Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File:                     ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier:          Utn6lrqr1xun2Hppo0pxEr2rtoy9ngnWWL5/Fbg87C0=
Subject key identifier:   BA:C9:2A:FC:9C:3E:BB:86:BB:80:C3:C5:E9:B5:13:43:4A:03:78:28
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer:       /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial:       0197477987729912F59239F07006304F04A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number:          0CE2
Signing time:             Fri 06 Jun 2025 23:00:36 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:36 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:36 +0000
Files and hashes:         1: 23ACakt78guGwZL3RTi3BKpWsN0.roa (hash: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=)
                          2: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: qQh4cvX+3Tza1AWqnJ2+dYs7MITTQk238zPuHRTgh9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:87:72:99:12:f5:92:39:f0:70:06:30:4f:04:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
        Validity
            Not Before: Jun  6 23:00:36 2025 GMT
            Not After : Jun  7 23:00:36 2025 GMT
        Subject: CN=bac92afc9c3ebb86bb80c3c5e9b513434a037828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e2:fc:cb:26:f0:40:ca:e0:3a:fd:77:00:50:
                    78:d4:6b:ca:45:7c:38:28:b9:d9:6e:42:68:68:5d:
                    b0:85:c2:44:ef:4d:a6:3e:ea:cf:0d:f7:24:85:98:
                    ef:fb:a6:05:c2:a5:d0:59:ee:49:a2:f1:c8:9c:a2:
                    b8:ee:39:fd:f3:36:7e:25:0d:63:3d:0a:4d:ae:eb:
                    1f:9e:43:6b:15:20:88:c7:f0:e6:2d:02:6a:6e:f9:
                    c5:2d:22:2e:81:3c:d3:f8:1a:f3:c3:3f:4c:9d:57:
                    5d:07:b9:53:7f:c5:46:7a:e1:43:e7:7a:10:a7:39:
                    6f:83:06:88:ca:c4:d5:5e:9a:58:ac:aa:7f:e8:17:
                    9b:9c:81:cc:28:c8:b1:82:fc:98:ce:c2:a5:2e:aa:
                    bc:19:76:a7:7c:fd:d7:8b:f1:eb:31:95:31:d5:be:
                    ba:c6:5d:e9:e9:79:e3:60:1b:bc:e7:1d:d0:c9:f8:
                    39:3d:70:46:ec:f8:dc:a3:ac:23:be:dc:9d:fb:aa:
                    59:e3:1d:7c:1c:18:b5:da:3d:17:69:2e:85:33:6e:
                    f9:a7:b6:44:09:0e:47:1e:1a:8b:84:39:ea:fc:93:
                    52:16:5e:7b:8b:f9:2e:22:74:f8:13:b8:97:1b:31:
                    d0:9b:48:43:79:9b:a3:bb:ce:66:9c:34:29:22:54:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C9:2A:FC:9C:3E:BB:86:BB:80:C3:C5:E9:B5:13:43:4A:03:78:28
            X509v3 Authority Key Identifier:
                keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ae:c9:77:c5:15:8f:a6:2c:37:b7:92:41:4e:7a:c4:2a:bd:
         fa:be:cc:b4:84:ae:c1:d2:6d:fd:94:bb:45:ce:55:25:78:97:
         bc:7b:d6:f6:2d:b3:d9:da:28:52:34:42:e1:79:a5:4a:10:de:
         dd:17:16:bc:33:68:33:3b:8b:9e:4f:e7:e5:c7:03:23:49:5a:
         72:0f:97:fa:76:de:4e:35:cb:e5:dc:53:2a:ac:d6:0c:d0:a7:
         69:95:95:2d:aa:40:63:08:13:01:8c:4b:b3:de:65:37:c8:5c:
         6a:e6:69:47:44:01:a7:95:aa:42:c6:19:98:77:64:c9:42:b4:
         5b:e8:2b:c9:82:97:9d:7c:81:d2:8b:a5:31:f1:dd:62:67:a0:
         2e:67:95:f7:4a:36:0e:b2:61:c0:9c:32:c0:da:09:f9:0a:c4:
         31:f7:5a:d7:f5:9f:91:81:f8:ff:d5:26:74:46:f7:94:c4:b6:
         c1:ba:a7:49:3a:8a:38:15:62:d9:b7:2b:42:21:7f:dd:2c:b7:
         89:1e:0c:5f:d8:68:db:14:bc:63:e5:46:dd:22:01:96:4d:47:
         76:03:5f:03:a4:14:49:cd:ad:6b:92:ba:a9:ea:11:32:45:e7:
         70:78:95:ba:fc:28:16:03:da:04:d3:68:cc:d2:06:da:3b:0d:
         a4:23:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:38 2025 by rpki-client