Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File:                     ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier:          2VdUI3UzLOP7cWDb730aGFx0C+o6hGiJ5mn2hzh3MJA=
Subject key identifier:   23:3F:63:F9:BF:04:05:E4:AF:7B:58:6F:96:C3:77:0F:F8:F7:95:9E
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer:       /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial:       01975AC9688C3B705FEA0A4B91DC29307CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number:          0981
Signing time:             Tue 10 Jun 2025 17:00:38 +0000
Manifest this update:     Tue 10 Jun 2025 17:00:38 +0000
Manifest next update:     Wed 11 Jun 2025 17:00:38 +0000
Files and hashes:         1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: Khk/vupIH0vgejZSH0PWd/YQBDxRt5EntMdO+4nWyV0=)
                          2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:c9:68:8c:3b:70:5f:ea:0a:4b:91:dc:29:30:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
        Validity
            Not Before: Jun 10 17:00:38 2025 GMT
            Not After : Jun 11 17:00:38 2025 GMT
        Subject: CN=233f63f9bf0405e4af7b586f96c3770ff8f7959e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:38:7c:73:ee:7f:ad:9b:c7:d8:5f:86:d6:
                    02:24:55:fd:98:9c:13:23:59:0c:d5:d5:99:ab:93:
                    09:ca:5f:22:d0:14:f7:c1:0a:16:e4:a6:cc:05:85:
                    2c:bd:cb:06:ec:ef:c0:51:14:17:e3:b4:2e:6c:62:
                    36:d2:a2:c5:b8:7f:e6:75:f4:a2:cf:00:88:8a:9a:
                    29:4c:ca:3d:82:f8:73:4e:c8:24:3b:cb:2f:ee:31:
                    6f:bd:a1:27:09:82:ff:5e:10:2c:f9:1d:df:c8:cb:
                    de:92:52:86:48:9d:20:94:83:58:85:21:27:e7:3d:
                    0b:51:47:ff:0d:f4:0f:f5:5f:45:73:cb:0e:ae:f6:
                    8b:89:d3:19:60:c9:ac:96:0f:b9:87:95:bc:a9:47:
                    51:16:a3:d7:b0:54:5d:9e:b0:c3:c4:7d:da:30:2f:
                    3c:d7:5c:09:66:02:e4:70:21:44:c0:b5:93:1d:b1:
                    ea:50:e9:af:c9:8f:45:3f:48:8f:91:6f:39:c7:a1:
                    0a:d6:54:e8:e2:db:1d:a5:10:52:b6:52:02:61:1f:
                    da:1e:76:87:06:c9:a1:e6:7b:9f:fd:4e:67:2f:c1:
                    53:e2:2d:21:87:67:04:0d:cb:2e:9d:fa:6d:bb:0d:
                    c0:77:02:5e:ee:5c:c8:bb:54:ba:bc:bc:d6:83:8b:
                    05:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3F:63:F9:BF:04:05:E4:AF:7B:58:6F:96:C3:77:0F:F8:F7:95:9E
            X509v3 Authority Key Identifier:
                keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:df:43:3a:5b:ed:f2:c4:9f:ad:a1:d5:b4:7f:eb:69:ff:8f:
         83:f1:67:bc:bd:7b:17:07:60:5e:94:c0:2a:a7:22:a5:07:54:
         aa:22:78:cf:68:6a:0d:20:d5:c0:a0:3f:6b:be:51:c9:d3:20:
         4d:9a:47:6e:fe:5f:ad:a6:78:c9:ec:1a:f6:70:3f:ef:e6:8e:
         26:9e:2e:62:db:51:28:72:d2:1e:d3:6c:d4:13:b2:b0:75:9a:
         43:d0:4f:3a:96:7c:4a:90:9f:04:81:9c:94:65:e1:f4:57:73:
         bd:a8:cb:e4:25:1a:38:bf:8f:82:a3:5b:d9:14:79:28:ef:e1:
         f9:12:ed:ad:16:dc:db:71:bb:a3:c2:65:44:5d:54:40:de:20:
         f6:aa:5b:73:06:2d:25:85:55:b3:fd:3e:a5:ea:46:31:2e:67:
         cd:c5:d7:8b:ed:4f:92:22:b9:08:c2:1a:8a:14:e2:ce:c1:fa:
         94:48:6d:98:5f:75:fb:b5:e7:a9:5b:3a:e8:2a:33:3e:9b:60:
         f4:6a:29:47:3d:f3:00:27:9c:41:f4:f4:8d:3c:01:bc:c5:22:
         be:0a:a7:60:a8:36:7a:8f:37:00:ed:b3:c6:e4:fd:fa:70:1c:
         95:d8:25:4a:7b:73:4a:33:09:12:07:6a:ef:b2:e9:a8:b9:f9:
         c2:19:33:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:13:53 2025 by rpki-client