Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
File:                     sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json)
Hash identifier:          yBypPJlHQ0FwjHjS0W+brKS6NY97OZdz1TfbQ1rJ+q8=
Subject key identifier:   81:DE:35:9B:2A:06:62:52:AD:23:E5:85:6A:C4:61:68:53:7D:D7:D8
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Certificate issuer:       /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial:       01964BC6A97B932EF6FD699DE9BEDBE544DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
Manifest number:          0975
Signing time:             Sat 19 Apr 2025 02:00:32 +0000
Manifest this update:     Sat 19 Apr 2025 02:00:32 +0000
Manifest next update:     Sun 20 Apr 2025 02:00:32 +0000
Files and hashes:         1: pp7YHiA9bCcV4n9KXbmtGvXw0Hw.roa (hash: xXtqKC6cCm9cF/kgqDQZlMKjBn2ULr5S39vUn/a3JHc=)
                          2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: z3GWA1voPz821j2GAm0zn99ejrlRlSzEUhsiDz8Y+RU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:c6:a9:7b:93:2e:f6:fd:69:9d:e9:be:db:e5:44:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
        Validity
            Not Before: Apr 19 02:00:32 2025 GMT
            Not After : Apr 20 02:00:32 2025 GMT
        Subject: CN=81de359b2a066252ad23e5856ac46168537dd7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:85:82:2d:16:ef:4e:76:de:b7:70:66:ae:
                    d2:f5:99:32:56:8a:b9:c8:6c:92:8f:99:1c:ca:d8:
                    f5:f2:c4:b3:32:69:73:71:79:c3:25:61:e8:2d:b3:
                    92:6e:ed:bd:b6:18:6c:8b:7a:b9:0c:e5:cd:2c:6c:
                    f6:94:98:b1:00:23:de:4b:62:ef:8a:02:a3:d4:b8:
                    b1:44:52:9a:aa:47:89:16:83:b5:63:6a:9e:d1:63:
                    1b:0e:f7:3a:61:82:3b:69:7d:57:6b:8c:b5:89:d4:
                    70:ec:0e:3e:93:04:d2:94:00:83:1a:56:6e:c3:33:
                    87:35:4d:2b:c5:5c:e5:70:13:22:32:47:82:c5:14:
                    86:6a:63:d9:97:0c:59:0b:08:0a:b2:54:9b:56:98:
                    68:24:f3:3b:10:f6:e2:8e:29:4a:f4:1b:e6:92:6b:
                    d6:82:4c:6e:b0:0f:63:a8:58:bd:55:20:65:84:7c:
                    5e:30:d7:86:83:98:94:8e:4c:51:a8:c9:a2:fc:58:
                    96:05:60:d7:6f:f8:7b:9c:23:66:da:8c:0a:d2:6e:
                    1b:96:5c:27:48:9c:00:e4:4b:43:e5:b3:fd:64:b7:
                    02:b2:78:fd:c0:05:5d:38:71:d8:3b:41:af:2c:0f:
                    cc:ad:fa:d1:14:b7:80:4a:98:60:27:9f:b7:60:5f:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DE:35:9B:2A:06:62:52:AD:23:E5:85:6A:C4:61:68:53:7D:D7:D8
            X509v3 Authority Key Identifier:
                keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9d:5f:e7:53:15:95:22:7b:79:8e:b4:d6:c7:cb:1e:96:51:
         52:27:44:3a:34:ca:39:a4:b1:bb:d4:74:b1:96:f9:8b:0d:83:
         37:8a:b9:80:b9:52:7e:38:1c:32:b3:ae:e7:0c:cc:ed:2c:0a:
         27:4b:40:10:d1:2b:2b:dc:fb:f5:6d:c4:d9:89:f8:76:06:5a:
         e5:c1:1c:b5:0f:05:1f:59:fc:c1:cb:6f:1e:0f:95:8a:d7:49:
         3d:56:02:f1:73:7c:8a:5a:2a:d8:af:04:66:0a:09:c6:f6:3d:
         df:3d:af:9e:ab:7c:34:71:1d:41:c1:c3:dc:ff:a3:b0:d4:a6:
         f5:be:b9:dd:7f:6c:02:56:90:23:f3:40:86:9b:11:52:3d:8e:
         c8:87:ad:a2:cb:bc:b4:ca:bd:21:d7:fa:fb:5b:39:65:dc:73:
         d8:4b:11:50:d5:7d:5f:54:ac:4d:95:16:ea:7a:a2:00:98:a9:
         dd:27:6e:0f:cc:64:79:c3:76:0d:3e:bd:84:35:8c:f2:54:a7:
         bf:47:bc:60:ae:8f:fd:19:38:ca:05:91:0c:9d:43:84:00:46:
         b5:08:9e:86:48:71:6e:11:30:53:49:72:4c:6b:37:8e:14:ae:
         b3:7f:f8:43:d3:91:da:1e:95:ee:bd:89:5d:dd:3e:9d:e3:cd:
         c9:d6:d9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:24:38 2025 by rpki-client