Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
File:                     ZvEr0F_5yRriI48ykBy6rhwzcP4.mft (raw, json)
Hash identifier:          Q9mR8iw2QIdTgh6hF6HAEjHNnSUcD/BS01XfMTFPLg0=
Subject key identifier:   2D:7A:16:45:6C:63:05:86:A9:3A:C0:0E:3A:DD:97:91:67:37:A9:E6
Authority key identifier: 66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE
Certificate issuer:       /CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
Certificate serial:       019748FA188B06D74C4FB7496B29210AD054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
Manifest number:          0670
Signing time:             Sat 07 Jun 2025 06:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:39 +0000
Files and hashes:         1: ZvEr0F_5yRriI48ykBy6rhwzcP4.crl (hash: xi85jK8RHPW79/w8yPmMH7r7Y75TQNK6xIYCLGFo5Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:18:8b:06:d7:4c:4f:b7:49:6b:29:21:0a:d0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f12bd05ff9c91ae2238f32901cbaae1c3370fe
        Validity
            Not Before: Jun  7 06:00:39 2025 GMT
            Not After : Jun  8 06:00:39 2025 GMT
        Subject: CN=2d7a16456c630586a93ac00e3add97916737a9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:95:8c:59:7a:8f:f3:3a:7f:77:03:4e:fd:86:
                    7c:ae:54:63:f4:57:33:90:04:d9:c3:b0:ce:cf:0f:
                    0d:30:38:7b:94:4b:97:c5:14:53:6d:d0:a1:64:bf:
                    cc:92:89:92:3a:0f:b3:8b:74:4a:57:15:44:4b:34:
                    76:3e:09:aa:24:af:67:c3:4c:9b:62:39:8f:eb:29:
                    fc:30:5e:bf:68:6c:88:bc:3f:e5:7e:02:f6:76:07:
                    c4:68:af:a8:27:28:13:32:f1:d6:77:eb:c5:c3:87:
                    47:d4:35:09:d6:6b:8e:64:7f:5e:38:d4:9c:89:79:
                    9b:45:84:ad:74:58:be:72:71:fc:6d:d9:de:84:42:
                    e8:71:5f:a1:d3:27:2a:04:c5:a3:77:d7:56:0d:59:
                    26:da:61:66:a1:65:e7:39:b1:02:9d:00:7f:57:f8:
                    9d:4e:4f:75:9e:d2:6e:88:79:a1:41:a2:ee:2e:88:
                    bf:47:1d:26:ed:1e:e4:d9:45:88:48:27:5a:59:f5:
                    11:35:c6:85:06:16:f4:1b:d2:e2:72:35:b4:40:5b:
                    6c:94:71:58:b9:9c:e8:c1:10:5c:1f:d2:86:ec:5b:
                    cf:32:f0:9d:6a:6b:e6:0c:ba:73:67:0e:bc:da:5d:
                    ba:0e:48:83:22:6c:43:51:9c:31:38:97:63:d8:f2:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7A:16:45:6C:63:05:86:A9:3A:C0:0E:3A:DD:97:91:67:37:A9:E6
            X509v3 Authority Key Identifier:
                keyid:66:F1:2B:D0:5F:F9:C9:1A:E2:23:8F:32:90:1C:BA:AE:1C:33:70:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvEr0F_5yRriI48ykBy6rhwzcP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/60528c-a3fc-4c80-95e1-f332eb29c660/1/ZvEr0F_5yRriI48ykBy6rhwzcP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:78:ae:57:8c:ae:6b:44:22:56:fb:e8:0e:2c:a2:cb:79:
         77:6e:2c:06:ba:b6:13:2b:23:1f:9d:c4:50:b1:95:02:1b:e0:
         e3:32:fc:98:d7:2a:a0:07:c1:35:a1:95:73:1c:27:b4:b1:8d:
         70:91:83:bb:54:62:4c:4c:9a:29:cb:b8:a0:6c:02:c6:ca:13:
         7f:81:83:44:0a:55:45:66:8e:a3:bc:51:76:ec:6a:2a:5c:da:
         22:a5:6c:94:b1:a0:cf:0c:a6:b5:c8:a5:2c:a0:ff:bf:28:c7:
         2d:09:4d:2e:c4:a4:f9:9f:9c:db:c2:89:7e:cc:b9:a5:05:77:
         fe:07:cc:3c:7b:4d:c4:21:d3:4e:86:bd:10:fb:7d:a1:f1:7b:
         ce:7a:e6:48:bc:e0:b4:ca:1c:05:6e:a2:31:ac:d7:bd:58:04:
         67:31:26:60:10:af:93:95:7a:f9:25:ed:e8:bb:6a:8a:3c:6f:
         3a:a5:8f:96:16:31:9a:49:88:ba:5c:70:09:78:bd:f7:68:46:
         40:74:68:86:91:a2:ac:e4:de:4b:d5:24:e1:fc:81:20:15:75:
         3d:1f:17:d0:cb:51:68:7b:6d:ce:82:fe:2c:c6:77:8c:48:7d:
         63:07:d0:1d:1b:2b:a1:14:5e:5e:26:34:b1:70:fd:98:f8:5b:
         76:a2:8e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:34 2025 by rpki-client