Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File:                     Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier:          IHdC55Gw3X5FTcij/9YxpohAL+8Mx4huspcQGlDO/QI=
Subject key identifier:   11:95:75:15:69:54:9D:AC:93:8F:6A:17:12:FA:24:69:08:F7:23:22
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer:       /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial:       01958F6185B3C9515DA0B7C441FAA092C7D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number:          041A
Signing time:             Thu 13 Mar 2025 12:01:27 +0000
Manifest this update:     Thu 13 Mar 2025 12:01:27 +0000
Manifest next update:     Fri 14 Mar 2025 12:01:27 +0000
Files and hashes:         1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: NYr4VPQ8xJpx4Nit9PqKRQkEFLzjDHoXqLK4k8yHoQo=)
                          2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:61:85:b3:c9:51:5d:a0:b7:c4:41:fa:a0:92:c7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
        Validity
            Not Before: Mar 13 12:01:27 2025 GMT
            Not After : Mar 14 12:01:27 2025 GMT
        Subject: CN=1195751569549dac938f6a1712fa246908f72322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:62:16:56:f8:92:47:17:90:74:0a:b7:7c:
                    91:6f:2e:b0:7f:85:9f:87:68:a0:7c:6c:b6:10:6b:
                    2c:7e:25:59:88:d7:ba:a4:21:e7:22:9a:ab:04:24:
                    e0:1a:44:c9:6c:98:6b:ea:54:e6:e8:3c:8d:57:54:
                    b1:a6:0f:cb:90:c9:3c:4c:5c:20:88:d8:18:62:aa:
                    82:2d:04:5b:ef:73:5a:b4:be:cc:21:3c:04:0f:ef:
                    83:c9:2b:4b:ec:11:f7:a3:b7:2d:79:ae:93:4b:90:
                    47:b7:18:c7:d0:32:49:a0:28:62:3d:1e:2e:14:ea:
                    86:fb:a1:fc:b3:9c:6d:8a:01:df:e8:c8:2d:be:83:
                    f3:ad:3b:2a:07:8a:8b:13:69:47:a1:28:b4:36:cc:
                    ef:0c:b6:42:3b:3f:a3:c9:9e:11:57:91:53:4d:3f:
                    21:5b:d6:da:b4:67:64:73:26:8f:93:31:68:8f:9c:
                    75:f7:58:cf:74:2e:b6:85:e4:f4:c5:db:98:9d:de:
                    c9:6d:35:80:e3:46:7a:e8:e1:de:01:8f:8b:f9:b8:
                    66:f7:74:51:ac:60:09:17:88:4b:6c:9e:01:f2:21:
                    bd:81:2e:2b:9b:2b:31:c0:7d:35:8d:5b:f9:15:7d:
                    c6:ab:ce:95:ef:38:33:f2:8e:96:23:da:a2:a3:97:
                    4b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:95:75:15:69:54:9D:AC:93:8F:6A:17:12:FA:24:69:08:F7:23:22
            X509v3 Authority Key Identifier:
                keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b1:e5:3a:b0:71:c4:c3:63:d6:34:3f:bf:93:08:95:f1:78:
         47:df:77:c5:1d:4a:90:ff:57:5c:2f:b4:1a:62:53:80:28:43:
         0a:74:0c:62:67:29:c7:08:3c:80:ae:ec:bd:27:8f:c0:5d:23:
         a9:4e:6b:c5:e9:6b:a8:7f:b7:eb:ad:64:35:91:85:af:1b:d1:
         66:05:95:34:e5:5b:8e:09:a3:0b:3a:62:4e:60:f7:43:13:c1:
         ed:dc:df:2d:ea:f6:8d:82:be:9b:60:2e:54:14:7f:e1:f2:f8:
         5b:4e:0c:82:1b:42:1d:15:76:99:be:de:66:43:c8:b5:a0:af:
         bd:d4:6c:55:e9:80:18:2c:9c:f9:98:98:90:dd:57:00:15:be:
         ab:96:5b:cc:d2:dc:34:ca:5b:d3:26:b8:14:ef:bb:2b:f8:ca:
         3f:c1:93:70:0a:a6:07:86:6d:bb:b6:5c:4f:78:57:46:dd:ee:
         69:93:11:22:39:bc:cc:7e:5f:b1:3e:00:43:fb:73:e6:03:af:
         c2:b6:d6:5c:ef:af:93:a2:2d:27:75:f4:89:7e:fb:cc:79:6f:
         59:11:99:b0:18:5a:0b:b2:3d:92:8c:f0:20:27:6b:f6:3c:92:
         38:db:d9:a7:e0:0c:02:26:8c:53:02:e1:e0:34:82:e1:b6:55:
         ff:0c:39:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:07 2025 by rpki-client