Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
File:                     zsyfK4Jf2WfpeMQgknlZX88zLFo.mft (raw, json)
Hash identifier:          om8hMw3PDmFIUFE7i3w5dl8S+h/CJgreH6Uguf08XRw=
Subject key identifier:   C6:EB:94:9F:84:53:BE:5F:9E:B3:E1:BD:68:DE:BD:FC:56:9D:9C:EC
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Certificate issuer:       /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial:       019749D5CFEB27F98FF9D46E7E85E5CB1FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
Manifest number:          150F
Signing time:             Sat 07 Jun 2025 10:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:38 +0000
Files and hashes:         1: r-LFYkPYLB9SHC2Z1B_qz_trgHY.roa (hash: te2VOfUQNAnLZdAmjhbUK4WhCj5kkTOTXCATaV2iEvM=)
                          2: zsyfK4Jf2WfpeMQgknlZX88zLFo.crl (hash: oWpwMH2OJdiOsSZPX40Y65i4GGgMVQPv5WwI+sm0fGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:cf:eb:27:f9:8f:f9:d4:6e:7e:85:e5:cb:1f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
        Validity
            Not Before: Jun  7 10:00:38 2025 GMT
            Not After : Jun  8 10:00:38 2025 GMT
        Subject: CN=c6eb949f8453be5f9eb3e1bd68debdfc569d9cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:f6:cf:5e:05:9f:cb:a4:b3:50:b7:7a:59:
                    2a:de:41:1d:43:be:b9:99:f9:2c:e2:2d:08:ad:9a:
                    af:e8:d3:76:59:61:7f:79:13:6d:1d:16:39:bb:99:
                    3c:80:ab:65:0c:0f:f8:d4:18:db:38:30:16:9d:f0:
                    46:63:5c:dd:2d:89:49:79:81:7f:a2:e8:f4:97:1c:
                    f3:f8:d9:b5:7d:e2:32:dc:54:08:62:eb:9e:4a:aa:
                    0e:b0:10:d7:81:32:24:bc:84:be:37:ad:1b:e6:f3:
                    2d:40:3e:2b:f4:51:67:11:b3:f3:38:c9:8f:fb:77:
                    da:32:a7:64:d3:5d:c8:5c:74:13:c5:29:6b:e3:f7:
                    f4:1d:95:c8:2f:96:5f:20:48:5b:9f:a0:6c:b6:22:
                    75:28:a0:55:19:22:21:c8:23:91:e5:ff:a0:10:de:
                    97:ec:29:3e:70:3d:76:f5:de:1a:db:1e:79:4e:5f:
                    5f:21:16:be:5e:47:22:d4:1d:ef:e1:8e:57:7c:37:
                    de:11:03:31:1e:18:ce:e9:b2:50:24:1c:b3:e5:b8:
                    94:c1:2a:ee:bc:2c:79:6f:00:26:dc:b5:35:fd:88:
                    b1:dc:9c:e2:e8:c1:4b:b1:31:e8:19:15:1a:1a:65:
                    4e:67:3b:e2:23:b6:8d:21:5e:7b:71:65:27:fd:94:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EB:94:9F:84:53:BE:5F:9E:B3:E1:BD:68:DE:BD:FC:56:9D:9C:EC
            X509v3 Authority Key Identifier:
                keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1a:c6:c4:a5:a2:14:a9:45:8f:b2:b5:9e:f8:42:ee:d1:14:
         e4:b7:fd:c9:67:2f:10:cd:15:21:3e:0c:22:1e:f0:29:c2:37:
         23:88:47:ea:c8:4a:19:e9:75:90:13:d5:9f:5c:cc:da:64:6a:
         a1:72:78:80:2f:f7:4a:70:ea:ff:b0:5c:a1:01:bf:ec:0a:66:
         70:97:b2:21:64:9e:3f:e7:20:39:bb:3c:06:c9:b3:5b:a6:5e:
         20:32:2c:d3:10:8e:31:72:9f:ed:e5:99:d1:27:06:f5:7f:ba:
         e1:8c:cb:36:2b:fd:e9:90:b2:59:5b:f4:35:c2:4f:dc:0c:54:
         75:1a:b0:dc:0b:36:bc:e2:57:d9:95:9e:4a:ac:ec:6f:dc:f1:
         85:12:88:73:c1:68:62:1b:93:61:a3:47:29:39:eb:cc:db:3c:
         39:75:f4:01:bc:cf:08:f8:7a:ce:a0:4e:20:39:c0:41:31:c4:
         b8:54:7a:92:d0:c5:b5:52:13:b1:9b:53:ba:dd:6e:39:07:03:
         b3:2c:d3:89:af:4e:0d:6f:d5:5c:8d:b7:89:88:cc:63:bd:b4:
         5b:5f:3f:f3:94:f7:bd:3c:8f:a2:b7:28:3c:37:5b:62:08:db:
         12:bc:31:f2:34:3a:c3:d9:87:d2:fe:69:09:b6:27:7d:29:c2:
         4d:95:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:00 2025 by rpki-client