Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
File:                     ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json)
Hash identifier:          7ES1vS7NDlsZ3Kka5Oc8kJKzLXp7xhQOagXUye1Qm90=
Subject key identifier:   58:F5:C6:AB:90:20:44:E1:76:AD:2C:FA:55:A2:87:18:1C:7C:7E:C4
Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73
Certificate issuer:       /CN=ce235c504019c504021e0662f70133b7ee733173
Certificate serial:       01976D3E8FBF1974B342F3691DD6B3CBA13E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
Manifest number:          124F
Signing time:             Sat 14 Jun 2025 07:01:45 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:45 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:45 +0000
Files and hashes:         1: dVxPi-2BU6sN_zi1oxxkbrPcccA.roa (hash: LN+UvXmjMQ+4zMKoOoVm0IS9B+l8wMWW/8CPwN/xbVI=)
                          2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: GtbA6TNxLBY6p8xQF5n0COxJAKjjh+FweTPSXLxM1Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:8f:bf:19:74:b3:42:f3:69:1d:d6:b3:cb:a1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce235c504019c504021e0662f70133b7ee733173
        Validity
            Not Before: Jun 14 07:01:45 2025 GMT
            Not After : Jun 15 07:01:45 2025 GMT
        Subject: CN=58f5c6ab902044e176ad2cfa55a287181c7c7ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:db:7d:1a:45:3b:83:49:4b:90:11:a2:bf:
                    0b:a6:44:af:dd:0b:19:88:67:af:e4:7a:9e:60:bb:
                    6b:a9:d6:07:50:48:90:45:d3:a6:70:7c:e5:93:bd:
                    f6:e9:8c:30:9f:57:64:3b:14:93:0a:12:f4:3c:39:
                    2b:3f:74:db:84:06:fb:43:8b:8a:5a:70:40:a2:97:
                    c1:96:53:45:24:7e:96:f1:3f:d6:34:4d:ec:d3:7c:
                    7e:5a:6f:bd:dd:3f:b2:1d:8d:bf:59:7b:75:ab:05:
                    39:6f:76:55:f4:07:e6:96:e2:3c:22:e6:8b:0b:fe:
                    99:ad:17:67:74:06:14:28:11:bd:77:cc:c6:f8:4b:
                    59:1d:fc:43:6c:f7:5c:6e:4d:f2:66:a0:43:66:3a:
                    17:5b:6e:fb:de:9b:e0:8b:27:07:ba:e6:ad:9c:65:
                    e1:9a:8e:da:a3:ff:2d:f5:25:67:55:bb:f3:06:a4:
                    3c:97:84:b7:76:c6:34:bf:da:88:af:7e:22:80:6f:
                    7b:9d:a0:88:22:2f:39:a9:55:62:41:e5:03:78:c0:
                    82:e1:9d:82:b3:cd:cd:18:0a:d7:90:3f:d7:86:f6:
                    35:ce:58:c6:25:3b:d1:96:6e:83:e7:e9:8e:f1:8c:
                    8c:78:9a:86:71:bd:7c:98:21:f7:bc:94:c9:90:6a:
                    d9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F5:C6:AB:90:20:44:E1:76:AD:2C:FA:55:A2:87:18:1C:7C:7E:C4
            X509v3 Authority Key Identifier:
                keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ff:9a:46:7e:68:fc:30:65:71:74:d9:52:69:ed:36:3e:6e:
         cb:40:15:06:ce:ce:bb:dd:1b:14:88:08:63:48:8a:e5:da:15:
         8c:8d:b0:0f:00:86:ef:d0:37:3e:63:e8:f7:e7:4c:12:25:ca:
         54:8a:ca:38:43:3e:15:5b:93:c3:35:f9:2f:df:9b:91:8d:23:
         cf:aa:47:70:7b:0a:0e:df:97:c3:c0:5e:51:ef:25:2e:67:e3:
         54:4d:f0:79:58:4a:6d:95:f0:2a:39:78:23:f8:2e:ee:d5:46:
         1e:23:99:36:56:98:de:a7:19:1a:1c:63:1b:bc:f7:dd:ac:73:
         a3:45:5b:aa:d3:db:c7:6d:7b:ad:18:03:9e:4c:f2:99:b4:fe:
         52:7b:26:01:f3:c8:70:1c:f8:6d:84:c2:c6:dc:16:0a:d5:27:
         3e:3b:8e:21:00:84:0f:8d:9f:72:1e:2b:26:15:32:4c:c0:e3:
         d7:1c:e3:c9:3b:72:ce:18:01:58:7b:8d:be:ce:74:6c:79:ca:
         7c:16:59:c5:4f:aa:76:30:03:a2:11:c9:fe:9e:ee:e9:1c:d0:
         56:e0:b1:79:06:57:c0:a8:bd:78:91:fd:0c:6d:e7:e7:b2:75:
         a9:4f:5f:12:d1:2b:c7:24:cc:fa:84:75:27:cd:52:c3:31:fa:
         6c:44:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:30 2025 by rpki-client