Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File:                     zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier:          jhSo9Nyl4CE30UVCdpJfP2P9+2KuyNrETTFoV5j2oAs=
Subject key identifier:   96:B7:14:D3:4A:BC:82:9B:D8:C9:2C:2E:18:C3:F9:7B:D6:E0:38:A8
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer:       /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial:       01974FD7CE2620F26E8FCF5D1333A94E9191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number:          0A75
Signing time:             Sun 08 Jun 2025 14:00:32 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:32 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:32 +0000
Files and hashes:         1: VEgZIBYWjoldzkGuakwy0OuiD_g.roa (hash: /UHAw/sksRIzZ9d6cBH90oCHv9WV9PgycAVZrQjs45g=)
                          2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: 76SPOTSziN2fd7aFs4U4gr4vG0uwRUkCAt4Rt+fNBlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:ce:26:20:f2:6e:8f:cf:5d:13:33:a9:4e:91:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
        Validity
            Not Before: Jun  8 14:00:32 2025 GMT
            Not After : Jun  9 14:00:32 2025 GMT
        Subject: CN=96b714d34abc829bd8c92c2e18c3f97bd6e038a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:ed:0a:09:20:e6:70:7e:ed:46:87:89:b7:
                    6b:fa:e3:d7:7d:08:34:c0:b8:cc:88:41:5d:ad:ae:
                    e4:ba:5a:97:a4:4d:8d:9e:a4:76:ed:c1:bd:41:f9:
                    9a:d2:8b:87:7b:65:1a:b7:54:90:c9:6c:7d:3d:41:
                    9b:bb:16:70:17:1f:96:63:a4:0b:3e:b5:9e:5f:17:
                    17:e3:07:d9:e9:ac:53:63:5e:22:59:4b:04:66:1d:
                    ff:8c:71:e5:b6:03:82:54:f2:d3:79:4b:fb:02:5c:
                    09:ac:9c:21:17:b7:31:8f:b7:a3:f6:6f:91:80:1b:
                    3e:02:ed:6d:e2:57:c5:87:56:03:77:c9:80:fa:3f:
                    b9:20:a2:e7:45:3d:31:dd:50:0f:ae:36:28:f2:eb:
                    89:46:38:c4:6b:0c:52:33:69:1b:bf:bf:4f:9f:fd:
                    6a:77:4c:84:89:3e:34:46:58:b8:58:56:f4:7a:78:
                    ad:86:a3:89:2f:22:5a:0e:4e:1d:a3:da:1d:ec:6f:
                    d4:a7:f9:4f:d7:e3:97:1b:a4:6f:25:87:4a:41:eb:
                    9a:50:a2:72:57:48:c3:dd:3c:71:fe:2f:9d:34:68:
                    95:56:f3:4b:27:9a:ea:2e:b1:2f:fc:e3:f6:03:1d:
                    06:02:6e:da:a6:ed:3c:75:10:b2:ec:65:b8:8a:0d:
                    cb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B7:14:D3:4A:BC:82:9B:D8:C9:2C:2E:18:C3:F9:7B:D6:E0:38:A8
            X509v3 Authority Key Identifier:
                keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:22:63:c7:00:59:10:4c:6a:12:3c:ce:cb:d5:85:36:8d:
         49:31:c8:4c:b4:07:71:18:60:50:86:11:86:53:17:c6:6b:93:
         ca:66:a0:3a:77:b9:61:79:c5:b5:98:c3:fc:c7:ee:8a:ea:a3:
         a9:8c:51:b0:06:bf:f1:eb:29:05:6b:ff:ba:64:9c:9f:55:35:
         3b:09:fe:8a:00:64:2d:23:d2:80:4b:14:de:9e:f4:91:91:5a:
         b8:07:c6:9f:e6:5e:f2:56:44:d5:9c:95:c9:6a:11:f9:d2:fa:
         d9:8d:0e:3e:5c:a5:3a:28:5b:9e:8b:27:09:1f:53:b9:60:0f:
         96:50:f2:a4:c9:bb:19:c7:a7:45:a6:05:56:09:48:14:6e:05:
         64:7a:0e:83:f6:d2:f5:0a:cd:2e:77:ec:72:bb:7b:8f:68:03:
         8b:36:96:07:5a:2b:e4:5e:72:1f:9c:c2:49:c6:98:a6:fa:82:
         f2:a2:08:7f:d8:75:49:37:d4:5c:e9:c8:1f:f3:45:6d:7a:d7:
         26:95:46:75:f0:73:d9:8e:37:b9:b9:e3:d7:36:b5:10:14:67:
         0e:ee:4c:de:e1:1c:f6:da:c1:3f:98:28:05:a0:66:d1:aa:66:
         b7:4b:e6:a8:f8:b3:38:d3:27:18:9c:d7:69:2e:c3:c5:99:68:
         91:5e:1b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:35 2025 by rpki-client