Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
File:                     ZhaRypxY0IWba4cCMLD1gb5mpYo.mft (raw, json)
Hash identifier:          IvbmTO1igjncE2olbLLl9bH+VCrVUUVOp+zZlt4+qsA=
Subject key identifier:   41:39:00:FB:DF:93:D4:0E:04:E3:88:9C:1E:8B:02:80:71:B9:1B:58
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Certificate issuer:       /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial:       0196440D154C384AF2E2D6AF4C68BC4464FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
Manifest number:          0E52
Signing time:             Thu 17 Apr 2025 14:00:30 +0000
Manifest this update:     Thu 17 Apr 2025 14:00:30 +0000
Manifest next update:     Fri 18 Apr 2025 14:00:30 +0000
Files and hashes:         1: Rq-lqv8nvaGlsC79el8fMA5_1rc.roa (hash: T0ctud47vtW/7aXgZpP0x6VHkVLrf38PbYskxMdhNRg=)
                          2: X_fPOs6YAZH2TT4IWQcW6KOL-FY.roa (hash: bxGSJtgvXh/lnDA0x6ePZz0W8ihJege1t3FViWTKXLY=)
                          3: ZhaRypxY0IWba4cCMLD1gb5mpYo.crl (hash: j++tTz0pqWsB1zunU43FR/mzfQn2cGnlifkrPmEAIpI=)
                          4: byX4XqUIEmVjtSF74Vja9liWXww.roa (hash: 6RlIk6GXgp36HBDBBcA87k4kHMHfV998BVRCjiswL3U=)
                          5: z7EntH2_RgrImndWaf9CHwQF-tM.roa (hash: At0xjBHWEf4xXBr9D4SeVUGhACOqx602brOEncq8KCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:0d:15:4c:38:4a:f2:e2:d6:af:4c:68:bc:44:64:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
        Validity
            Not Before: Apr 17 14:00:30 2025 GMT
            Not After : Apr 18 14:00:30 2025 GMT
        Subject: CN=413900fbdf93d40e04e3889c1e8b028071b91b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:da:80:c8:f1:81:14:28:41:5f:63:1a:68:
                    48:f3:cd:69:04:f6:f6:1a:89:50:1d:40:d6:9c:f6:
                    b6:8a:96:7e:a3:db:86:6e:3b:1a:d4:2b:b4:4e:d6:
                    dd:c0:81:b1:02:a6:42:f3:21:48:d3:05:c9:61:75:
                    26:6e:63:e8:ce:c9:e8:57:c5:5e:12:73:7c:10:c3:
                    b2:72:f7:ff:00:27:c7:d5:3c:0c:8a:54:8e:1d:d0:
                    f4:d8:a0:20:a7:2f:5c:99:15:55:77:26:6d:99:aa:
                    99:3f:4e:31:26:27:10:da:cc:91:66:22:d2:3d:88:
                    8f:53:9d:45:77:d3:c8:92:e9:05:e7:ca:4f:78:d6:
                    23:5b:e8:99:25:4d:5e:15:05:15:27:29:10:3e:04:
                    be:97:64:20:9e:f5:63:b3:79:b1:4d:81:97:18:e9:
                    42:5b:93:a2:32:2b:7a:d9:8d:ae:c9:0a:cf:de:e6:
                    1c:a8:0b:ab:7c:21:c1:3a:d3:92:06:3c:4a:6a:49:
                    a7:97:d9:2f:83:66:15:34:fb:42:06:dc:b8:b1:0c:
                    c8:10:b9:7b:28:a2:be:5f:5c:62:d4:fc:80:04:3d:
                    c7:06:64:5b:b7:7d:cf:e2:0c:5d:a2:99:0a:e0:f7:
                    d2:13:1b:95:36:ae:cf:15:b6:67:59:d7:49:56:b4:
                    4b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:39:00:FB:DF:93:D4:0E:04:E3:88:9C:1E:8B:02:80:71:B9:1B:58
            X509v3 Authority Key Identifier:
                keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:81:90:c4:1e:93:69:01:3d:39:9b:84:9a:69:c0:66:2b:82:
         ea:21:8c:73:89:ae:32:14:07:c5:69:ea:65:14:8a:9b:66:a2:
         4d:a5:1d:7d:0a:37:3a:17:35:68:0f:5f:94:45:f2:3b:d5:2d:
         6e:0e:7f:f0:6a:93:1e:da:69:92:59:b6:ee:a7:ef:37:df:2d:
         40:1f:2a:7b:28:21:5d:46:db:25:91:12:54:f7:da:83:6e:d6:
         07:17:ef:15:25:05:93:b9:16:22:27:20:1e:17:32:f0:27:16:
         32:0f:66:9c:55:38:b8:c2:ad:26:bd:3c:b1:d4:c7:82:ef:8f:
         ef:bd:2c:2e:af:f2:64:0d:37:3d:30:15:db:4b:ea:5f:b1:d0:
         de:88:dc:ed:c7:64:d8:79:e0:d8:9d:0a:57:8d:58:80:44:d9:
         f7:3f:a2:3e:7d:18:9f:01:26:7f:a2:a5:5b:88:cf:38:4c:3c:
         ed:bc:b0:24:c0:64:53:c8:65:54:cf:57:09:8b:08:85:90:a5:
         95:86:de:ed:94:28:77:14:71:84:fb:d7:28:95:2c:6e:c5:a2:
         5f:a2:e8:a0:c4:5d:25:a5:e1:5a:88:6a:0c:d7:e4:fa:0c:2b:
         f4:55:0f:3b:84:65:92:b2:fe:36:4b:1a:00:a7:4c:27:f2:6b:
         d7:68:e3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:30 2025 by rpki-client