Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File:                     _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier:          ysXVPYtf3LT1k0R581sEEbyzFcP3nPaJJKj9bPooOAs=
Subject key identifier:   0E:1D:9F:E8:F3:15:59:37:C5:D7:65:A5:83:78:DC:62:C4:8C:D5:18
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer:       /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial:       0197469E985B4AA275A036D85C0E37AA72F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number:          150D
Signing time:             Fri 06 Jun 2025 19:01:28 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:28 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:28 +0000
Files and hashes:         1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=)
                          2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: FP/w8RfLvDNJXdmssa7JHOhInTS/iMvIgusEGanbsgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:98:5b:4a:a2:75:a0:36:d8:5c:0e:37:aa:72:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
        Validity
            Not Before: Jun  6 19:01:28 2025 GMT
            Not After : Jun  7 19:01:28 2025 GMT
        Subject: CN=0e1d9fe8f3155937c5d765a58378dc62c48cd518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e2:5a:22:27:f8:78:fa:c6:6b:c9:69:2e:74:
                    c5:45:c4:e7:be:61:12:9d:33:3d:a1:2f:c2:0a:d9:
                    7f:33:e4:9c:2d:26:42:12:f3:de:3c:e9:a3:14:9b:
                    e7:6a:5d:db:6a:34:c8:a8:32:ed:db:bd:80:a3:1a:
                    a6:ec:1c:10:cd:2c:13:18:ab:f4:07:3e:c5:96:5c:
                    46:cd:e4:d7:39:03:89:ca:f0:4f:0a:ed:37:5b:86:
                    10:6c:e8:45:e9:3c:6a:74:90:68:32:c2:e9:54:7c:
                    76:3b:8a:e3:5f:59:b7:8b:2f:e8:8a:ac:d3:ee:fc:
                    80:ba:e3:76:85:b6:53:5d:5b:aa:9d:81:0c:c6:23:
                    bd:55:c6:5a:a0:6b:1d:67:87:9b:fa:4d:34:cd:48:
                    6f:fe:80:95:95:b1:f9:c6:5a:7a:b6:4b:02:b5:1a:
                    d8:25:1a:0e:12:10:65:64:81:f3:d8:ab:64:31:4d:
                    cd:55:5e:5d:79:d2:c8:01:58:ee:ce:2e:f1:8e:7e:
                    88:93:90:83:f9:04:93:17:46:c5:60:60:86:1a:64:
                    92:46:17:54:f7:46:17:aa:d1:f0:d9:81:88:fd:2e:
                    d5:a2:e2:02:84:c1:9b:14:16:66:bc:e3:bf:59:4b:
                    fe:f8:81:6d:ba:a3:f9:8e:f5:f4:bf:2c:de:b6:79:
                    62:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1D:9F:E8:F3:15:59:37:C5:D7:65:A5:83:78:DC:62:C4:8C:D5:18
            X509v3 Authority Key Identifier:
                keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:bd:84:07:d4:fc:cd:2b:57:55:a8:10:35:da:68:a8:80:
         fa:ff:ee:01:7c:2a:fd:9b:67:22:99:ee:5c:7e:11:8c:a5:1e:
         36:45:8d:df:1d:ad:11:21:a5:3b:89:a3:e8:d3:c2:5a:5f:2f:
         41:8e:ff:38:7f:c7:e9:29:cc:e2:c2:b6:20:5f:7c:d6:82:bd:
         16:16:6a:f4:57:e4:d6:b8:a4:95:6b:aa:58:db:f3:b5:2a:30:
         49:90:57:62:32:b2:6a:82:96:41:29:9e:cd:5a:df:07:7f:84:
         e5:0c:d5:ee:da:85:9b:5a:de:a6:3c:ac:43:38:78:ae:20:a9:
         2f:17:ee:1e:cd:80:b3:05:b0:f9:a7:fd:03:22:86:31:e9:a8:
         d1:0f:79:38:a8:ad:46:ca:9e:e1:4d:6e:8e:b8:5c:68:88:42:
         b8:3e:0c:da:d0:c3:62:e9:9a:58:42:b9:4e:0f:62:eb:2a:67:
         43:cb:58:71:3e:39:f8:b3:c0:b3:98:ec:6d:4a:64:29:82:dd:
         27:e4:a8:a3:20:8f:8c:fc:94:1e:a4:05:47:96:e8:43:30:f5:
         f2:ad:68:42:3a:9c:1c:98:9b:4e:6b:45:6c:96:1f:ae:36:b0:
         51:49:31:f4:08:d0:20:a6:7a:c5:01:7c:6d:0d:d2:cc:73:71:
         50:cd:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:12:58 2025 by rpki-client