Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
File:                     Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft (raw, json)
Hash identifier:          UEZ+JxC9x1WJB1+JYUsGBvUJGdOA1sgha0uTI8pd60s=
Subject key identifier:   BB:06:72:CF:3C:E0:B8:1B:85:11:1B:35:FC:CC:5E:F8:16:B6:E5:A8
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Certificate issuer:       /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial:       01974AB14F2784ECD8FF18FE47489394DF1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
Manifest number:          1284
Signing time:             Sat 07 Jun 2025 14:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:23 +0000
Files and hashes:         1: 580XNquHrCWRkqNDtKIxhX9o1Kc.roa (hash: 3TWvxBabKV8iYvQkig77LGpNEqgd9QTaVPgSezpZ8n4=)
                          2: L4h95g97hPav_sLi8oU5ekfgF0c.roa (hash: gzwtuotOybzEB9lulxkeHjwR8xKOZWJlJKeZJPHVfuA=)
                          3: PoOOtUJXWSIrEDf1Xj5Z3VDMHSE.roa (hash: xLcUbAcJyMHzQNbU8ncdTmCAmnGI9JLzaYaEQOKQswQ=)
                          4: YUnFkerPf_tC9lIXfmeJMH6YBzU.roa (hash: /JxLnX44gj+6WYgNCgzFGwP4v1yZUybgTY/uSoStij0=)
                          5: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl (hash: as1IyqRmgwknkL65LBd/5BPnu1YquOXMKapBCJvyAYM=)
                          6: fOsTWD5Ar1YZxa1P3Pq5mxy5-1c.roa (hash: Dkn0j1n45E5x1EWMxBbv2nQa8t9BDN0AoTeGlR/FbFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:4f:27:84:ec:d8:ff:18:fe:47:48:93:94:df:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
        Validity
            Not Before: Jun  7 14:00:23 2025 GMT
            Not After : Jun  8 14:00:23 2025 GMT
        Subject: CN=bb0672cf3ce0b81b85111b35fccc5ef816b6e5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:56:c6:e7:b2:62:a0:56:fb:91:dd:cb:9e:
                    dc:7c:12:98:8b:a5:a1:85:30:0b:35:6a:9d:97:f3:
                    3c:fa:a0:d5:9a:b2:64:5f:18:27:74:04:16:8e:72:
                    2f:9b:a2:6a:83:ac:08:85:c7:6d:45:6e:a0:76:5d:
                    9b:f3:70:3b:b8:f5:6f:11:5a:7c:2a:62:6c:7b:58:
                    7e:ec:3f:6a:83:13:f8:28:95:7d:32:f8:3d:cd:0c:
                    a4:bd:7c:e6:f7:31:7d:b5:51:1a:d6:ff:7b:e1:30:
                    08:d6:5a:36:c6:00:1a:ef:8d:f8:f0:f8:c9:13:8b:
                    8b:81:8c:64:59:09:7e:48:5d:d9:75:a0:ad:92:41:
                    7a:90:0e:13:0c:63:46:2b:cf:9f:91:eb:02:94:de:
                    d8:9b:64:80:73:ad:ad:d9:7c:45:61:73:d9:8a:fa:
                    d2:70:81:b3:3a:52:cd:75:90:c3:e3:a4:e0:4c:83:
                    15:95:49:1c:2e:61:e1:66:76:e3:c0:d3:aa:d3:55:
                    49:30:3b:74:f6:3d:9a:c8:fc:7f:f2:41:e5:44:97:
                    64:15:e6:4f:79:d8:38:f1:7a:1f:7d:f8:bc:02:95:
                    1d:66:35:c4:d3:2b:87:69:38:53:b0:76:b5:5c:04:
                    2b:6f:5e:fd:70:9e:60:09:df:c7:a2:eb:fe:89:bf:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:06:72:CF:3C:E0:B8:1B:85:11:1B:35:FC:CC:5E:F8:16:B6:E5:A8
            X509v3 Authority Key Identifier:
                keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:55:40:e1:f9:ab:a4:89:67:ed:f7:9b:1c:49:1a:02:8f:2c:
         5e:f3:85:7a:91:68:df:3c:27:c2:31:4f:ad:0c:d3:f7:e4:f0:
         26:5e:22:2f:5b:da:e2:99:10:8c:5a:53:e9:27:bb:6c:2e:27:
         d5:9c:f3:97:d7:f9:25:48:c2:c6:be:ee:05:1f:de:dc:ad:5e:
         41:d4:68:23:74:59:ba:f7:57:e9:45:74:13:6d:e1:05:94:17:
         1f:20:5d:61:73:1b:73:77:ad:4d:7f:dd:8b:b2:b8:2e:c2:ce:
         88:85:ed:f8:db:2a:dd:ff:88:11:0a:8e:5d:16:f8:69:a4:29:
         18:5b:a7:48:85:ea:e5:03:dd:dd:c5:44:42:e2:f5:dc:7f:67:
         5c:03:9a:e9:ff:bd:eb:c0:77:b5:ac:78:95:34:29:54:00:e0:
         d7:4f:5e:4b:86:2c:9c:d9:77:fb:59:cd:2c:6e:b3:1c:67:91:
         3f:72:76:04:51:6e:f6:0e:83:59:86:8f:72:ea:d9:05:57:8b:
         50:23:1e:40:fa:b1:bc:8c:1c:b8:ce:95:ce:f8:ed:fb:d4:f0:
         dd:ea:da:e6:33:69:2a:4b:54:0e:b7:d1:f3:5c:bf:fa:f4:7b:
         90:88:d3:c8:70:7d:ad:88:a5:48:a8:ec:0a:02:d6:79:b6:dd:
         d6:8b:2d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:54:53 2025 by rpki-client