Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
File:                     ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft (raw, json)
Hash identifier:          x103zni8q2g56koavEDAnNFve3EUr2nZIYbIPAMMQmc=
Subject key identifier:   F4:9A:FF:A9:4C:E1:BB:31:E0:E5:22:F1:60:9F:C4:EC:6B:2A:03:B8
Authority key identifier: 64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB
Certificate issuer:       /CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
Certificate serial:       019748C5968F37BB3ED96F0D980980F79F2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
Manifest number:          04A9
Signing time:             Sat 07 Jun 2025 05:03:18 +0000
Manifest this update:     Sat 07 Jun 2025 05:03:18 +0000
Manifest next update:     Sun 08 Jun 2025 05:03:18 +0000
Files and hashes:         1: ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl (hash: GzA5mJfEk7tCdv+lBSqmBRNAxkxT7H3ui/9Bq4THupE=)
                          2: omogO-53hv4pnqw4NQwPLhHBlGE.roa (hash: 32U7MfouOBRFQW9pXzlugwtn7uE6295TC/Ncm0R3ehw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c5:96:8f:37:bb:3e:d9:6f:0d:98:09:80:f7:9f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64cfba184ff9442a8fe7517b503a9e017fa9f2cb
        Validity
            Not Before: Jun  7 05:03:18 2025 GMT
            Not After : Jun  8 05:03:18 2025 GMT
        Subject: CN=f49affa94ce1bb31e0e522f1609fc4ec6b2a03b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:52:71:fa:ce:f7:00:8a:7a:a7:df:84:f0:36:
                    98:60:06:55:f1:8c:9a:cf:61:9a:af:a6:4a:0f:5b:
                    97:7c:2e:64:ed:a5:80:44:9a:b4:c5:81:1f:35:93:
                    9b:f4:d7:73:01:03:f4:cf:11:e0:77:c5:c2:d3:f7:
                    f7:f7:b0:37:4d:db:ea:06:c1:ee:74:94:e2:83:ce:
                    13:3a:4c:a8:87:6a:59:87:c1:d7:4a:dd:8f:52:fb:
                    9c:37:cf:b7:11:c6:86:99:63:ea:94:2d:43:48:b7:
                    67:87:fd:10:f4:9f:99:db:97:32:96:24:c9:6a:53:
                    95:d1:c1:c1:47:d1:d4:7b:ff:7b:c9:b7:15:fb:10:
                    55:cf:5f:07:8a:1f:69:67:f4:a4:2d:ec:7f:28:cb:
                    23:6a:c6:d9:ec:00:90:28:68:de:a6:38:72:5d:7a:
                    98:ed:94:ee:78:7a:08:22:47:9c:bb:17:3e:b5:00:
                    5f:33:0b:77:18:b9:cd:84:d3:1a:ca:90:4a:d7:3d:
                    b5:a8:54:9b:3e:13:1f:76:ed:0b:91:56:20:f5:f9:
                    98:47:08:dc:c5:ed:3b:24:2e:cb:1a:88:cc:e5:8f:
                    80:22:b8:62:eb:09:eb:ec:12:ce:47:cf:23:0f:3a:
                    bc:0f:5b:80:81:38:f7:99:fd:c1:fa:ce:fd:ac:57:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9A:FF:A9:4C:E1:BB:31:E0:E5:22:F1:60:9F:C4:EC:6B:2A:03:B8
            X509v3 Authority Key Identifier:
                keyid:64:CF:BA:18:4F:F9:44:2A:8F:E7:51:7B:50:3A:9E:01:7F:A9:F2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM-6GE_5RCqP51F7UDqeAX-p8ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/253f2c-4ed9-4f1f-a96f-deff71124233/1/ZM-6GE_5RCqP51F7UDqeAX-p8ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:db:9f:56:6a:0d:47:73:84:e0:4b:19:21:59:7f:9a:7d:29:
         85:f9:44:de:d1:8a:20:0b:0a:56:89:62:96:ad:c3:2f:52:26:
         2b:b1:da:23:35:3a:62:29:e0:24:a8:ab:63:22:d7:83:89:33:
         a1:03:64:ba:b7:a7:8c:f9:21:29:12:a1:ac:b1:df:ce:4f:db:
         53:61:4e:57:bd:1e:be:a3:1d:d4:17:ef:f4:61:f3:3e:df:23:
         01:0e:a5:23:31:9c:c5:6f:83:d1:ea:aa:4a:5c:ad:b6:f1:83:
         19:95:d5:08:80:8f:4f:ca:6a:22:00:fa:2c:11:af:5a:2e:86:
         0a:58:54:96:e6:07:32:0b:49:18:23:e1:d2:46:0b:9e:14:af:
         e0:d8:78:57:52:95:20:23:0a:4a:c0:91:a7:5a:49:cf:fd:94:
         a1:df:e4:d9:07:7d:68:52:d9:70:45:2a:6e:4e:db:bd:ca:95:
         74:e7:92:11:8e:bf:90:e8:e4:60:67:12:a7:89:de:64:05:ae:
         c9:ec:cf:e3:13:d5:e8:31:17:ae:5d:cf:35:a1:1d:d0:d6:6f:
         da:f0:27:c4:1e:c6:b6:5f:44:14:b3:56:42:28:4d:0a:28:a9:
         a2:6d:82:d8:fe:34:fc:7b:fe:f8:30:11:23:1b:0e:41:57:2e:
         20:72:f1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:34:36 2025 by rpki-client