Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File:                     z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier:          N5qrsS88PWCAlQJWQUtPvkfUW1Pw0gu81a+2Yu0rVeQ=
Subject key identifier:   8C:FC:DF:D3:39:4A:3C:61:67:93:38:CB:16:A6:73:C5:34:C6:A3:FF
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer:       /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial:       01962DF411F42370EAD09EB6B1E6CBFDA936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number:          03E9
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: tPR9H_DIj2ZRBOQ92V0Cq0cgME0.roa (hash: 04OzE6roqkiLsdkvUp90YsNXVC5oCpySc5tEOrXmoM8=)
                          2: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: auQ7Z2jeeAnsbwK37cSN6Z6YrI2wjcvqyPaR3947aTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 07:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:11:f4:23:70:ea:d0:9e:b6:b1:e6:cb:fd:a9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=8cfcdfd3394a3c61679338cb16a673c534c6a3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:b7:c1:58:f2:bb:81:5b:58:9c:bb:19:a6:
                    0e:d6:0c:7f:2c:2c:81:cf:0a:d7:34:4c:16:11:b1:
                    02:7c:48:e0:14:de:c3:5d:61:8b:fb:7e:4e:7f:d7:
                    f2:d7:88:4d:5b:21:00:e0:ad:67:2b:88:7d:5c:ea:
                    a9:54:e0:b3:a0:89:e7:76:7e:db:09:a2:ee:62:b3:
                    76:0d:ce:6c:96:46:22:ef:3b:b4:b6:9b:29:41:13:
                    30:db:a5:97:8a:fe:19:f1:31:58:dc:03:46:01:3b:
                    8a:b4:c2:d4:f9:86:67:88:ab:8b:31:00:e8:e1:9b:
                    6e:50:d2:5b:e6:f5:b1:46:21:a4:46:98:55:0e:bd:
                    9e:0a:bc:94:91:8f:95:fd:d9:25:33:b1:c6:6c:d0:
                    55:cb:7f:e8:c4:1c:19:c3:f2:47:c7:2c:26:e2:80:
                    9a:95:f1:c3:41:2e:ea:d5:7b:79:26:9c:9c:fc:0e:
                    d2:e7:e0:f0:c3:cc:22:80:f1:4a:da:be:29:63:4a:
                    22:b8:3d:1c:0b:a2:11:56:36:d7:60:d1:5d:c1:8d:
                    dd:fd:9e:1f:80:38:0f:9f:9d:8e:53:32:cf:13:79:
                    78:66:c5:9c:6a:69:e1:07:ae:1f:62:28:db:f5:b8:
                    c5:14:cb:24:60:6d:db:fc:d9:25:92:fb:2e:78:6d:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FC:DF:D3:39:4A:3C:61:67:93:38:CB:16:A6:73:C5:34:C6:A3:FF
            X509v3 Authority Key Identifier:
                keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ce:60:fd:70:2d:c0:4b:85:93:a5:0a:32:bc:60:ee:6b:8a:
         95:11:63:15:35:97:e3:a0:63:bf:a1:d3:be:fb:de:24:6c:08:
         bb:ad:d0:f6:37:2c:4e:4b:cf:80:44:83:e9:03:88:a7:ce:1c:
         8e:8e:b6:3b:a6:de:9e:7a:a4:fd:4a:0b:21:cb:47:e6:c0:9a:
         4e:f0:00:1c:8d:e2:a7:ce:05:38:b5:2d:d8:90:ca:43:c1:93:
         33:89:92:6f:af:2c:58:af:2e:e7:02:b0:2b:36:47:9b:57:76:
         23:9c:db:73:1e:d3:64:21:69:cd:f9:b3:83:8b:d4:84:42:7f:
         ee:84:a8:8e:1f:82:7f:6c:1c:34:c2:dc:a5:5d:4f:a0:75:ce:
         ee:72:2a:ba:5a:e7:58:61:fb:2d:bc:c7:e2:23:e7:11:6e:e8:
         9b:ce:a5:98:26:7f:fe:b9:ed:5f:d4:70:cf:21:55:5c:4b:f4:
         a7:b9:5b:55:b7:b8:6b:35:f0:2c:42:23:40:a1:87:80:32:1f:
         03:99:09:76:d2:f0:d3:b5:11:f6:54:1a:a1:35:3c:19:55:9a:
         d5:d2:37:75:6d:d2:9f:a2:2d:ff:13:3f:5d:db:df:0a:0b:19:
         1c:53:f7:39:48:c0:9e:21:e6:d8:1b:78:78:f8:c1:bc:8b:18:
         06:b4:b8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:18:28 2025 by rpki-client