifier:   50:14:67:25:7B:A9:F4:CA:19:8C:8B:D7:CB:18:AE:D3:7B:8B:98:CC
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Certificate issuer:       /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial:       019748C2ED947106FE897CD4EE97416EAEAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
Manifest number:          1585
Signing time:             Sat 07 Jun 2025 05:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:23 +0000
Files and hashes:         1: 8AY6X4XCRyiZxzFlt6tsbjR30jM.roa (hash: 5ZRaImHY2F/S3wQVqNNqg0MgU/7l0llwd1UlTTznV7w=)
                          2: ZN_ibUAxQb6QWashRDJbQC1Mq30.crl (hash: fIHbwhAFbkyUa3dhBHWEBiYqcvqX/xMzfzCd+kYgjXc=)
                          3: bth8nL17vmRfjOgOkE44hcyUW-U.roa (hash: +2CIURrrMY1RojUxyGB46gsHzcj2R0An7rXyNN3SRxE=)
                          4: fyItLKzWB2M2DcciXcjMC9ehbVo.roa (hash: 3hotdI7UkUaU/+3bTtSUK7y3DutUUFvTPfXcX54WRXY=)
                          5: xn5m4EslppaLzMQirkAjRslNCRc.roa (hash: UOBKdq1hXA/nlG6uZfbozsCpkf5JEX4D4dlwEvI1lPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:ed:94:71:06:fe:89:7c:d4:ee:97:41:6e:ae:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
        Validity
            Not Before: Jun  7 05:00:23 2025 GMT
            Not After : Jun  8 05:00:23 2025 GMT
        Subject: CN=501467257ba9f4ca198c8bd7cb18aed37b8b98cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:1b:0e:ed:74:4a:3e:27:33:4c:51:7b:f0:
                    44:81:4e:cb:f2:c4:f2:09:f4:b1:8d:17:4b:d0:79:
                    20:de:06:7a:68:d3:22:78:e5:65:bb:58:63:fe:93:
                    47:3d:58:f8:13:87:a1:1c:87:96:a8:5e:58:b4:1c:
                    9d:1f:c8:cb:49:94:8d:8f:2b:6c:df:71:74:6f:5d:
                    6b:73:a9:8b:9d:50:4d:75:02:d5:ac:0a:e9:33:61:
                    b0:7c:ba:5e:ba:a6:46:b5:b9:8c:ec:4b:f0:eb:9b:
                    35:f9:af:4f:04:ca:a3:90:da:f6:ac:0f:a5:71:82:
                    70:fd:73:46:d3:56:3a:8e:6b:dc:d6:5f:ac:43:72:
                    ca:d5:d8:48:cc:9f:69:eb:63:51:dd:6b:6c:30:d3:
                    fc:3f:a1:c4:56:a8:ef:46:54:32:67:1e:5b:52:65:
                    73:33:ee:6c:0d:a8:c9:05:61:d8:4e:9b:9e:ce:72:
                    62:a5:76:6d:11:b2:e7:91:7c:67:2d:9b:83:17:3b:
                    62:14:ad:3f:69:35:60:6e:9a:f5:6e:99:59:63:30:
                    07:62:4c:f2:1b:4b:13:4b:47:18:08:e3:89:6d:66:
                    4b:cb:8f:ee:9f:a1:d2:77:2a:68:1d:11:53:7d:a1:
                    1e:8d:14:2c:43:36:1d:2e:2d:bc:15:d5:42:89:7c:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:14:67:25:7B:A9:F4:CA:19:8C:8B:D7:CB:18:AE:D3:7B:8B:98:CC
            X509v3 Authority Key Identifier:
                keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:f0:a9:8a:14:32:e3:4a:9a:3a:36:43:e4:32:d2:19:9a:bc:
         12:60:6e:b7:52:7f:d7:58:74:4c:68:69:84:7d:bb:d6:6b:1c:
         14:1c:89:dd:6f:b9:66:ab:7b:52:4f:c2:e6:85:17:a8:98:f4:
         9f:69:f3:b0:db:ec:84:58:e2:18:da:a8:eb:93:09:47:02:38:
         a0:84:57:1a:59:4d:47:51:ce:e0:5b:0d:1e:fd:fd:e0:f5:84:
         cf:00:8a:b8:6e:0b:1a:76:ad:a5:06:5f:88:8e:c1:a9:28:77:
         c7:81:8e:eb:50:8c:96:a0:a2:4a:56:66:ae:ae:13:90:ae:7d:
         18:47:66:bc:8a:6b:90:0b:70:bc:e4:d1:3f:60:49:86:82:f7:
         fe:e3:c3:17:0d:93:8e:e2:55:20:8a:f5:4d:c7:69:49:e0:3d:
         07:52:08:56:a2:f5:c8:6a:2f:69:82:03:ba:7c:45:ea:5b:d8:
         41:a1:a5:57:b2:b9:be:11:7a:ab:4a:f1:0e:e3:8f:d4:9c:42:
         a6:62:0c:13:39:fb:72:32:c0:d2:5e:87:d2:51:4f:64:e4:13:
         30:e5:ed:04:a2:72:94:d3:64:45:0e:26:c4:ce:fa:33:14:65:
         9f:06:ff:2b:4b:7d:96:59:56:7d:53:af:7f:07:88:4f:bd:2e:
         97:b7:f8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:39 2025 by rpki-client