Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
File:                     z0pxf4-huwNZJ0IjrNriK3Dma-w.mft (raw, json)
Hash identifier:          x3xyzP7wC4le6Mmo3yv35jzDkqv+lpId0PkLy+iOMVk=
Subject key identifier:   02:FF:BF:9D:86:31:C3:D8:00:24:81:D2:7A:C0:FE:D9:81:B1:12:84
Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC
Certificate issuer:       /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
Certificate serial:       01974D44BCDA68E3F132EB34520D72DF2605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
Manifest number:          0870
Signing time:             Sun 08 Jun 2025 02:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:39 +0000
Files and hashes:         1: DTQoB3Vu52dyTKsn38xXSwYIlQ0.roa (hash: ZdFCYWIasaf//f4zgLVM9d1VQcq8sWh/cpG9mNzIlnw=)
                          2: Y_bp31HDq8uAy4l6THmKPbLCNsI.roa (hash: 9XEelD2ZciA/ZipA/uoYFFsArdGQrDybFJa5ScNreOg=)
                          3: _wDpItSC0HSOgvkQZmYWMWTXQro.roa (hash: /5YtbpUy82u+cUJWT1RGpyakzo95z6EKYbAFHFrfUcw=)
                          4: xe1Xtte-l4mWDxVWnZUVoJfv978.roa (hash: eTv/lTHlf1G7tnxCPkM7+fpZ+Fnfpfp4hidvIU4UnJU=)
                          5: z0pxf4-huwNZJ0IjrNriK3Dma-w.crl (hash: 1WEZ3DVMbmkr4vEaX6dhPzeQmRjAOQswk+pfWI52PDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:bc:da:68:e3:f1:32:eb:34:52:0d:72:df:26:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec
        Validity
            Not Before: Jun  8 02:00:39 2025 GMT
            Not After : Jun  9 02:00:39 2025 GMT
        Subject: CN=02ffbf9d8631c3d8002481d27ac0fed981b11284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:4a:2b:4e:49:ff:e5:09:57:aa:f8:d6:cb:
                    bb:bd:da:3d:cf:31:88:77:b7:dd:e5:67:4d:01:07:
                    21:a2:a9:61:f9:d9:fa:9c:6d:9d:d2:07:16:48:88:
                    30:90:8f:bd:07:50:77:a5:14:29:5b:f5:3d:92:18:
                    05:c9:16:ef:d1:18:9b:87:94:68:77:0d:a2:60:cb:
                    6e:c3:75:dd:19:ef:4b:4d:77:85:4a:ac:29:f6:2b:
                    3c:46:63:f1:57:23:f8:0f:13:5d:e5:4f:06:23:92:
                    5e:2e:a5:61:bb:1c:62:de:3a:f2:ad:7d:d1:db:15:
                    cc:2a:75:20:ac:73:6e:16:01:4c:c0:9b:64:a9:3a:
                    1b:5f:a4:ae:00:0c:36:33:f8:c1:d8:b3:cc:66:29:
                    0b:e3:83:2a:d0:83:81:d8:ad:f9:16:64:ec:2b:95:
                    83:44:5d:e5:8d:88:28:d4:36:2f:8f:80:bc:9a:f5:
                    75:6b:78:b8:f4:56:0b:ab:9f:97:94:00:ac:37:bb:
                    9d:49:ec:20:57:8a:82:e8:2d:f2:93:7d:e5:43:a5:
                    f9:a5:28:8e:7e:77:05:9d:fa:34:83:a3:56:cd:5b:
                    88:8e:ae:da:1e:b6:23:eb:99:e0:40:83:a2:3e:9f:
                    34:c3:f5:65:cf:d8:02:5e:9d:3d:19:c8:d6:40:f5:
                    50:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FF:BF:9D:86:31:C3:D8:00:24:81:D2:7A:C0:FE:D9:81:B1:12:84
            X509v3 Authority Key Identifier:
                keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:23:e0:fa:b4:29:01:b6:bd:cd:04:33:30:dd:f4:ea:54:d0:
         bc:b9:8a:d9:44:6d:2d:62:34:d5:76:41:fd:ca:64:3a:95:03:
         13:fd:61:7d:cd:90:f1:79:ba:1c:68:a6:01:b0:ec:6f:02:21:
         d5:6d:8d:b1:64:14:08:74:34:79:0a:64:ab:22:cb:29:1a:7e:
         cb:a7:ec:05:6c:0e:1c:f8:0f:25:57:c2:9e:4c:03:ff:75:0c:
         56:d3:09:29:f4:b9:9e:1e:68:1e:7c:30:13:35:0b:e7:15:7d:
         69:a5:6b:51:02:64:21:f9:f0:b5:b4:b6:55:ab:c9:f9:3a:9a:
         c5:aa:4b:f0:2f:4c:1b:43:5c:43:69:76:dc:03:dd:f6:65:ed:
         d2:b6:05:d2:f6:6f:c2:75:d1:9b:de:71:a4:4d:bf:2a:af:19:
         c5:fd:89:7b:72:c9:19:5b:af:2f:4b:d7:d3:bf:55:54:0d:d9:
         6c:2a:d0:8f:25:ae:3e:d1:0d:a2:aa:d3:5e:5b:62:b8:d9:70:
         ba:e3:3f:7e:5a:ea:10:b2:05:72:f1:0f:4e:bf:45:7c:93:55:
         61:25:63:f1:67:f5:8c:b4:2f:a4:d8:d6:da:9e:96:d8:18:77:
         e9:4e:e3:bb:65:b7:16:31:75:e6:dd:c6:f4:75:d8:6f:9b:02:
         10:c8:0d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:10:39 2025 by rpki-client