Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
File:                     Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft (raw, json)
Hash identifier:          9Vm9S3Ypey7vX+QMJc5GAuKSmrKsKbOhE1FPfY0vMVQ=
Subject key identifier:   20:92:C5:91:8C:E8:71:14:38:5B:DE:27:44:70:AB:16:92:F0:33:1A
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Certificate issuer:       /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial:       01963BAE95F4A044396C66F2F76279DD89B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
Manifest number:          11F7
Signing time:             Tue 15 Apr 2025 23:00:19 +0000
Manifest this update:     Tue 15 Apr 2025 23:00:19 +0000
Manifest next update:     Wed 16 Apr 2025 23:00:19 +0000
Files and hashes:         1: L4h95g97hPav_sLi8oU5ekfgF0c.roa (hash: gzwtuotOybzEB9lulxkeHjwR8xKOZWJlJKeZJPHVfuA=)
                          2: PoOOtUJXWSIrEDf1Xj5Z3VDMHSE.roa (hash: xLcUbAcJyMHzQNbU8ncdTmCAmnGI9JLzaYaEQOKQswQ=)
                          3: YUnFkerPf_tC9lIXfmeJMH6YBzU.roa (hash: /JxLnX44gj+6WYgNCgzFGwP4v1yZUybgTY/uSoStij0=)
                          4: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl (hash: DQHoxDfyEIzrYJeGzcS9bDm0j+sLMLN/ru2QfutI0v4=)
                          5: fOsTWD5Ar1YZxa1P3Pq5mxy5-1c.roa (hash: Dkn0j1n45E5x1EWMxBbv2nQa8t9BDN0AoTeGlR/FbFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 23:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:ae:95:f4:a0:44:39:6c:66:f2:f7:62:79:dd:89:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
        Validity
            Not Before: Apr 15 23:00:19 2025 GMT
            Not After : Apr 16 23:00:19 2025 GMT
        Subject: CN=2092c5918ce87114385bde274470ab1692f0331a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:b1:b0:31:30:e1:4c:0f:e5:44:92:46:78:
                    70:7f:31:5a:9f:92:ea:77:a3:c7:e4:55:70:3b:d9:
                    1b:ad:bf:30:91:a7:36:54:cf:62:a2:dc:74:dd:81:
                    52:c5:40:14:23:89:29:4f:7e:70:03:1b:0e:88:6b:
                    b1:aa:c9:83:48:62:88:d0:b8:13:4c:eb:f5:76:a8:
                    4d:29:73:72:7f:a4:1a:bb:9d:0c:22:09:e2:31:30:
                    ee:bc:89:02:43:34:af:52:69:40:53:ae:ba:88:83:
                    74:01:56:b9:2d:e2:af:c2:f5:fe:18:6d:a7:53:c1:
                    a3:2c:c9:2b:1f:8d:17:0d:ba:c3:58:cb:cb:4e:18:
                    53:00:62:fb:3a:3f:22:52:f4:5e:2c:50:3f:67:10:
                    dd:f9:a6:17:4d:c1:fa:a0:e0:ac:f2:52:a0:1a:32:
                    81:10:12:79:7e:80:1e:14:a0:7a:ad:8e:01:c1:39:
                    01:87:6b:b1:6e:2b:25:96:fd:6f:20:53:3e:33:f1:
                    eb:a9:a4:72:72:5e:fa:1f:e8:27:71:77:5f:e3:00:
                    47:fa:2f:18:c2:64:23:dd:7a:d0:b4:fc:a0:89:4d:
                    a9:8f:d7:5e:2f:7a:65:0b:32:c7:0e:18:13:e3:cd:
                    7e:88:dd:44:e7:ff:c1:fb:4a:1f:f9:17:9c:9a:9c:
                    e1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:C5:91:8C:E8:71:14:38:5B:DE:27:44:70:AB:16:92:F0:33:1A
            X509v3 Authority Key Identifier:
                keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:de:14:46:ff:8e:6c:5c:53:82:19:c0:06:3e:e0:03:b4:
         3e:f5:da:f7:93:7e:72:2f:b8:d4:fa:06:f9:f0:64:ea:30:f1:
         df:57:54:90:15:78:c8:2b:d5:c1:d6:91:68:15:54:6f:9c:ac:
         a7:23:11:af:ca:31:d9:d4:d1:78:7a:21:2e:20:2c:d4:e6:5d:
         ce:62:81:37:04:08:a3:cf:4b:16:bb:ef:1e:5d:93:a1:76:ab:
         90:7b:2c:50:16:4c:29:03:45:5f:af:16:20:84:ba:a6:26:75:
         12:4e:9a:05:60:1d:65:52:1f:e5:3d:04:7b:88:6a:61:1b:0e:
         18:53:cb:6a:ba:01:bc:55:cf:ac:a9:56:a8:ad:2f:53:af:73:
         72:21:fb:84:0b:35:d0:45:09:9f:3e:03:b7:ab:8c:a4:20:16:
         54:30:05:30:ca:d3:32:4f:99:1e:5d:94:a2:a2:92:06:2e:f9:
         e4:cf:56:a2:f1:4e:75:eb:85:f8:5e:0c:d2:37:b7:40:5d:12:
         2a:30:c2:02:92:b3:a1:8d:a7:50:df:7e:f5:c4:0c:b9:17:6e:
         fd:05:44:8e:2e:02:c5:62:02:f9:3e:7a:bc:04:f3:5d:c4:d9:
         1a:8b:6d:2c:68:37:9e:75:80:3c:64:36:b1:82:d4:bc:0d:ad:
         4b:fc:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:58 2025 by rpki-client