Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
File:                     ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft (raw, json)
Hash identifier:          kDr9W77mNN2MNoiYzGjq9Fx9QktW49rHajsPHO+6MkI=
Subject key identifier:   54:95:4F:40:89:05:FA:0C:F3:7B:07:75:4E:C9:D7:06:EB:34:31:4B
Authority key identifier: 66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C
Certificate issuer:       /CN=66927b2b26b5214b9665d8dc85f414709714996c
Certificate serial:       0195121078FFC18C467A19B3CC2C30BFA7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
Manifest number:          1089
Signing time:             Mon 17 Feb 2025 04:00:24 +0000
Manifest this update:     Mon 17 Feb 2025 04:00:24 +0000
Manifest next update:     Tue 18 Feb 2025 04:00:24 +0000
Files and hashes:         1: ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl (hash: D0JkiGOt1QxEQc+SQoESCcwrlN4W2LPE88F2PwFDal0=)
                          2: z14kTSlHc0FGtPp_p4eZCWL53uI.roa (hash: o0QCjev3qiHHVGYnELxUtNoSu9oIG3V8qNROrWFFFEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:12:10:78:ff:c1:8c:46:7a:19:b3:cc:2c:30:bf:a7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66927b2b26b5214b9665d8dc85f414709714996c
        Validity
            Not Before: Feb 17 04:00:24 2025 GMT
            Not After : Feb 18 04:00:24 2025 GMT
        Subject: CN=54954f408905fa0cf37b07754ec9d706eb34314b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:da:b9:c1:df:64:dc:18:e7:68:8b:d3:77:
                    2b:8b:f6:79:a6:7e:61:d9:a4:4c:b6:2e:28:09:c5:
                    16:17:91:71:12:7b:9c:d3:1b:82:35:6e:a4:43:3f:
                    0e:94:3c:b5:10:3a:93:8a:07:55:28:a3:6a:53:80:
                    3f:c2:2d:74:0f:16:6f:ba:85:23:13:39:04:c3:82:
                    9d:fa:62:12:0c:be:ca:f9:76:13:5a:3a:bb:e0:26:
                    2b:78:4f:d8:c7:c2:de:40:0b:05:62:0c:1a:22:1a:
                    1c:d2:b1:74:92:93:8d:f6:9a:f8:89:f6:28:49:00:
                    97:3d:03:f1:78:d8:43:15:96:62:af:27:29:71:c5:
                    cf:e6:93:51:af:95:a4:af:7f:13:9b:9d:27:45:75:
                    69:c7:ff:19:dd:a2:4a:31:ca:9e:da:04:e2:31:cb:
                    b2:8f:38:05:7a:0d:7f:2a:30:15:be:4b:65:56:95:
                    c4:97:04:e4:c9:8f:bf:79:00:e2:79:cb:cb:55:e3:
                    86:c9:93:52:c7:91:08:36:89:3c:aa:86:72:44:8b:
                    cd:f7:2e:0b:92:73:f6:04:28:59:ed:fc:f5:b5:28:
                    95:b1:a4:32:a8:7b:86:7f:86:96:43:fb:a0:89:a8:
                    59:18:00:a3:80:be:e9:91:26:ca:80:90:47:4f:1b:
                    78:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:95:4F:40:89:05:FA:0C:F3:7B:07:75:4E:C9:D7:06:EB:34:31:4B
            X509v3 Authority Key Identifier:
                keyid:66:92:7B:2B:26:B5:21:4B:96:65:D8:DC:85:F4:14:70:97:14:99:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e4ce7c-ad7b-4006-8e6a-80352d1413d9/1/ZpJ7Kya1IUuWZdjchfQUcJcUmWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:2e:43:e5:1a:e6:67:6f:34:37:54:c8:e7:ca:23:0e:0d:3a:
         ac:59:c5:08:7e:11:3b:e3:00:36:f6:6e:2a:2c:96:5c:17:00:
         1a:a5:73:bb:52:82:a5:43:a5:f1:6e:c9:7e:50:c2:6f:25:0d:
         80:dd:62:23:c0:80:83:99:8a:71:39:be:ce:b8:b0:91:a5:93:
         36:72:8e:8c:71:0b:61:d1:85:e8:92:99:01:78:32:5f:dc:ee:
         24:d0:53:3a:ee:60:c5:4a:47:fd:b2:54:fa:77:04:d9:26:33:
         59:ff:63:c3:c7:22:e6:a6:b5:15:ce:0b:b8:c1:8c:db:15:43:
         1b:71:02:c5:cf:23:e6:7d:ed:fa:95:dd:c4:fa:c5:19:56:7b:
         57:bf:3e:9a:ed:31:e4:2b:41:42:2c:22:4f:8b:09:61:93:a4:
         e5:ed:03:47:c3:ce:3c:f1:92:2e:d0:29:ad:94:45:46:53:7f:
         2c:4d:0d:d3:9a:96:39:4d:83:5a:89:e9:26:f4:ca:26:97:ef:
         a7:24:12:db:7a:d0:fc:b3:55:b4:5b:6a:02:cc:84:45:84:b2:
         0a:69:97:25:4a:60:df:e9:50:53:8d:9d:40:63:35:0c:04:32:
         9c:95:89:a1:64:9f:0c:de:60:3c:b0:6f:ba:28:3e:0a:8b:c1:
         e9:77:c7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:06 2025 by rpki-client