Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
File:                     Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft (raw, json)
Hash identifier:          VRPAx5yyUViX4k+79AcNqtvrNtDrg2oJuJGpX6H/kfo=
Subject key identifier:   94:1A:C7:6B:85:0D:D1:3E:64:5E:26:AF:FF:FA:A2:DD:28:F4:DB:6C
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Certificate issuer:       /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial:       0197518F6ACE29411ACB6FD68AFE876CCE3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
Manifest number:          159C
Signing time:             Sun 08 Jun 2025 22:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 22:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 22:00:42 +0000
Files and hashes:         1: 2wLUU494Ia20PxAfcxd4SZbY_g0.roa (hash: fvCIqXB/feD7/7NGOTx8qOmkJPy1MIly8nqeUxBI1Xk=)
                          2: BiwLI9VO2_0s8tZyNBhVQqU_iuY.roa (hash: FTx8tgcHKGsWWw5SgToY/5961CHlQFLj7rItVRXBbV8=)
                          3: DQnS1tnQnd97U1BmP1oL5JTufUo.roa (hash: wiUK574UXDBemm+CsOTP5NNyjTNPEWH+aYzA5a9BDb4=)
                          4: TH2OwxnyxuHxSNko_w83dXwWzEQ.roa (hash: e/qYbxQxxwVh/yNiqnyigNpI7FXsrH7HPOwHVHmgcbQ=)
                          5: VAZ3MFih5WSTai0Q44vHUT6D2w4.roa (hash: vzUPtN33HKFnySDbEE3ZOgsXce4oL2RZCBcOFCQUplo=)
                          6: Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl (hash: JXOPtrmTLtixLurSjY9jo1uw0u4lUhbwGh9D5EKJAlU=)
                          7: kVfwRWpWGCdaLYKlxXAo9BahOeE.roa (hash: vJQJdP1v5Z/klqHzrnnFxsprM10eWpnFqcs7vy+a6nU=)
                          8: nzjNgL9vfqj7FcJjaEJmWt_jQiM.roa (hash: llP4NmFewcglSMw9utQmyfOk+VDA5Rn/G2jBkGERWjY=)
                          9: uU_t_lLPvr24v5Pbz0SrTkKY6nY.roa (hash: rwGPe+ujcUEDQ0W4o5koNGMN3c7lcHfvYPIWubsi9Xo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:8f:6a:ce:29:41:1a:cb:6f:d6:8a:fe:87:6c:ce:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
        Validity
            Not Before: Jun  8 22:00:42 2025 GMT
            Not After : Jun  9 22:00:42 2025 GMT
        Subject: CN=941ac76b850dd13e645e26affffaa2dd28f4db6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:ed:06:a1:8d:ca:35:f6:f6:08:a0:35:82:
                    26:b7:84:0f:fd:32:e4:56:41:89:62:16:e7:ac:d3:
                    cc:b7:e9:b4:de:5a:a6:9f:ab:34:fc:d3:13:9d:23:
                    89:c1:f1:53:c8:e1:bb:5b:77:0d:57:81:06:f3:d9:
                    4c:56:8e:31:7b:0c:1c:51:13:d0:e8:9b:0e:cc:8c:
                    9e:25:28:e7:55:0f:fd:bc:b9:51:c1:76:8e:83:58:
                    e7:8e:56:6c:31:99:ee:72:11:48:a2:c1:85:45:ef:
                    a6:f7:de:a3:15:08:8d:c1:cc:10:98:f1:f8:bc:3f:
                    af:f5:70:03:10:b6:83:d0:b9:63:03:7e:7d:c6:15:
                    19:2f:cc:e9:4e:07:aa:df:a8:b4:78:e9:7b:56:06:
                    30:69:3e:c6:c5:00:95:70:9d:3f:0f:6d:ff:23:07:
                    7a:1b:f7:f8:82:58:79:47:a0:a9:b3:cb:86:ee:d7:
                    2b:d5:10:77:d7:15:bf:34:6b:b7:b1:e0:49:6c:e5:
                    6f:2a:43:6c:34:1b:ef:b7:cd:50:9a:3a:66:15:9f:
                    a7:fc:ac:a9:3b:8f:74:fd:64:2c:3e:0f:0f:28:7b:
                    a0:36:8f:c3:d0:ad:d9:7a:2f:1d:4f:52:48:00:67:
                    be:00:95:2f:fd:04:d3:1d:08:ee:4e:f9:d6:44:02:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1A:C7:6B:85:0D:D1:3E:64:5E:26:AF:FF:FA:A2:DD:28:F4:DB:6C
            X509v3 Authority Key Identifier:
                keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:39:54:cf:e2:ce:ab:f0:d8:aa:61:93:27:ee:0b:46:91:a5:
         6e:67:c3:b5:b1:57:69:fb:59:74:2c:e2:ab:93:5b:2a:c3:79:
         77:f4:46:50:d9:b1:cb:39:0e:d9:bc:86:d4:8c:f3:70:49:34:
         c4:49:c8:40:45:8a:5f:67:19:79:5d:fb:24:a7:02:e2:fc:9d:
         b8:2f:48:bc:8c:e2:3f:a0:d2:31:30:55:75:b2:c8:00:61:5c:
         d5:72:48:71:c9:41:4b:b7:4f:8d:9f:8c:c5:0d:21:6f:dc:50:
         0e:97:a5:65:80:b6:55:02:47:cd:a7:f9:5c:ac:7f:3b:ce:79:
         5f:14:a5:22:83:7c:89:03:c6:42:a6:81:64:01:69:04:35:46:
         d5:ec:17:ea:29:6d:b5:e0:c9:d6:72:12:b4:22:db:1f:0e:b0:
         5d:9a:39:28:04:b0:c7:f5:24:5b:15:35:c2:ce:fa:62:cb:0d:
         50:f5:d0:5a:f0:c1:19:f5:a4:09:cb:45:59:2b:61:ae:c5:56:
         9d:a9:06:f2:d0:8a:42:9c:cf:78:1e:27:50:42:31:03:24:99:
         a2:54:07:c7:d2:ff:ee:ca:cf:37:09:e0:5a:b8:6e:40:a8:0d:
         c9:1e:b6:11:59:80:c2:99:77:9c:08:7a:2a:dd:af:e3:95:00:
         16:77:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:28:15 2025 by rpki-client