Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
File:                     1ZTpX6WbUrWZ26QG17dvODypD6g.mft (raw, json)
Hash identifier:          xH/O+wgPL9jvM8dfrb7QCpDrvweoWszM0E+2W26+QuE=
Subject key identifier:   53:B1:6B:72:D1:4E:52:48:AF:BD:7D:BE:0C:93:97:30:27:49:C0:93
Authority key identifier: D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
Certificate issuer:       /CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Certificate serial:       01974967B5D9ABF1D11DB98DDE65E9FDF0CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
Manifest number:          0D25
Signing time:             Sat 07 Jun 2025 08:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:22 +0000
Files and hashes:         1: 1ZTpX6WbUrWZ26QG17dvODypD6g.crl (hash: 1J+Ho3hgizg3DVapQJwfvFh6uubHbsAmqQjM5DSCgTA=)
                          2: z4wMvnR06etPJrAf1XPqDyyKG9U.roa (hash: 8KNgBhE6X84KnuAvLvDQHDciy51ch4R+wm0a94sf8fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:b5:d9:ab:f1:d1:1d:b9:8d:de:65:e9:fd:f0:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
        Validity
            Not Before: Jun  7 08:00:22 2025 GMT
            Not After : Jun  8 08:00:22 2025 GMT
        Subject: CN=53b16b72d14e5248afbd7dbe0c9397302749c093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:a8:30:09:8e:0a:87:57:88:c4:40:61:98:
                    8c:61:ab:3e:6a:52:5c:21:30:0d:d3:41:bd:8c:d2:
                    35:24:e2:e2:5a:8e:76:cd:09:52:6b:57:7d:40:dc:
                    93:e2:93:72:b8:b4:09:97:2c:5c:37:9d:10:30:95:
                    02:2a:0f:64:d3:29:03:3b:7c:93:de:a1:6c:b0:e2:
                    42:b0:e6:b9:cf:ce:e0:81:e3:c5:f4:d0:6a:15:15:
                    44:59:30:fe:18:c6:1e:d6:8e:e2:5e:f0:39:b4:c2:
                    1f:28:aa:a4:54:18:5f:96:29:3a:a0:23:f7:76:4d:
                    f9:20:1d:b2:20:b9:06:13:5e:9e:d7:70:20:08:21:
                    dd:f8:60:86:a6:4e:68:05:aa:3f:1d:26:32:f8:27:
                    51:fb:1d:b5:f9:7c:37:9d:28:db:b8:9c:5a:40:54:
                    9a:2f:a3:9f:5a:31:db:be:c3:bd:8c:be:e9:17:01:
                    18:1f:17:39:f9:d1:51:a5:a0:60:4f:4d:3f:4d:df:
                    fc:53:8d:05:a7:b3:49:ce:ff:11:3f:26:83:52:69:
                    11:7c:97:03:92:5d:9d:a7:dd:f0:ba:02:fd:33:63:
                    23:86:3e:6c:c8:f0:bc:ca:81:0a:73:1e:79:9f:61:
                    6b:40:7c:4f:68:ba:db:15:a2:e5:14:1e:06:9b:78:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B1:6B:72:D1:4E:52:48:AF:BD:7D:BE:0C:93:97:30:27:49:C0:93
            X509v3 Authority Key Identifier:
                keyid:D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ec:e2:97:78:ac:02:1d:7c:c7:e3:88:b7:37:9b:83:aa:6b:
         11:5a:9a:a6:52:54:8d:b9:52:9f:d7:3e:d0:54:34:5c:0d:7b:
         cc:5b:85:2b:ec:a6:75:fc:60:48:3e:8d:5b:13:35:d8:13:00:
         56:cb:26:8c:96:13:f9:f1:a1:ea:0e:aa:a1:fc:41:18:d1:63:
         ef:e4:10:0f:1d:8a:cf:a1:a6:15:53:7e:c6:cf:8c:3c:e8:c1:
         20:53:72:56:8b:83:ae:98:74:c9:72:e0:0e:eb:f1:ff:cc:f8:
         ec:b0:d6:05:5d:9a:2b:dc:75:d1:db:de:d9:d0:b5:37:f8:1e:
         9c:f7:89:d7:e6:7c:61:cb:6a:e5:3b:66:23:ac:8f:b5:cb:0e:
         08:71:8d:e0:74:61:e5:c1:77:f1:6b:f2:42:88:13:76:41:35:
         d1:5c:2c:e9:65:f8:94:01:ff:bf:ac:26:b6:15:4c:62:84:78:
         e8:b5:62:47:52:aa:4b:f1:bd:1b:80:09:7a:cd:ed:e7:c8:30:
         4f:25:1c:b9:db:e8:cd:9c:b4:ad:c1:86:f4:cd:fc:d8:88:fc:
         b0:cf:4d:a9:eb:78:16:1e:08:8a:42:9d:2f:7b:36:51:7d:70:
         30:e7:62:14:5c:e0:72:0b:ac:29:d2:83:46:e5:cd:fd:27:b7:
         62:1c:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:12 2025 by rpki-client