Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File:                     1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier:          kKIKu8VLoLoTRKD7EB2UR8AcOBylEjSag+9tbo2HPbs=
Subject key identifier:   64:D2:F0:72:FB:A0:CF:47:74:30:2C:14:96:CC:D7:9C:51:16:D1:24
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer:       /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial:       01974FD7C3BC6AB1FD58DC55A39EF9093DA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number:          0C76
Signing time:             Sun 08 Jun 2025 14:00:29 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:29 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:29 +0000
Files and hashes:         1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: KlFIYmuTUnuCmUGPf8Q5bwWcblyqORCLehyRpzAdQdU=)
                          2: FLK4BXajTTtzozg6zwS2W0dW8TU.roa (hash: TZ26mwHHQp1z9Q90vDXRes8PV7AQXwe9m95HyPKhgHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:c3:bc:6a:b1:fd:58:dc:55:a3:9e:f9:09:3d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
        Validity
            Not Before: Jun  8 14:00:29 2025 GMT
            Not After : Jun  9 14:00:29 2025 GMT
        Subject: CN=64d2f072fba0cf4774302c1496ccd79c5116d124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:1e:65:46:e2:99:9c:5d:b4:29:e7:a9:40:
                    ad:ce:69:ae:f1:6e:9a:2a:26:83:17:11:ed:91:78:
                    af:4a:ed:b0:d8:a7:74:b2:b6:db:7e:63:be:24:bf:
                    0c:0a:e4:d8:52:a2:d1:01:7b:ee:51:b2:9d:24:0f:
                    6d:c7:06:2c:ee:a2:28:3d:bf:56:5a:3a:59:c8:63:
                    90:da:c8:ad:8d:9a:7b:93:7b:1b:cf:35:27:fb:fd:
                    b8:17:d1:c5:e6:fc:ca:4d:22:93:69:bc:60:6d:33:
                    f2:5b:82:df:b5:3f:9b:e3:57:92:dc:02:92:ad:6e:
                    57:ba:30:86:34:65:2f:a3:47:86:79:55:d6:33:9e:
                    aa:40:a9:ba:8e:08:78:7c:e1:95:f0:80:95:02:79:
                    91:4a:3f:b3:47:de:61:09:eb:37:23:95:e5:71:88:
                    c3:6e:1f:1c:87:65:ad:bb:61:92:2a:96:2a:e9:de:
                    fe:fe:f8:d6:df:9e:95:b4:b6:d6:12:81:5a:77:4a:
                    7a:2d:1f:89:be:4e:0b:6a:4b:8d:f4:ed:0d:47:ed:
                    c3:45:16:56:fb:27:9d:bd:07:50:e5:61:8d:87:c7:
                    3f:f9:a5:4f:7e:3d:fa:aa:06:5a:01:0b:76:54:e9:
                    d8:e4:5f:3a:2d:95:7d:50:e8:b5:9c:11:fc:e1:ab:
                    d1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D2:F0:72:FB:A0:CF:47:74:30:2C:14:96:CC:D7:9C:51:16:D1:24
            X509v3 Authority Key Identifier:
                keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:97:3c:99:55:e7:3c:fb:6f:21:fe:da:6e:e9:1e:ef:77:3c:
         0f:ef:57:b0:3c:4e:13:1d:5c:94:61:18:c3:b2:b5:92:67:f5:
         c1:c7:b0:93:19:31:1b:12:93:f5:fa:5f:52:28:8a:3c:1d:b8:
         42:05:51:ae:7c:f2:7c:95:6c:73:15:e5:60:14:35:5f:67:fe:
         33:b8:e4:de:2d:78:df:c6:f1:cf:e0:08:b3:31:8c:10:24:a8:
         f2:cc:55:3d:ed:68:fc:81:e2:24:7b:24:11:7c:c0:26:06:59:
         75:7c:5a:96:4e:00:fe:08:e4:b7:c9:5b:90:55:da:9f:e8:8b:
         d8:ea:3c:e2:03:8b:60:30:fa:a3:56:4f:2b:32:d6:1b:67:2c:
         e6:3b:40:e5:77:fd:07:b4:54:21:0e:1c:9a:31:b5:29:eb:80:
         e4:a3:49:8a:a1:91:c6:46:7b:5a:68:9f:99:aa:5d:58:0c:9f:
         00:39:af:10:08:75:59:0f:63:3d:b5:52:be:97:5e:54:2a:91:
         bc:e0:57:ea:c6:3b:6b:94:ef:bc:a5:6a:ca:5e:85:56:a0:5a:
         19:1d:12:1a:d5:55:da:8a:b5:76:30:24:6f:38:41:a3:62:86:
         51:85:ea:69:e6:e8:9c:c3:73:cc:8c:4c:0f:cd:91:4d:26:3c:
         11:fb:cd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:42 2025 by rpki-client