Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File:                     zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier:          +p1l4mh/+WWl06gEjeQ4EwiQ+RNj6rdeaAvKIpVA/sA=
Subject key identifier:   5D:70:29:51:FC:81:4D:56:9B:74:13:2E:FF:22:EC:E8:B9:F7:D7:6C
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer:       /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial:       019748C3316B2BA43955136975C1AAAFFEBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 05:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:41 +0000
Files and hashes:         1: VI-dWQcY37xUT1kUINfwRf4ITOY.roa (hash: /K+hbbpjK6p98+FcPVOwuQPFXuHi6fBZ7x81PS6CuTg=)
                          2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: es35l1dmTmNR8AYLC2r8Y0mQylOK8Vq5Q9rL1HP/u+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:31:6b:2b:a4:39:55:13:69:75:c1:aa:af:fe:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
        Validity
            Not Before: Jun  7 05:00:41 2025 GMT
            Not After : Jun  8 05:00:41 2025 GMT
        Subject: CN=5d702951fc814d569b74132eff22ece8b9f7d76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bf:aa:b1:7e:f0:10:42:fc:0b:a9:24:22:7a:
                    48:0f:7b:4d:f0:80:5b:20:5b:81:b1:72:1f:6c:ba:
                    75:f6:72:e3:81:54:24:df:dd:a0:76:6a:ba:d2:79:
                    35:58:d1:dd:d5:95:d2:c9:16:a3:8e:0e:b1:6a:25:
                    f7:21:48:56:5e:11:62:fc:2f:79:99:7b:db:65:33:
                    28:73:f7:b3:1c:45:39:21:be:dd:c8:08:b8:22:7f:
                    66:ce:86:11:41:9d:0c:93:53:4d:46:32:49:c5:18:
                    ca:8e:fb:a1:4d:4f:c1:d1:9d:af:54:8e:16:9a:8d:
                    a6:d7:92:bd:b1:d5:ca:5c:20:a2:56:e7:00:12:f2:
                    aa:7d:24:a7:1a:0b:6e:74:f3:eb:e2:bf:d7:a1:8b:
                    48:89:a4:5c:bc:0c:2b:97:38:50:15:f3:1d:a3:a3:
                    ef:0e:14:4d:5f:1c:0c:d6:40:94:62:69:75:6d:30:
                    3f:68:78:b6:b7:18:1e:72:d0:49:e2:4c:0c:50:90:
                    f9:5c:63:bb:1f:62:ea:79:89:c6:dc:43:90:7f:c4:
                    6b:87:58:e1:0c:ea:8a:42:d9:5d:1e:48:9f:b2:5e:
                    de:9a:b7:9b:83:27:9f:a0:e2:df:c4:43:80:b0:56:
                    58:96:a2:6b:fb:b9:39:46:61:88:c5:98:a5:72:b6:
                    72:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:70:29:51:FC:81:4D:56:9B:74:13:2E:FF:22:EC:E8:B9:F7:D7:6C
            X509v3 Authority Key Identifier:
                keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ac:0c:3f:ec:2f:96:27:3a:b3:ff:f8:d0:5c:3b:00:01:fc:
         14:42:d7:4e:ac:90:07:f0:c9:6f:bd:0f:a4:4f:f2:4c:d2:85:
         8d:5a:3e:0a:96:ef:c4:fb:73:3a:01:cf:73:15:22:69:28:1b:
         c1:3f:d2:6a:c4:74:72:3b:50:da:1d:a2:52:d7:08:34:61:4e:
         39:3e:ce:c6:d9:3f:38:43:53:7a:d7:84:7b:d6:30:66:c7:00:
         d0:e9:d6:6c:80:df:c0:a8:c9:66:58:4b:93:91:c0:b5:d9:6f:
         fc:0b:57:0e:06:74:bd:92:ab:3b:4d:01:be:13:27:1d:6a:25:
         a8:d9:22:3a:ae:33:6e:d3:93:3d:a9:7b:0e:df:c2:1a:16:57:
         49:77:81:7e:78:d6:80:6a:83:02:b5:a4:d0:17:3a:a4:31:f9:
         e9:9b:9a:2f:8f:4c:da:16:b8:df:c7:9c:f3:ac:a8:7f:83:55:
         44:bd:90:92:78:05:19:b0:24:26:04:48:8e:30:0c:fb:ad:91:
         b0:ac:e7:2d:20:46:8a:57:24:d5:4f:94:19:bb:97:15:21:42:
         61:19:b7:c0:0f:ad:85:09:d7:ff:bb:20:3f:fa:82:1b:f9:ca:
         60:09:12:7f:8b:2d:63:3e:bd:1e:fb:13:5c:e6:de:12:ce:42:
         f9:0a:55:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:28 2025 by rpki-client